last executing test programs: 3.709736405s ago: executing program 1 (id=8477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$x25(r3, &(0x7f0000001100)=""/113, 0x71, 0x40000060, &(0x7f0000001180), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xf4}]}, 0x24}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.654037898s ago: executing program 1 (id=8479): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000240), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r2, 0x10e, 0x8, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000140)={@none, 0x0, 0x8, 0xdab, 0x6, 0x957, "9d6c9affdbd49ab8b4fc29c529d0c2aeeb0a995c7dab14ca1c87687eaa9a52b179f13ee73d4e46641b26ec2b769c17552a2e68efc94c7e0191e6e80ba3ac8925c2c6ce921c64c6edaf830725f053988bbb537f6c8c27ef6743734cc9897358bad114d230fd80228d06eb173f991a06479e7b23833a44748faba38ba2a8f3912b"}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 3.483739162s ago: executing program 1 (id=8481): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.275832003s ago: executing program 1 (id=8484): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.18883647s ago: executing program 1 (id=8486): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001e80)={@mcast1, 0x0}, &(0x7f0000001ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @remote, 0x3ff}, 0x1c, &(0x7f0000001240)=[{&(0x7f00000011c0)="99f912f51faed50a62ae1513aa007f0a73b4d62ff2d9277b5140010e41242b7506e86d5abf3bcf3627a230d419b9e5257536bf3e7d0fef35755ca11df89837be6b83cb5168ca632a0a733af6693fe9b6cfcc90ca8ccec874d4fc0e131ff5400d90af12344b93081f6fcede51f512c7", 0x6f}], 0x1, &(0x7f0000001280)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x11, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x2, [0x10000, 0x4, 0x7, 0x44e, 0x8, 0x40, 0x6]}}, @hao={0xc9, 0x10, @empty}]}}}], 0x78}}, {{&(0x7f0000001300)={0xa, 0x4e23, 0xfffffffa, @mcast2, 0x7d3e}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001340)="c9f1d225c095050a9ae5c77bd85b93eb6df1f645bf84348488817e8f05a590ad787b37495cf322a9043ac31fcd1f3d55b4", 0x31}, {&(0x7f0000001380)="a2d0dc13e3474d61b9d875e2d30eb93b4035cd7ba604317cd00111e95d35b08cc0b4a1e69bf0574f65652224154eed0b22c019849d65d5607b5709d4d6e19e8a7773ff4be200edada332676ff60dc4bc5ea1d71286e09d5321e7f98447d111a6d9ba2fc98921898b177f2b84bf", 0x6d}, {&(0x7f0000001400)="60b1f48b52bc26b9be16b1f3083a520f56903125289f57b8fa38f1bc55c8a233cfa61391cfdf82ebcc370545d066b76193c4ddf86ac6bc66a2a7b109fab84d8b9957e86425252c5bdb5561fe4871967727314c4415dc8015a7d7209fd32415ac198c643116f58a9a07e977c84a9822e0147b81da3fb2f8025501f0f907c16c57112cbcf2e023bf0f83ae648bd89c9eb6d4fa98cd160dbe71cd2ea1e9d880e7e9a28da18618eb89ee61281ab250dac866d717", 0xb2}, {&(0x7f00000014c0)="6f12caa58fa000913aa5849e139eea411dd65f5091d2ef582f33f6038b28846ba9e3c61041c7a2", 0x27}, {&(0x7f0000001500)="bd384d7e61f9f71498ae223dda23cc3db695851d295288efde774d5d006cb52cd1e1a9f0576bbaf6a245fca4a0bb7e412bc250e669e8f3da1f51f5d51d77d48cbbd9baba3c986296c1f8e3eec189e5922f02971be88edef3a1e00c4496f4e39b03f59be44dc74918b178692ea260c551516342ce67b61179ab16241808a33167b7e45fc95c265943156b75270bc4cc1a6bd36ac145fdecd0dd41169a4f41141cc6097908491157f030b10d168c09282308faedae3ae9de82e1fdf9d4ffa3f8d18ad6287021682ae673a95f01b9270cc6147a021a497acf", 0xd7}, {&(0x7f0000001600)="4f5ae3a423ff88fbdd2140d0efeaea26397a0df1877f6408d297276b", 0x1c}, {&(0x7f0000001640)="05e03f4b6a907990ea26342cbe2fc8b0e64d977c5293567a8e146061a84759cd70230510e9dd087eeb6300c42d8404c0df8836ba351c41ec8582908b47c3095b086721baefa88a64ecdbd484cfbd5355775acaabff155e032fd8059c3d860f39f35f52e5cf4da2f1d1d9a9a2c92b311589da918c67068975bd24656e6f50d43031a4eeeda60e77b20257ce2124dcca37c2c8172143f640bd471684f1fb7e123d4e5d317cd46700e912e6fc91247fd79c15465b6ab6f975af8ae7727210cdbe92d76317104556b3bc60e352d35f16395e375ff81d703a70f8bc226d85", 0xdc}, {&(0x7f0000001740)="8d4bc9ffd5de3db9dfa1de33313e056a84529417a47bc70313047db760f2c8f140ec163281cf5ede9191c4c5774b2ad0318a696c18e808464d8b83f44b3a7c", 0x3f}, {&(0x7f0000001780)="87376ffc397df807309b784d3136baf68ad655eab143df95904e28333f4fa94f8089c8f5daa1e0ff246dd1a91e2259eddb5779e9229f8ef0155f3f2db38464973efd9894d6d39651ad3aff94511ebe5c303a75b20d043876ef02fc2ab809a962e7dafe4293d76b1ead7cd12865f21a2dd645a96ce73a3902e8c1b614fefb1b2d97e58ff6cfb2197702521d53913f0a203c1fbb62669602802dcf8a6f1721b8a95add504e51fc6a4b6e3439bb287e37fc060577d596a717ff2f4a08e4d9c1508250689c4ed7f15457867e93df41feab0372d5c3a1f9a88c496323311d0ee2", 0xde}, {&(0x7f0000001880)="e359b9978d0c8d0cc6c8b8e2f9a24e02a33baaf266d97e3fffae56ce0cce2b5f691010b9931c76fba45c7520f04af6e0415e7cc24ef8fb21791647ca9a530a506e7b78e93a3fbdb6d11e171e2a76e3ca8d7a4f743fa9b3974cd89157fa273a2d26c10962b389b524411d6ff6636ab22fbb4f2cea5062abb10ee347ed1f8ee161402353ba8bef9c76b32f812e79e93299a10f1b84805deeae39c49531c1fb824e903452f74c2714d66d917468547276f743e4a454d3e1f27d9e8fa363cb32697322ee08055868db2ad098b5a02cab923ae74456d7c7ba8fb0dca4899059b0dcebf4ab864d49aa6ecd506fe4af", 0xec}], 0xa, &(0x7f0000001a40)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0x5c, 0x1b, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7a, 0xa9, "2ba1e2ba7346f448b1f5abf7f2f65799522f4717f4ff7fd6967775d0066513e8925eaec7bcd1135fc5902c442d237cd94b80b1503fe380a345b5ae3b13f5b51f9c35a1f0d62e53b71bb14fede722f5e9427bfd3ebc7417c3e6085f178c154c5cd82e06d06e780e970362898491a6450eca50b03e0ca9707c99108c42f2e99fb789a9e35892472a5c147ea71518b8b62bd5969a2080ea9fe76fd0d8c969bb6197e9bc6580815b80e3e2"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0xe, 0x16, "9a44f8cdecb17390d7bb78eb248e2c7c32e0c1222763"}, @jumbo={0xc2, 0x4, 0xf9f6}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim, @ra={0x5, 0x2, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x2b, 0x7, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra, @jumbo={0xc2, 0x4, 0x118}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xb2}, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x8, {0x1, 0x0, 0x0, 0x9}}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0xd}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa1b7}}], 0x200}}, {{&(0x7f0000001c40)={0xa, 0x4e23, 0xfffffffb, @remote, 0x400}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001c80)="651030b4e4fab656c75e6d2639b105e59c8a5a832333481b7ad7a2de7a0b5d7126afd1b26687332f140fd557d75108b6069a46bb93f635b10b28661817cd34123adcdfc6dcfc9bd2dc0a7b3a617e918690a8637f1b6cc3bcc20cda97d69d0fc420004f0388", 0x65}, {&(0x7f0000001d00)="8e87fcda450a0ea828caa87b29347c54ad588b3194a1d01636ca772cd51756e758e0e89b2200c0f8cec25341365fe3cebd4f269b89d94b9c2fd78365", 0x3c}], 0x2, &(0x7f0000001d80)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x98}}, {{&(0x7f0000001e40)={0xa, 0x4e24, 0x7cfed5b1, @loopback, 0xffffffff}, 0x1c, 0xfffffffffffffffd, 0x0, &(0x7f0000001f00)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r3}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80}}, @dontfrag={{0x14, 0x29, 0x3e, 0x405}}, @dstopts={{0x28, 0x29, 0x37, {0xc, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}}}], 0xc0}}, {{&(0x7f0000001fc0)={0xa, 0x4e20, 0x400, @remote, 0x3}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002000)="9a53923cde984116efbf506599b3440f1d735f3419b68bafd01bd5934574bf0b0451774fe5950717a723045a8452a439851934b024cc8c2019c83bb168ef85a6f5bd5c1a4af95c550c79009ad91bd383", 0x50}, {&(0x7f0000002080)="649ce09890435d0f3a1f7b7bcd56e038081deab34cd5f3a19e60e582e3becacc", 0x20}, {&(0x7f00000020c0)="74bf77b1bcb789c730605fcbf741b760ffd779aec6374d1a52c13d8061f18dc3f0157cae1116bb1f4794b1c6d925c1bef8f65f4607d72d505b", 0x39}, {&(0x7f0000002100)="32b04dd28e08f20425b892a9a50242fd75abf70e2b23d9cef50a3d78dbc195412317d8e5f88ed5f67bdd12f7c6a9c09a1a1a5f217e6508d85ad15550726fcc966539304e3c8153e5be6109849e3219f79fd117863abbb79d513131ae76c19d3224176855a539c90be1b6c49f589135092561f4058bba2d90e420cbbe6f22956d8fcf4ae1722e0de5c21d58d716f84343c17a28d35e07fb4f5a3ecef6ecc4a6dadb910235d5633ae37806661b0108ed95ca413c", 0xb3}, {&(0x7f00000021c0)="27b92a429cda2b421e70c8481635487c064a4d11d810f3a38efe6dc9629855f731882bffddb00d30b5acea115065033c4c1208c11fdbb0090d6579a5cd77ac03889360bff7489006952c1a0fed17cbe63f02df662e9d120feea0c5e16be26654954f3f1ea4a0fb605d8ddbaa0eb04ef849112139bfa13fc48c5be4ceb2bdefddc259f72b0f29849e4908a3ba2b4d3fda4c0f589878a2bc5c5396dbe646be64b85cb1a8a744", 0xa5}, {&(0x7f0000002280)="d6f45846c57f4f9cdb909375f55f60631514d8139b3c07470704c08744c102c8484f701513a2ce5a2dbfde77bd4d95ab557f5d1d3ebff78962f6a0edafd5cd938420512616a312c3f279cf1be73c4787183917b929444bc4238a4812b9ab2a1e7b4cc9e4f7c84480c0fd4d70b75be6309496c0addd1e4def9f", 0x79}, {&(0x7f0000002300)="637d4a78bdc3ae9196eeb96fbf6d3a94ef635702ee12c6350aacbb0fb64cade1dcf25eb0d82ec916856608f06098ce7f3b7316e6e7cd3438f9a063a1d9e0a03f4bb180d1daba07da1adfa2dd055106c9e6d5005b2c54cf930b0d87c7a60f486f5311637d45ee4c7291a3d36c8bd36fb24a57be3664232d647923449f2153e786e8d410530f864728b8d5c757bc82693b51e917c5774ba05055f0a3286ad09bd1eed021f5a4392bb0f993cbdd3e83e1d37f0a6ac363626acf379207d633879134c72fbc6142bbb88e6c7b404b6e2158aa724e", 0xd2}, {&(0x7f0000002400)="23f169ad515fca6044ab00c95dfee4b93d507f0ece7e15cf04410db1113c6028a0aebee983837211a41d182f267e7c9d24650a8f4f4d5ad56229fca97a768dbc7e3ed765f4f6b4bf1aab098adb27feddc9a3c96adf10f5f32f5213fdddfa4c45a26f06ab360b30a98bdb6b5a66b63557af154b6d411c6aeb27f179503e550fcf47846a7370d7d3653150e4", 0x8b}], 0x8, &(0x7f0000002580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr={{0x28, 0x29, 0x39, {0x4, 0x2, 0x2, 0xf7, 0x0, [@remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r5}}}], 0x80}}], 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x18, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.674078051s ago: executing program 1 (id=8492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000140)=0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) (async, rerun: 64) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f418490309860762750", 0x13}], 0x4}}], 0x3, 0x0) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a32000000000c0007800800174000000000050005000000000005000100060000000d0003006c6973743a73657400000000800a218ef03848f3b7adc97bee8f7dfef0048f4dd8d3ae1df2df4cf97afe3d7333698bbe202f1c8a422b7df49c2615368273189909d18aa72165f8152653238afeb56a467696a74b2f693f248030239b5fd938069c87617424a04d551923b95c1a3a9ed3aa4b2c6bc04d9cb5a7ab3bf57a16b6a4"], 0x54}}, 0x0) 2.488472534s ago: executing program 0 (id=8497): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.321793857s ago: executing program 0 (id=8499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7ffffffd) syz_emit_ethernet(0x82, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000000000064010600070300070300443c00030a01212f00000000e000000100000100000200ac1414aa000000000000000000000000ac141400"/130], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000b40)=""/8, 0xffa8, 0x10720, 0x0, 0x0) 1.273436611s ago: executing program 0 (id=8517): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000030000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002c00)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/48, 0x30}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000b40)=""/137, 0x89}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000000940)=""/172, 0xac}], 0x8, &(0x7f0000000a80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000c00)=""/152, 0x98}, {&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000dc0)=""/200, 0xc8}, {&(0x7f0000000ec0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/2, 0x2}, {&(0x7f0000000f80)=""/221, 0xdd}], 0x8}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000002580), 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000026c0)=""/94, 0x5e}, {&(0x7f0000002740)=""/217, 0xd9}, {&(0x7f0000002840)=""/231, 0xe7}, {&(0x7f0000002940)=""/102, 0x66}, {&(0x7f00000029c0)=""/227, 0xe3}, {&(0x7f0000002ac0)}], 0x6, &(0x7f0000002b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x5, 0x10000, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac14"], 0xfdef) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10, r5}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r12, @ANYBLOB="200001"], 0x38}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r14], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000013c0)={'gretap0\x00', &(0x7f00000012c0)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x0, 0x1a19, {{0x2f, 0x4, 0x3, 0x9, 0xbc, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x7, 0xdf, [@loopback]}, @timestamp_addr={0x44, 0x54, 0x4e, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty, 0x6c280c70}, {@broadcast, 0x2}, {@broadcast, 0x1}, {@remote, 0xc}, {@private=0xa010100, 0xe2d}, {@loopback}, {@local, 0x6}, {@broadcast, 0x40}, {@local, 0x2}]}, @ssrr={0x89, 0x1f, 0x52, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @private=0xa010101, @multicast2, @broadcast]}, @timestamp={0x44, 0x24, 0x82, 0x0, 0x2, [0x9, 0x1, 0x9, 0x4ae9, 0xcc65, 0x3ff, 0x5, 0xb9f6]}, @generic={0x83, 0x8, "7d69e1aeddaf"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r6, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000014c0)={0x218, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xebf7}}, {0x8, 0x7, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x218}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000000140)=@framed={{}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.020256388s ago: executing program 3 (id=8522): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x9, r1, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) 905.725204ms ago: executing program 3 (id=8523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@empty, @remote, @void, {@llc_tr={0x11, {@llc={0x70, 0x4, "b4", "b62a82acbf16c31cb0b2f80ccd0d41f5cc3d45d1bfb0f8421c01d436a0aa53e9250b7c87ba11369f4656da9e9fd3aff434"}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x4010) r4 = socket(0x8, 0x1, 0x7) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x35, 0x0, &(0x7f000000bac0)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000000000000000100010000000000000001001000002000000"], 0x20}, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff, {0x7, r10}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040c04}, 0x80) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0xb) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) 744.363782ms ago: executing program 3 (id=8526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket(0xa, 0x5, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40010) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="e6668de461", 0x5}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000002000000000000000840000000800"], 0x38, 0x4855}, 0x24000052) (async) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="e6668de461", 0x5}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000002000000000000000840000000800"], 0x38, 0x4855}, 0x24000052) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) 697.567973ms ago: executing program 4 (id=8527): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x8000, 0x0, 0x52}, [@TCA_NETEM_DELAY_DIST={0x19, 0x2, "3e1831c7409e54440fee0a18f74d90dbe0a70e09f7"}]}}}]}, 0x68}}, 0x0) 635.862464ms ago: executing program 2 (id=8528): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d766849e", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080002000a0000000800040053090000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040904) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000100)=0x220, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14"], 0x34}], 0x1}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ffffff0000000047a33b466d6aeb790c0001", @ANYRES16=r0], 0xf8}}, 0x2400c090) 624.405915ms ago: executing program 4 (id=8529): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20000110) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 516.997887ms ago: executing program 2 (id=8530): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000280)="d95a825fde0617529ed5e6e5069a56f00afdfee32b5f68fee97b8939a81570f74a5affe2a3155daf5a4aab207fd2bc1b2f") r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x3d, 0x80, 0x7, 0x62, @local, @remote, 0x20, 0x8000, 0x6408b0, 0x8001}}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10) close(r2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100000}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(r1, 0x8b2a, &(0x7f0000000280)="d95a825fde0617529ed5e6e5069a56f00afdfee32b5f68fee97b8939a81570f74a5affe2a3155daf5a4aab207fd2bc1b2f") (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x3d, 0x80, 0x7, 0x62, @local, @remote, 0x20, 0x8000, 0x6408b0, 0x8001}}) (async) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r4, 0xc}, 0x10) (async) close(r2) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100000}, 0x6e) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x44, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x44}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) 515.966221ms ago: executing program 4 (id=8531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}}, 0x0) ioctl$FIOCLEX(r0, 0x5451) 477.602922ms ago: executing program 3 (id=8532): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0xd) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x171) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242240, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0xd) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x171) (async) 431.15148ms ago: executing program 4 (id=8533): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f0000000380), 0x4) 297.462008ms ago: executing program 2 (id=8534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x0, 0xd, 0x3ff, 0x6}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={r0, 0x2}, 0x8) r1 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x200}, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="00001400b59500001f2a14c3d65728fe78000000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff000000000800080074030000"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d2f72c5ef3ffffffda5d6c325933ff0a8e816cff2acb6bffffff000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) 296.141095ms ago: executing program 0 (id=8535): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (async) 284.359835ms ago: executing program 3 (id=8536): syz_emit_ethernet(0x136, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x27, 0x4, 0x2, 0x20, 0x124, 0x68, 0x0, 0x9, 0x16, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x1f, 0x76, [@rand_addr=0x64010101, @empty, @multicast2, @multicast1, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "5512646c"}]}, @rr={0x7, 0x7, 0x7, [@local]}, @timestamp={0x44, 0x20, 0x16, 0x0, 0xf, [0x1000, 0x3, 0x8, 0x4, 0x5, 0x1000, 0xfffffffd]}, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@empty, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}, "a4af2b07c7896a5ce5cdc9544d0aed14fc03a152112ae5c2eec005123f111f07a16ef45bf9a1455c499f6122fc1927242ab2eee90b42fd12a122dc97f84263db486c140dc19eae1c14b5be9e22bd2637bbebb766a2887cec2fa1b1ec173e4c0b76338f504a2f89e26c40f8ef434a57e7de850263f38386c80d0db7bbb0661b3ba6b242e3b846257a"}}}}, &(0x7f0000000240)={0x0, 0x1, [0x901, 0x240, 0x4bd, 0xe1]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) 220.308775ms ago: executing program 4 (id=8537): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@getae={0x1b0, 0x1f, 0x200, 0x70bd2c, 0x25dfdbff, {{@in=@rand_addr=0x64010100, 0x4d4, 0xa, 0x32}, @in6=@private1, 0x80, 0x3506}, [@proto={0x5, 0x19, 0xff}, @mark={0xc, 0x15, {0x35075c, 0x6}}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @etimer_thresh={0x8, 0xc, 0x40000009}, @algo_crypt={0x99, 0x2, {{'lrw(ecb(cast5))\x00'}, 0x288, "68ec398af814a929e6b9f3689e52b5a6155ed612ba88cc0da1639285080834aef4d87a67632a96aacfcdb3e5de6aa50c913e118710550716947e32a9108836b49c1765967f915a4de2513f8ee0fd484339"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@local, 0x4e24, 0x10, 0x4e24, 0x6, 0x2, 0x40, 0x20, 0x0, 0x0, r3}, {0x6, 0x1000, 0x20000000, 0x0, 0xffff, 0x100000000, 0x3, 0x3853}, {0x8000000000000000, 0x71e8, 0x62408c65, 0x8000000000000000}, 0x5b1e, 0x6e6bb2, 0x1, 0x0, 0x2, 0x1}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) 165.785696ms ago: executing program 2 (id=8538): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) 149.167609ms ago: executing program 0 (id=8539): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x10) 107.641776ms ago: executing program 3 (id=8540): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r7, 0x29, 0x1d, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x15010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 54.217914ms ago: executing program 2 (id=8541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "2098607d5b515778bcf7f66bee6cf89e31044992b54adb8c0b6c25e2a86b2ce38bdcfc04b4566416b857f1dc4ff5c14bf41e698ab5749d764a8b4c5985e08bd9ddd96dbd782aaf71f3eb1f1d75581aed54de35adb9cf97d31f1c4e060d0503ec3b86ba1c8ca030ec46b2817044941b859a05313800e2da89825aca0ac5d801764ce1b2fbb519fe6244931b854ed176b3bbf8f85a632b9ec17f3d4c9502d5c9b8f155b837b4cb2883b1d6ea8469bcf0df0a9d9406997ec5c71237e3a3384703b183bc82993ee9993ab5aa2efdb02b9541ac9ba7a276d956bc3893713a9644049dbf57cdb7bf4420a21afcbf0dde2aa768"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "fcf7a53b73c9ea2b1e7aca956a0b4a540fd852e223049f2798bcf4"}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x20c, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xab, 0x8, "43ce1a92723ce5683b3911761f6df6e265103196042e6ede75793e947ec0b0f6c72b41a402d703c626c5ad0fe57d519d90ecc8ddd02d6849fb9dfb8efd491d78e4c98bbaa518c4b7430bf344af660fca986ccf7fbf66d9a3c846c1ca4f98a802196704e086f73438ebcc2e56f64421320ad2bd3338f7ee145a61b13543efb7291b43fe307e328cedb98c7ee7e4334d790d6e288aa1bb5683841482407b3507d5829ed5aa4784c3"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x50, 0x8, "4f27a32063815fb21724761acd12779fb2900d06ce7f91e4c241b1397a4a99d2ba41b1d38a7cd738eda5d05b6eb19b962a11e9c119a54cc59c545b9d9d04fcded5e4d843ba4566b1f9424111"}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "475018297c9be3a3e23fa2cd2476126bb6d490e091e3dbeb08602165af0be457b9d771156f6c640a0ba2e40a3d4762b67ed5af02c92cce5aafbe81c4a248950c9adbf09ed95099704ff694c97a45edf74a600f763fc42b47c5af8b153b3609f78ada55925a9fe6d705d6a697b27d9f8c7599818d888f3c1c2775ecb11cd309d6d5ffd6214479484722c202d981acec3de0a3b7d8d7c59cc5332b8d70ba201039e9b1c7f05ed321f054ac7910e9eaa76c0071e97a7b13437bc40ae4ff0279687d8f852279bfd69839bec9cb7e274c409f7d887176fb94653e4e47108184fb854cdd300d2099725869fef9dc06"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 51.599523ms ago: executing program 4 (id=8542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000140)='/dev/net/tun\x00', 0x800, &(0x7f0000000180)={@align=0x7fff, {0x6b, 0x7ff, 0x5, 0x7465}}, 0x75, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000340)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001a80)=[{&(0x7f0000000780)="0374b89b6b8dcbb4cb8a1771ee373c60dffd8deb3c9c317508c6817c7a8b0c957750ad1675e9f05170fb6d9b51a1b1fd0a6033a8beb703acf671c64f99de3fe21ad848c5a0ec436caa7d216c481dafdb3304dccb34dce9b83e5a7d49354cdb4c9ecffa4229b5d748b3c0e74f63e994084b658a51110eca0523c7d070b7aefc6a5fc72cc3a55e2e820555b8451abd4c13821a2200ae7f02ec7fee64b38c969cea3134d8a5cb05b098826dd9090af2e68525f5a0a2dd4d334c7b42d871fb9fbf88366165784b3e4f67a9911e6dc832db12ccc9fed1a43a3b08dabfc85e8d8a2a81894e0d308ff4f19d16ec64a141cf97c47b924a63491a49686f81e148cb8be06dfa74ad260736713d3103fc8610cc8b08e3bf2cc6b0b180edb8b6f7891b04ae389fa84eb2fa44d9b6675075d9437e7cad6b03c7a9afae83728fd7a99b39b63a0328a806ef22a104dcc9c2cd21c0560c73bc942d9d2e44a76f29251ddebdd5af5e80cf9c1d5c5adcb0e9f059781da0e307b80610bbb078187b9957dfc476dc37c98e84a57145a374853360ab0bdf4f9ba177b93e95f3990416741321489ceee6f7602ffbd12bad06ee75bcc09ddc0d8d77e7126cbe0e801501db5792d542f8891198638f186827fe9dffb115c195bed8fe04b55e4b1d457330d4379689b5217d0c0e529f63fd69cb9eac8d710bbe82d5de87298d733f0377af77628517595ee7b8f3b90d86f8a4d759c79c35f7dbf4fd1302dda2f03a6b2b1ca6db9cf8b82d4a2e2e661a5c8ba21a4ee7a8844313091fac4d2260e9220c5fac9587780418da5dd949660d9001467d59029b6c8d45f93b2766da45bb53134633bc73dba0dbbdc80fe77530992af9f873f940960b16f9358e5b0dbad8ba8ecfe5776a6cd40429355a57661c85a5a1c9897706f3306628da4129c22c632848506af7faaf44e91e32b579c07ede813705ae93958069664bca19fc3cfb2fad15654549f205f6e9b8592c47e2549674e5c9c9c1c3a7f5bfd600d57623b5a126322d2165d021cd70912837c6307803aa4bc878858c7cb0460134002731534de3ff564a8c1040fda15b6d071260cf5878ef9bfa1c506c8f0a3fe40dad945bebd32cf1529ba00d30979b7d33756855ee2f8ad2d4adc549652a944016f72c37be97c7abf40daf0712cd3d8ba8fa5b53f0de13a97698f928b9d3b09ed96c94ca57ab4aaeeddbe3e437192667369b13014cf2c5517737b8f9eb6c67c6accf143be04aaae7b12af1c9b10fc532d436a9c0b51d94443735ec43b05280d7a05e1e10cc342813596120a22de7a12c03e92fb14e042c25192cc41b709bf591ef4aa65dac2229a62ed4b0743e3f15a94ae8985a578989c54e35a26b2396ccbf1232579d050e8c616320a1881dd2f6a08f591c94fb449ab8618110db011c0b32a0f104c56c9caf613c8ca6d5189f2cf9952f22027ffae9eecc074dad1d0b2fd254197e1eddd98ef07651af25ae8794517c713dacc412d2c9f004b162a2ee709981e8d3b37233a2baa60c434efe86a8a04f6996903428626657817fbac595a21c13d288ce92f356c320d81e118218bb689193791ac2fc82a4768910dbc02c163969133e043bb71ee1f753d4b0b219b695f412e971c78365f8ce59af34ddbb2e717ff69793e2c17c40dabfadf15b8ab05a20076caf1112b18215f5cdade82623c893dd2feb05624b60e28d0764f72d630579647b3f87a61b9da06f6abb8b3874a30458a37115e5596e3db9a277704ccc2716794edd42a6d816d86a14d2ee46ac38ca51867fbc449505af5b3155c41f4fc1ac606fe347a3a25ef4d20d103b646946f5d22a52af94602e37be0d4496d5655b1a366d1592c3a357b239f8a5e585886ac8a027ded2f740f32fc1267ed23417a85fb161d65ebdfb1b3f3388f495ffbba8c880bde473347fadf268c27c5c2102aa2e73a1e147818e50e07045ad1cc2fcc91626ef64eeeeedd43f179641735ba949aed1692c33c58af38ebd9c39db4759cd8d214aa8088e2f59067d60c2021b47d76cda4a8771f66af3d9d4e767c40c288ac6b5d1c35a5cc19e5ef8da05c70f8d5964a7df7bdecab4c3979a87f3d15ff310d48e9f5b8a328dccc791391ccb506a49daae18588eaa2a91a42afc52c9f0246d8535891a116bb93277f90d41b98f72af22fa03d584e969ae327476a2f0bab13e0c53be1c067049d132a5464c4f500db32e8d2c82db395aaf64da2a30db6395778e71d473231f24067854c11677dc2517c4e43422236dafa1753f9c279bde67b7996477cd730e1f38a8e608a193c1f850d7ea833cdf5d224bb44015e0878cf356c3ad927fbbd67205a28f96f335b113793b53d2b377c0b8ded9f179392fe3f52a328185db60d67f30ffd20b9bc084e8a93724b17ed06bf587db85382657a5375aa9f5a9dc7bc7b98bcbf7e66a808074ba1e3fd094bfdd0038276ed49a32dd48f76da3ab1a33fcabac166c4b3a0c88f4e723bd0067dff02a5b2576c617d8fac1ea407141fb190beb0550521b58dd7a4b4574f1e59a2dc3eece2745a6f667dc58058d51e50937cf4a4b3c3ad96ecf54bf2ba3879345c3210dea419d61d284c4f4120bd1fe426735a8976806519a7da78aabf1dc4e1619fc36fd718c26b05c2315ef694a64f166b8735ffca7946147eba013180948be71166c140ab6f74405fd08ee22023d33d03f8c5a0ac284acb5ece80d8d31c225425f2d253e9a347c79bd1bdc196231a5aab7b4e79fff6f4c6d478b54dc9458e4995cf1bf6487c7a09a7c2cb029f40825b35018e7ef9e029447594f66ce4ad7f15d0a1899fb11a5022c7c4a8be00da4be83adb2404fbeaf47f6db26f6c9d6cfdfe0bdef3a69b3a52781665682086d6509f60e4931d98638c8321fd12ec58af9b2f184fec4d938b9df64060511fa46b540f7ef624cc7014b6e05f536bdad6cccc4d3eb93e2e6c32daacdc36494ba43e31e7851eed47b7ab92c22ee0ecec0242a8dec92c74cc164591b8ba11410e17af76082d32eadf67ecddf3fcfd337e96d1fe8dbd067a5d37349841bf82aac67d6264e2fbbe89eb95102479413b0367c4f84196c2beff03535f25f0f4a64767f61a5e6456766a67900b1ab589fd5dfc14e8555135a582a273c270b2bd4ff25b95461ccf2b8949aa66d285b6293cd049bac30e782d69bcd28047e8a213baf131360ca92c7d00fba299205dab440f685deb3c11b7f3c8b8b31c9f7df2aeb0659784eb230b560edef0d744e66ab690f8da6baeb3674eb9525b711ac8f6d6a7a7a236e66757aab0fcabcbfa23960d9c02351cada751df7278aba9c9b7d4b4deda3605887ffc17f97a94e32fe3a33c2ab8751baaac20ea2ac144b42929227e4d84e40011f4498d797179fdcbd3696d6e68901c615242370a256f39d7435bc98d56088cf7657b8251ca3dfade119d8db24cd34fa1ce96f3ca5293b1b23860c8925bc087a91ec4e15c258f686cf70079af65652ce78bee27b64d7329fb00dcf6d8e3e29253feb0d86b955d2bb9d6ef6cbe8182e0113d2e25ecd9f509db12e586a82f006d8e001270e30a68facb1347709493d45d5860df1f5f54e555e0e7e97cf1c10e810586cd333242b8ba1156427b640e2edd1334c8ca71f5276d415e9e2d7193981afdf9e868dd385c3b9a6f3e8bdd048c5fa60c47f93450bdb62c2ceb6aa64a131f6895e22cf3776486ae392597244b67a2f3867bdb1ba015df4597fa08944b3f4b7c3a0d058d4869a830bc4b2f8129dd93ab411c8969c704f58bc213c9be8e0cfb7060c1385bc6a573e0b7a2bf25582cc55944a424b0802670d57afdd3d6fde101719953a5e1021a4f54845751a57e6e033077d7f156184bc50a25b111caad8d14a2efa9211295a55007ff0dda2a578ac490e1abc742c8dc81c40b96720774fef544f428ecafd87f052e4464109a1fe3f8bf14c2c16ff65db820cc07edb7fc89eeabccb74579b6f4e0609671d6cafde5e6d656bc62b5e4b67b2ac403926dbf9374f9d25052041c6bf9f30787dafdcb5e6b2966274225afb8a4243c72f98d0e3a9908d28948f4d6e9ee03c760ead2f4254f211089aad5a6940404a0e7d5fcbbd052d5fedc8aaa0c776ac5a05e9af16eb6ee0ed388b667d8b974713792e2c73360c3faf2fbcd8605830f2921dfafdbf39abaa2c24043b0f7706f3bc56c81996b5db545555c9daf5563565478b7188c5c199bad92737e7725b6336876f2a4e6898e8ff77a055162d01617a863832f8a6ac9fe66f526a35671df7ca363b88b2032d4822a0c740d8180c3aaa3519948cedab4a0b3ebf7e33f338a214d9f0cf66c5aa79d1784061ef6ef5ecabf2145b7531d29616a99f47d92fce0eff14d9d5acabd9039d5972f1808030070421a30c213e0afa4a227f84d2c0916370cd89e3ff9fe38dc6b3be71a5c9eaa83b76bad178d515b92f9d7f1e8adda3ccac5ed4462bbd1752ad5ee43cbed9e60a56a571c5bd42b98e3879ec95e8fc169c8b963ddd03e8989a4e7f74c55eeb40453e3bfb36ff7538306d032fc201e43bbbf2c049c75f9ff03034084ff33bb258e2ea8515c80ccf11e513bb120683db534a8ee5e814b63cb9785d5aaa7f0c6d0ddf6efa39673cec41d29c104036f1877d591e9bc3d31ad87664a6f383d8279fbf5c0244622ddd35d083dc6ce31248db801992591257036afec363a1791d8f54982eea5a4e0a274ca6de814ff756c3742b468e060330064d021cc5113bb0703384cf8deff17c7a24572212b815e71d0e494c48bd89c484712d5e4a8db04a8259b0e448b70e9285fedf6e7e12e0d5700ba46cb5fcf5965140740075fb12d6baf92ca9d6147c41f5091b84b81825109a0a4099b797de98a0b679082b5e7f0dd6aebcb6cc0413edb9b8cf4a31b0f497205a758389056a9407e21ec8be9698be1070821cf869cff6f7a1f3e3413da3fd4da4f2982cf8037494cad53e440183bda64b51ffa594cf982ba1aa9a6695e611fd980554f2e72966da73f88182cccd19964ab86fec3b96c19354842090caf8bee89fa5b318590c7bc4921024d83136be089f10e6611dca9b1cc504b89c8bd96090ebb8ceb559849c73bf35a65521a40e83c4d5a5cdc638fbd6b2ede98c177c70188d2b4f06c977a47fa76d7ac3d9f9ee002a48f382625215b230bc399c090ce33ebafbc4bd398675583077b0e7be74cf4466f74f5ec9576ac823d78ba91442eb0689082bbeb0e928edce0cb9de2a0aa591ca1244ba5aa300d6aab1c42babe351cd68112d8355e7138d9c4595feef2199600a02b1f943d6e26a1d9c4e663db4239cb33d2f7bccaffab40ef4a142267962d634af483e9ebdc0b74d580eb830966cbabde7dd95e271d381c33cf819db5b45fd3edd438fee1e29db13a36685b28fcffdd205ab2f3602f5608384b829e0bd347040818f392d21194bd57724e0ea38ba9a5be99fcc493181d7d63d6113470be5ce9dcb26c9efc1c088b592d2b696579696001ef341909a53d44d1693dd0fefa30fd8e92e9468f754d9502b49e6a6ec42c98043db4c95b95680b0f320da15279c38d6e9e61f0c44aec2fe0ef900de1538436fac855661fa5db8cb409c9ce4c5b31f8b58951aaf2c634d44f11f72f31228b3da175a02431f27710409fc51dbf565ab7d4c5ae492e86c116c0bc4a8dec591a40476b7adeeda2723de1d114a79146e1cc85d1443f70ea503d093adb96737136d16cd66df1d365e763056846d373d6d1a7673b3e1a8cf2a8b500e6da90d727b9f73c16649fa83250bfa", 0xfee}, {&(0x7f0000001780)="0bd962d9ae883ca2b6e42114bc2564a8de05ec", 0x13}], 0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) preadv(r7, &(0x7f0000001940)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f00000017c0)=""/100, 0x64}, {&(0x7f0000001840)=""/197, 0xc5}], 0x4, 0xfffffff9, 0xfffffff8) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x0, 0xc}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) syz_emit_ethernet(0x0, 0x0, 0x0) 40.018859ms ago: executing program 0 (id=8543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x4c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000001}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x4c}}, 0x48000) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6000001a907800002202a7d20ed68817cabc97cf0812fa07"], 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140003"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r11) sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48005}, 0x80) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r12, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 0s ago: executing program 2 (id=8544): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 32) r5 = socket(0x2d, 0x2, 0x0) (rerun: 32) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) (async) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0xfffffffffffffe0c, "328fd99f5a8e3a7342c56bd3cb03f397f16fb6ed14107b883abc4b6fa10fee8638cbd9c47568eb3b44f741ce19530a2273a1a12b1a6b071844905c291c4f016ba064dd47985ff2126f00"/85}, 0xd) (async) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xa, 0x8, 0x3, 0x3, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0xb7}]}, 0x18}}, 0xf7e7c8c7319ca927) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.577909][T26591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.594090][T26591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.602234][T26591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.650175][ T5741] tipc: Node number set to 10005162 [ 681.034712][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6556'. [ 681.133072][T30297] Bluetooth: MGMT ver 1.23 [ 681.322900][T30269] hsr0 speed is unknown, defaulting to 1000 [ 681.336307][T30310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6560'. [ 681.434100][T30310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 681.562342][T30323] netlink: 'syz.4.6563': attribute type 10 has an invalid length. [ 681.594181][T30323] team0: Port device dummy0 added [ 681.742494][T30335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6566'. [ 681.778676][T30335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6566'. [ 681.974815][T30269] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.984532][T30269] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.992256][T30269] bridge_slave_0: entered allmulticast mode [ 682.000456][T30269] bridge_slave_0: entered promiscuous mode [ 682.020644][T30269] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.031406][T30269] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.045382][T30269] bridge_slave_1: entered allmulticast mode [ 682.080028][T30269] bridge_slave_1: entered promiscuous mode [ 682.242601][T30269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.262260][T30269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.362392][T30269] team0: Port device team_slave_0 added [ 682.385705][T30269] team0: Port device team_slave_1 added [ 682.468940][T30269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.476187][T30269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.506167][T30269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.558253][T30269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.558415][T30374] netlink: 'syz.0.6575': attribute type 1 has an invalid length. [ 682.570001][T30269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.599210][T30269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.632763][T30380] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 682.640551][T30380] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 682.688069][T26591] Bluetooth: hci4: command tx timeout [ 682.802618][T30269] hsr_slave_0: entered promiscuous mode [ 682.811574][T30269] hsr_slave_1: entered promiscuous mode [ 682.835056][T30269] debugfs: 'hsr0' already exists in 'hsr' [ 682.847161][T30269] Cannot create hsr debugfs directory [ 683.167070][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.399008][T30422] net_ratelimit: 21 callbacks suppressed [ 683.399024][T30422] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 683.423472][T30422] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 683.447089][T30269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.460183][T30422] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 683.489358][T30269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.510851][T30422] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 683.525362][T30269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 683.616420][T30427] syzkaller1: entered promiscuous mode [ 683.629599][T30427] syzkaller1: entered allmulticast mode [ 683.814528][T30269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.869711][T30269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.933057][T30269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 683.951156][T30457] netlink: 'syz.0.6592': attribute type 1 has an invalid length. [ 683.976117][T30457] netlink: 'syz.0.6592': attribute type 3 has an invalid length. [ 684.001758][T30457] NCSI netlink: No device for ifindex 813332851 [ 684.066305][T30269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.087326][T30269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.098432][T30269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 684.234060][T30269] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.257437][T30269] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.290225][T30269] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 684.355949][T30466] veth0_macvtap: Caught tx_queue_len zero misconfig [ 684.421702][T30478] syzkaller0: entered promiscuous mode [ 684.432540][T30478] syzkaller0: entered allmulticast mode [ 684.769411][T26591] Bluetooth: hci4: command tx timeout [ 684.773510][T30269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.793640][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.817949][T30269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.838733][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 684.870569][T30269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.900595][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.909294][T30269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.922954][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.032290][T30508] __nla_validate_parse: 9 callbacks suppressed [ 685.032334][T30508] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.6611'. [ 685.054466][T30269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.085407][T30269] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.124125][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.131368][ T9570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.137829][T30509] can: request_module (can-proto-3) failed. [ 685.152369][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.159568][ T9570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.205178][ T29] audit: type=1804 audit(1778359671.916:31): pid=30509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6610" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=523 res=1 errno=0 [ 685.252379][ T29] audit: type=1800 audit(1778359671.916:32): pid=30509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6610" name="cgroup.controllers" dev="tmpfs" ino=523 res=0 errno=0 [ 685.261193][T30514] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 685.280322][T30269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.316319][T30516] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.414074][T30519] netlink: 'syz.0.6614': attribute type 21 has an invalid length. [ 685.454934][T30519] netlink: 'syz.0.6614': attribute type 6 has an invalid length. [ 685.488229][T30519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6614'. [ 685.660012][T30538] netlink: 'syz.0.6618': attribute type 10 has an invalid length. [ 685.669770][T30538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6618'. [ 685.735652][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.982175][T30553] netlink: 'syz.2.6619': attribute type 1 has an invalid length. [ 686.069734][T30269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.075476][T30559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.077444][T30553] syzkaller0: entered promiscuous mode [ 686.091860][T30553] syzkaller0: entered allmulticast mode [ 686.211701][T30269] veth0_vlan: entered promiscuous mode [ 686.246651][T30269] veth1_vlan: entered promiscuous mode [ 686.280524][T30561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6622'. [ 686.291714][T30561] IPv6: NLM_F_CREATE should be specified when creating new route [ 686.300170][T30561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.303680][T30269] veth0_macvtap: entered promiscuous mode [ 686.307415][T30561] IPv6: NLM_F_CREATE should be set when creating new route [ 686.319830][T30269] veth1_macvtap: entered promiscuous mode [ 686.320421][T30561] IPv6: NLM_F_CREATE should be set when creating new route [ 686.329859][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6623'. [ 686.347663][T30561] IPv4: Oversized IP packet from 127.202.26.0 [ 686.396259][T30269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.425068][T30269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.451629][ T9570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.461732][ T9570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.493639][ T9570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.508384][ T9570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.655245][T30576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 686.697910][T15706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.712642][T15706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.724888][T30573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.798911][T15706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.807487][T15706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.848244][T26591] Bluetooth: hci4: command tx timeout [ 686.959318][T30592] bridge1: entered promiscuous mode [ 686.966322][T30592] bridge1: entered allmulticast mode [ 686.991657][T30592] bridge2: entered promiscuous mode [ 686.999932][T30592] bridge2: entered allmulticast mode [ 687.050933][T30592] bridge3: entered promiscuous mode [ 687.056313][T30592] bridge3: entered allmulticast mode [ 687.098757][T30592] bridge4: entered promiscuous mode [ 687.104056][T30592] bridge4: entered allmulticast mode [ 687.123396][T30592] bridge5: entered promiscuous mode [ 687.132229][T30592] bridge5: entered allmulticast mode [ 687.148364][T30604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.153745][T30592] bridge6: entered promiscuous mode [ 687.164534][T30592] bridge6: entered allmulticast mode [ 687.200564][T30592] bridge7: entered promiscuous mode [ 687.201394][T30604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.206009][T30592] bridge7: entered allmulticast mode [ 687.245060][T30592] bridge8: entered promiscuous mode [ 687.261374][T30592] bridge8: entered allmulticast mode [ 687.299640][T30592] bridge9: entered promiscuous mode [ 687.304995][T30592] bridge9: entered allmulticast mode [ 687.333044][T30592] bridge10: entered promiscuous mode [ 687.343182][T30592] bridge10: entered allmulticast mode [ 687.370021][T30592] bridge11: entered promiscuous mode [ 687.375581][T30592] bridge11: entered allmulticast mode [ 687.401142][T30592] bridge12: entered promiscuous mode [ 687.409717][T30619] netlink: 'syz.1.6636': attribute type 3 has an invalid length. [ 687.418329][T30592] bridge12: entered allmulticast mode [ 687.427528][T30619] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6636'. [ 687.444700][T30592] bridge13: entered promiscuous mode [ 687.450326][T30592] bridge13: entered allmulticast mode [ 687.461058][T30616] syzkaller1: entered promiscuous mode [ 687.466653][T30616] syzkaller1: entered allmulticast mode [ 687.494129][T30592] bridge14: entered promiscuous mode [ 687.499893][T30592] bridge14: entered allmulticast mode [ 687.525145][T30592] bridge15: entered promiscuous mode [ 687.530855][T30592] bridge15: entered allmulticast mode [ 687.547878][T30592] bridge16: entered promiscuous mode [ 687.553189][T30592] bridge16: entered allmulticast mode [ 687.571882][T30592] bridge17: entered promiscuous mode [ 687.578138][T30592] bridge17: entered allmulticast mode [ 687.592386][T30592] bridge18: entered promiscuous mode [ 687.599217][T30592] bridge18: entered allmulticast mode [ 687.613498][T30592] bridge19: entered promiscuous mode [ 687.619060][T30592] bridge19: entered allmulticast mode [ 687.635453][T30592] bridge20: entered promiscuous mode [ 687.641287][T30592] bridge20: entered allmulticast mode [ 687.663022][T30592] bridge21: entered promiscuous mode [ 687.668599][T30592] bridge21: entered allmulticast mode [ 687.682587][T30592] bridge22: entered promiscuous mode [ 687.688094][T30592] bridge22: entered allmulticast mode [ 687.701114][T30592] bridge23: entered promiscuous mode [ 687.706412][T30592] bridge23: entered allmulticast mode [ 687.723841][T30592] bridge24: entered promiscuous mode [ 687.731101][T30592] bridge24: entered allmulticast mode [ 687.749025][T30592] bridge25: entered promiscuous mode [ 687.755487][T30592] bridge25: entered allmulticast mode [ 687.931030][T30630] netlink: 'syz.3.6638': attribute type 28 has an invalid length. [ 687.944806][T30630] netlink: 'syz.3.6638': attribute type 3 has an invalid length. [ 687.953602][T30630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6638'. [ 687.974398][T30630] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 688.928192][T26591] Bluetooth: hci4: command tx timeout [ 690.330858][T30620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.726410][T30682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6651'. [ 690.801940][T30685] syzkaller0: entered promiscuous mode [ 690.810419][T30685] syzkaller0: entered allmulticast mode [ 690.874990][T30689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6655'. [ 690.904352][T30688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.976081][T12554] IPVS: starting estimator thread 0... [ 691.063592][T30701] tipc: Enabled bearer , priority 0 [ 691.077019][T30698] IPVS: using max 27 ests per chain, 64800 per kthread [ 691.245462][T30701] syzkaller0: entered promiscuous mode [ 691.260500][T30701] syzkaller0: entered allmulticast mode [ 691.269077][T30701] tipc: Resetting bearer [ 691.289806][T30707] bridge_slave_0: default FDB implementation only supports local addresses [ 691.300265][T30715] can: request_module (can-proto-0) failed. [ 691.353133][T30720] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 691.369005][T30720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 691.389493][T30724] sctp: [Deprecated]: syz.0.6665 (pid 30724) Use of int in maxseg socket option. [ 691.389493][T30724] Use struct sctp_assoc_value instead [ 691.412981][T30728] netlink: 'syz.4.6664': attribute type 2 has an invalid length. [ 691.421768][T30700] tipc: Resetting bearer [ 691.466696][T30732] netlink: 'syz.2.6666': attribute type 2 has an invalid length. [ 691.478081][T30735] netlink: 'syz.4.6664': attribute type 1 has an invalid length. [ 691.493542][T30732] netlink: 'syz.2.6666': attribute type 11 has an invalid length. [ 691.560397][T30732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6666'. [ 691.560882][T30738] netlink: 'syz.2.6666': attribute type 1 has an invalid length. [ 691.611671][T30741] netlink: 'syz.3.6667': attribute type 2 has an invalid length. [ 692.722655][T30751] sctp: [Deprecated]: syz.3.6670 (pid 30751) Use of int in maxseg socket option. [ 692.722655][T30751] Use struct sctp_assoc_value instead [ 693.839043][T30700] tipc: Disabling bearer [ 693.870206][T30753] team0: Device gtp0 is up. Set it down before adding it as a team port [ 694.137271][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6678'. [ 694.235038][T30781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6680'. [ 694.294808][T30778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6679'. [ 694.376249][T30786] sctp: [Deprecated]: syz.0.6682 (pid 30786) Use of int in maxseg socket option. [ 694.376249][T30786] Use struct sctp_assoc_value instead [ 694.571024][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6687'. [ 694.581205][T30798] netlink: 'syz.0.6687': attribute type 30 has an invalid length. [ 694.589531][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6687'. [ 694.602405][T30798] netlink: 'syz.0.6687': attribute type 1 has an invalid length. [ 694.658752][T30798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.696370][T30805] sctp: [Deprecated]: syz.4.6688 (pid 30805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.696370][T30805] Use struct sctp_sack_info instead [ 694.776409][T30805] ipvlan2: entered promiscuous mode [ 694.787944][T30798] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6687'. [ 694.793918][T30805] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6688'. [ 694.967707][T30819] lo: entered allmulticast mode [ 695.172980][T30827] vlan2: entered allmulticast mode [ 695.187322][T30827] bond0: entered allmulticast mode [ 695.196873][T30827] bond_slave_0: entered allmulticast mode [ 695.217059][T30827] bond_slave_1: entered allmulticast mode [ 695.251769][T30832] netlink: 'syz.1.6696': attribute type 7 has an invalid length. [ 695.268312][T30832] netlink: 'syz.1.6696': attribute type 8 has an invalid length. [ 695.837437][T30863] __nla_validate_parse: 6 callbacks suppressed [ 695.837453][T30863] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6703'. [ 696.244018][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6710'. [ 696.255443][T30887] syz_tun: entered allmulticast mode [ 696.316044][T30885] syz_tun: left allmulticast mode [ 696.569349][T30898] veth0_vlan: mtu greater than device maximum [ 696.933281][T30919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6718'. [ 696.942709][T30918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6718'. [ 696.961358][T30921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'. [ 697.054638][T30926] validate_nla: 1 callbacks suppressed [ 697.054655][T30926] netlink: 'syz.4.6720': attribute type 2 has an invalid length. [ 697.085141][T30926] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6720'. [ 697.272013][T30932] team0 (unregistering): Port device team_slave_0 removed [ 697.305507][T30932] team0 (unregistering): Port device team_slave_1 removed [ 698.002509][T30968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6736'. [ 698.029927][T30968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6736'. [ 698.072359][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6737'. [ 698.108007][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6737'. [ 698.245013][T30981] netdevsim netdevsim4 : renamed from netdevsim0 [ 698.258052][T30983] syzkaller0: entered promiscuous mode [ 698.269206][T30983] syzkaller0: entered allmulticast mode [ 698.288468][ T50] Bluetooth: hci4: command tx timeout [ 698.487132][T31004] netlink: 'syz.2.6746': attribute type 13 has an invalid length. [ 698.860336][T31026] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 698.909055][T31026] team0: entered promiscuous mode [ 698.920800][T31032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.922002][T31026] team0: entered allmulticast mode [ 699.143383][T31040] syzkaller1: entered promiscuous mode [ 699.179420][T31040] syzkaller1: entered allmulticast mode [ 699.864954][T29056] IPVS: starting estimator thread 0... [ 699.938967][T31091] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 699.968988][T31084] IPVS: using max 29 ests per chain, 69600 per kthread [ 700.095725][T31099] erspan0: entered allmulticast mode [ 700.563509][T31128] netlink: 'syz.4.6781': attribute type 1 has an invalid length. [ 700.642744][T31128] 8021q: adding VLAN 0 to HW filter on device bond5 [ 700.753710][T31128] vlan2: entered allmulticast mode [ 700.777933][T31128] bond5: entered allmulticast mode [ 700.790879][T31143] sctp: [Deprecated]: syz.4.6781 (pid 31143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.790879][T31143] Use struct sctp_sack_info instead [ 700.806123][T15703] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.899017][T31133] bond5: (slave geneve3): making interface the new active one [ 700.911873][T31133] geneve3: entered allmulticast mode [ 700.922519][T31133] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 700.954337][T31142] __nla_validate_parse: 21 callbacks suppressed [ 700.954357][T31142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6784'. [ 700.989591][T15703] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.005597][T15703] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.024644][T15703] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.044336][T15703] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 701.064853][T15703] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.100079][T15703] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.126906][T15703] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.321426][T31164] netlink: 'syz.3.6788': attribute type 39 has an invalid length. [ 701.436946][T31170] G: renamed from vlan0 [ 701.447074][T31172] netlink: 496 bytes leftover after parsing attributes in process `syz.1.6793'. [ 701.638425][T31187] netlink: 'syz.2.6797': attribute type 21 has an invalid length. [ 701.675329][T31186] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 701.696423][T31187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6797'. [ 701.720149][T31189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6799'. [ 701.777589][T31192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6801'. [ 702.174130][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6813'. [ 702.207455][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6813'. [ 702.228196][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6813'. [ 702.228872][T31231] netlink: 'syz.1.6814': attribute type 10 has an invalid length. [ 702.245567][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6813'. [ 702.260535][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6813'. [ 702.512018][T31249] netlink: 'syz.3.6817': attribute type 9 has an invalid length. [ 702.512342][T31246] syzkaller0: entered promiscuous mode [ 702.525859][T31249] netlink: 'syz.3.6817': attribute type 6 has an invalid length. [ 702.530729][T31246] syzkaller0: entered allmulticast mode [ 702.549825][T31249] netlink: 'syz.3.6817': attribute type 7 has an invalid length. [ 702.572405][T31249] netlink: 'syz.3.6817': attribute type 8 has an invalid length. [ 704.844735][T31259] bond0: Caught tx_queue_len zero misconfig [ 705.044047][T31278] netlink: 'syz.4.6827': attribute type 1 has an invalid length. [ 705.214269][T31296] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 705.239776][T31296] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 705.624725][T31303] atomic_op ffff88807ef4c198 conn xmit_atomic 0000000000000000 [ 705.663628][T31299] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 705.713591][T31301] macvlan2: entered promiscuous mode [ 705.762424][T31301] macvlan2: entered allmulticast mode [ 705.772546][T31301] bond6: entered promiscuous mode [ 705.786305][T31301] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 705.854049][T31301] bond6: left promiscuous mode [ 705.907354][T31303] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 705.923255][T31303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 706.103784][T31326] __nla_validate_parse: 62 callbacks suppressed [ 706.103805][T31326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6841'. [ 706.136948][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'. [ 706.332347][T31346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6844'. [ 706.362681][T31353] lo: Caught tx_queue_len zero misconfig [ 706.475933][T31361] netlink: 'syz.1.6847': attribute type 4 has an invalid length. [ 706.648892][T31374] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.702482][T31380] netlink: 'syz.3.6851': attribute type 3 has an invalid length. [ 706.713296][T31380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6851'. [ 706.889555][T31388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6853'. [ 706.903388][T31388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6853'. [ 707.676164][T31403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6858'. [ 707.691954][T31403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6858'. [ 707.817506][T31410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6860'. [ 709.094430][T31326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 709.259489][T31415] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6862'. [ 709.481663][T31437] netlink: 'syz.0.6869': attribute type 1 has an invalid length. [ 709.524761][T31437] batadv1: entered allmulticast mode [ 709.619916][T31445] team0: Port device dummy0 removed [ 709.627043][T31449] netlink: 'syz.1.6870': attribute type 15 has an invalid length. [ 709.635830][T31446] netlink: 'syz.3.6871': attribute type 1 has an invalid length. [ 709.647077][T31445] bridge_slave_0: left allmulticast mode [ 709.670399][T31445] bridge_slave_0: left promiscuous mode [ 709.690731][T31445] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.720345][T31445] bridge_slave_1: left allmulticast mode [ 709.733316][T31445] bridge_slave_1: left promiscuous mode [ 709.746273][T31445] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.778216][T31445] bond0: (slave bond_slave_0): Releasing backup interface [ 709.800369][T31445] bond0: (slave bond_slave_1): Releasing backup interface [ 709.830038][T31445] team0: Port device team_slave_0 removed [ 709.849415][T31445] team0: Port device team_slave_1 removed [ 709.862300][T31445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.871312][T31445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 709.979615][T31446] bond1: entered promiscuous mode [ 710.003506][T31446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.104764][T31443] bond1: (slave bridge27): making interface the new active one [ 710.112893][T31443] bridge27: entered promiscuous mode [ 710.122300][T31443] bond1: (slave bridge27): Enslaving as an active interface with an up link [ 710.211159][T31463] syzkaller1: entered promiscuous mode [ 710.222059][T31463] syzkaller1: entered allmulticast mode [ 710.240228][T31469] syzkaller0: entered promiscuous mode [ 710.255322][T31469] syzkaller0: entered allmulticast mode [ 710.489769][T31491] netlink: 'syz.2.6882': attribute type 12 has an invalid length. [ 710.527686][T11975] nci: nci_ntf_packet: unknown ntf opcode 0x505 [ 710.536208][T31491] netlink: 'syz.2.6882': attribute type 12 has an invalid length. [ 710.537904][ T9570] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.571206][ T9570] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.580736][ T9570] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.593356][ T9570] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.756894][T31514] netlink: 'syz.4.6885': attribute type 10 has an invalid length. [ 710.782028][T31514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.815933][T31514] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 710.871343][T31514] netlink: 'syz.4.6885': attribute type 1 has an invalid length. [ 710.929713][T31514] bond7: (slave bridge5): making interface the new active one [ 710.939679][T31514] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 713.408783][T31486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.579815][T31543] __nla_validate_parse: 9 callbacks suppressed [ 713.579833][T31543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6898'. [ 713.636623][T31549] tipc: Failed to remove unknown binding: 66,0,0/10005162:2566349702/2566349703 [ 713.662851][T31549] tipc: Failed to remove unknown binding: 66,0,0/10005162:2566349702/2566349703 [ 713.864179][T31557] veth0_to_bond: left allmulticast mode [ 713.870231][T31565] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6902'. [ 713.921463][T31560] netlink: 'syz.2.6897': attribute type 1 has an invalid length. [ 713.940046][T31560] netlink: 'syz.2.6897': attribute type 2 has an invalid length. [ 713.974684][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6904'. [ 714.049166][T31577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6905'. [ 714.254361][T31589] netlink: 'syz.0.6908': attribute type 3 has an invalid length. [ 714.295441][T31589] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6908'. [ 714.314755][T31590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.315551][T31587] syzkaller1: entered promiscuous mode [ 714.371873][T31587] syzkaller1: entered allmulticast mode [ 714.537719][T31593] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.635330][T31599] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6910'. [ 714.801895][T31609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6913'. [ 714.832621][T31608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6914'. [ 715.063822][T31622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6917'. [ 715.298483][T31630] validate_nla: 1 callbacks suppressed [ 715.298500][T31630] netlink: 'syz.4.6920': attribute type 1 has an invalid length. [ 715.326293][T31630] netlink: 'syz.4.6920': attribute type 3 has an invalid length. [ 715.327877][T31632] netlink: 'syz.4.6920': attribute type 1 has an invalid length. [ 715.356235][T31630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6920'. [ 715.411121][T31632] netlink: 'syz.4.6920': attribute type 3 has an invalid length. [ 715.466133][ T29] audit: type=1804 audit(1778359702.176:33): pid=31641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6923" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=897 res=1 errno=0 [ 715.543389][ T29] audit: type=1800 audit(1778359702.216:34): pid=31641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6923" name="cgroup.controllers" dev="tmpfs" ino=897 res=0 errno=0 [ 716.245620][T31671] block nbd2: not configured, cannot reconfigure [ 716.267343][T31671] netlink: 'syz.2.6934': attribute type 21 has an invalid length. [ 716.293751][T31671] netlink: 'syz.2.6934': attribute type 6 has an invalid length. [ 716.447298][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 716.863424][T31697] netlink: 'syz.2.6941': attribute type 9 has an invalid length. [ 717.493225][T31732] netlink: 'syz.2.6951': attribute type 28 has an invalid length. [ 717.504851][T31732] netlink: 'syz.2.6951': attribute type 3 has an invalid length. [ 717.837532][T31746] sctp: [Deprecated]: syz.4.6956 (pid 31746) Use of int in maxseg socket option. [ 717.837532][T31746] Use struct sctp_assoc_value instead [ 717.852239][T31752] netlink: 'syz.0.6957': attribute type 4 has an invalid length. [ 717.870233][T31746] xt_hashlimit: size too large, truncated to 1048576 [ 717.887590][T31752] .`: renamed from bond0 (while UP) [ 718.082520][T31756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.227217][T31772] Cannot find set identified by id 65534 to match [ 718.606320][T31789] syzkaller1: entered promiscuous mode [ 718.624547][T31789] syzkaller1: entered allmulticast mode [ 718.756479][T31808] ip6t_REJECT: ECHOREPLY is not supported [ 718.763840][T31804] __nla_validate_parse: 15 callbacks suppressed [ 718.763856][T31804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6976'. [ 718.765476][T31809] ip6t_REJECT: ECHOREPLY is not supported [ 719.015127][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.714459][T31827] xt_hashlimit: size too large, truncated to 1048576 [ 721.829727][T31824] gretap0: entered promiscuous mode [ 721.839266][T31824] vlan2: entered promiscuous mode [ 722.130151][ T1221] IPVS: starting estimator thread 0... [ 722.168817][T31845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6986'. [ 722.191480][T31845] validate_nla: 2 callbacks suppressed [ 722.191496][T31845] netlink: 'syz.2.6986': attribute type 7 has an invalid length. [ 722.215926][T31845] netlink: 'syz.2.6986': attribute type 8 has an invalid length. [ 722.228109][T31847] IPVS: using max 31 ests per chain, 74400 per kthread [ 722.235414][T31842] IPVS: sh: FWM 3 0x00000003 - no destination available [ 722.247813][T31841] IPVS: sh: FWM 3 0x00000003 - no destination available [ 722.254461][T31845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 722.283451][T31855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6988'. [ 722.320942][T31857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6988'. [ 722.587138][T31880] veth0_to_bridge: entered promiscuous mode [ 722.595641][ T29] audit: type=1804 audit(1778359709.306:35): pid=31876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6996" name="/newroot/183/cgroup.controllers" dev="tmpfs" ino=949 res=1 errno=0 [ 722.619516][T31872] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 722.637987][ T29] audit: type=1800 audit(1778359709.306:36): pid=31876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6996" name="cgroup.controllers" dev="tmpfs" ino=949 res=0 errno=0 [ 722.939329][T31879] veth0_to_bridge: left promiscuous mode [ 723.042092][T31897] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 723.175002][T31904] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 723.233684][T31909] netlink: 'syz.1.7005': attribute type 2 has an invalid length. [ 723.284755][T31913] netlink: 'syz.4.7006': attribute type 28 has an invalid length. [ 723.311527][T31913] netlink: 'syz.4.7006': attribute type 3 has an invalid length. [ 723.330913][T31913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7006'. [ 723.371729][T31913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7006'. [ 723.432678][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7010'. [ 723.475455][T31921] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 723.485530][T31923] netlink: 'syz.2.7011': attribute type 10 has an invalid length. [ 723.514329][T31921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7010'. [ 723.515837][T31923] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7011'. [ 723.538085][T31930] netlink: zone id is out of range [ 723.552048][T31930] netlink: zone id is out of range [ 723.557742][T31930] netlink: zone id is out of range [ 723.562877][T31930] netlink: zone id is out of range [ 723.600025][T31930] netlink: zone id is out of range [ 723.615116][T31930] netlink: zone id is out of range [ 723.635806][T31930] netlink: zone id is out of range [ 723.838518][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7020'. [ 723.872957][T31955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 723.899736][T31955] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 723.917001][T31955] gretap2: entered promiscuous mode [ 723.929846][T31964] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 723.948542][T31955] gretap2: entered allmulticast mode [ 723.968944][T31953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'. [ 724.260930][T31985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7029'. [ 724.332898][T31990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7031'. [ 724.360718][T31990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7031'. [ 724.433007][T31988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.629795][T32010] netlink: 'syz.2.7034': attribute type 4 has an invalid length. [ 724.657071][T32010] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7034'. [ 724.685415][T31988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.883264][T32024] netlink: 'syz.1.7039': attribute type 10 has an invalid length. [ 724.884262][T31988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.050304][T31988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.191492][T32033] netlink: 'syz.4.7041': attribute type 1 has an invalid length. [ 725.218830][T32033] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7041'. [ 725.235057][ T9570] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.236915][T32033] netlink: 'syz.4.7041': attribute type 1 has an invalid length. [ 725.261832][ T9570] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.261984][T32033] netlink: 606 bytes leftover after parsing attributes in process `syz.4.7041'. [ 725.282922][T32033] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7041'. [ 725.301189][ T9570] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.447046][ T423] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.456227][T32046] batman_adv: batadv0: Adding interface: dummy0 [ 725.463039][T32046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.491076][T32046] batman_adv: batadv0: Interface activated: dummy0 [ 725.556096][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7046'. [ 725.585934][T32053] syz_tun: entered promiscuous mode [ 725.885050][T32075] bond0: entered promiscuous mode [ 725.892480][T32075] bond_slave_0: entered promiscuous mode [ 725.900240][T32075] bond_slave_1: entered promiscuous mode [ 726.123473][T32087] bond0: entered promiscuous mode [ 726.130664][T32087] bond_slave_0: entered promiscuous mode [ 726.141203][T32087] team0: entered promiscuous mode [ 726.146329][T32087] team_slave_0: entered promiscuous mode [ 726.155643][T32087] team_slave_1: entered promiscuous mode [ 726.166262][T32087] debugfs: 'hsr1' already exists in 'hsr' [ 726.172823][T32087] Cannot create hsr debugfs directory [ 726.179278][T32087] hsr1: entered promiscuous mode [ 729.269149][T32132] dvmrp0: entered allmulticast mode [ 729.331709][T32145] tipc: Enabling of bearer rejected, failed to enable media [ 729.378799][T32161] validate_nla: 2 callbacks suppressed [ 729.378818][T32161] netlink: 'syz.1.7071': attribute type 1 has an invalid length. [ 729.395307][T32162] __nla_validate_parse: 6 callbacks suppressed [ 729.395324][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7070'. [ 729.431603][T32162] hsr_slave_0: left promiscuous mode [ 729.461682][T32162] hsr_slave_1: left promiscuous mode [ 729.690677][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 729.811201][T32190] ipt_rpfilter: unknown options [ 729.925264][T32197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7082'. [ 729.937754][T32198] netlink: 'syz.4.7083': attribute type 15 has an invalid length. [ 729.952415][T32197] Unsupported ieee802154 address type: 0 [ 730.152648][T32210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7087'. [ 730.440321][T32223] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7091'. [ 730.537988][T32228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7093'. [ 730.638988][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7094'. [ 730.649744][T32230] ip6tnl0: Caught tx_queue_len zero misconfig [ 730.657847][T32230] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7094'. [ 730.756964][T32235] xt_hashlimit: max too large, truncated to 1048576 [ 730.989859][T32246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7099'. [ 731.083783][T32259] netlink: 'syz.0.7102': attribute type 10 has an invalid length. [ 731.099121][T32259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7102'. [ 731.109515][T32259] dummy0: entered promiscuous mode [ 731.119093][T32259] bridge0: port 3(dummy0) entered blocking state [ 731.132143][T32259] bridge0: port 3(dummy0) entered disabled state [ 731.139433][T32259] dummy0: entered allmulticast mode [ 731.148620][T32259] bridge0: port 3(dummy0) entered blocking state [ 731.155519][T32259] bridge0: port 3(dummy0) entered forwarding state [ 731.496085][T32280] bond4: option lp_interval: invalid value (0) [ 731.522795][T32280] bond4: option lp_interval: allowed values 1 - 2147483647 [ 731.557144][T32280] bond4 (unregistering): Released all slaves [ 731.668895][T32298] sctp: [Deprecated]: syz.4.7115 (pid 32298) Use of int in maxseg socket option. [ 731.668895][T32298] Use struct sctp_assoc_value instead [ 731.674421][T32300] netlink: 'syz.0.7116': attribute type 8 has an invalid length. [ 731.727756][T32300] bridge0: port 3(dummy0) entered disabled state [ 731.734335][T32300] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.881508][T32312] netlink: 'syz.4.7120': attribute type 83 has an invalid length. [ 732.081137][T32321] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 732.117823][T32321] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 732.144979][T32321] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 732.190797][T32321] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 732.216988][T32321] netlink: 'syz.1.7123': attribute type 1 has an invalid length. [ 732.364758][T32344] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 4, id = 0 [ 732.420302][T32348] ipt_REJECT: TCP_RESET invalid for non-tcp [ 732.575453][T32355] net_ratelimit: 137 callbacks suppressed [ 732.575474][T32355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.810466][T32367] tipc: Started in network mode [ 732.821710][T32367] tipc: Node identity 16218e8fbffa, cluster identity 4711 [ 732.839984][T32367] tipc: Enabled bearer , priority 0 [ 732.926015][T32367] syzkaller0: entered promiscuous mode [ 732.932917][T32367] syzkaller0: entered allmulticast mode [ 732.939906][T32367] tipc: Resetting bearer [ 733.023747][T32366] tipc: Resetting bearer [ 735.400609][T32366] tipc: Disabling bearer [ 735.413136][T32389] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 735.418084][T32387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.580909][T32404] __nla_validate_parse: 7 callbacks suppressed [ 735.580929][T32404] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7145'. [ 735.598300][T32404] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7145'. [ 735.609097][ T1221] tipc: Node number set to 2849738383 [ 735.786220][T32415] tipc: Resetting bearer [ 736.273813][ T50] block nbd1: Receive control failed (result -32) [ 736.956294][T32489] hsr0 speed is unknown, defaulting to 1000 [ 737.254279][T32518] can: request_module (can-proto-4) failed. [ 737.463051][T32533] validate_nla: 3 callbacks suppressed [ 737.463072][T32533] netlink: 'syz.1.7167': attribute type 1 has an invalid length. [ 737.501447][T32536] 8021q: VLANs not supported on ip_vti0 [ 737.630227][T32533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 737.795771][T32541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 737.814490][T32541] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 737.872245][T32541] bond4: (slave vcan1): Error -95 calling set_mac_address [ 738.564333][T32581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7174'. [ 738.604810][T32581] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7174'. [ 738.726162][T32590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7178'. [ 738.781859][T32594] tunl0: entered promiscuous mode [ 738.810199][T32594] netlink: 'syz.4.7180': attribute type 3 has an invalid length. [ 738.841469][T32594] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7180'. [ 738.852896][T32599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7180'. [ 738.872239][T32600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7181'. [ 738.970948][T32604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7183'. [ 739.342541][T32623] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7188'. [ 739.984122][T32659] netlink: 'syz.0.7199': attribute type 16 has an invalid length. [ 739.992395][T32659] netlink: 'syz.0.7199': attribute type 17 has an invalid length. [ 740.005608][T32653] : renamed from team_slave_1 [ 740.105288][T32659] bridge0: port 3(dummy0) entered blocking state [ 740.111812][T32659] bridge0: port 3(dummy0) entered forwarding state [ 740.118686][T32659] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.125846][T32659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.228942][T32659] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 740.273901][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.281137][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.350920][T32670] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 740.799753][T32696] vlan3: entered allmulticast mode [ 740.814771][T32696] bond0: entered allmulticast mode [ 740.835847][T32696] bond_slave_0: entered allmulticast mode [ 740.850532][T32696] bond_slave_1: entered allmulticast mode [ 741.076459][T32715] __nla_validate_parse: 5 callbacks suppressed [ 741.076475][T32715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7210'. [ 741.116150][T32715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7210'. [ 741.175010][ T29] audit: type=1804 audit(1778359727.886:37): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7211" name="/newroot/259/cgroup.controllers" dev="tmpfs" ino=1328 res=1 errno=0 [ 741.215884][T32718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7211'. [ 741.242584][ T29] audit: type=1800 audit(1778359727.886:38): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7211" name="cgroup.controllers" dev="tmpfs" ino=1328 res=0 errno=0 [ 741.326542][ T29] audit: type=1800 audit(1778359727.886:39): pid=32720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7211" name="cgroup.controllers" dev="tmpfs" ino=1328 res=0 errno=0 [ 741.365371][T32727] xt_hashlimit: size too large, truncated to 1048576 [ 741.443053][T32730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7213'. [ 741.466921][T32728] bridge_slave_0 (unregistering): left allmulticast mode [ 741.495992][T32732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.539151][T32728] bridge_slave_0 (unregistering): left promiscuous mode [ 741.583155][T32728] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.865606][T32742] syzkaller1: entered promiscuous mode [ 741.888921][T32742] syzkaller1: entered allmulticast mode [ 742.121116][T32759] netlink: 'syz.1.7219': attribute type 1 has an invalid length. [ 742.270715][T32759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 742.316820][T32762] vlan4: entered allmulticast mode [ 742.323056][T32762] bond5: entered allmulticast mode [ 742.816633][ T330] netlink: 'syz.1.7227': attribute type 11 has an invalid length. [ 742.849309][ T330] netlink: 'syz.1.7227': attribute type 11 has an invalid length. [ 742.870445][ T330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7227'. [ 742.925780][ T338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.326038][ T357] gre1: entered promiscuous mode [ 743.349285][ T357] batadv_slave_1: entered allmulticast mode [ 743.370785][ T357] pimreg: entered allmulticast mode [ 743.423596][ T357] bond0: entered promiscuous mode [ 743.431956][ T357] bond0: entered allmulticast mode [ 743.441429][ T357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.459936][ T367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7238'. [ 743.465746][ T357] batadv_slave_1: left allmulticast mode [ 743.511095][ T371] xfrm1: entered allmulticast mode [ 743.578892][ T379] netlink: 'syz.1.7241': attribute type 83 has an invalid length. [ 743.674963][ T379] tipc: Enabled bearer , priority 10 [ 743.725804][ T383] syzkaller1: entered promiscuous mode [ 743.740205][ T383] syzkaller1: entered allmulticast mode [ 743.908140][ T397] netlink: 'syz.1.7246': attribute type 29 has an invalid length. [ 743.942972][ T397] netlink: 'syz.1.7246': attribute type 29 has an invalid length. [ 743.977688][ T397] netlink: 264 bytes leftover after parsing attributes in process `syz.1.7246'. [ 744.075504][ T407] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 744.128084][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 744.234785][ T409] tipc: Enabling of bearer rejected, failed to enable media [ 744.277199][ T413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.366598][ T414] bridge4: entered promiscuous mode [ 744.395183][ T414] bridge4: entered allmulticast mode [ 744.446146][ T431] sctp: [Deprecated]: syz.4.7254 (pid 431) Use of int in max_burst socket option deprecated. [ 744.446146][ T431] Use struct sctp_assoc_value instead [ 744.542206][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7254'. [ 744.653483][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7254'. [ 744.682470][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7254'. [ 745.041639][ T456] netlink: 'syz.1.7258': attribute type 16 has an invalid length. [ 745.112575][ T456] netlink: 'syz.1.7258': attribute type 17 has an invalid length. [ 745.165951][ T456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.206546][ T482] netlink: 'syz.0.7266': attribute type 1 has an invalid length. [ 745.252705][ T456] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 745.346417][ T493] x_tables: duplicate underflow at hook 2 [ 745.361434][ T482] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 745.695070][ T510] netlink: 'syz.2.7272': attribute type 1 has an invalid length. [ 745.921194][ T514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 745.944427][ T514] bond4: (slave bond5): making interface the new active one [ 745.966471][ T514] bond4: (slave bond5): Enslaving as an active interface with an up link [ 746.054262][ T518] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 746.078719][ T527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.105061][ T531] __nla_validate_parse: 4 callbacks suppressed [ 746.105078][ T531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7278'. [ 746.158747][ T531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7278'. [ 746.181095][ T531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7278'. [ 746.251180][ T539] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7282'. [ 746.273849][ T536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7281'. [ 746.332513][ T543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7283'. [ 746.443926][ T551] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7286'. [ 746.492569][ T551] vlan2: entered allmulticast mode [ 746.501824][ T551] gretap0: entered allmulticast mode [ 746.674937][ T558] netlink: 'syz.4.7290': attribute type 3 has an invalid length. [ 747.020237][ T573] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7295'. [ 747.052126][ T573] syzkaller0: entered promiscuous mode [ 747.066421][ T573] syzkaller0: entered allmulticast mode [ 747.187382][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.270731][ T592] tipc: Enabled bearer , priority 0 [ 747.279675][ T594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7301'. [ 747.305045][ T596] block nbd2: Unsupported socket: should be TCP or UNIX. [ 747.411232][ T592] syzkaller0: entered promiscuous mode [ 747.422085][ T592] syzkaller0: entered allmulticast mode [ 747.431083][ T592] tipc: Resetting bearer [ 747.454279][ T602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7300'. [ 747.509217][ T591] tipc: Resetting bearer [ 750.059666][ T591] tipc: Disabling bearer [ 750.109837][ T596] syz.3.7302 (596) used greatest stack depth: 17944 bytes left [ 750.412037][ T647] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 750.825372][ T676] x_tables: duplicate underflow at hook 2 [ 751.181337][ T700] __nla_validate_parse: 10 callbacks suppressed [ 751.181354][ T700] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7329'. [ 751.516442][ T712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7331'. [ 751.836428][ T743] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7343'. [ 751.988346][ T748] netlink: 'syz.0.7345': attribute type 3 has an invalid length. [ 752.176455][ T767] netlink: 'syz.0.7351': attribute type 1 has an invalid length. [ 752.213615][ T767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 752.239493][ T767] bond2: (slave veth0_to_bond): making interface the new active one [ 752.256452][ T767] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 752.307380][ T767] bond2: entered promiscuous mode [ 752.313258][ T767] veth0_to_bond: entered promiscuous mode [ 752.319631][ T767] bond2: entered allmulticast mode [ 752.324829][ T767] veth0_to_bond: entered allmulticast mode [ 752.379176][ T778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.509311][ T783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7355'. [ 752.971759][ T806] bond6: entered promiscuous mode [ 753.251850][ T772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.258529][ T772] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 753.298427][ T772] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 753.304598][ T772] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 753.319994][ T827] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7367'. [ 753.332891][ T772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.336447][ T827] IPv6: addrconf: prefix option has invalid lifetime [ 753.344255][ T772] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 753.396642][ T772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.419662][ T772] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 753.644372][ T850] xt_CONNSECMARK: invalid mode: 0 [ 753.724374][ T851] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7374'. [ 754.015509][ T869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7379'. [ 754.015509][ T870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7379'. [ 754.088995][ T873] x_tables: unsorted underflow at hook 2 [ 754.199695][ T884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7384'. [ 754.723596][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.731322][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.794767][ T907] hsr0 speed is unknown, defaulting to 1000 [ 755.103244][ T910] syzkaller0: entered promiscuous mode [ 755.131188][ T910] syzkaller0: entered allmulticast mode [ 755.222554][ T958] netlink: 'syz.4.7395': attribute type 29 has an invalid length. [ 755.395420][ T975] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 755.414423][ T975] syzkaller1: Linktype set failed because interface is up [ 755.503076][ T981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7401'. [ 755.845051][ T1003] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20002 [ 755.865633][ T1003] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.890244][ T1009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.935771][ T1012] netlink: 'syz.2.7406': attribute type 58 has an invalid length. [ 755.953876][ T1016] TCP: TCP_TX_DELAY enabled [ 756.203961][ T1018] dvmrp0: entered allmulticast mode [ 756.304502][ T1040] __nla_validate_parse: 3 callbacks suppressed [ 756.304521][ T1040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7412'. [ 756.654628][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7419'. [ 756.692768][ T1072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7419'. [ 756.909553][ T1089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7424'. [ 757.095188][ T1096] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 757.119549][ T1105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7428'. [ 757.254303][ T1106] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7420'. [ 757.276358][ T1106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7420'. [ 757.332855][ T1118] netlink: 'syz.4.7432': attribute type 1 has an invalid length. [ 757.342395][ T1106] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 757.369066][ T1106] bond6 (unregistering): Released all slaves [ 757.485560][ T1118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 757.493807][ T1130] netlink: 'syz.3.7434': attribute type 83 has an invalid length. [ 757.511952][ T1121] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 757.521164][ T1121] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 757.547155][ T1123] vlan0: entered promiscuous mode [ 757.560265][ T1123] bond8: entered promiscuous mode [ 757.581365][ T1123] vlan0: entered allmulticast mode [ 757.609093][ T1123] bond8: entered allmulticast mode [ 757.847304][ T1141] netlink: 'syz.4.7437': attribute type 4 has an invalid length. [ 757.884824][ T1141] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7437'. [ 758.020205][ T1146] vxcan0: tx address claim with dlc 0 [ 758.144935][ T1153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7440'. [ 758.180261][ T1153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7440'. [ 758.273868][ T1153] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 758.392693][ T1153] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 758.482223][ T29] audit: type=1804 audit(1778359745.196:40): pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7445" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=800 res=1 errno=0 [ 758.509159][ T1164] 8021q: adding VLAN 0 to HW filter on device bond6 [ 758.528914][ T29] audit: type=1800 audit(1778359745.196:41): pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7445" name="cgroup.controllers" dev="tmpfs" ino=800 res=0 errno=0 [ 758.609295][ T1168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 758.644030][ T1168] bond6: (slave bond7): Enslaving as an active interface with an up link [ 758.698237][ T1175] bond6 (unregistering): (slave bond7): Releasing backup interface [ 758.739098][ T1175] bond6 (unregistering): Released all slaves [ 758.785913][ T1189] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 758.825788][ T1188] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 758.869725][ T1188] netlink: 'syz.2.7447': attribute type 83 has an invalid length. [ 759.250059][ T1217] wg2: entered allmulticast mode [ 759.265773][ T1219] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20001 [ 759.640867][ T1250] netlink: 'syz.0.7467': attribute type 10 has an invalid length. [ 759.658346][ T1250] veth1_virt_wifi: entered promiscuous mode [ 759.703983][ T1252] netlink: 'syz.4.7466': attribute type 1 has an invalid length. [ 759.741206][ T1252] netlink: 'syz.4.7466': attribute type 2 has an invalid length. [ 760.065057][ T1275] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 760.092871][ T1274] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 760.115205][ T1285] netlink: 'syz.0.7479': attribute type 4 has an invalid length. [ 760.169113][ T1291] netlink: 'syz.0.7479': attribute type 4 has an invalid length. [ 760.242437][ T1280] bond6: entered promiscuous mode [ 760.492513][ T1301] gtp0: entered promiscuous mode [ 760.518627][ T1301] gtp0: entered allmulticast mode [ 760.574620][ T1298] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 761.100748][ T1337] bond3 (unregistering): Released all slaves [ 761.178604][ T1342] netlink: 'syz.4.7486': attribute type 1 has an invalid length. [ 761.649499][ T1374] __nla_validate_parse: 12 callbacks suppressed [ 761.649517][ T1374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7494'. [ 762.068443][ T1380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 762.124038][ T1398] ipvlan0: entered allmulticast mode [ 762.131529][ T1398] veth0_vlan: entered allmulticast mode [ 762.488994][ T1419] can: request_module (can-proto-5) failed. [ 762.858843][ T1444] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.462763][ T1464] sctp: [Deprecated]: syz.3.7521 (pid 1464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 763.462763][ T1464] Use struct sctp_sack_info instead [ 763.555471][ T1444] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.628988][ T1444] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.729781][ T1444] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.751343][ T1473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7525'. [ 763.799613][ T1477] pimreg: entered allmulticast mode [ 764.012319][T11979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.106387][T11979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.231681][T15707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.231978][ T1504] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.307304][T15707] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.406398][ T1516] sctp: [Deprecated]: syz.3.7535 (pid 1516) Use of int in max_burst socket option deprecated. [ 764.406398][ T1516] Use struct sctp_assoc_value instead [ 764.476059][ T1516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7535'. [ 764.495705][ T1516] tipc: Invalid UDP bearer configuration [ 764.495764][ T1516] tipc: Enabling of bearer rejected, failed to enable media [ 764.800325][ T1519] syzkaller0: entered promiscuous mode [ 764.804379][ T1546] validate_nla: 2 callbacks suppressed [ 764.804396][ T1546] netlink: 'syz.0.7545': attribute type 21 has an invalid length. [ 764.809733][ T1519] syzkaller0: entered allmulticast mode [ 764.811738][ T1546] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7545'. [ 764.862344][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7544'. [ 764.895775][ T1543] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7543'. [ 764.905691][ T1549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7545'. [ 765.125151][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7548'. [ 765.156119][ T1560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7548'. [ 765.256496][ T1562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7549'. [ 765.784594][ T1591] netlink: 'syz.2.7556': attribute type 13 has an invalid length. [ 767.870095][ T1590] netlink: 'syz.2.7556': attribute type 2 has an invalid length. [ 767.971796][ T1595] geneve2: entered promiscuous mode [ 767.990031][T15707] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 54646 - 0 [ 768.025180][T15707] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 54646 - 0 [ 768.037353][T15707] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 54646 - 0 [ 768.070514][ T1600] mac80211_hwsim hwsim88 wlan1: Caught tx_queue_len zero misconfig [ 768.124019][T15707] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 54646 - 0 [ 768.292682][ T1619] __nla_validate_parse: 1 callbacks suppressed [ 768.292700][ T1619] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7563'. [ 768.351454][ T1625] netlink: 'syz.0.7567': attribute type 8 has an invalid length. [ 768.364532][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7567'. [ 768.400179][ T1623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 768.452346][ T1623] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 768.463824][ T1623] gretap3: entered promiscuous mode [ 768.476870][ T1623] gretap3: entered allmulticast mode [ 768.764792][ T1655] syzkaller0: entered promiscuous mode [ 768.821060][ T1655] syzkaller0: entered allmulticast mode [ 769.004298][ T1668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 769.033994][ T1668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7580'. [ 769.082644][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7582'. [ 769.726583][ T1713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7595'. [ 769.769203][ T1713] netlink: 'syz.2.7595': attribute type 21 has an invalid length. [ 769.786391][ T1713] netlink: 'syz.2.7595': attribute type 6 has an invalid length. [ 769.813099][ T1713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7595'. [ 769.848344][ T1720] netlink: 'syz.4.7597': attribute type 1 has an invalid length. [ 769.976058][ T1720] bond9: (slave bridge9): Enslaving as a backup interface with an up link [ 770.096532][ T1720] macvlan2: entered promiscuous mode [ 770.105135][ T1720] macvlan2: entered allmulticast mode [ 770.114697][ T1720] bond9: entered promiscuous mode [ 770.127952][ T1720] bridge9: entered promiscuous mode [ 770.142323][ T1720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 770.182079][ T1720] bond9: left promiscuous mode [ 770.207517][ T1720] bridge9: left promiscuous mode [ 770.413621][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7607'. [ 770.454142][ T1759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7607'. [ 770.568351][ T1766] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7610'. [ 770.678657][ T1773] netlink: 'syz.2.7611': attribute type 1 has an invalid length. [ 770.693252][ T1773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.903379][ T1789] nbd: must specify an index to disconnect [ 771.269341][ T1807] sctp: [Deprecated]: syz.1.7627 (pid 1807) Use of int in max_burst socket option deprecated. [ 771.269341][ T1807] Use struct sctp_assoc_value instead [ 771.524717][ T1815] veth7: entered promiscuous mode [ 771.768054][ T1827] wireguard0: entered promiscuous mode [ 771.783626][ T1827] wireguard0: entered allmulticast mode [ 772.843124][ T1889] tipc: Enabling of bearer rejected, media not registered [ 772.872779][ T1891] bridge0: port 3(dummy0) entered disabled state [ 772.879424][ T1891] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.886807][ T1891] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.954727][ T1892] IPv6: sit1: Disabled Multicast RS [ 772.961411][ T1892] sit1: entered allmulticast mode [ 772.991351][ T1891] bridge0: port 3(dummy0) entered blocking state [ 772.997895][ T1891] bridge0: port 3(dummy0) entered forwarding state [ 773.005639][ T1891] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.012807][ T1891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.021611][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.028807][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.043760][ T1891] bridge0: port 3(dummy0) entered disabled state [ 773.050312][ T1891] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.057545][ T1891] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.439972][ T1926] __nla_validate_parse: 17 callbacks suppressed [ 773.439992][ T1926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7664'. [ 773.498517][ T1926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7664'. [ 773.505875][ T1929] pim6reg: entered allmulticast mode [ 773.583708][ T1935] netlink: 'syz.4.7668': attribute type 8 has an invalid length. [ 773.601752][ T1931] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 773.631534][ T1931] bond2 (unregistering): Released all slaves [ 773.810995][ T1932] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 773.872157][ T1932] bond2 (unregistering): Released all slaves [ 773.899911][ T1959] netlink: 'syz.1.7671': attribute type 1 has an invalid length. [ 773.923114][ T1962] xt_ecn: cannot match TCP bits for non-tcp packets [ 774.133129][ T1974] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7676'. [ 774.140242][ T1965] macvlan3: entered promiscuous mode [ 774.164711][ T1965] macvlan3: entered allmulticast mode [ 774.186228][ T1965] bond8: entered promiscuous mode [ 774.197709][ T1965] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 774.214750][ T1965] bond8: left promiscuous mode [ 774.252353][ T1960] macvlan3: entered promiscuous mode [ 774.258688][ T1960] macvlan3: entered allmulticast mode [ 774.265028][ T1960] bond8: entered promiscuous mode [ 774.272452][ T1960] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 774.280666][ T1960] bond8: left promiscuous mode [ 774.623826][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7682'. [ 774.634036][ T2006] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7684'. [ 774.646336][ T2001] netlink: 'syz.1.7682': attribute type 21 has an invalid length. [ 774.680020][ T2001] netlink: 'syz.1.7682': attribute type 22 has an invalid length. [ 774.693107][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7686'. [ 774.713854][ T2001] netlink: 'syz.1.7682': attribute type 23 has an invalid length. [ 774.745646][ T2017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7682'. [ 774.763072][ T2001] netlink: 'syz.1.7682': attribute type 25 has an invalid length. [ 774.804103][ T2001] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7682'. [ 774.824413][ T2021] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 774.834893][ T2017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7682'. [ 775.013059][ T2030] netlink: 'syz.4.7692': attribute type 3 has an invalid length. [ 775.024191][ T2031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7693'. [ 775.070309][ T2032] netlink: 'syz.3.7691': attribute type 2 has an invalid length. [ 775.108573][ T2036] x_tables: duplicate underflow at hook 4 [ 775.231058][ T2047] netlink: 'syz.1.7697': attribute type 49 has an invalid length. [ 775.239072][ T2048] ipvlan1: Caught tx_queue_len zero misconfig [ 775.418512][ T2047] ip6gretap0: entered promiscuous mode [ 775.425387][ T2047] ip6gretap0: entered allmulticast mode [ 775.459737][ T2055] netlink: 'syz.4.7702': attribute type 1 has an invalid length. [ 775.720635][ T2079] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 776.539887][ T2129] netlink: 'syz.3.7718': attribute type 83 has an invalid length. [ 776.780210][ T2145] openvswitch: netlink: IP tunnel dst address not specified [ 776.796686][ T2147] netlink: 'syz.4.7724': attribute type 14 has an invalid length. [ 776.861974][T15704] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 776.871124][ T2147] netlink: 'syz.4.7724': attribute type 14 has an invalid length. [ 776.891646][T15704] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.923964][T15704] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.953089][T15704] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.363302][ T2174] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.585365][ T2188] netlink: 'syz.2.7734': attribute type 1 has an invalid length. [ 777.777463][ T2188] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.477422][ T2220] netlink: 'syz.1.7744': attribute type 83 has an invalid length. [ 778.493892][ T2222] __nla_validate_parse: 12 callbacks suppressed [ 778.493911][ T2222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7745'. [ 778.586511][ T2224] syzkaller0: entered promiscuous mode [ 778.606021][ T2224] syzkaller0: entered allmulticast mode [ 778.681908][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7747'. [ 778.898245][ T2235] syzkaller0: entered promiscuous mode [ 778.903933][ T2235] syzkaller0: entered allmulticast mode [ 778.989960][ T2241] netlink: 4104 bytes leftover after parsing attributes in process `syz.4.7750'. [ 779.016815][ T2241] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 779.058363][ T2248] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 781.367810][ T2237] syzkaller1: entered promiscuous mode [ 781.373335][ T2237] syzkaller1: entered allmulticast mode [ 781.523740][ T2269] netlink: 'syz.0.7758': attribute type 39 has an invalid length. [ 781.533405][ T2271] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7757'. [ 781.711870][ T2273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.765405][ T2286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7763'. [ 781.775488][ T2286] netlink: 'syz.1.7763': attribute type 1 has an invalid length. [ 781.933458][ T2293] --map-set only usable from mangle table [ 781.961924][ T2299] netlink: 'syz.1.7767': attribute type 1 has an invalid length. [ 781.999220][ T2299] 8021q: adding VLAN 0 to HW filter on device bond10 [ 782.019840][ T2299] vlan5: entered allmulticast mode [ 782.025002][ T2299] veth0_to_bond: entered allmulticast mode [ 782.037247][ T2299] bond10: (slave vlan5): making interface the new active one [ 782.046159][ T2299] bond10: (slave vlan5): Enslaving as an active interface with an up link [ 782.192491][ T2317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7770'. [ 782.287880][ T2324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7773'. [ 782.546424][ T2335] team0: Device gtp1 is up. Set it down before adding it as a team port [ 782.661357][ T2349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7780'. [ 782.849434][ T2357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7782'. [ 782.987202][ T2374] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 783.158084][ T2383] lo: entered allmulticast mode [ 783.174424][ T2380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7789'. [ 783.216634][ T2388] siw: device registration error -23 [ 783.231637][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.323322][ T2395] netlink: 'syz.2.7793': attribute type 11 has an invalid length. [ 783.340430][ T2390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.406159][ T2388] bridge0: entered promiscuous mode [ 783.414290][ T2388] bridge0: entered allmulticast mode [ 783.431014][ T2400] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 783.436008][ T2403] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 783.549715][ T2408] netlink: 'syz.2.7797': attribute type 1 has an invalid length. [ 783.558480][ T2408] __nla_validate_parse: 2 callbacks suppressed [ 783.558765][ T2408] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7797'. [ 783.670172][ T2413] netlink: 'syz.3.7799': attribute type 14 has an invalid length. [ 783.721365][ T2413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7799'. [ 783.900993][ T2422] netlink: 'syz.0.7802': attribute type 21 has an invalid length. [ 783.909692][ T2422] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7802'. [ 783.919166][ T2422] netlink: 'syz.0.7802': attribute type 5 has an invalid length. [ 783.931753][ T29] audit: type=1800 audit(1778359770.636:42): pid=2424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7803" name="memory.events" dev="tmpfs" ino=1143 res=0 errno=0 [ 783.958124][ T2422] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7802'. [ 783.961645][ T2424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7803'. [ 784.088623][ T2436] netlink: 'syz.0.7805': attribute type 1 has an invalid length. [ 784.118037][ T2436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.174316][ T2445] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 784.192654][ T2445] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.7806'. [ 784.224066][ T2443] netlink: 'syz.2.7808': attribute type 1 has an invalid length. [ 784.229259][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7809'. [ 784.240922][ T2443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7808'. [ 784.282586][ T2451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7809'. [ 784.365239][ T2457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7811'. [ 784.798593][ T2492] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 784.999396][ T2505] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 785.017531][ T5755] syzkaller1: tun_net_xmit 90 [ 785.021117][ T2505] syzkaller1: Linktype set failed because interface is up [ 785.059610][ T2507] bridge_slave_0: left allmulticast mode [ 785.071493][ T2507] bridge_slave_0: left promiscuous mode [ 785.079827][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.096791][ T2507] bridge_slave_1: left allmulticast mode [ 785.129953][ T2507] bridge_slave_1: left promiscuous mode [ 785.185861][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.222922][ T2507] bond0: (slave bond_slave_0): Releasing backup interface [ 785.240922][ T2507] bond_slave_0: left promiscuous mode [ 785.259901][ T2507] bond0: (slave bond_slave_1): Releasing backup interface [ 785.271474][ T2507] bond_slave_1: left promiscuous mode [ 785.406623][ T2507] team0: Port device team_slave_0 removed [ 785.429334][ T2507] team0: Port device team_slave_1 removed [ 785.443390][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.452550][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.461376][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.469425][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.478363][ T2507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 786.158605][ T2563] ip6tnl0: Caught tx_queue_len zero misconfig [ 786.204087][ T2563] veth7: entered promiscuous mode [ 786.378160][ T2588] xt_cluster: node mask cannot exceed total number of nodes [ 786.714153][ T2611] validate_nla: 2 callbacks suppressed [ 786.714173][ T2611] netlink: 'syz.1.7845': attribute type 1 has an invalid length. [ 786.886140][ T2611] 8021q: adding VLAN 0 to HW filter on device bond11 [ 787.299590][ T2662] hsr0 speed is unknown, defaulting to 1000 [ 788.050860][ T2714] syzkaller0: entered promiscuous mode [ 788.065734][ T2714] syzkaller0: entered allmulticast mode [ 788.351371][ T2735] netlink: 'syz.2.7871': attribute type 11 has an invalid length. [ 788.413180][ T2741] netlink: 'syz.3.7872': attribute type 1 has an invalid length. [ 788.582320][ T2762] netlink: 'syz.1.7878': attribute type 1 has an invalid length. [ 788.617409][ T2762] 8021q: adding VLAN 0 to HW filter on device bond12 [ 788.668022][ T2762] bond12: (slave veth11): Enslaving as an active interface with a down link [ 788.680630][ T2762] __nla_validate_parse: 14 callbacks suppressed [ 788.680646][ T2762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7878'. [ 788.710394][ T2767] Bluetooth: MGMT ver 1.23 [ 788.755851][ T2762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7878'. [ 788.913308][ T2778] lo speed is unknown, defaulting to 1000 [ 788.930529][ T2779] siw: device registration error -23 [ 788.951296][ T2778] lo speed is unknown, defaulting to 1000 [ 788.961920][ T2778] lo speed is unknown, defaulting to 1000 [ 788.980740][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7884'. [ 788.996565][ T2778] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 789.023160][ T2789] syzkaller0: entered promiscuous mode [ 789.030862][ T2791] netlink: 'syz.3.7884': attribute type 1 has an invalid length. [ 789.030996][ T2789] syzkaller0: entered allmulticast mode [ 789.048741][ T2791] netlink: 'syz.3.7884': attribute type 3 has an invalid length. [ 789.048921][ T2778] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 789.064449][ T2791] netlink: 'syz.3.7884': attribute type 7 has an invalid length. [ 789.121107][ T2791] netlink: 'syz.3.7884': attribute type 8 has an invalid length. [ 789.138155][ T2791] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7884'. [ 789.150106][ T2778] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 789.160286][ T2791] NCSI netlink: No device for ifindex 131092 [ 789.198653][ T2778] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 789.213650][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7886'. [ 789.247194][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7884'. [ 789.303090][ T2778] lo speed is unknown, defaulting to 1000 [ 789.341574][ T2778] lo speed is unknown, defaulting to 1000 [ 789.368266][ T2809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7887'. [ 789.380925][ T2778] lo speed is unknown, defaulting to 1000 [ 789.402039][ T2778] lo speed is unknown, defaulting to 1000 [ 789.421084][ T2778] lo speed is unknown, defaulting to 1000 [ 789.471447][ T2778] lo speed is unknown, defaulting to 1000 [ 789.479969][ T2778] lo speed is unknown, defaulting to 1000 [ 789.497867][ T2778] lo speed is unknown, defaulting to 1000 [ 789.521974][ T2778] lo speed is unknown, defaulting to 1000 [ 789.543557][ T2778] lo speed is unknown, defaulting to 1000 [ 789.561307][ T2778] lo speed is unknown, defaulting to 1000 [ 789.581031][ T2778] lo speed is unknown, defaulting to 1000 [ 789.744779][ T2843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 789.819138][ T2846] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7895'. [ 790.017568][ T2859] netlink: 'syz.3.7896': attribute type 1 has an invalid length. [ 790.046335][ T2859] netlink: 'syz.3.7896': attribute type 7 has an invalid length. [ 790.090851][ T2859] netlink: 'syz.3.7896': attribute type 8 has an invalid length. [ 790.122698][ T2865] lo: Caught tx_queue_len zero misconfig [ 790.127951][ T2859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7896'. [ 793.107273][ T2913] mac80211_hwsim hwsim88 syzkaller0: left promiscuous mode [ 793.114591][ T2913] mac80211_hwsim hwsim88 syzkaller0: left allmulticast mode [ 793.206022][ T2915] hsr0 speed is unknown, defaulting to 1000 [ 793.240727][ T2915] lo speed is unknown, defaulting to 1000 [ 793.248105][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 794.101956][ T2984] xt_TCPMSS: Only works on TCP SYN packets [ 794.117506][ T2982] xt_hashlimit: size too large, truncated to 1048576 [ 794.122691][ T2984] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 794.605778][ T3014] __nla_validate_parse: 4 callbacks suppressed [ 794.605799][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7930'. [ 794.860437][ T3033] netlink: 'syz.0.7936': attribute type 4 has an invalid length. [ 794.874100][ T3036] netlink: 'syz.2.7937': attribute type 3 has an invalid length. [ 794.883187][ T3033] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7936'. [ 794.890163][ T3038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7939'. [ 794.930507][ T3038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7939'. [ 794.985381][ T3045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7941'. [ 795.035627][ T3046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7940'. [ 795.073343][ T3042] netlink: 'syz.2.7940': attribute type 11 has an invalid length. [ 795.099416][ T3042] netlink: 'syz.2.7940': attribute type 5 has an invalid length. [ 795.121068][ T3042] netlink: 6548 bytes leftover after parsing attributes in process `syz.2.7940'. [ 795.138639][ T3052] netlink: 'syz.3.7943': attribute type 11 has an invalid length. [ 795.155962][ T3052] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.7943'. [ 795.471418][ T3081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7952'. [ 795.748563][ T3094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7956'. [ 795.971357][ T3112] xt_hashlimit: size too large, truncated to 1048576 [ 795.990505][ T3109] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 796.010267][ T3109] bond9: (slave lo): Enslaving as an active interface with an up link [ 796.029952][ T3109] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 796.058368][ T1221] lo speed is unknown, defaulting to 1000 [ 796.064214][ T10] lo speed is unknown, defaulting to 1000 [ 796.070141][ T9] lo speed is unknown, defaulting to 1000 [ 796.076302][ T3115] : renamed from vxcan1 (while UP) [ 796.241652][ T3125] netlink: 'syz.4.7968': attribute type 1 has an invalid length. [ 796.245079][ T3126] IPv6: NLM_F_REPLACE set, but no existing node found! [ 796.470179][ T3136] netlink: 'syz.2.7973': attribute type 18 has an invalid length. [ 796.666543][ T3148] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 796.685957][ T3148] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 796.756157][ T3148] netem: change failed [ 797.656945][ T3215] netlink: 'syz.0.7995': attribute type 3 has an invalid length. [ 797.680909][ T3222] openvswitch: netlink: Missing key (keys=40, expected=80) [ 797.730888][T15704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.741660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.869075][ T3224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.880403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.028998][ T3245] xt_hashlimit: size too large, truncated to 1048576 [ 798.069621][ T3246] syzkaller0: entered promiscuous mode [ 798.097415][ T3246] syzkaller0: entered allmulticast mode [ 798.803536][ T3286] netlink: 'syz.2.8012': attribute type 49 has an invalid length. [ 799.040376][ T3307] netlink: 'syz.0.8018': attribute type 1 has an invalid length. [ 799.097853][ T3307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.384448][ T3332] netlink: 'syz.2.8027': attribute type 1 has an invalid length. [ 799.505437][ T3332] 8021q: adding VLAN 0 to HW filter on device bond10 [ 799.532258][ T3344] xt_hashlimit: max too large, truncated to 1048576 [ 799.742554][ T3349] xfrm1: entered allmulticast mode [ 799.933677][ T3361] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 799.959267][ T3360] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 800.002211][ T3372] openvswitch: netlink: Message has 8 unknown bytes. [ 800.018259][ T3372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.111116][ T3372] __nla_validate_parse: 18 callbacks suppressed [ 800.111135][ T3372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8037'. [ 800.151907][ T3372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8037'. [ 800.163859][ T3382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8037'. [ 800.354109][ T3396] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 800.504500][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.535474][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.560424][ T3412] netlink: 'syz.0.8051': attribute type 1 has an invalid length. [ 800.565651][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.569290][ T3412] netlink: 'syz.0.8051': attribute type 2 has an invalid length. [ 800.588604][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.605025][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.614512][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.623390][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.655682][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.704486][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.720880][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.729350][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.737521][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.745129][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.753743][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.761744][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.770075][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.775199][ T3419] netlink: 'syz.0.8054': attribute type 1 has an invalid length. [ 800.777722][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777753][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777778][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777802][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777826][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777850][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777874][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777897][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777921][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777944][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777968][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.777991][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.778014][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.778037][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.778062][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.778085][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.778109][ T3406] IPVS: set_ctl: invalid protocol: 11751 159.62.120.45:51901 [ 800.812844][ T3417] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8053'. [ 800.981553][ T3423] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8055'. [ 801.022756][ T3419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8054'. [ 801.083013][ T3419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.395121][ T3449] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.8061'. [ 801.957300][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8065'. [ 801.966693][ T3462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8064'. [ 801.978643][ T3461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8064'. [ 802.014513][ T3472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.025039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.380631][ T3483] bond13: option mode: invalid value (133) [ 802.388824][ T3483] bond13 (unregistering): Released all slaves [ 802.396033][ T3489] netlink: 'syz.3.8070': attribute type 1 has an invalid length. [ 802.447546][ T3488] netlink: 'syz.1.8071': attribute type 14 has an invalid length. [ 802.958955][ T3522] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 803.116165][ T3536] netlink: 'syz.1.8085': attribute type 5 has an invalid length. [ 803.378575][ T3552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 803.492111][T15707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.501068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.590173][ T3566] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 804.054530][ T3597] netlink: 'syz.0.8101': attribute type 1 has an invalid length. [ 804.101222][ T3594] bond11: option fail_over_mac: invalid value (16) [ 804.146088][ T3594] bond11 (unregistering): Released all slaves [ 804.293044][ T3597] bond4: entered promiscuous mode [ 804.308635][ T3597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.332510][ T3599] bond4: entered allmulticast mode [ 804.403981][ T3606] bond4: (slave bridge2): making interface the new active one [ 804.426946][ T3606] bridge2: entered promiscuous mode [ 804.447702][ T3606] bridge2: entered allmulticast mode [ 804.458241][ T3606] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 804.514641][ T3609] : renamed from virt_wifi0 [ 804.673736][ T3611] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 805.166538][ T3640] openvswitch: netlink: EtherType 50a is less than min 600 [ 805.379781][ T3659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.596088][ T3675] __nla_validate_parse: 11 callbacks suppressed [ 805.596108][ T3675] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8122'. [ 805.752052][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8124'. [ 805.905416][ T3688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.924017][ T3685] openvswitch: netlink: Message has 4 unknown bytes. [ 805.931882][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8125'. [ 805.951062][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8125'. [ 805.970776][ T3681] netlink: 'syz.2.8125': attribute type 12 has an invalid length. [ 805.980718][ T3681] netlink: 'syz.2.8125': attribute type 11 has an invalid length. [ 806.136020][ T3695] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8129'. [ 806.413007][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8134'. [ 806.439147][ T3710] tipc: Enabled bearer , priority 0 [ 806.463517][ T3710] syzkaller0: entered promiscuous mode [ 806.481341][ T3710] syzkaller0: entered allmulticast mode [ 806.514845][ T3710] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 806.567414][ T3710] tipc: Resetting bearer [ 806.724168][ T3721] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8138'. [ 806.746518][ T3721] netem: incorrect gi model size [ 806.752885][ T3724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8140'. [ 806.760860][ T3721] netem: change failed [ 806.795911][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8138'. [ 806.816102][ T3725] netlink: 'syz.3.8139': attribute type 1 has an invalid length. [ 806.992953][ T3734] bridge0: port 3(dummy0) entered blocking state [ 806.999500][ T3734] bridge0: port 3(dummy0) entered forwarding state [ 807.006372][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.013575][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.021069][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.028269][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.086066][ T3734] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 807.141032][ T3735] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 807.162359][ T3701] tipc: Resetting bearer [ 807.172707][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8142'. [ 807.232811][ T3701] tipc: Disabling bearer [ 807.626578][ T3760] netlink: 'syz.1.8152': attribute type 1 has an invalid length. [ 807.759199][ T3760] 8021q: adding VLAN 0 to HW filter on device bond13 [ 807.883517][ T3765] veth13: entered allmulticast mode [ 807.915085][ T3765] bond13: (slave veth13): Enslaving as an active interface with a down link [ 807.958560][ T3768] bond13 (unregistering): (slave veth13): Releasing active interface [ 807.993490][ T3768] bond13 (unregistering): Released all slaves [ 808.474828][ T3791] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 809.374058][ T3856] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0 [ 809.634159][ T3875] sctp: [Deprecated]: syz.4.8184 (pid 3875) Use of int in maxseg socket option. [ 809.634159][ T3875] Use struct sctp_assoc_value instead [ 809.668143][ T3875] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 809.903202][ T3894] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 809.928205][ T3894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.000818][ T3900] netem: change failed [ 810.478234][ T3927] bond11: entered promiscuous mode [ 810.486468][ T3926] syzkaller1: entered promiscuous mode [ 810.502221][ T3926] syzkaller1: entered allmulticast mode [ 810.722710][ T3938] __nla_validate_parse: 12 callbacks suppressed [ 810.722729][ T3938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8203'. [ 810.750500][ T3940] tipc: Enabled bearer , priority 0 [ 810.768256][ T3942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8203'. [ 810.840002][ T3940] syzkaller0: entered promiscuous mode [ 810.845979][ T3940] syzkaller0: entered allmulticast mode [ 810.861980][ T3940] tipc: Resetting bearer [ 810.882598][ T3946] bridge2: entered promiscuous mode [ 810.891708][ T3946] bridge2: entered allmulticast mode [ 810.900824][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8206'. [ 810.934974][ T3939] tipc: Resetting bearer [ 811.015035][ T3958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8209'. [ 811.103417][ T3966] syz.3.8208: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 811.118936][ T3966] CPU: 1 UID: 0 PID: 3966 Comm: syz.3.8208 Not tainted syzkaller #0 PREEMPT(full) [ 811.118980][ T3966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.119010][ T3966] Call Trace: [ 811.119022][ T3966] [ 811.119032][ T3966] dump_stack_lvl+0xe8/0x150 [ 811.119060][ T3966] warn_alloc+0x249/0x340 [ 811.119091][ T3966] ? stack_trace_save+0xa9/0x100 [ 811.119126][ T3966] ? __pfx_warn_alloc+0x10/0x10 [ 811.119163][ T3966] ? kasan_save_track+0x4f/0x80 [ 811.119188][ T3966] ? kasan_save_track+0x3e/0x80 [ 811.119213][ T3966] ? __kasan_kmalloc+0x93/0xb0 [ 811.119240][ T3966] ? __kmalloc_cache_noprof+0x31c/0x660 [ 811.119268][ T3966] ? xskq_create+0x56/0x170 [ 811.119292][ T3966] ? xsk_setsockopt+0x54c/0x990 [ 811.119313][ T3966] ? do_sock_setsockopt+0x17c/0x1b0 [ 811.119340][ T3966] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 811.119366][ T3966] ? do_syscall_64+0x15f/0xf80 [ 811.119398][ T3966] __vmalloc_node_range_noprof+0x132/0x1750 [ 811.119461][ T3966] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 811.119497][ T3966] ? __kasan_kmalloc+0x93/0xb0 [ 811.119546][ T3966] vmalloc_user_noprof+0xad/0xe0 [ 811.119571][ T3966] ? xskq_create+0xbf/0x170 [ 811.119595][ T3966] xskq_create+0xbf/0x170 [ 811.119621][ T3966] xsk_init_queue+0x8a/0xe0 [ 811.119650][ T3966] xsk_setsockopt+0x54c/0x990 [ 811.119675][ T3966] ? __pfx_xsk_setsockopt+0x10/0x10 [ 811.119696][ T3966] ? __pfx_aa_sk_perm+0x10/0x10 [ 811.119723][ T3966] ? aa_sock_opt_perm+0xff/0x1a0 [ 811.119750][ T3966] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 811.119783][ T3966] ? __pfx_xsk_setsockopt+0x10/0x10 [ 811.119805][ T3966] do_sock_setsockopt+0x17c/0x1b0 [ 811.119835][ T3966] __x64_sys_setsockopt+0x13d/0x1b0 [ 811.119862][ T3966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.119883][ T3966] do_syscall_64+0x15f/0xf80 [ 811.119909][ T3966] ? trace_irq_disable+0x3b/0x140 [ 811.119936][ T3966] ? clear_bhb_loop+0x40/0x90 [ 811.119961][ T3966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.119978][ T3966] RIP: 0033:0x7f466419cdd9 [ 811.119997][ T3966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.120015][ T3966] RSP: 002b:00007f46650bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 811.120036][ T3966] RAX: ffffffffffffffda RBX: 00007f4664416180 RCX: 00007f466419cdd9 [ 811.120051][ T3966] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 811.120062][ T3966] RBP: 00007f4664232d69 R08: 0000000000000004 R09: 0000000000000000 [ 811.120075][ T3966] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.120087][ T3966] R13: 00007f4664416218 R14: 00007f4664416180 R15: 00007fff726ef228 [ 811.120119][ T3966] [ 811.120231][ T3966] Mem-Info: [ 811.395305][ T3966] active_anon:6124 inactive_anon:0 isolated_anon:0 [ 811.395305][ T3966] active_file:2759 inactive_file:40583 isolated_file:0 [ 811.395305][ T3966] unevictable:768 dirty:84 writeback:0 [ 811.395305][ T3966] slab_reclaimable:13795 slab_unreclaimable:146794 [ 811.395305][ T3966] mapped:29393 shmem:1323 pagetables:1454 [ 811.395305][ T3966] sec_pagetables:0 bounce:0 [ 811.395305][ T3966] kernel_misc_reclaimable:0 [ 811.395305][ T3966] free:1251314 free_pcp:23768 free_cma:0 [ 811.473282][ T3966] Node 0 active_anon:24496kB inactive_anon:0kB active_file:11036kB inactive_file:162124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68420kB dirty:336kB writeback:0kB shmem:3756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18884kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 811.510382][ T3966] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 811.543822][ T3966] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.576391][ T3966] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 811.589277][ T3966] Node 0 DMA32 free:1213932kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24496kB inactive_anon:0kB active_file:11036kB inactive_file:162124kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2552628kB mlocked:0kB bounce:0kB free_pcp:38436kB local_pcp:22444kB free_cma:0kB [ 811.624373][ T3966] lowmem_reserve[]: 0 0 0 0 0 [ 811.629196][ T3966] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 811.660669][ T3966] lowmem_reserve[]: 0 0 0 0 0 [ 811.665458][ T3966] Node 1 Normal free:3780060kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57100kB local_pcp:28708kB free_cma:0kB [ 811.699423][ T3966] lowmem_reserve[]: 0 0 0 0 0 [ 811.704211][ T3966] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 811.717027][ T3966] Node 0 DMA32: 10677*4kB (UM) 8423*8kB (UME) 4430*16kB (UME) 9*32kB (UME) 25*64kB (UM) 523*128kB (UM) 866*256kB (UE) 452*512kB (UE) 289*1024kB (UM) 105*2048kB (UM) 0*4096kB = 1213900kB [ 811.735857][ T3966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 811.747835][ T3966] Node 1 Normal: 8*4kB (UM) 10*8kB (UM) 16*16kB (UM) 5*32kB (UM) 12*64kB (UM) 10*128kB (UM) 10*256kB (UM) 11*512kB (UM) 5*1024kB (UM) 6*2048kB (U) 916*4096kB (UM) = 3780112kB [ 811.765675][ T3966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 811.775348][ T3966] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 811.784778][ T3966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 811.794417][ T3966] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 811.804185][ T3966] 44661 total pagecache pages [ 811.808952][ T3966] 0 pages in swap cache [ 811.813108][ T3966] Free swap = 124996kB [ 811.820774][ T3966] Total swap = 124996kB [ 811.826169][ T3966] 2097051 pages RAM [ 811.830636][ T3966] 0 pages HighMem/MovableOnly [ 811.835358][ T3966] 427111 pages reserved [ 811.839760][ T3966] 0 pages cma reserved [ 813.774854][ T3939] tipc: Disabling bearer [ 813.884199][ T3970] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 813.947663][ T3970] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8210'. [ 814.013052][ T3977] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8215'. [ 814.065632][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8210'. [ 814.132093][ T3990] tc_dump_action: action bad kind [ 814.483424][ T3999] syzkaller0: entered promiscuous mode [ 814.497738][ T3999] syzkaller0: entered allmulticast mode [ 814.589552][ T4021] x_tables: duplicate underflow at hook 2 [ 817.111768][ T4025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8224'. [ 817.122666][ T4025] bridge: RTM_NEWNEIGH with invalid ether address [ 817.132293][ T4026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8224'. [ 817.145069][ T4026] bridge: RTM_NEWNEIGH with invalid ether address [ 817.190834][ T4061] netlink: 'syz.2.8233': attribute type 1 has an invalid length. [ 817.295820][ T4061] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 817.481097][ T4087] netlink: 'syz.0.8238': attribute type 10 has an invalid length. [ 817.511601][ T4087] veth1_virt_wifi: left promiscuous mode [ 817.544655][ T4090] netlink: 'syz.1.8240': attribute type 11 has an invalid length. [ 817.582782][ T4093] xt_hashlimit: invalid rate [ 817.603577][ T4093] openvswitch: netlink: Flow actions attr not present in new flow. [ 817.615220][ T4094] syzkaller0: entered promiscuous mode [ 817.627124][ T4094] syzkaller0: entered allmulticast mode [ 817.853444][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8246'. [ 818.124257][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8250'. [ 818.387745][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8251'. [ 818.456071][ T4140] ip6gre2: entered allmulticast mode [ 818.489771][ T4140] team0: Port device ip6gre2 added [ 819.118524][ T4169] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8259'. [ 819.163029][ T4175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8262'. [ 819.238799][ T1028] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 819.446125][ T4189] syzkaller1: entered promiscuous mode [ 819.554686][ T4201] mac80211_hwsim hwsim102 wlan1: entered allmulticast mode [ 819.756538][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8272'. [ 819.782537][ T4212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8272'. [ 819.993404][ T4229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8277'. [ 820.123651][ T4235] tunl0: left promiscuous mode [ 820.144005][ T4235] h: left promiscuous mode [ 820.151357][ T4235] mac80211_hwsim hwsim88 syzkaller0: left promiscuous mode [ 820.160178][ T4235] mac80211_hwsim hwsim88 syzkaller0: left allmulticast mode [ 820.175910][ T4235] ipvlan2: left promiscuous mode [ 820.182627][ T4235] vlan2: left allmulticast mode [ 820.190323][ T4235] bond5: left allmulticast mode [ 820.196010][ T4235] geneve3: left allmulticast mode [ 820.204937][ T4235] gretap2: left promiscuous mode [ 820.224141][ T4235] gretap2: left allmulticast mode [ 820.249263][ T4235] vlan0: left promiscuous mode [ 820.275001][ T4235] bond8: left promiscuous mode [ 820.294876][ T4235] vlan0: left allmulticast mode [ 820.306811][ T4235] bond8: left allmulticast mode [ 820.322289][ T4235] xfrm1: left allmulticast mode [ 820.458805][ T4265] netlink: 'syz.0.8287': attribute type 2 has an invalid length. [ 820.474470][ T4265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.488913][ T4265] netlink: 'syz.0.8287': attribute type 39 has an invalid length. [ 820.500822][ T4265] hsr_slave_0: left promiscuous mode [ 820.513088][ T4265] hsr_slave_1: left promiscuous mode [ 820.574336][ T4276] openvswitch: netlink: Duplicate key (type 2). [ 820.830509][ T4287] netlink: 'syz.0.8292': attribute type 1 has an invalid length. [ 823.141770][ T4246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.444801][ T4301] netlink: 'syz.1.8298': attribute type 1 has an invalid length. [ 823.479499][ T4301] __nla_validate_parse: 6 callbacks suppressed [ 823.479515][ T4301] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8298'. [ 823.580052][ T4309] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8299'. [ 823.652351][ T4309] bond3 (unregistering): Released all slaves [ 823.662287][ T4321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8300'. [ 823.733656][ T4323] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.8303'. [ 823.755777][ T4323] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.8303'. [ 823.865480][ T4326] netlink: 'syz.0.8302': attribute type 10 has an invalid length. [ 823.879132][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8305'. [ 823.927347][ T4334] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8305'. [ 823.946193][ T4335] veth0: entered promiscuous mode [ 824.009765][ T4334] veth0: left promiscuous mode [ 824.598729][ T4383] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8319'. [ 824.874752][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8326'. [ 824.946294][ T4404] netlink: 'syz.3.8327': attribute type 4 has an invalid length. [ 824.960807][ T4404] netlink: 'syz.3.8327': attribute type 4 has an invalid length. [ 825.063017][ T4416] netlink: 'syz.3.8330': attribute type 1 has an invalid length. [ 825.131094][ T4416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 825.140726][ T4416] bond3: (slave bond4): making interface the new active one [ 825.149337][ T4416] bond3: (slave bond4): Enslaving as an active interface with an up link [ 825.174853][ T4416] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 825.424697][ T4429] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 825.500213][ T4434] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8334'. [ 825.663717][T11976] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.677103][T15706] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.685362][T15706] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.699270][T15706] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.774117][ T4393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 827.955075][ T4445] Bluetooth: MGMT ver 1.23 [ 827.964325][ T4448] netlink: 'syz.1.8338': attribute type 1 has an invalid length. [ 828.144746][ T4462] block nbd1: reconnected socket [ 828.153376][T26591] block nbd1: Receive control failed (result -32) [ 828.929102][ T4526] __nla_validate_parse: 5 callbacks suppressed [ 828.929118][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8358'. [ 829.148056][ T4542] syzkaller0: entered promiscuous mode [ 829.165763][ T4542] syzkaller0: entered allmulticast mode [ 829.232537][ T4550] netlink: 'syz.0.8364': attribute type 10 has an invalid length. [ 829.970990][ T4593] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 829.981314][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8374'. [ 830.109515][ T4599] netlink: 'syz.2.8377': attribute type 3 has an invalid length. [ 830.163609][ T4602] veth0: Caught tx_queue_len zero misconfig [ 830.237875][ T4604] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 830.325489][ T4609] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8382'. [ 830.456126][ T4616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8385'. [ 830.661546][ T4626] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8388'. [ 830.691274][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'. [ 830.715535][ T4626] netlink: 'syz.1.8388': attribute type 13 has an invalid length. [ 830.726400][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'. [ 830.759095][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8388'. [ 830.771851][ T4633] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8388'. [ 830.789854][ T4626] netlink: 'syz.1.8388': attribute type 13 has an invalid length. [ 830.792594][ T4636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8391'. [ 830.828351][ T4636] bridge0: port 3(dummy0) entered disabled state [ 830.834952][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.842649][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.080425][ T4656] nbd: must specify a size in bytes for the device [ 831.201152][ T4665] netlink: 'syz.4.8402': attribute type 29 has an invalid length. [ 831.218401][ T4665] netlink: 'syz.4.8402': attribute type 29 has an invalid length. [ 831.410060][ T4678] syzkaller0: entered promiscuous mode [ 831.416005][ T4678] syzkaller0: entered allmulticast mode [ 831.603756][ T4693] netlink: 'syz.0.8411': attribute type 1 has an invalid length. [ 831.680581][ T4693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 832.195893][ T4734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.291995][ T4737] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 832.304242][ T4737] bond5 (unregistering): Released all slaves [ 834.823392][ T4709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.059734][ T4755] __nla_validate_parse: 8 callbacks suppressed [ 835.059751][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8425'. [ 835.104196][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8425'. [ 835.217451][ T4767] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8430'. [ 835.252462][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8430'. [ 835.471799][ T4790] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8437'. [ 835.582042][ T4790] mac80211_hwsim hwsim88 syzkaller0: entered promiscuous mode [ 835.602069][ T4790] mac80211_hwsim hwsim88 syzkaller0: entered allmulticast mode [ 835.633768][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8437'. [ 835.781553][ T4811] netlink: 'syz.4.8444': attribute type 2 has an invalid length. [ 835.789807][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8444'. [ 835.964878][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8445'. [ 836.024579][ T4823] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 836.270360][ T4838] netlink: 'syz.4.8453': attribute type 1 has an invalid length. [ 836.347429][ T4848] netlink: 'syz.0.8454': attribute type 1 has an invalid length. [ 836.372355][ T4848] netlink: 'syz.0.8454': attribute type 3 has an invalid length. [ 836.393133][ T4848] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8454'. [ 836.412747][ T4848] NCSI netlink: No device for ifindex 813332851 [ 836.431597][ T4847] netlink: 'syz.1.8456': attribute type 6 has an invalid length. [ 836.457025][ T4847] netem: change failed [ 836.470509][ T4849] hsr0 speed is unknown, defaulting to 1000 [ 836.535903][ T4856] bond12: (slave ip6tnl0): Device is not bonding slave [ 836.549549][ T4856] bond12: option active_slave: invalid value (ip6tnl0) [ 836.582857][ T4856] bond12 (unregistering): Released all slaves [ 836.657341][ T4849] lo speed is unknown, defaulting to 1000 [ 837.892379][ T4935] netlink: 'syz.1.8475': attribute type 4 has an invalid length. [ 838.511088][ T4970] netlink: 'syz.2.8483': attribute type 4 has an invalid length. [ 838.536264][ T4970] netlink: 'syz.2.8483': attribute type 4 has an invalid length. [ 838.603731][ T4976] netlink: 'syz.0.8485': attribute type 1 has an invalid length. [ 838.607198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.644108][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8486'. [ 838.676577][ T4983] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 838.987522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.132127][ T5009] macvlan0: entered promiscuous mode [ 839.270063][ T5017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.491058][ T5028] netlink: 'syz.2.8500': attribute type 1 has an invalid length. [ 839.559813][ T5028] bond12: entered promiscuous mode [ 839.565511][ T5028] 8021q: adding VLAN 0 to HW filter on device bond12 [ 839.592155][ T5025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.975185][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.984605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.996343][ T1028] bond0: (slave bond_slave_0): interface is now down [ 840.051566][ T1028] bond0: now running without any active interface! [ 840.069416][ T5060] xt_hashlimit: size too large, truncated to 1048576 [ 840.188445][ T5063] xt_hashlimit: size too large, truncated to 1048576 [ 840.588826][ T5093] __nla_validate_parse: 12 callbacks suppressed [ 840.588845][ T5093] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8519'. [ 840.595162][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8517'. [ 840.614443][ T5089] syzkaller0: entered promiscuous mode [ 840.622195][ T5089] syzkaller0: entered allmulticast mode [ 840.886995][ T5105] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8524'. [ 840.896198][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8524'. [ 840.906005][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8524'. [ 841.050865][ T5113] tap0: tun_chr_ioctl cmd 1074025673 [ 841.065481][ T5115] tap0: tun_chr_ioctl cmd 1074025672 [ 841.072272][ T5115] tap0: ignored: set checksum disabled [ 841.161649][ T5122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8529'. [ 841.235428][ T5128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.718018][ T5163] macvlan0: entered promiscuous mode [ 842.175575][ T5208] xt_l2tp: unknown flags: 10 [ 845.087542][T11975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.096044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.129381][T11975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.138309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.967568][T15707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.975920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.828137][ T1335] bond6: left allmulticast mode [ 859.837694][ T1335] bond6: left promiscuous mode [ 859.842696][ T1335] bridge0: port 3(bond6) entered disabled state [ 859.861953][ T1335] dvmrp0: left allmulticast mode [ 860.049567][ T1335] bond4 (unregistering): (slave gretap1): Releasing active interface [ 860.230623][ T1335] bond5 (unregistering): (slave bridge3): Releasing active interface [ 860.395030][ T1335] .` (unregistering): Released all slaves [ 860.405375][ T1335] bond1 (unregistering): Released all slaves [ 860.419042][ T1335] bond2 (unregistering): Released all slaves [ 860.436043][ T1335] bond3 (unregistering): Released all slaves [ 860.452863][ T1335] bond4 (unregistering): Released all slaves [ 860.466266][ T1335] bond5 (unregistering): Released all slaves [ 860.484663][ T1335] bond0 (unregistering): Released all slaves [ 860.499358][ T1335] bond6 (unregistering): Released all slaves [ 860.514107][ T1335] bond7 (unregistering): Released all slaves [ 860.641971][ T1335] : left promiscuous mode [ 860.713240][ T1335] tipc: Disabling bearer [ 860.718767][ T1335] tipc: Disabling bearer [ 860.729788][ T1335] tipc: Left network mode [ 861.077742][ T1335] [ 861.080082][ T1335] ====================================================== [ 861.087347][ T1335] WARNING: possible circular locking dependency detected [ 861.094360][ T1335] syzkaller #0 Not tainted [ 861.098749][ T1335] ------------------------------------------------------ [ 861.105737][ T1335] kworker/u8:8/1335 is trying to acquire lock: [ 861.111861][ T1335] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 861.122367][ T1335] [ 861.122367][ T1335] but task is already holding lock: [ 861.129718][ T1335] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 861.139295][ T1335] [ 861.139295][ T1335] which lock already depends on the new lock. [ 861.139295][ T1335] [ 861.149682][ T1335] [ 861.149682][ T1335] the existing dependency chain (in reverse order) is: [ 861.158675][ T1335] [ 861.158675][ T1335] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 861.166654][ T1335] down_write+0x96/0x200 [ 861.171416][ T1335] kernfs_add_one+0x41/0x5c0 [ 861.176530][ T1335] kernfs_create_dir_ns+0xde/0x130 [ 861.182155][ T1335] internal_create_group+0x425/0x1180 [ 861.188044][ T1335] cpuhp_invoke_callback+0x445/0x860 [ 861.193842][ T1335] cpuhp_issue_call+0x430/0x7a0 [ 861.199202][ T1335] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 861.205779][ T1335] __cpuhp_setup_state+0x3f/0x60 [ 861.211225][ T1335] do_one_initcall+0x250/0x870 [ 861.216497][ T1335] do_initcall_level+0x104/0x190 [ 861.221939][ T1335] do_initcalls+0x59/0xa0 [ 861.226776][ T1335] kernel_init_freeable+0x2a6/0x3e0 [ 861.232482][ T1335] kernel_init+0x1d/0x1d0 [ 861.237317][ T1335] ret_from_fork+0x514/0xb70 [ 861.242410][ T1335] ret_from_fork_asm+0x1a/0x30 [ 861.247678][ T1335] [ 861.247678][ T1335] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 861.255486][ T1335] [ 861.255486][ T1335] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 861.263211][ T1335] cpus_read_lock+0x42/0x160 [ 861.268303][ T1335] static_key_slow_inc+0x12/0x30 [ 861.273743][ T1335] nbd_genl_reconfigure+0x132f/0x1ea0 [ 861.279619][ T1335] genl_family_rcv_msg_doit+0x22a/0x330 [ 861.285668][ T1335] genl_rcv_msg+0x61c/0x7a0 [ 861.290672][ T1335] netlink_rcv_skb+0x232/0x4b0 [ 861.295943][ T1335] genl_rcv+0x28/0x40 [ 861.300430][ T1335] netlink_unicast+0x75c/0x8e0 [ 861.305702][ T1335] netlink_sendmsg+0x813/0xb40 [ 861.310973][ T1335] ____sys_sendmsg+0x972/0x9f0 [ 861.316243][ T1335] ___sys_sendmsg+0x2a5/0x360 [ 861.321427][ T1335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.326875][ T1335] do_syscall_64+0x15f/0xf80 [ 861.331977][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.338373][ T1335] [ 861.338373][ T1335] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 861.346002][ T1335] __mutex_lock+0x1a3/0x1550 [ 861.351102][ T1335] nbd_queue_rq+0x37b/0x1100 [ 861.356205][ T1335] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 861.362262][ T1335] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 861.369189][ T1335] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.375680][ T1335] blk_mq_run_hw_queue+0x348/0x4f0 [ 861.381299][ T1335] blk_mq_dispatch_list+0xd16/0xe10 [ 861.387019][ T1335] blk_mq_flush_plug_list+0x48d/0x570 [ 861.392903][ T1335] __blk_flush_plug+0x3ed/0x4d0 [ 861.398266][ T1335] __submit_bio+0x28d/0x580 [ 861.403274][ T1335] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 861.409418][ T1335] block_read_full_folio+0x599/0x830 [ 861.415207][ T1335] filemap_read_folio+0x137/0x3b0 [ 861.420740][ T1335] do_read_cache_folio+0x358/0x590 [ 861.426361][ T1335] read_part_sector+0xb6/0x2b0 [ 861.431635][ T1335] adfspart_check_ICS+0xb1/0x960 [ 861.437087][ T1335] bdev_disk_changed+0x817/0x1770 [ 861.442621][ T1335] blkdev_get_whole+0x380/0x510 [ 861.447982][ T1335] bdev_open+0x31e/0xd30 [ 861.452734][ T1335] blkdev_open+0x470/0x610 [ 861.457656][ T1335] do_dentry_open+0x785/0x14e0 [ 861.462927][ T1335] vfs_open+0x3b/0x340 [ 861.467505][ T1335] path_openat+0x2e08/0x3860 [ 861.472604][ T1335] do_file_open+0x23e/0x4a0 [ 861.477616][ T1335] do_sys_openat2+0x113/0x200 [ 861.482812][ T1335] __x64_sys_openat+0x138/0x170 [ 861.488169][ T1335] do_syscall_64+0x15f/0xf80 [ 861.493272][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.499669][ T1335] [ 861.499669][ T1335] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 861.506886][ T1335] __mutex_lock+0x1a3/0x1550 [ 861.511989][ T1335] nbd_queue_rq+0xc6/0x1100 [ 861.516998][ T1335] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 861.523075][ T1335] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 861.529921][ T1335] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.536413][ T1335] blk_mq_run_hw_queue+0x348/0x4f0 [ 861.542033][ T1335] blk_mq_dispatch_list+0xd16/0xe10 [ 861.547742][ T1335] blk_mq_flush_plug_list+0x48d/0x570 [ 861.553626][ T1335] __blk_flush_plug+0x3ed/0x4d0 [ 861.558989][ T1335] __submit_bio+0x28d/0x580 [ 861.564006][ T1335] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 861.570152][ T1335] block_read_full_folio+0x599/0x830 [ 861.576376][ T1335] filemap_read_folio+0x137/0x3b0 [ 861.581920][ T1335] do_read_cache_folio+0x358/0x590 [ 861.587547][ T1335] read_part_sector+0xb6/0x2b0 [ 861.592819][ T1335] adfspart_check_ICS+0xb1/0x960 [ 861.598264][ T1335] bdev_disk_changed+0x817/0x1770 [ 861.603801][ T1335] blkdev_get_whole+0x380/0x510 [ 861.609164][ T1335] bdev_open+0x31e/0xd30 [ 861.613913][ T1335] blkdev_open+0x470/0x610 [ 861.618835][ T1335] do_dentry_open+0x785/0x14e0 [ 861.624105][ T1335] vfs_open+0x3b/0x340 [ 861.628684][ T1335] path_openat+0x2e08/0x3860 [ 861.633783][ T1335] do_file_open+0x23e/0x4a0 [ 861.638795][ T1335] do_sys_openat2+0x113/0x200 [ 861.643981][ T1335] __x64_sys_openat+0x138/0x170 [ 861.649337][ T1335] do_syscall_64+0x15f/0xf80 [ 861.654438][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.660836][ T1335] [ 861.660836][ T1335] -> #4 (set->srcu){.+.+}-{0:0}: [ 861.667984][ T1335] __synchronize_srcu+0xca/0x300 [ 861.673429][ T1335] elevator_switch+0x1e8/0x7a0 [ 861.678709][ T1335] elevator_change+0x2cc/0x450 [ 861.683984][ T1335] elevator_set_default+0x36c/0x430 [ 861.689694][ T1335] blk_register_queue+0x3e9/0x4e0 [ 861.695224][ T1335] __add_disk+0x677/0xd50 [ 861.700057][ T1335] add_disk_fwnode+0xfb/0x480 [ 861.705242][ T1335] nbd_dev_add+0x72c/0xb50 [ 861.710162][ T1335] nbd_init+0x168/0x1f0 [ 861.714830][ T1335] do_one_initcall+0x250/0x870 [ 861.720101][ T1335] do_initcall_level+0x104/0x190 [ 861.725550][ T1335] do_initcalls+0x59/0xa0 [ 861.730383][ T1335] kernel_init_freeable+0x2a6/0x3e0 [ 861.736086][ T1335] kernel_init+0x1d/0x1d0 [ 861.740925][ T1335] ret_from_fork+0x514/0xb70 [ 861.746020][ T1335] ret_from_fork_asm+0x1a/0x30 [ 861.751291][ T1335] [ 861.751291][ T1335] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 861.759095][ T1335] __mutex_lock+0x1a3/0x1550 [ 861.764201][ T1335] elevator_change+0x1b3/0x450 [ 861.769477][ T1335] elevator_set_none+0xb5/0x140 [ 861.774838][ T1335] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 861.781149][ T1335] nbd_start_device+0x17f/0xb10 [ 861.786505][ T1335] nbd_genl_connect+0x165b/0x1cf0 [ 861.792035][ T1335] genl_family_rcv_msg_doit+0x22a/0x330 [ 861.798084][ T1335] genl_rcv_msg+0x61c/0x7a0 [ 861.803095][ T1335] netlink_rcv_skb+0x232/0x4b0 [ 861.808373][ T1335] genl_rcv+0x28/0x40 [ 861.812865][ T1335] netlink_unicast+0x75c/0x8e0 [ 861.818135][ T1335] netlink_sendmsg+0x813/0xb40 [ 861.823407][ T1335] ____sys_sendmsg+0x972/0x9f0 [ 861.828678][ T1335] ___sys_sendmsg+0x2a5/0x360 [ 861.833863][ T1335] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.839311][ T1335] do_syscall_64+0x15f/0xf80 [ 861.844410][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.850810][ T1335] [ 861.850810][ T1335] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 861.859403][ T1335] blk_alloc_queue+0x546/0x680 [ 861.864675][ T1335] __blk_mq_alloc_disk+0x197/0x390 [ 861.870297][ T1335] nbd_dev_add+0x499/0xb50 [ 861.875602][ T1335] nbd_init+0x168/0x1f0 [ 861.880281][ T1335] do_one_initcall+0x250/0x870 [ 861.885602][ T1335] do_initcall_level+0x104/0x190 [ 861.891054][ T1335] do_initcalls+0x59/0xa0 [ 861.895897][ T1335] kernel_init_freeable+0x2a6/0x3e0 [ 861.901602][ T1335] kernel_init+0x1d/0x1d0 [ 861.906440][ T1335] ret_from_fork+0x514/0xb70 [ 861.911535][ T1335] ret_from_fork_asm+0x1a/0x30 [ 861.916813][ T1335] [ 861.916813][ T1335] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 861.924016][ T1335] fs_reclaim_acquire+0x71/0x100 [ 861.929463][ T1335] kmem_cache_alloc_noprof+0x40/0x650 [ 861.935344][ T1335] __kernfs_iattrs+0xdf/0x320 [ 861.940536][ T1335] kernfs_iop_setattr+0xea/0x3f0 [ 861.946004][ T1335] notify_change+0xc1a/0xf40 [ 861.951114][ T1335] do_truncate+0x1c2/0x250 [ 861.956053][ T1335] path_openat+0x2f89/0x3860 [ 861.961159][ T1335] do_file_open+0x23e/0x4a0 [ 861.966180][ T1335] do_sys_openat2+0x113/0x200 [ 861.971365][ T1335] __x64_sys_openat+0x138/0x170 [ 861.976727][ T1335] do_syscall_64+0x15f/0xf80 [ 861.981829][ T1335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.988226][ T1335] [ 861.988226][ T1335] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 861.996727][ T1335] __lock_acquire+0x15a5/0x2cf0 [ 862.002092][ T1335] lock_acquire+0x106/0x350 [ 862.007101][ T1335] down_write+0x96/0x200 [ 862.011846][ T1335] kernfs_unlink_sibling+0x71/0x180 [ 862.017555][ T1335] kernfs_rename_ns+0x4a6/0x830 [ 862.022915][ T1335] sysfs_rename_link_ns+0x16e/0x1b0 [ 862.028619][ T1335] device_rename+0x110/0x210 [ 862.033719][ T1335] __dev_change_net_namespace+0x15d3/0x20a0 [ 862.040114][ T1335] cfg802154_switch_netns+0xbf/0x3d0 [ 862.045903][ T1335] cfg802154_pernet_exit+0x75/0xe0 [ 862.051520][ T1335] ops_undo_list+0x49f/0x940 [ 862.056621][ T1335] cleanup_net+0x56b/0x800 [ 862.061546][ T1335] process_scheduled_works+0xb5d/0x1860 [ 862.067595][ T1335] worker_thread+0xa53/0xfc0 [ 862.072690][ T1335] kthread+0x388/0x470 [ 862.077268][ T1335] ret_from_fork+0x514/0xb70 [ 862.082364][ T1335] ret_from_fork_asm+0x1a/0x30 [ 862.087647][ T1335] [ 862.087647][ T1335] other info that might help us debug this: [ 862.087647][ T1335] [ 862.097855][ T1335] Chain exists of: [ 862.097855][ T1335] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 862.097855][ T1335] [ 862.112263][ T1335] Possible unsafe locking scenario: [ 862.112263][ T1335] [ 862.119696][ T1335] CPU0 CPU1 [ 862.125042][ T1335] ---- ---- [ 862.130397][ T1335] lock(&root->kernfs_rwsem); [ 862.135160][ T1335] lock(cpuhp_state_mutex); [ 862.142264][ T1335] lock(&root->kernfs_rwsem); [ 862.149544][ T1335] lock(&root->kernfs_iattr_rwsem); [ 862.154822][ T1335] [ 862.154822][ T1335] *** DEADLOCK *** [ 862.154822][ T1335] [ 862.162946][ T1335] 5 locks held by kworker/u8:8/1335: [ 862.168212][ T1335] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 862.179080][ T1335] #1: ffffc90005b4fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 862.189594][ T1335] #2: ffffffff8fdc0c28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 862.198896][ T1335] #3: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 862.208462][ T1335] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 862.218460][ T1335] [ 862.218460][ T1335] stack backtrace: [ 862.224334][ T1335] CPU: 0 UID: 0 PID: 1335 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 862.224351][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.224362][ T1335] Workqueue: netns cleanup_net [ 862.224382][ T1335] Call Trace: [ 862.224390][ T1335] [ 862.224399][ T1335] dump_stack_lvl+0xe8/0x150 [ 862.224416][ T1335] print_circular_bug+0x2e1/0x300 [ 862.224436][ T1335] check_noncircular+0x12e/0x150 [ 862.224456][ T1335] __lock_acquire+0x15a5/0x2cf0 [ 862.224474][ T1335] ? __lock_acquire+0x6b5/0x2cf0 [ 862.224489][ T1335] ? __lock_acquire+0x6b5/0x2cf0 [ 862.224505][ T1335] ? kernfs_unlink_sibling+0x71/0x180 [ 862.224526][ T1335] lock_acquire+0x106/0x350 [ 862.224540][ T1335] ? kernfs_unlink_sibling+0x71/0x180 [ 862.224564][ T1335] down_write+0x96/0x200 [ 862.224578][ T1335] ? kernfs_unlink_sibling+0x71/0x180 [ 862.224597][ T1335] ? __pfx_down_write+0x10/0x10 [ 862.224610][ T1335] ? kernfs_root+0x1c/0x230 [ 862.224626][ T1335] ? kernfs_root+0x1c/0x230 [ 862.224642][ T1335] ? kernfs_root+0x1c/0x230 [ 862.224658][ T1335] ? kernfs_root+0x1ea/0x230 [ 862.224675][ T1335] kernfs_unlink_sibling+0x71/0x180 [ 862.224696][ T1335] kernfs_rename_ns+0x4a6/0x830 [ 862.224719][ T1335] sysfs_rename_link_ns+0x16e/0x1b0 [ 862.224738][ T1335] device_rename+0x110/0x210 [ 862.224757][ T1335] __dev_change_net_namespace+0x15d3/0x20a0 [ 862.224779][ T1335] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 862.224799][ T1335] ? __lock_acquire+0x6b5/0x2cf0 [ 862.224816][ T1335] ? __mutex_trylock_common+0x158/0x260 [ 862.224836][ T1335] ? __pfx___mutex_trylock_common+0x10/0x10 [ 862.224855][ T1335] ? rcu_is_watching+0x15/0xb0 [ 862.224872][ T1335] ? trace_contention_end+0x3d/0x140 [ 862.224890][ T1335] ? __mutex_lock+0x319/0x1550 [ 862.224912][ T1335] ? do_raw_spin_unlock+0xf5/0x210 [ 862.224933][ T1335] ? _raw_spin_unlock+0x28/0x50 [ 862.224950][ T1335] ? __pfx___mutex_lock+0x10/0x10 [ 862.224971][ T1335] ? __pfx_netdev_run_todo+0x10/0x10 [ 862.224993][ T1335] cfg802154_switch_netns+0xbf/0x3d0 [ 862.225012][ T1335] cfg802154_pernet_exit+0x75/0xe0 [ 862.225028][ T1335] ops_undo_list+0x49f/0x940 [ 862.225053][ T1335] ? __pfx_ops_undo_list+0x10/0x10 [ 862.225071][ T1335] ? idr_destroy+0x227/0x290 [ 862.225089][ T1335] cleanup_net+0x56b/0x800 [ 862.225106][ T1335] ? __pfx_cleanup_net+0x10/0x10 [ 862.225125][ T1335] ? process_scheduled_works+0xa70/0x1860 [ 862.225139][ T1335] ? process_scheduled_works+0xa70/0x1860 [ 862.225154][ T1335] process_scheduled_works+0xb5d/0x1860 [ 862.225168][ T1335] ? trace_contention_end+0x3b/0x160 [ 862.225196][ T1335] ? __pfx_process_scheduled_works+0x10/0x10 [ 862.225213][ T1335] ? assign_work+0x3d5/0x5e0 [ 862.225228][ T1335] worker_thread+0xa53/0xfc0 [ 862.225252][ T1335] kthread+0x388/0x470 [ 862.225269][ T1335] ? __pfx_worker_thread+0x10/0x10 [ 862.225283][ T1335] ? __pfx_kthread+0x10/0x10 [ 862.225300][ T1335] ret_from_fork+0x514/0xb70 [ 862.225316][ T1335] ? __pfx_ret_from_fork+0x10/0x10 [ 862.225331][ T1335] ? __switch_to+0xc79/0x1410 [ 862.225352][ T1335] ? __pfx_kthread+0x10/0x10 [ 862.225369][ T1335] ret_from_fork_asm+0x1a/0x30 [ 862.225391][ T1335] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 862.230093][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.537387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.745623][ T1335] hsr0: left allmulticast mode [ 863.450184][ T1335] IPVS: stop unused estimator thread 0... [ 863.601593][ T1335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.652753][ T1335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.711517][ T1335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.770239][ T1335] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.863726][ T1335] dvmrp0: left allmulticast mode [ 863.934843][ T1335] team0: Port device ip6gre2 removed [ 863.995199][ T1335] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 865.168788][ T1335] bond1 (unregistering): (slave bridge27): Releasing backup interface [ 865.177066][ T1335] bridge27 (unregistering): left promiscuous mode [ 865.429428][ T1335] bond0 (unregistering): Released all slaves [ 865.437448][ T1335] bond1 (unregistering): Released all slaves [ 865.446211][ T1335] bond2 (unregistering): Released all slaves [ 865.455683][ T1335] bond3 (unregistering): (slave bond4): Releasing backup interface [ 865.468505][ T1335] bond3 (unregistering): Released all slaves [ 865.477660][ T1335] bond4 (unregistering): Released all slaves [ 865.621554][ T1335] IPVS: stopping master sync thread 1189 ... [ 865.628029][ T1335] IPVS: stopping backup sync thread 3856 ... [ 865.776994][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 865.833695][ T1335] hsr_slave_0: left promiscuous mode [ 865.839963][ T1335] hsr_slave_1: left promiscuous mode [ 865.849803][ T1335] veth1_macvtap: left promiscuous mode [ 865.860327][ T1335] veth0_macvtap: left promiscuous mode [ 865.866006][ T1335] veth1_vlan: left promiscuous mode [ 865.872373][ T1335] veth0_vlan: left promiscuous mode [ 866.136137][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 866.454805][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 866.650277][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 868.127235][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.135824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog