last executing test programs: 3.216497634s ago: executing program 1 (id=2097): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffe0}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) r7 = socket$inet6(0xa, 0x3, 0x2) getsockname(r7, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x2c, r14, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)={0x7a0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x4, 0x6, 0x101}, {0x8, 0x1, 0x3, 0x47a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5d3}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x28040}, 0x4000800) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 3.035411265s ago: executing program 3 (id=2100): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x2000400) r0 = socket(0x28, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) unshare(0x6a040000) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)=""/239, 0xef}], 0x8, &(0x7f0000000700)=""/229, 0xe5}, 0x40000020) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x4, 0x0, {0x9}}, 0x14}}, 0x80) 2.411036487s ago: executing program 0 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010004fbffffff00007f00000000000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d0000000000000002000000000000000100001e000200000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) r3 = socket(0x1, 0x803, 0x0) sendto$unix(r3, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x3, 0xad}, 0x10) 2.19138708s ago: executing program 1 (id=2104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x4c2, 0x0}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r5 = socket$inet_sctp(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x2400000, @private0, 0xaa4}}, [0xf31, 0x400, 0xffff, 0xffff, 0x0, 0x638, 0x1, 0x0, 0x100000000, 0x3fea, 0x6, 0x3acec55c, 0x4, 0x10000000, 0x100]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x76f7, 0x1, 0x8003, 0x80000001, 0x0, 0xfff, 0x4, 0x0, r6}, &(0x7f00000000c0)=0x20) 2.125417554s ago: executing program 0 (id=2105): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x15, &(0x7f0000fcb000)=0x6, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 1.950829611s ago: executing program 0 (id=2106): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x5a, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_QUANTUM={0x0, 0x2, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x1}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x9}, @TCA_HHF_QUANTUM={0x0, 0x2, 0xffff0001}, @TCA_HHF_QUANTUM={0x0, 0x2, 0xfffffff0}, @TCA_HHF_QUANTUM={0x0, 0x2, 0xe}, @TCA_HHF_NON_HH_WEIGHT, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x1000}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000019c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xb9, 0x80}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x38}}, 0x10004800) 1.893963452s ago: executing program 4 (id=2108): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff60, 0x0, 0x3, 0x2, 0x7, 0xffff}, &(0x7f00000000c0)=0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x9, 'pim6reg\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x160, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x9, 0x1d, 0x8, 0x13, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6(0xa, 0x3, 0x7) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff60, 0x0, 0x3, 0x2, 0x7, 0xffff}, &(0x7f00000000c0)=0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x9, 'pim6reg\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x160, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x9, 0x1d, 0x8, 0x13, 0x7}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 1.619478517s ago: executing program 0 (id=2110): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0xbf82) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x470bd26, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.619263745s ago: executing program 2 (id=2111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0xfffffffe}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x0) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) (async) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0xfffffffe}, 0x4) (async) 1.589681014s ago: executing program 4 (id=2112): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x6, 0x4) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/172, 0xac, 0x4, 0x4}) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000180)}, 0x10) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000240)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r2, 0x81, 0xa, 0x5}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@multicast1, @empty, 0x0}, &(0x7f0000000300)=0xc) sendmsg$xdp(r3, &(0x7f0000000880)={&(0x7f0000000340)={0x2c, 0x5, r4, 0x34}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000380)="3ade6173e1fd926c1065920a4480bbe17cb1db19efa24945e7c47d34e4a486a9baa10e2e18a2ffd8851e0f85d3ebce4423faada4a3298abbcb532f5cfe38c656f0c7e3d95c58421de3f0ffbacde931b8fe9bba929a353f73c8dc0ad2e033be3af8b53829457491a5acdf1a17cc0b85dda7333c1860b3f1ae6a46bea6a4f48ed6402a9973b2f135583780ef655c8704aa499c2c687b149f7aeb9ae293bc34cdc10bf6e7b34a2aa1d13ec70715377f3ccefb06d4e28ae50395706ae12d5d1ee9f5cb6e76", 0xc3}, {&(0x7f0000000480)="2ed48bdef4c2350919e794e60d6aa12015b02a9d21124c046c890ab4d426db262ab1fcdfc57ed40915f866", 0x2b}, {&(0x7f00000004c0)="af8d30b35a9d4fd8b5a8211433c0760871684358f14c99c7460911494eb20ea258370450a51944b02baf3a1186e7f513e28768e3c52b9d01f4e8e457f9d249618c16599bf83d19d7419a23766fa60c4e73d7c59e858f790e63852d7c5fcd49c0990a3df2da813146786243d61e122dbe7ddc7fe466d042fc0f1b910bb1e82867b7f58bebf9d4a22d75c36138d97191d0a3e3880a22dfa4ef6fb34c", 0x9b}, {&(0x7f0000000580)="d713e6abf8218b34f6cf8c6baaeac166f90fa5c97039eb56ea208d62f8fac2762994c2c9c29effe626cd867cb30cfbb24e8562ed84fbd3bde36cf4f7a63f670c0d52238a479aaa0b36f4712ea74da6335edaa921aca913b36b0118a17255f2808a9f26dcb8c90df1a21ecddac69c6eec4cff6c135c852c8c8177e94d76871744f133cd597c4fd470a2ff892ca2f4b614e0a38395c283474c8e4f1bba7abb", 0x9e}, {&(0x7f0000000640)="be7f09d1a7abf2a0b470f2dfcb9ce05368d8e0f55485600954056de1b884a2c6769f8bede6a39add0dd09449685bc0402abd2b764e576d8c76c63343bf87f92b1c61c72167a9e30426a096c44badc016410ab7ce11090859751843078533861534f92e9e535d513ca328360a3dc7f878346b29c8db118befc3b9be24a9867cf89444e43c3816f629cb544b9df1affba06e08536e6e7e1afef2d80c5a5a3f38cbaf38549cee419163876082cde66a0080bf4358e37e1b9971937c76d9f0e9d29bd9ef489b9743f5472735e6637e4cd933d4c9c8aef7901507d99e09a8c1a343cfd6e46fa9ccef0db9df95d243", 0xec}, {&(0x7f0000000740)="44dd5ffc2d082dc832d809a31436dac37e82c39845ec21685fdb538843846fdda8c8e4a9bbcd87717075bd86eb46bb807c03f508944ff1d438bffc27821479faaa38dee2e3df333d612417e1dd971b6a639961c17b1b689c1db8260145c9a67c0d0ea4c9abe69346e4f90f85edbd1ef722a2586452c64f22e09b0f3cba772c40d4890cbecd24e3d75f9f2856b2", 0x8d}], 0x6, 0x0, 0x0, 0x2005c010}, 0xc000) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000008c0), {[{{@arp={@multicast1, @remote, 0x0, 0xff, 0xa, 0x1, {@empty, {[0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xdda4db63e4aead12, 0xff]}}, 0x1, 0x2000, 0x6, 0x3ff, 0x89, 0x10, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @broadcast, @local, 0xf, 0x1}}}, {{@arp={@multicast2, @loopback, 0x0, 0xff000000, 0xb, 0x4, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff8, 0xfffd, 0x43ce, 0x6, 0x10, 0x9, 'veth0_to_team\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000dc0)={0x7, [0xfffb, 0x400, 0x4, 0x8, 0x2, 0xfff9, 0x9]}, &(0x7f0000000e00)=0x12) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000e40)={0x0, 0x3, 0x3ff, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001240)={0x12, 0x3, {0x800, @struct={0x6, 0x5}, 0x0, 0x2, 0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x4f4, @usage=0x5, 0xb6a, 0x8, [0x0, 0x3, 0x3, 0x94, 0x4, 0x9]}, {0x3, @usage=0xdb65, 0x0, 0x1000, 0xd, 0x1108, 0x8, 0x1, 0x2, @struct={0x3, 0x750}, 0x6, 0x80, [0x0, 0xffffffff, 0xd922, 0x6, 0x1, 0x1000]}, {0xfff8000000000000, @struct={0x7f, 0xfff}, r5, 0xa, 0xf, 0x7, 0x1, 0xfffffffffffffffb, 0x22, @usage=0xd4d, 0x6, 0x2, [0x5, 0x0, 0x6c00da73, 0x1, 0x800, 0x7]}, {0x9, 0x16, 0x4}}) (async) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000001640)=0x1, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001680)={0x8, 0x5, {0x200, @usage=0xd6f, r6, 0x6, 0x5d, 0x9, 0x1, 0x4, 0x0, @usage=0x8, 0x50e, 0x30, [0x0, 0x0, 0x4, 0x8, 0x9, 0x7]}, {0x7, @struct={0x8, 0xcf}, r7, 0x5, 0x9052, 0x7, 0x9, 0x8, 0x444, @struct={0x4, 0x6}, 0x8, 0x3ef, [0x5d, 0xffffffffffffffff, 0x3, 0x100, 0x2, 0x3]}, {0x2, @usage=0xfffffffffffff74d, r6, 0x5, 0x1000, 0x3, 0x0, 0xe59, 0xdc, @struct={0x0, 0x10000}, 0x7, 0x3, [0x101, 0x1, 0x3, 0x8, 0x4, 0x3]}, {0x87, 0x1ff}}) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000001a80), &(0x7f0000001ac0)=0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r9, 0x5411, &(0x7f0000001c40)) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040080}, 0x48000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001e80)={{r2}, 0x0, 0x10, @inherit={0x88, &(0x7f0000001dc0)={0x1, 0x8, 0x8, 0x771f, {0x3, 0x4, 0x40, 0x71f8, 0x3}, [0x100000000, 0x4, 0x7, 0x9, 0x401, 0x6, 0x1, 0x10001]}}, @subvolid}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002e80)={0xd8, 0x100000, 0x30b6, 0x3, 0x9}) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f00), r3) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, r10, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000032c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003100)={0x148, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x30000010) 1.487870552s ago: executing program 4 (id=2113): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40012020, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x202, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x40000) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000200)=0x101, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="9c3d50322d57bff08a57f4bc743638fb40317dd66aa13df71cfb8908b46bf1b6aaa48062347ad72f77f6ef8d5bf84aa72f720824e9c88dc9d813a066927c957e8e48f116f77f974ff629b51bd7b0fc6fe7fc49e6d8249b19b54254fa5352ca0867112976a4820438e709137ddef4a096952978a0462c2a46952dd124c1980f8f217fbbdc64417c9d87ffdafe9910c819", 0x90, 0x4, &(0x7f0000000180)={0x11, 0x5, r4, 0x1, 0xb2}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) 1.415921172s ago: executing program 3 (id=2114): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@union={0xb, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x6, 0x3, 0x9}, {0x7, 0x3, 0x8}]}, @fwd={0x6}]}, {0x0, [0x61, 0x2f, 0x0]}}, &(0x7f00000004c0)=""/8, 0x4d, 0x8, 0x1, 0x7, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x4, 0x5, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b000000000000000013ad3248430009800800020000000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x81, 0x3, "8dbc20f0bc43a07126ae353e5393cf79364f44d5a3c2cd766d364bc147e832e7d2eb1e8ac37e2990cc40d48ae0b7e46d93738d55edc10252c07b636530a0cea6799e722e1f070a845cb3ce3e9447b0dd19203845bd4dd9a78cf8e1db512e36b57bba350c3bffb0b2d4349298e99370ba54469d716e2407e19d35884f9b"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0xc014) 1.411516498s ago: executing program 2 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x75}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 1.399556955s ago: executing program 4 (id=2116): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x8000) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x3a) (rerun: 64) sendmmsg$inet6(r1, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x5}, 0x10) (async) bind$ax25(r2, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}, [@generic={0x4, 0x8, 0x6, 0x4, 0xf}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) 1.203647546s ago: executing program 3 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x36, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x41) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000240)=""/139, &(0x7f0000000140)=0x8b) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r6, 0x111, 0x6, 0x0, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x4, 0x9, 0x7, 0xff7d, 0x6, 0x4, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}}, 0x9, 0x0, 0x1, 0x9, 0x8264056}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r8}, &(0x7f0000000400)=0x8) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.203237964s ago: executing program 1 (id=2118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x27, 0x8, 0x7, 0x6}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002deb91fce6dd0c8e0200000018000180140002006970766c616e3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x25}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1f}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.181280634s ago: executing program 2 (id=2119): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) 1.09631485s ago: executing program 4 (id=2120): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0x1c}, 0x20) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) 969.038732ms ago: executing program 2 (id=2121): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "35becb4662d39f0437"}]}, 0x24}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x26, "6c1976d93c588e385dd89e1df0227d50872792d7138d13f03b9bf65cbd7fa98f05bab03b5d1f"}, &(0x7f0000000040)=0x2e) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x2}, 0x8) r3 = socket(0xa, 0x3, 0x6) recvfrom$packet(r3, 0x0, 0x0, 0x4001, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d800500040000000000050001000400000008000200"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000980)={0x0, 'nicvf0\x00', 0x2}, 0x18) 672.884934ms ago: executing program 2 (id=2122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047f55d84b84d1f949c2f220000c40000000200", "dc5d3f00"}, 0x38) 656.934137ms ago: executing program 1 (id=2123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x10001}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x40}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6c08}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000001c0)="75cf12d50fcd6bef3582695b49656389d33a2a66228397ca66ac6d898a4122e89b4c7e34b0cb69d7dc01180f9460564dd44dafc1cb40b0d3be87e50aa32a7217ebb4defafcec0f777611db16a87362974261997bdaa53a17e2874348a96c963e6d6a79251b7ba2cd75cbdfcf34ad6e3bc0c13c50c853a00e1e7c3c7edbb10945e9872c8399c66a71510d168cfaf4f472cb34ac3f173c4314ed0ba7a99db15a31467ee0c761c6e5178a8d621269703f55361ac7", 0xb3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64=r0], 0x4c}}, 0x15) 603.915177ms ago: executing program 0 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="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"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="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"], 0x18}}, 0x0) (async) 603.508676ms ago: executing program 3 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c}, 0x800) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 603.180147ms ago: executing program 4 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r1, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x400040c0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12, 0x0, 0x5, "fbdbf97859"}}) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r7, r5}) close(r4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'batadv_slave_1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xffe) 461.209033ms ago: executing program 1 (id=2127): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1411, 0x223}, 0x10}}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) 416.821097ms ago: executing program 2 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xffffffffffffff37, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x406f}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa849}, 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r8, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") poll(&(0x7f0000000040)=[{r0, 0x4200}, {r0, 0x4011}, {r8, 0x5428}], 0x3, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r7], 0x1c}}, 0x0) 365.314363ms ago: executing program 3 (id=2129): r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x44040050) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4c23, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, 0x1c, 0x0}}], 0x1, 0x20004040) (async) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4c23, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, 0x1c, 0x0}}], 0x1, 0x20004040) recvmmsg(r3, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) (async) recvmmsg(r3, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) 318.462901ms ago: executing program 0 (id=2130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffde0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060420004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x14, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611064000000000007000000400000009500003a00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a", 0x0, 0x100000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r12, 0xe8a8b1f2c369e9ff, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x44000) accept4$nfc_llcp(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x800) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r14, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r14, &(0x7f0000000140)='g', 0x13, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 148.554703ms ago: executing program 1 (id=2131): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x8) (async) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x8) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) (async) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4ee7a008fe1d0df4bed8d6666d930557"}, @NL80211_ATTR_SSID={0xa, 0x34, @random="c9353e2883a4"}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000000) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4ee7a008fe1d0df4bed8d6666d930557"}, @NL80211_ATTR_SSID={0xa, 0x34, @random="c9353e2883a4"}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000000) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f0000000300)="4f2a153c33e2fa93171d425f14b57ecc6306a27c769301f7026c71596950adb6a1d68caa5eb19c3a51f5cd382177d37b703cb48daeae4b8a7160216f57ec26288fa5d196d1f8aa79b230d1fbd21b2c") setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 3 (id=2132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000db5d00000000101100000d5b21edd1209685daf58ad36419e0ac8385251c8fc5246472c30a794e49dce8", @ANYRES32=r6, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r8, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 104.642637][ T6295] netlink: 'syz.4.105': attribute type 5 has an invalid length. [ 104.738989][ T6295] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.802209][ T6297] netlink: 'syz.1.104': attribute type 3 has an invalid length. [ 104.817706][ T6300] netlink: 'syz.1.104': attribute type 3 has an invalid length. [ 105.146389][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.248865][ T6324] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 105.327911][ T6324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.379377][ T6335] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 105.656704][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 105.798824][ T6350] netlink: 'syz.3.120': attribute type 3 has an invalid length. [ 105.869645][ T6355] warning: `syz.0.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.912609][ T6359] xt_hashlimit: invalid rate [ 106.318665][ T44] IPVS: starting estimator thread 0... [ 106.348065][ T6382] veth1_macvtap: left promiscuous mode [ 106.418244][ T6386] IPVS: using max 23 ests per chain, 55200 per kthread [ 107.010708][ T6419] __nla_validate_parse: 104 callbacks suppressed [ 107.010729][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 107.272859][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.360468][ T6430] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 107.374068][ T6426] macvlan2: entered promiscuous mode [ 107.383003][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.392451][ T6426] macvlan2: entered allmulticast mode [ 107.393076][ T6426] bond1: entered allmulticast mode [ 107.430070][ T6426] bond1: entered promiscuous mode [ 107.458733][ T6426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.508704][ T6426] team0: Port device macvlan2 added [ 107.968236][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.152'. [ 108.068354][ T6465] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 108.098483][ T6454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.128898][ T6454] bond1: (slave bond2): making interface the new active one [ 108.137695][ T6454] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.193374][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 108.727118][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.774351][ T6500] netlink: 'syz.2.167': attribute type 11 has an invalid length. [ 108.801410][ T6500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.167'. [ 108.845350][ T6496] : entered promiscuous mode [ 108.888138][ T6505] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 108.954348][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 109.068300][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 109.194171][ T6527] validate_nla: 2 callbacks suppressed [ 109.194191][ T6527] netlink: 'syz.1.176': attribute type 39 has an invalid length. [ 109.214264][ T6525] netlink: 112 bytes leftover after parsing attributes in process `syz.0.175'. [ 109.968310][ T6552] vlan2: entered allmulticast mode [ 110.044374][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 110.151783][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 110.335544][ T6575] Cannot find set identified by id 0 to match [ 110.523157][ T6583] netlink: 'syz.4.194': attribute type 10 has an invalid length. [ 110.550387][ T6583] team0: Device veth1_macvtap failed to register rx_handler [ 111.008511][ T6609] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 111.124660][ T6616] trusted_key: syz.0.199 sent an empty control message without MSG_MORE. [ 111.223313][ T6609] bond3: (slave gretap1): making interface the new active one [ 111.239994][ T6609] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 111.695555][ T6636] xt_policy: output policy not valid in PREROUTING and INPUT [ 111.795019][ T6638] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 111.853503][ T6640] gtp0: entered promiscuous mode [ 111.944497][ T6649] netlink: 'syz.0.212': attribute type 4 has an invalid length. [ 112.106957][ T6652] ipt_ECN: cannot use operation on non-tcp rule [ 112.351794][ T6661] __nla_validate_parse: 5 callbacks suppressed [ 112.351814][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 112.797688][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 112.893873][ T6683] dvmrp0: entered allmulticast mode [ 113.041206][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.904919][ T6746] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.232'. [ 113.924660][ T6746] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.232'. [ 114.179984][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.499178][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 114.550900][ T6777] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 114.561554][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.240'. [ 114.596617][ T6777] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 114.666698][ T6777] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.241'. [ 114.837664][ T6784] netlink: 'syz.0.244': attribute type 33 has an invalid length. [ 114.859906][ T6789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.246'. [ 114.866749][ T6784] netlink: 152 bytes leftover after parsing attributes in process `syz.0.244'. [ 115.101050][ T6806] Bluetooth: MGMT ver 1.23 [ 115.927022][ T6851] netlink: 'syz.0.259': attribute type 18 has an invalid length. [ 116.264122][ T6870] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 116.297365][ T6873] netlink: 'syz.0.263': attribute type 11 has an invalid length. [ 116.726698][ T6897] raw_sendmsg: syz.2.268 forgot to set AF_INET. Fix it! [ 117.213912][ T6927] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 117.233699][ T6916] xt_CT: No such helper "pptp" [ 117.275684][ T6925] bridge1: entered promiscuous mode [ 117.290354][ T6925] bridge1: entered allmulticast mode [ 117.567157][ T6939] __nla_validate_parse: 7 callbacks suppressed [ 117.567178][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 117.608278][ T6940] netlink: 'syz.1.278': attribute type 63 has an invalid length. [ 118.025685][ T6962] tipc: Started in network mode [ 118.048313][ T6962] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 118.068358][ T6962] tipc: Enabled bearer , priority 2 [ 118.582626][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 118.634012][ T6988] netlink: zone id is out of range [ 118.649206][ T6988] netlink: zone id is out of range [ 118.681690][ T6988] netlink: zone id is out of range [ 118.701439][ T6988] netlink: set zone limit has 8 unknown bytes [ 118.812232][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 118.823162][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.291'. [ 118.966799][ T7012] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.000823][ T7012] Cannot find add_set index 65532 as target [ 119.065983][ T6999] syzkaller1: entered promiscuous mode [ 119.075528][ T6999] syzkaller1: entered allmulticast mode [ 119.091949][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.295'. [ 119.125494][ T7015] netlink: 88 bytes leftover after parsing attributes in process `syz.1.295'. [ 119.173616][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 119.188061][ T5912] tipc: Node number set to 10136234 [ 119.434899][ T7031] netlink: 112 bytes leftover after parsing attributes in process `syz.3.297'. [ 119.619876][ T7045] netlink: 71 bytes leftover after parsing attributes in process `syz.0.300'. [ 120.356940][ T7081] netlink: 'syz.0.310': attribute type 29 has an invalid length. [ 120.394608][ T7081] lo speed is unknown, defaulting to 1000 [ 120.429131][ T7081] lo speed is unknown, defaulting to 1000 [ 120.433920][ T7084] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 120.551787][ T7084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.591740][ T7090] xt_hashlimit: max too large, truncated to 1048576 [ 120.601089][ T7081] lo speed is unknown, defaulting to 1000 [ 120.661713][ T7081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.722931][ T7081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.839834][ T7081] lo speed is unknown, defaulting to 1000 [ 120.848837][ T7081] lo speed is unknown, defaulting to 1000 [ 120.862183][ T7081] lo speed is unknown, defaulting to 1000 [ 120.876351][ T7081] lo speed is unknown, defaulting to 1000 [ 120.929809][ T7081] lo speed is unknown, defaulting to 1000 [ 120.997545][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 120.999177][ T7112] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 121.588423][ T7140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.767256][ T7164] netlink: 'syz.0.330': attribute type 9 has an invalid length. [ 122.074692][ T7174] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.115326][ T7174] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 122.143466][ T7174] gretap1: entered promiscuous mode [ 122.183251][ T7174] gretap1: entered allmulticast mode [ 122.231698][ T7177] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 122.246890][ T7177] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 122.320037][ T7187] pim6reg1: entered promiscuous mode [ 122.344925][ T7187] pim6reg1: entered allmulticast mode [ 122.460178][ T7190] netlink: 'syz.4.337': attribute type 16 has an invalid length. [ 122.829904][ T7203] syzkaller0: entered promiscuous mode [ 122.850582][ T7203] syzkaller0: entered allmulticast mode [ 122.885114][ T7212] openvswitch: netlink: Unknown key attributes 2 [ 123.269217][ T7231] dvmrp0: entered allmulticast mode [ 123.494626][ T7238] IPv6: sit3: Disabled Multicast RS [ 123.496180][ T7243] Unknown options in mask b7f2 [ 123.521699][ T7238] sit3: entered allmulticast mode [ 123.524956][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e326c00: rx timeout, send abort [ 123.665868][ T7252] __nla_validate_parse: 6 callbacks suppressed [ 123.665890][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.352'. [ 123.735518][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 123.747087][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 124.035978][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e326c00: abort rx timeout. Force session deactivation [ 124.251054][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 124.269077][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 124.889185][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 125.063962][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 125.710366][ T7358] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 125.778706][ T7367] netlink: 'syz.2.372': attribute type 4 has an invalid length. [ 126.165984][ T7388] netlink: 324 bytes leftover after parsing attributes in process `syz.2.378'. [ 126.439382][ T7398] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 126.448467][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 126.562911][ T7402] tap0: tun_chr_ioctl cmd 1074025672 [ 126.589213][ T7402] tap0: ignored: set checksum disabled [ 126.826078][ T7413] netlink: 'syz.4.386': attribute type 25 has an invalid length. [ 126.867129][ T7413] netlink: 'syz.4.386': attribute type 7 has an invalid length. [ 126.892902][ T7413] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 126.921077][ T7413] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 126.952321][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 127.459180][ T7438] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 127.500627][ T7442] tipc: Started in network mode [ 127.510345][ T7442] tipc: Node identity ac14140f, cluster identity 4711 [ 127.539378][ T7442] tipc: New replicast peer: 255.255.255.255 [ 127.551065][ T7442] tipc: Enabled bearer , priority 10 [ 127.921440][ T7463] tipc: Invalid UDP bearer configuration [ 127.921500][ T7463] tipc: Enabling of bearer rejected, failed to enable media [ 128.164610][ T7478] dvmrp0: entered allmulticast mode [ 128.180649][ T7478] dvmrp0: left allmulticast mode [ 128.498698][ T7496] sctp: [Deprecated]: syz.1.413 (pid 7496) Use of int in max_burst socket option. [ 128.498698][ T7496] Use struct sctp_assoc_value instead [ 128.666675][ T10] tipc: Node number set to 2886997007 [ 129.330694][ T7534] __nla_validate_parse: 10 callbacks suppressed [ 129.330717][ T7534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.424'. [ 129.539241][ T7542] netlink: 56 bytes leftover after parsing attributes in process `syz.3.428'. [ 129.838144][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 129.932981][ T7563] netlink: 232 bytes leftover after parsing attributes in process `syz.3.432'. [ 129.998584][ T7568] netlink: 'syz.2.434': attribute type 142 has an invalid length. [ 130.436012][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.438'. [ 130.649985][ T7604] x_tables: duplicate underflow at hook 2 [ 130.695889][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 130.872766][ T7609] x_tables: duplicate underflow at hook 1 [ 131.459092][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 131.575712][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 131.726622][ T7650] veth0: entered promiscuous mode [ 131.945524][ T30] audit: type=1800 audit(1763860633.897:2): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="memory.events" dev="tmpfs" ino=473 res=0 errno=0 [ 132.031938][ T7660] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 132.252488][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 132.421963][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 133.276096][ T7657] veth1_to_bond: entered allmulticast mode [ 133.302980][ T7660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.321605][ T7663] vlan2: entered allmulticast mode [ 133.327556][ T7663] bond2: entered allmulticast mode [ 133.350051][ T7668] bond2: (slave gretap1): making interface the new active one [ 133.357724][ T7668] gretap1: entered allmulticast mode [ 133.365700][ T7668] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 133.379901][ T7668] syz.2.460 (7668) used greatest stack depth: 18008 bytes left [ 133.403566][ T7672] bond0: (slave bond_slave_1): Releasing backup interface [ 133.464110][ T7645] veth0: left promiscuous mode [ 133.778636][ T7701] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 134.060842][ T7714] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 134.088350][ T7714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.178665][ T7716] nbd0: detected capacity change from 0 to 127 [ 134.233535][ T52] block nbd0: Receive control failed (result -104) [ 134.287877][ T5883] block nbd0: Send control failed (result -32) [ 134.300060][ T7737] batman_adv: batadv0: Adding interface: vlan3 [ 134.314833][ T5883] block nbd0: Request send failed, requeueing [ 134.333438][ T7737] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.341331][ T56] block nbd0: Dead connection, failed to find a fallback [ 134.374860][ T7731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.395051][ T56] block nbd0: shutting down sockets [ 134.402500][ T56] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.412977][ T56] Buffer I/O error on dev nbd0, logical block 3, async page read [ 134.439025][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.494871][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.506390][ T7737] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 134.606092][ T7722] __nla_validate_parse: 4 callbacks suppressed [ 134.606111][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 134.621466][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 134.760623][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.484'. [ 135.122023][ T7770] lo: entered promiscuous mode [ 135.138606][ T7770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.464379][ T7770] syz.1.489 (7770) used greatest stack depth: 17832 bytes left [ 135.811225][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 136.139355][ T7820] tipc: Started in network mode [ 136.145376][ T7820] tipc: Node identity 6260b92de769, cluster identity 4711 [ 136.176759][ T7820] tipc: Enabled bearer , priority 0 [ 136.202210][ T7820] syzkaller0: entered promiscuous mode [ 136.230424][ T7820] syzkaller0: entered allmulticast mode [ 136.257629][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 136.288950][ T7820] tipc: Resetting bearer [ 136.295646][ T7820] syzkaller0: tun_net_xmit 90 [ 136.312956][ T7819] tipc: Resetting bearer [ 136.362052][ T7819] tipc: Disabling bearer [ 136.400037][ T7829] tipc: Enabling of bearer rejected, failed to enable media [ 136.644282][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 136.720245][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 137.006170][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 137.026897][ T5891] IPVS: starting estimator thread 0... [ 137.084960][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 137.157801][ T7871] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.473025][ T7897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 137.515479][ T7897] IPv4: Oversized IP packet from 127.202.26.0 [ 137.797789][ T7913] netlink: 108 bytes leftover after parsing attributes in process `syz.0.529'. [ 138.147548][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.154025][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.250798][ T7938] sctp: [Deprecated]: syz.1.537 (pid 7938) Use of int in max_burst socket option deprecated. [ 138.250798][ T7938] Use struct sctp_assoc_value instead [ 138.548065][ T7947] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 138.800531][ T7949] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 139.183100][ T7971] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 139.183691][ T7982] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 139.264482][ T7971] bond3 (unregistering): Released all slaves [ 139.398858][ T7982] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 139.430917][ T7983] gretap2: entered promiscuous mode [ 139.540102][ T7994] gretap2: entered promiscuous mode [ 139.782835][ T8013] __nla_validate_parse: 3 callbacks suppressed [ 139.782855][ T8013] netlink: 256 bytes leftover after parsing attributes in process `syz.3.556'. [ 139.814065][ T8013] unsupported nlmsg_type 40 [ 140.065755][ T8022] can: request_module (can-proto-4) failed. [ 140.363695][ T8044] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 140.367873][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 140.393264][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.565'. [ 140.994826][ T8066] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.573'. [ 141.007537][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 141.064510][ T8068] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 141.102251][ T8072] netlink: 'syz.0.576': attribute type 39 has an invalid length. [ 141.322218][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 141.359951][ T8085] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 141.377919][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 141.472595][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 141.516242][ T8085] bond1: entered promiscuous mode [ 141.517874][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 141.522007][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.553137][ T8085] bond1: (slave bridge2): making interface the new active one [ 141.575209][ T8085] bridge2: entered promiscuous mode [ 141.583293][ T8085] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 141.594151][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 141.606702][ T8085] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 141.768290][ T8094] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 142.177762][ T8122] Cannot find add_set index 2 as target [ 142.307823][ T8129] netlink: 'syz.3.594': attribute type 62 has an invalid length. [ 142.568487][ T8137] Driver unsupported XDP return value 0 on prog (id 199) dev N/A, expect packet loss! [ 143.112582][ T8162] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 143.144997][ T8162] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 143.182428][ T8162] Unsupported xt match [ 143.182450][ T8162] unable to load match [ 143.813569][ T8194] tipc: Enabled bearer , priority 0 [ 143.835740][ T8196] syzkaller0: entered promiscuous mode [ 143.849889][ T8196] syzkaller0: entered allmulticast mode [ 143.914404][ T8194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 143.965755][ T8196] xt_hashlimit: size too large, truncated to 1048576 [ 144.063148][ T8190] tipc: Resetting bearer [ 144.107594][ T8190] tipc: Disabling bearer [ 144.713368][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.745007][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.763675][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.771632][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.172486][ T8262] __nla_validate_parse: 11 callbacks suppressed [ 145.172506][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 145.495973][ T8277] netlink: 64 bytes leftover after parsing attributes in process `syz.2.638'. [ 145.732306][ T8293] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 146.005570][ T8313] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 146.289156][ T8319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'. [ 146.704629][ T8332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 146.828977][ T8346] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 147.000847][ T8359] netlink: 'syz.3.661': attribute type 11 has an invalid length. [ 147.224216][ T8362] bond4 (unregistering): Released all slaves [ 147.263353][ T8371] xt_HMARK: proto mask must be zero with L3 mode [ 147.554630][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 147.647623][ T8391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'. [ 147.676940][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 147.734877][ T8397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.758279][ T8397] netlink: 35 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.771289][ T8397] netlink: 'syz.2.673': attribute type 5 has an invalid length. [ 147.796627][ T8397] netlink: 'syz.2.673': attribute type 6 has an invalid length. [ 147.822908][ T8397] netlink: 35 bytes leftover after parsing attributes in process `syz.2.673'. [ 147.837530][ T8401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.851746][ T8401] syzkaller1: entered promiscuous mode [ 147.883798][ T8401] syzkaller1: entered allmulticast mode [ 147.913281][ T8397] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 148.143052][ T8414] netlink: 'syz.4.678': attribute type 10 has an invalid length. [ 148.180538][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.229680][ T8414] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.342680][ T8420] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 148.446059][ T8420] bond4 (unregistering): Released all slaves [ 149.429160][ T8459] xt_l2tp: invalid flags combination: 0 [ 149.977204][ T8492] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 149.998940][ T8492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.209278][ T8505] __nla_validate_parse: 6 callbacks suppressed [ 150.209301][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 150.260328][ T8505] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 150.571829][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 150.813887][ T8535] netlink: 'syz.4.714': attribute type 3 has an invalid length. [ 150.822109][ T8536] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 150.853689][ T8535] netlink: 666 bytes leftover after parsing attributes in process `syz.4.714'. [ 150.886640][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 150.909403][ T8531] netlink: 96 bytes leftover after parsing attributes in process `syz.3.715'. [ 151.219904][ T8553] x_tables: unsorted entry at hook 1 [ 151.688901][ T8577] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 151.859540][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 152.367199][ T8620] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 152.721126][ T8639] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 152.942979][ T8653] sch_fq: defrate 0 ignored. [ 152.950466][ T8653] unsupported nla_type 33542 [ 153.243478][ T8672] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.259413][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 153.259572][ T8672] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.278428][ T8672] gretap1: entered promiscuous mode [ 153.284372][ T8672] gretap1: entered allmulticast mode [ 153.642130][ T8686] netlink: 'syz.3.754': attribute type 5 has an invalid length. [ 153.643997][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.755'. [ 153.677671][ T8686] openvswitch: netlink: nsh attr 0 has unexpected len 8188 expected 0 [ 153.699194][ T8686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.713663][ T8686] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.754'. [ 153.859688][ T8697] bond1: ARP target 1.0.0.0 is already present [ 153.865960][ T8697] bond1: option arp_ip_target: invalid value (1) [ 153.911865][ T8697] bond1 (unregistering): Released all slaves [ 153.998345][ T8703] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 154.016714][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.048904][ T8703] ipt_ECN: cannot use operation on non-tcp rule [ 154.188044][ T8720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.764'. [ 154.197436][ T8719] netlink: 164 bytes leftover after parsing attributes in process `syz.3.761'. [ 154.433083][ T8735] syz.3.767 uses old SIOCAX25GETINFO [ 154.871160][ T8752] netlink: 'syz.3.774': attribute type 9 has an invalid length. [ 154.929253][ T8752] netlink: 'syz.3.774': attribute type 11 has an invalid length. [ 154.968160][ T8752] netlink: 'syz.3.774': attribute type 12 has an invalid length. [ 155.021863][ T8752] openvswitch: netlink: Message has 4 unknown bytes. [ 155.118788][ T8766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.126146][ T8765] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 155.149551][ T8766] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 155.290226][ T8776] __nla_validate_parse: 8 callbacks suppressed [ 155.290249][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 155.448289][ T8780] tipc: Started in network mode [ 155.466719][ T8780] tipc: Node identity 3697663321ab, cluster identity 4711 [ 155.474169][ T8780] tipc: Enabled bearer , priority 0 [ 155.527039][ T8779] syzkaller0: entered promiscuous mode [ 155.532601][ T8779] syzkaller0: entered allmulticast mode [ 155.663622][ T8779] C: renamed from team_slave_0 (while UP) [ 155.675137][ T8779] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 155.701530][ T8779] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 155.727756][ T8792] sit0: entered promiscuous mode [ 155.744254][ T8792] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 155.754896][ T8792] netlink: 1 bytes leftover after parsing attributes in process `syz.1.783'. [ 155.801934][ T8778] tipc: Resetting bearer [ 155.941675][ T8778] tipc: Disabling bearer [ 156.002610][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 156.016675][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 156.053227][ T8799] bridge0: port 3(vlan2) entered blocking state [ 156.097357][ T8799] bridge0: port 3(vlan2) entered disabled state [ 156.116906][ T8799] vlan2: entered allmulticast mode [ 156.132967][ T8799] bridge0: entered allmulticast mode [ 156.168998][ T8799] vlan2: left allmulticast mode [ 156.173957][ T8799] bridge0: left allmulticast mode [ 156.262630][ T8812] netlink: 84 bytes leftover after parsing attributes in process `syz.2.787'. [ 156.542622][ T8818] netlink: 48 bytes leftover after parsing attributes in process `syz.2.791'. [ 156.966840][ T8845] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 157.028868][ T8845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.101784][ T8847] bond3: (slave veth5): Enslaving as an active interface with a down link [ 157.129443][ T8845] bond3: (slave veth0_to_bond): making interface the new active one [ 157.145455][ T8845] veth0_to_bond: entered promiscuous mode [ 157.152669][ T8845] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 157.162157][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.800'. [ 157.271267][ T8858] netlink: 'syz.0.801': attribute type 13 has an invalid length. [ 157.295080][ T8858] veth0_macvtap: left promiscuous mode [ 157.317528][ T8858] macvtap0: entered allmulticast mode [ 157.330902][ T8858] macvtap0: refused to change device tx_queue_len [ 157.410061][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 157.551442][ T8862] bond3 (unregistering): Released all slaves [ 157.591917][ T8872] : renamed from veth1_macvtap (while UP) [ 157.593006][ T8878] netlink: 'syz.4.807': attribute type 9 has an invalid length. [ 157.724906][ T8884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.802321][ T8889] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 157.835144][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.896984][ T8889] bridge_slave_1: left allmulticast mode [ 157.902710][ T8889] bridge_slave_1: left promiscuous mode [ 157.926564][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.990648][ T8889] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.370048][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 158.435436][ T8923] sctp: [Deprecated]: syz.2.820 (pid 8923) Use of int in maxseg socket option. [ 158.435436][ T8923] Use struct sctp_assoc_value instead [ 158.490037][ T8923] sctp: [Deprecated]: syz.2.820 (pid 8923) Use of int in maxseg socket option. [ 158.490037][ T8923] Use struct sctp_assoc_value instead [ 158.743920][ T8941] netlink: 76 bytes leftover after parsing attributes in process `syz.4.824'. [ 158.895472][ T8947] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 158.911157][ T8947] netlink: 'syz.0.826': attribute type 4 has an invalid length. [ 158.952425][ T8948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.313221][ T8999] __nla_validate_parse: 1 callbacks suppressed [ 160.313242][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 160.342203][ T9005] ipt_ECN: cannot use operation on non-tcp rule [ 160.404087][ T9009] lo speed is unknown, defaulting to 1000 [ 160.731633][ T9026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.847'. [ 160.819464][ T9031] xt_bpf: check failed: parse error [ 160.939395][ T30] audit: type=1800 audit(1763860662.897:3): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.851" name="memory.events" dev="tmpfs" ino=882 res=0 errno=0 [ 161.001511][ T30] audit: type=1804 audit(1763860662.897:4): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.851" name="/newroot/169/memory.events" dev="tmpfs" ino=882 res=1 errno=0 [ 161.150286][ T9048] x_tables: unsorted underflow at hook 2 [ 161.237735][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 161.416415][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 161.761761][ T9071] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 161.839416][ T9071] bond1 (unregistering): Released all slaves [ 161.938101][ T9090] netlink: 112 bytes leftover after parsing attributes in process `syz.3.864'. [ 161.958413][ T9085] veth7: entered allmulticast mode [ 162.205748][ T9104] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.870'. [ 162.305236][ T5198] udevd[5198]: worker [7119] terminated by signal 33 (Unknown signal 33) [ 162.356142][ T5198] udevd[5198]: worker [7119] failed while handling '/devices/virtual/block/loop4' [ 162.500540][ T9118] netlink: 'syz.2.873': attribute type 7 has an invalid length. [ 162.528133][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 162.542221][ T9118] bridge_slave_1: left allmulticast mode [ 162.573789][ T9118] bridge_slave_1: left promiscuous mode [ 162.587628][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.649979][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 162.671153][ T9129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.877'. [ 162.698556][ T9118] bridge_slave_0: left allmulticast mode [ 162.704410][ T9118] bridge_slave_0: left promiscuous mode [ 162.711495][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.769628][ T9137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.879'. [ 162.805414][ T9139] ip6t_srh: unknown srh invflags 4000 [ 162.980161][ T9146] syzkaller1: entered promiscuous mode [ 163.016535][ T9146] syzkaller1: entered allmulticast mode [ 163.291882][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.299757][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.625054][ T5891] lo speed is unknown, defaulting to 1000 [ 163.648571][ T5891] syz2: Port: 1 Link DOWN [ 163.686765][ T34] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.723549][ T34] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.739374][ T34] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.752163][ T34] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.852875][ T34] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.872183][ T34] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.913235][ T34] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.956798][ T34] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.100051][ T9199] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 164.172576][ T9198] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 164.384430][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 30 seconds [ 164.401656][ T56] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 30 seconds [ 164.415996][ T56] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 30 seconds [ 164.756418][ T9238] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 164.912265][ T9247] netlink: 'syz.1.908': attribute type 39 has an invalid length. [ 164.979155][ T9252] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 165.165864][ T9266] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 165.755313][ T9291] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 165.843532][ T9293] __nla_validate_parse: 10 callbacks suppressed [ 165.843555][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 166.031253][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 166.068661][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 166.092310][ T9307] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.923'. [ 166.092310][ T9306] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.923'. [ 166.320930][ T9323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.336970][ T9323] bond0: (slave rose0): Enslaving as an active interface with an up link [ 167.056843][ T9361] netlink: 4640 bytes leftover after parsing attributes in process `syz.4.935'. [ 167.095437][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 167.134425][ T30] audit: type=1107 audit(1763860669.087:5): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 167.372652][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 168.049058][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.945'. [ 168.189659][ T9420] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 168.239676][ T9420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.245811][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 168.277494][ T3463] veth0_to_bond: left promiscuous mode [ 169.137124][ T9428] ip6gretap1: entered allmulticast mode [ 169.155309][ T9435] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 169.195796][ T9435] 9: entered promiscuous mode [ 169.344499][ T9439] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 169.524237][ T9439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.669832][ T9439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.887926][ T9439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.934890][ T9466] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 169.952927][ T9466] bond5 (unregistering): Released all slaves [ 170.189442][ T9439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.405844][ T9492] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 170.434388][ T9492] bridge_slave_1: left allmulticast mode [ 170.454637][ T9492] bridge_slave_1: left promiscuous mode [ 170.476587][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.624531][ T9492] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 170.665641][ T9510] sctp: [Deprecated]: syz.2.977 (pid 9510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.665641][ T9510] Use struct sctp_sack_info instead [ 171.103572][ T8195] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.174092][ T8201] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.282001][ T9531] __nla_validate_parse: 2 callbacks suppressed [ 171.282024][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 171.301338][ T8203] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.330606][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'. [ 171.354837][ T8195] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.558220][ T9545] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.986'. [ 172.015485][ T9568] netlink: 'syz.4.996': attribute type 9 has an invalid length. [ 172.130295][ T9569] bond3: option mode: invalid value (133) [ 172.234019][ T9569] bond3 (unregistering): Released all slaves [ 173.229364][ T9617] tipc: Started in network mode [ 173.234335][ T9617] tipc: Node identity 080211, cluster identity 4711 [ 173.246773][ T9617] tipc: Enabled bearer , priority 0 [ 173.267582][ T9617] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 173.287126][ T9617] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 173.320010][ T9617] netlink: 'syz.2.1007': attribute type 8 has an invalid length. [ 173.373496][ T9624] sch_tbf: peakrate 8 is lower than or equals to rate 65536 ! [ 173.597442][ T9628] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 173.605330][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1010'. [ 173.639594][ T9628] dummy0: entered promiscuous mode [ 173.655635][ T9628] bridge0: port 2(dummy0) entered blocking state [ 173.677518][ T9639] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 173.686101][ T9639] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 173.695472][ T9628] bridge0: port 2(dummy0) entered disabled state [ 173.702733][ T9628] dummy0: entered allmulticast mode [ 173.899793][ T9648] netlink: 'syz.1.1017': attribute type 21 has an invalid length. [ 173.927703][ T9648] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1017'. [ 174.363925][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 174.373473][ T5891] tipc: Node number set to 134353152 [ 174.403331][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 174.599430][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 174.948542][ T9709] sctp: [Deprecated]: syz.2.1035 (pid 9709) Use of int in max_burst socket option. [ 174.948542][ T9709] Use struct sctp_assoc_value instead [ 175.220534][ T9723] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 175.234818][ T9725] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 175.368278][ T9730] tipc: Enabling of bearer rejected, already enabled [ 175.518010][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 175.729147][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.755638][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.987722][ T8195] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.029304][ T8195] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.160049][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 176.179198][ T8195] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.201127][ T8195] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.431445][ T9780] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 176.837869][ T9806] bond3: entered allmulticast mode [ 176.843687][ T9806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.866602][ T9806] bridge0: port 1(bond3) entered blocking state [ 176.883322][ T9806] bridge0: port 1(bond3) entered disabled state [ 177.084161][ T9825] __nla_validate_parse: 1 callbacks suppressed [ 177.084182][ T9825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1066'. [ 177.114330][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 177.225884][ T9833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.243917][ T9835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.675019][ T9862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1076'. [ 177.895696][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 178.792957][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 179.167363][ T9905] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1091'. [ 179.378103][ T9914] Cannot find set identified by id 0 to match [ 179.487672][ T9923] Cannot find del_set index 0 as target [ 179.565837][ T9927] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 180.834551][ T9982] tipc: Enabling of bearer rejected, failed to enable media [ 180.914889][ T9980] syzkaller0: entered promiscuous mode [ 180.946856][ T9980] syzkaller0: entered allmulticast mode [ 181.039248][ T9991] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 181.069137][ T9998] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1123'. [ 181.207510][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 182.223832][T10006] : entered promiscuous mode [ 182.229113][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 182.399165][T10012] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1126'. [ 194.457645][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 60 seconds [ 194.457868][ T5198] udevd[5198]: worker [5883] /devices/virtual/block/nbd0 is taking a long time [ 194.477734][ T56] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 60 seconds [ 194.477803][ T56] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 60 seconds [ 199.581321][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.587917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.172267][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 201.318362][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 201.460693][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1137'. [ 201.497573][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 201.676068][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 201.685799][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 201.881732][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3f800: rx timeout, send abort [ 202.025607][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 202.082285][T10084] syzkaller1: entered promiscuous mode [ 202.089840][T10084] syzkaller1: entered allmulticast mode [ 202.110486][T10089] xt_socket: unknown flags 0x50 [ 202.122703][T10084] macsec0: entered promiscuous mode [ 202.131075][T10084] bridge0: entered promiscuous mode [ 202.161245][T10084] macsec0: entered allmulticast mode [ 202.176541][T10084] bridge0: entered allmulticast mode [ 202.192841][T10084] bridge0: port 3(macsec0) entered blocking state [ 202.208774][T10084] bridge0: port 3(macsec0) entered disabled state [ 202.258229][T10084] bridge0: left allmulticast mode [ 202.263338][T10084] bridge0: left promiscuous mode [ 202.344069][T10096] IPVS: set_ctl: invalid protocol: 108 172.20.20.37:20004 [ 202.384977][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3ec00: rx timeout, send abort [ 202.393395][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3f800: abort rx timeout. Force session deactivation [ 202.518039][T10106] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.893314][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059f3ec00: abort rx timeout. Force session deactivation [ 202.921554][T10125] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1155'. [ 202.955905][T10125] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1155'. [ 202.985485][T10124] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1155'. [ 203.158286][T10137] nbd1: detected capacity change from 0 to 127 [ 203.188379][ T52] block nbd1: Receive control failed (result -104) [ 203.326879][T10147] syzkaller1: entered promiscuous mode [ 203.332426][T10147] syzkaller1: entered allmulticast mode [ 203.531677][T10166] xt_l2tp: v2 sid > 0xffff: 1114112 [ 203.683729][T10173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.774832][T10176] netlink: 'syz.3.1170': attribute type 32 has an invalid length. [ 203.830834][T10176] bond3: Setting coupled_control to off (0) [ 203.937375][T10182] syzkaller0: entered promiscuous mode [ 203.943041][T10182] syzkaller0: entered allmulticast mode [ 203.954469][T10182] 0: reclassify loop, rule prio 0, protocol 800 [ 204.273160][T10208] syzkaller0: entered promiscuous mode [ 204.278859][T10208] syzkaller0: entered allmulticast mode [ 205.663500][T10261] netlink: 'syz.1.1193': attribute type 21 has an invalid length. [ 206.031529][T10276] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 206.103429][T10286] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 206.265549][T10292] netlink: 'syz.0.1203': attribute type 11 has an invalid length. [ 206.301515][T10292] __nla_validate_parse: 11 callbacks suppressed [ 206.301534][T10292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1203'. [ 206.529193][T10309] netlink: 'syz.1.1205': attribute type 29 has an invalid length. [ 206.566043][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 206.605145][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 206.751947][T10321] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1211'. [ 206.786599][T10321] nbd: illegal input index -8454144 [ 206.805098][T10301] syz.2.1208: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.826367][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 206.846643][T10321] block nbd2: Unsupported socket: should be TCP or UNIX. [ 206.855878][T10324] batadv0: entered allmulticast mode [ 206.867405][T10301] CPU: 1 UID: 0 PID: 10301 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(full) [ 206.867442][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.867464][T10301] Call Trace: [ 206.867473][T10301] [ 206.867482][T10301] dump_stack_lvl+0x189/0x250 [ 206.867521][T10301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.867552][T10301] ? __pfx__printk+0x10/0x10 [ 206.867576][T10301] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.867606][T10301] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.867638][T10301] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.867672][T10301] warn_alloc+0x214/0x310 [ 206.867713][T10301] ? __pfx_warn_alloc+0x10/0x10 [ 206.867755][T10301] ? __get_vm_area_node+0x28f/0x300 [ 206.867786][T10301] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 206.867814][T10301] __vmalloc_node_range_noprof+0x690/0x12d0 [ 206.867881][T10301] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.867912][T10301] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 206.867939][T10301] ? rcu_is_watching+0x15/0xb0 [ 206.867966][T10301] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 206.867989][T10301] __kvmalloc_node_noprof+0x674/0x910 [ 206.868024][T10301] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 206.868046][T10301] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 206.868076][T10301] ? kfree+0x19a/0x6d0 [ 206.868101][T10301] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 206.868130][T10301] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 206.868171][T10301] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 206.868193][T10301] ? __fget_files+0x2a/0x420 [ 206.868217][T10301] ? __fget_files+0x2a/0x420 [ 206.868238][T10301] ? __fget_files+0x2a/0x420 [ 206.868262][T10301] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 206.868294][T10301] link_create+0x673/0x850 [ 206.868324][T10301] __sys_bpf+0x6be/0x860 [ 206.868347][T10301] ? __pfx___sys_bpf+0x10/0x10 [ 206.868391][T10301] ? rcu_is_watching+0x15/0xb0 [ 206.868433][T10301] __x64_sys_bpf+0x7c/0x90 [ 206.868467][T10301] do_syscall_64+0xfa/0xfa0 [ 206.868498][T10301] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.868529][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.868551][T10301] ? clear_bhb_loop+0x60/0xb0 [ 206.868579][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.868600][T10301] RIP: 0033:0x7f37d838f749 [ 206.868631][T10301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.868649][T10301] RSP: 002b:00007f37d9285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.868673][T10301] RAX: ffffffffffffffda RBX: 00007f37d85e6090 RCX: 00007f37d838f749 [ 206.868689][T10301] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 206.868703][T10301] RBP: 00007f37d8413f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.868716][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.868728][T10301] R13: 00007f37d85e6128 R14: 00007f37d85e6090 R15: 00007ffd499e0818 [ 206.868765][T10301] [ 206.869864][T10301] Mem-Info: [ 206.962603][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 207.040275][T10301] active_anon:5019 inactive_anon:0 isolated_anon:0 [ 207.040275][T10301] active_file:2627 inactive_file:39927 isolated_file:0 [ 207.040275][T10301] unevictable:768 dirty:58 writeback:0 [ 207.040275][T10301] slab_reclaimable:10702 slab_unreclaimable:98644 [ 207.040275][T10301] mapped:29033 shmem:1357 pagetables:1133 [ 207.040275][T10301] sec_pagetables:0 bounce:0 [ 207.040275][T10301] kernel_misc_reclaimable:0 [ 207.040275][T10301] free:1324296 free_pcp:13388 free_cma:0 [ 207.040349][T10301] Node 0 active_anon:20076kB inactive_anon:0kB active_file:10508kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116132kB dirty:228kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13324kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.040408][T10301] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.040462][T10301] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.040534][T10301] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 207.040586][T10301] Node 0 DMA32 free:1390196kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20076kB inactive_anon:0kB active_file:10508kB inactive_file:159504kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:35036kB local_pcp:18660kB free_cma:0kB [ 207.040656][T10301] lowmem_reserve[]: 0 0 0 0 0 [ 207.040705][T10301] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.040768][T10301] lowmem_reserve[]: 0 0 0 0 0 [ 207.040829][T10301] Node 1 Normal free:3891628kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18552kB local_pcp:11840kB free_cma:0kB [ 207.040896][T10301] lowmem_reserve[]: 0 0 0 0 0 [ 207.040945][T10301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.041099][T10301] Node 0 DMA32: 1064*4kB (UME) 254*8kB (ME) 92*16kB (ME) 41*32kB (UME) 55*64kB (UM) 42*128kB (UME) [ 207.337684][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 207.378178][T10301] 26*256kB (UME) 29*512kB (UM) 17*1024kB (UM) 9*2048kB (UM) 321*4096kB (UM) = 1390128kB [ 207.489697][T10301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.501728][T10301] Node 1 Normal: 155*4kB (UME) 45*8kB (UME) 37*16kB (UME) 89*32kB (UME) 24*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891908kB [ 207.573180][T10334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.604323][T10301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.655577][T10301] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.747574][T10301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.766182][T10301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.777109][T10301] 43908 total pagecache pages [ 207.781887][T10301] 0 pages in swap cache [ 207.786066][T10301] Free swap = 124996kB [ 207.789558][T10334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.790752][T10301] Total swap = 124996kB [ 207.840215][T10301] 2097051 pages RAM [ 207.850857][T10301] 0 pages HighMem/MovableOnly [ 207.866073][T10301] 424121 pages reserved [ 207.870953][T10301] 0 pages cma reserved [ 207.904772][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 207.938256][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'. [ 207.947630][T10341] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1215'. [ 208.464170][T10362] netlink: 'syz.4.1221': attribute type 33 has an invalid length. [ 209.331521][T10420] pimreg: entered allmulticast mode [ 209.358841][T10421] netlink: 'syz.0.1236': attribute type 3 has an invalid length. [ 209.372373][T10421] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 209.433993][T10421] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 209.465015][T10421] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 209.747608][T10435] syzkaller0: entered promiscuous mode [ 209.773592][T10435] syzkaller0: entered allmulticast mode [ 209.851729][T10435] tipc: Enabled bearer , priority 10 [ 209.870367][T10433] netlink: 'syz.3.1240': attribute type 4 has an invalid length. [ 209.921168][T10434] tipc: Resetting bearer [ 210.021724][T10434] tipc: Disabling bearer [ 210.093007][T10446] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 210.360503][T10461] syzkaller0: entered promiscuous mode [ 210.368607][T10461] syzkaller0: entered allmulticast mode [ 210.900912][T10482] syzkaller0: entered promiscuous mode [ 210.936916][T10482] syzkaller0: entered allmulticast mode [ 211.084767][T10497] tipc: Enabling of bearer rejected, already enabled [ 211.120763][T10482] tipc: Enabled bearer , priority 10 [ 211.152623][T10481] tipc: Resetting bearer [ 211.241167][T10481] tipc: Disabling bearer [ 211.544751][T10518] SET target dimension over the limit! [ 211.545137][T10519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.637151][T10520] __nla_validate_parse: 16 callbacks suppressed [ 211.637172][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 211.681043][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 211.900490][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.906968][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.913031][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 212.029832][T10537] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 212.041087][ T9760] lo speed is unknown, defaulting to 1000 [ 212.047183][ T9760] syz2: Port: 1 Link ACTIVE [ 212.239647][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 212.240456][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 212.288848][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 212.290400][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 212.455391][T10553] tipc: Enabling of bearer rejected, already enabled [ 212.774383][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 212.795265][T10578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1285'. [ 212.837720][T10578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1285'. [ 212.892273][T10580] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1285'. [ 212.955313][T10586] syzkaller1: entered promiscuous mode [ 212.977335][T10586] syzkaller1: entered allmulticast mode [ 213.065624][T10600] netlink: 'syz.4.1290': attribute type 12 has an invalid length. [ 213.076200][T10600] netlink: 'syz.4.1290': attribute type 29 has an invalid length. [ 213.158154][T10599] syzkaller0: entered promiscuous mode [ 213.161241][T10606] Cannot find set identified by id 1 to match [ 213.174212][T10599] syzkaller0: entered allmulticast mode [ 213.217865][T10599] tipc: Enabled bearer , priority 0 [ 213.236355][T10594] tipc: Resetting bearer [ 213.334811][T10594] tipc: Disabling bearer [ 213.402607][T10617] netlink: 'syz.0.1295': attribute type 28 has an invalid length. [ 213.426773][T10617] netlink: 'syz.0.1295': attribute type 3 has an invalid length. [ 213.452974][T10619] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 213.557536][T10619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.670536][T10622] bond4: (slave geneve2): making interface the new active one [ 213.691294][T10622] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 213.703870][ T3463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.743014][ T3463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.794823][T10634] netlink: 'syz.0.1301': attribute type 8 has an invalid length. [ 213.922209][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.947595][ T3463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.350773][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.393557][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.779610][T10689] nbd: couldn't find device at index 204 [ 214.791344][T10692] syzkaller1: entered promiscuous mode [ 214.800832][T10692] syzkaller1: entered allmulticast mode [ 215.093928][T10698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.116703][T10698] bond0 (unregistering): Released all slaves [ 215.198715][ T9744] IPVS: starting estimator thread 0... [ 215.212077][T10702] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 215.307780][T10703] IPVS: using max 27 ests per chain, 64800 per kthread [ 215.830137][T10738] netlink: 'syz.0.1337': attribute type 10 has an invalid length. [ 215.851609][T10744] nbd: illegal input index 2958377 [ 215.863170][T10738] team0: Port device veth1_macvtap added [ 216.385752][T10773] tunl0: entered promiscuous mode [ 216.416005][T10773] gre0: entered promiscuous mode [ 216.449070][T10777] x_tables: duplicate underflow at hook 1 [ 216.459810][T10773] gretap0: entered promiscuous mode [ 216.472572][T10773] erspan0: entered promiscuous mode [ 216.485201][T10773] ip_vti0: entered promiscuous mode [ 216.497334][T10778] netlink: 'syz.0.1351': attribute type 16 has an invalid length. [ 216.534548][T10784] bond4 (unregistering): Released all slaves [ 217.283734][T10822] __nla_validate_parse: 18 callbacks suppressed [ 217.283754][T10822] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1362'. [ 217.336327][T10826] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1363'. [ 217.437184][T10828] ip6gre1: entered allmulticast mode [ 217.516067][T10830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1366'. [ 217.621064][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 217.865452][T10848] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 218.019970][T10858] vlan2: entered allmulticast mode [ 218.031735][T10858] hsr0: entered allmulticast mode [ 218.038971][T10860] Unsupported ieee802154 address type: 0 [ 218.046041][T10858] hsr_slave_0: entered allmulticast mode [ 218.066930][T10858] hsr_slave_1: entered allmulticast mode [ 218.095120][T10862] netlink: 'syz.0.1376': attribute type 21 has an invalid length. [ 218.103619][T10862] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1376'. [ 218.144307][T10848] macvlan4: entered promiscuous mode [ 218.153687][T10848] macvlan4: entered allmulticast mode [ 218.232417][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 218.621215][T10890] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 218.907104][T10906] netlink: 'syz.3.1388': attribute type 21 has an invalid length. [ 218.940202][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.962936][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.557850][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1388'. [ 219.593295][T10931] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 219.596865][ T68] netdevsim netdevsim2 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.632392][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.661002][T10924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1390'. [ 219.709002][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 219.731784][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 219.821315][T10931] bond6: entered promiscuous mode [ 219.852911][T10931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.887796][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.031781][T10948] netlink: 'syz.2.1397': attribute type 6 has an invalid length. [ 220.075347][T10946] bond4 (unregistering): Released all slaves [ 220.106931][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605221][T10957] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 221.761783][T10975] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 221.883705][T10983] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 221.961219][T10987] tipc: Enabling of bearer rejected, media not registered [ 222.010402][T10987] tipc: Enabling of bearer rejected, media not registered [ 222.432846][T11010] __nla_validate_parse: 4 callbacks suppressed [ 222.432868][T11010] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1415'. [ 222.450293][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 222.583367][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 222.621391][T11017] xt_l2tp: invalid flags combination: 0 [ 222.639010][T11013] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.884219][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 222.917902][T11033] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1423'. [ 222.931673][T11035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.002552][T11042] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1425'. [ 223.071785][T11035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.104696][T11035] bond1: (slave vxcan7): The slave device specified does not support setting the MAC address [ 223.154173][T11035] bond1: (slave vxcan7): Error -95 calling set_mac_address [ 223.504794][T11055] netlink: 'syz.1.1430': attribute type 1 has an invalid length. [ 223.543731][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1430'. [ 223.852952][T11069] ipt_REJECT: TCP_RESET invalid for non-tcp [ 223.929800][T11075] netlink: 'syz.3.1433': attribute type 11 has an invalid length. [ 223.966651][T11075] netlink: 'syz.3.1433': attribute type 11 has an invalid length. [ 223.997714][T11075] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1433'. [ 224.073729][T11080] syzkaller0: entered promiscuous mode [ 224.090568][T11080] syzkaller0: entered allmulticast mode [ 224.176250][T11080] tipc: Enabled bearer , priority 0 [ 224.317326][T11078] tipc: Resetting bearer [ 224.410837][T11078] tipc: Disabling bearer [ 224.538495][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 90 seconds [ 224.549544][ T56] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 90 seconds [ 224.560770][ T56] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 90 seconds [ 224.635214][T11099] tipc: Enabling of bearer rejected, already enabled [ 224.679245][T11105] ip6t_srh: unknown srh match flags 5F28 [ 224.753062][ T6376] tipc: Resetting bearer [ 224.899638][T11119] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1444'. [ 225.192555][T11131] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1450'. [ 226.147159][T11202] tipc: Enabled bearer , priority 0 [ 226.154948][T11199] syzkaller0: entered promiscuous mode [ 226.160821][T11199] syzkaller0: entered allmulticast mode [ 226.169993][T11199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.250398][T11202] tipc: Resetting bearer [ 226.274221][T11196] tipc: Resetting bearer [ 226.290024][T11207] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 226.310823][T11196] tipc: Disabling bearer [ 226.433837][T11209] lo speed is unknown, defaulting to 1000 [ 226.602254][T11227] team0: Port device team_slave_0 removed [ 226.628471][T11227] team0: Port device team_slave_1 removed [ 226.640474][T11227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.660239][T11227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.672450][T11227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.683224][T11233] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 226.717897][T11233] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.732895][T11230] chnl_net:caif_netlink_parms(): no params data found [ 226.778618][T11233] netlink: 'syz.0.1477': attribute type 11 has an invalid length. [ 227.233134][T11260] tipc: Enabling of bearer rejected, failed to enable media [ 227.466070][T11277] __nla_validate_parse: 9 callbacks suppressed [ 227.466092][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 227.517066][T11277] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 227.588684][ T5843] Bluetooth: hci4: link tx timeout [ 227.595690][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.768140][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1495'. [ 227.824849][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 227.834353][T11292] netlink: zone id is out of range [ 227.842572][T11292] netlink: zone id is out of range [ 227.859789][T11292] netlink: set zone limit has 8 unknown bytes [ 227.992110][ T5836] Bluetooth: hci4: link tx timeout [ 227.999471][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.009342][T11301] tipc: Enabling of bearer rejected, already enabled [ 228.061395][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 228.072920][T11303] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1501'. [ 228.272728][T11320] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 228.282650][T11320] bond5: option packets_per_slave: allowed values 0 - 65535 [ 228.295359][T11320] bond5 (unregistering): Released all slaves [ 228.333339][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 228.490070][T11329] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1509'. [ 228.502951][T11331] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 228.520236][T11329] vlan4: entered allmulticast mode [ 228.525750][T11329] erspan0: entered allmulticast mode [ 228.579003][T11331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.633835][T11331] gretap3: entered promiscuous mode [ 228.650390][T11331] bond8: (slave gretap3): making interface the new active one [ 228.659336][T11331] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 228.721877][T11337] syzkaller0: entered promiscuous mode [ 228.741554][T11337] syzkaller0: entered allmulticast mode [ 228.799033][T11337] tipc: Enabled bearer , priority 0 [ 228.827920][T11336] tipc: Resetting bearer [ 228.930302][T11336] tipc: Disabling bearer [ 228.969749][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1517'. [ 229.123456][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 229.407214][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'. [ 229.518564][T11380] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.526092][T11381] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.562605][T11388] tipc: Resetting bearer [ 229.573882][T11387] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 229.584399][T11387] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 229.595313][T11386] tipc: Enabling of bearer rejected, already enabled [ 229.618812][T11385] tipc: Enabled bearer , priority 0 [ 229.627992][T11385] syzkaller0: entered promiscuous mode [ 229.636039][T11385] syzkaller0: entered allmulticast mode [ 229.656915][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 229.684643][T11385] tipc: Resetting bearer [ 229.707328][T11383] tipc: Resetting bearer [ 229.757371][T11383] tipc: Disabling bearer [ 229.787307][T11396] tipc: Resetting bearer [ 229.802483][T11395] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 229.819846][T11396] tipc: Enabling of bearer rejected, already enabled [ 230.093392][T11408] netlink: 'syz.4.1536': attribute type 2 has an invalid length. [ 230.113586][T11410] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 230.134144][T11414] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 230.236323][T11416] macvlan3: entered promiscuous mode [ 230.244528][T11416] macvlan3: entered allmulticast mode [ 230.318905][T11416] bond4: entered promiscuous mode [ 230.347752][T11416] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 230.382431][T11427] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 230.392923][T11427] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 230.417235][T11416] bond4: left promiscuous mode [ 231.265880][T11478] netlink: 'syz.1.1557': attribute type 23 has an invalid length. [ 231.283026][T11477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.581901][T11491] gtp1: entered promiscuous mode [ 231.590932][T11491] gtp1: entered allmulticast mode [ 231.609513][T11490] atomic_op ffff888025135198 conn xmit_atomic 0000000000000000 [ 231.701251][T11495] bridge_slave_1: left allmulticast mode [ 231.719995][T11495] bridge_slave_1: left promiscuous mode [ 231.730952][T11495] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.752075][T11495] bridge_slave_0: left allmulticast mode [ 231.758580][T11495] bridge_slave_0: left promiscuous mode [ 231.765120][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.991436][T11507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.024143][T11507] veth3: entered promiscuous mode [ 232.033865][T11507] bond5: (slave veth3): Enslaving as an active interface with a down link [ 232.155282][T11507] veth5: entered promiscuous mode [ 232.166309][T11507] bond5: (slave veth5): Enslaving as an active interface with a down link [ 232.181128][T11515] bond5: entered allmulticast mode [ 232.498079][T11519] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.568869][T11523] veth7: entered promiscuous mode [ 232.585695][T11523] bond6: (slave veth7): Enslaving as an active interface with an up link [ 232.597462][T11525] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 232.618606][ T30] audit: type=1800 audit(1763860734.577:6): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1573" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1548 res=0 errno=0 [ 233.459615][T11572] __nla_validate_parse: 10 callbacks suppressed [ 233.459636][T11572] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1588'. [ 233.464163][T11570] lo speed is unknown, defaulting to 1000 [ 233.504515][ T11] block nbd1: Possible stuck request ffff888025340000: control (read@0,1024B). Runtime 30 seconds [ 233.516368][ T11] block nbd1: Possible stuck request ffff8880253401c0: control (read@1024,1024B). Runtime 30 seconds [ 233.534577][ T11] block nbd1: Possible stuck request ffff888025340380: control (read@2048,1024B). Runtime 30 seconds [ 233.548774][ T11] block nbd1: Possible stuck request ffff888025340540: control (read@3072,1024B). Runtime 30 seconds [ 233.586260][T11572] bond9 (unregistering): Released all slaves [ 233.713800][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 233.901020][T11594] ip6t_REJECT: ECHOREPLY is not supported [ 234.084839][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 234.475521][T11626] x_tables: unsorted underflow at hook 2 [ 234.877537][T11609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.889564][T11623] validate_nla: 3 callbacks suppressed [ 234.889586][T11623] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 234.917298][T11623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1601'. [ 235.127267][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 235.214150][T11648] bond0: Error: Cannot enslave bond to itself. [ 235.489142][T11663] x_tables: ip_tables: ah match: only valid for protocol 51 [ 235.589485][T11665] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1610'. [ 236.015755][T11690] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 236.026594][T11690] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 236.035410][T11690] tipc: Resetting bearer [ 236.069855][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 236.173175][T11693] syzkaller1: entered promiscuous mode [ 236.193225][T11693] syzkaller1: entered allmulticast mode [ 236.376042][T11710] veth0: entered promiscuous mode [ 236.423243][T11709] veth0: left promiscuous mode [ 236.491500][T11714] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1631'. [ 236.566386][T11714] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1631'. [ 236.583174][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 236.614000][T11720] netlink: 'syz.4.1633': attribute type 7 has an invalid length. [ 236.642605][T11720] netlink: 'syz.4.1633': attribute type 8 has an invalid length. [ 236.877331][T11731] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 237.040266][T11738] nbd: illegal input index -8454144 [ 237.046416][T11741] nbd: illegal input index -8454144 [ 238.064295][ T9736] IPVS: starting estimator thread 0... [ 238.095345][T11802] tipc: Enabling of bearer rejected, failed to enable media [ 238.170350][T11799] IPVS: using max 29 ests per chain, 69600 per kthread [ 238.317027][T11811] x_tables: duplicate underflow at hook 1 [ 238.528198][T11822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.546130][T11824] netlink: 'syz.0.1661': attribute type 27 has an invalid length. [ 238.603281][T11825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.079247][T11845] warn_alloc: 3 callbacks suppressed [ 239.079275][T11845] syz.4.1670: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.130000][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.4.1670 Not tainted syzkaller #0 PREEMPT(full) [ 239.130033][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.130047][T11845] Call Trace: [ 239.130057][T11845] [ 239.130066][T11845] dump_stack_lvl+0x189/0x250 [ 239.130110][T11845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.130143][T11845] ? __pfx__printk+0x10/0x10 [ 239.130173][T11845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 239.130207][T11845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 239.130243][T11845] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 239.130279][T11845] warn_alloc+0x214/0x310 [ 239.130314][T11845] ? stack_depot_save_flags+0x40/0x860 [ 239.130356][T11845] ? __pfx_warn_alloc+0x10/0x10 [ 239.130393][T11845] ? kasan_save_track+0x3e/0x80 [ 239.130425][T11845] ? __kasan_kmalloc+0x93/0xb0 [ 239.130460][T11845] ? xsk_setsockopt+0x4dc/0x8d0 [ 239.130486][T11845] ? do_sock_setsockopt+0x17c/0x1b0 [ 239.130508][T11845] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 239.130529][T11845] ? do_syscall_64+0xfa/0xfa0 [ 239.130561][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.130596][T11845] __vmalloc_node_range_noprof+0x125/0x12d0 [ 239.130675][T11845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.130715][T11845] ? __kasan_kmalloc+0x93/0xb0 [ 239.130758][T11845] vmalloc_user_noprof+0xad/0xf0 [ 239.130792][T11845] ? xskq_create+0xbf/0x170 [ 239.130824][T11845] xskq_create+0xbf/0x170 [ 239.131012][T11845] xsk_init_queue+0xb0/0x110 [ 239.131072][T11845] xsk_setsockopt+0x4dc/0x8d0 [ 239.131108][T11845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.131142][T11845] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.131178][T11845] ? aa_sock_opt_perm+0xff/0x1b0 [ 239.131218][T11845] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 239.131241][T11845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 239.131273][T11845] do_sock_setsockopt+0x17c/0x1b0 [ 239.131304][T11845] __x64_sys_setsockopt+0x13f/0x1b0 [ 239.131331][T11845] do_syscall_64+0xfa/0xfa0 [ 239.131361][T11845] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.131392][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.131413][T11845] ? clear_bhb_loop+0x60/0xb0 [ 239.131438][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.131458][T11845] RIP: 0033:0x7f8a6df8f749 [ 239.131544][T11845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.131867][T11845] RSP: 002b:00007f8a6ef0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.131905][T11845] RAX: ffffffffffffffda RBX: 00007f8a6e1e5fa0 RCX: 00007f8a6df8f749 [ 239.131923][T11845] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 239.131939][T11845] RBP: 00007f8a6e013f91 R08: 0000000000000004 R09: 0000000000000000 [ 239.131953][T11845] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.131968][T11845] R13: 00007f8a6e1e6038 R14: 00007f8a6e1e5fa0 R15: 00007ffc56d4d078 [ 239.132010][T11845] [ 239.132214][T11845] Mem-Info: [ 239.294966][T11860] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 239.326572][T11845] active_anon:4860 inactive_anon:0 isolated_anon:0 [ 239.326572][T11845] active_file:2820 inactive_file:39939 isolated_file:0 [ 239.326572][T11845] unevictable:768 dirty:69 writeback:0 [ 239.326572][T11845] slab_reclaimable:11098 slab_unreclaimable:101141 [ 239.326572][T11845] mapped:29056 shmem:1356 pagetables:1018 [ 239.326572][T11845] sec_pagetables:0 bounce:0 [ 239.326572][T11845] kernel_misc_reclaimable:0 [ 239.326572][T11845] free:1326049 free_pcp:14675 free_cma:0 [ 239.596738][T11859] netlink: 'syz.2.1672': attribute type 58 has an invalid length. [ 239.617733][T11862] __nla_validate_parse: 9 callbacks suppressed [ 239.617756][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'. [ 239.624620][T11845] Node 0 active_anon:19640kB inactive_anon:0kB active_file:11280kB inactive_file:159552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116224kB dirty:276kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13544kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.646965][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 239.685981][T11862] dummy0: left allmulticast mode [ 239.696098][T11862] bridge0: port 2(dummy0) entered disabled state [ 239.697072][T11845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.750350][T11845] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.787632][T11845] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 239.794135][T11845] Node 0 DMA32 free:1397500kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19540kB inactive_anon:0kB active_file:11280kB inactive_file:159552kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:39828kB local_pcp:18568kB free_cma:0kB [ 239.795596][T11862] bridge_slave_0: left allmulticast mode [ 239.837108][T11845] lowmem_reserve[]: 0 0 0 0 0 [ 239.845477][T11845] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.885824][T11862] bridge_slave_0: left promiscuous mode [ 239.897449][T11845] lowmem_reserve[]: 0 0 0 0 0 [ 239.927473][T11845] Node 1 Normal free:3892420kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17760kB local_pcp:6176kB free_cma:0kB [ 239.961809][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.025286][T11845] lowmem_reserve[]: 0 0 0 0 0 [ 240.044611][T11845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.062549][T11845] Node 0 DMA32: 1629*4kB (UM) 989*8kB (UM) 226*16kB (UM) 267*32kB (UME) 94*64kB (UME) 36*128kB (UM) 22*256kB (UM) 18*512kB (U) 20*1024kB (UME) 7*2048kB (UME) 320*4096kB (UM) = 1397596kB [ 240.083557][T11845] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.097924][T11845] Node 1 Normal: 155*4kB (UME) 45*8kB (UME) 37*16kB (UME) 99*32kB (UME) 27*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892420kB [ 240.118029][T11845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.128831][T11845] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.140645][T11845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.151349][T11845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.163531][T11845] 44112 total pagecache pages [ 240.168931][T11845] 0 pages in swap cache [ 240.173217][T11845] Free swap = 124996kB [ 240.177674][T11845] Total swap = 124996kB [ 240.183491][T11845] 2097051 pages RAM [ 240.189490][T11845] 0 pages HighMem/MovableOnly [ 240.196183][T11845] 424121 pages reserved [ 240.215942][T11845] 0 pages cma reserved [ 240.481022][T11896] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1682'. [ 240.538615][T11896] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1682'. [ 240.549217][T11896] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1682'. [ 240.858121][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 241.581473][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1692'. [ 241.721616][T11951] x_tables: duplicate underflow at hook 2 [ 241.779853][T11957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1694'. [ 241.793601][T11955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1694'. [ 241.922907][T11964] netlink: 'syz.3.1697': attribute type 15 has an invalid length. [ 241.949721][T11965] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.972217][T11961] lo speed is unknown, defaulting to 1000 [ 241.981204][T11964] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 242.041359][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1697'. [ 242.348363][T11987] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 242.468757][T11978] vlan4: entered promiscuous mode [ 242.492764][T11978] bridge0: entered promiscuous mode [ 242.524596][T11978] bond3: entered promiscuous mode [ 242.615855][T11987] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.019219][T12007] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 243.046679][T12007] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 243.347189][T12029] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 243.359163][T12029] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 243.369680][T12029] tipc: Resetting bearer [ 243.381038][T12029] tipc: Enabling of bearer rejected, already enabled [ 243.409451][T12032] tipc: Enabled bearer , priority 0 [ 243.417997][T12032] dummy0: entered allmulticast mode [ 243.438217][T12032] tipc: Resetting bearer [ 243.530603][T12031] tipc: Disabling bearer [ 244.211938][T12059] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 244.241554][T12061] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 244.250982][T12063] syzkaller0: entered promiscuous mode [ 244.263143][T12063] syzkaller0: entered allmulticast mode [ 244.421770][T12061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.438982][T12067] tipc: Enabled bearer , priority 0 [ 244.492833][T12071] bond0: entered promiscuous mode [ 244.519686][T12071] bond_slave_0: entered promiscuous mode [ 244.530032][T12071] bond_slave_1: entered promiscuous mode [ 244.537600][T12071] bridge_slave_1: entered promiscuous mode [ 244.546917][T12071] gretap0: entered promiscuous mode [ 244.557501][T12071] hsr1: entered promiscuous mode [ 244.564005][T12062] tipc: Resetting bearer [ 244.698183][T12082] sctp: [Deprecated]: syz.4.1731 (pid 12082) Use of int in max_burst socket option. [ 244.698183][T12082] Use struct sctp_assoc_value instead [ 244.699360][T12062] tipc: Disabling bearer [ 244.773111][T12089] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 244.782174][T12089] __nla_validate_parse: 7 callbacks suppressed [ 244.782190][T12089] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1734'. [ 244.810529][T12089] IPv6: NLM_F_REPLACE set, but no existing node found! [ 244.820095][T12091] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.051819][T12100] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 245.252912][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1740'. [ 245.268687][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1740'. [ 245.532694][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 245.571155][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 245.703384][T12126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 245.811848][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1751'. [ 246.022893][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 246.090828][T12153] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 246.138958][T12153] netlink: 'syz.1.1752': attribute type 2 has an invalid length. [ 246.397765][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 246.420170][T12172] netlink: 'syz.1.1759': attribute type 17 has an invalid length. [ 246.441689][T12175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1761'. [ 246.441754][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 246.495989][T12172] bond0: entered allmulticast mode [ 246.539201][T12172] bond_slave_0: entered allmulticast mode [ 246.554567][T12172] bond_slave_1: entered allmulticast mode [ 246.563155][T12172] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 247.296210][T12200] openvswitch: netlink: Unknown nsh attribute 0 [ 247.304796][T12200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.486993][T12212] xt_cgroup: path and classid specified [ 248.283423][T12242] syzkaller0: entered promiscuous mode [ 248.289892][T12242] syzkaller0: entered allmulticast mode [ 248.321573][T12242] tipc: Enabled bearer , priority 0 [ 248.336820][T12241] tipc: Resetting bearer [ 248.389883][T12241] tipc: Disabling bearer [ 248.663590][T12258] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 248.674052][T12258] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 248.682668][T12258] tipc: Resetting bearer [ 248.901700][T12263] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 248.922632][T12263] bond6 (unregistering): Released all slaves [ 249.282601][T12289] syzkaller0: entered promiscuous mode [ 249.310402][T12289] syzkaller0: entered allmulticast mode [ 249.408784][T12289] tipc: Enabled bearer , priority 0 [ 249.492651][T12288] tipc: Resetting bearer [ 249.563859][T12288] tipc: Disabling bearer [ 249.860048][ T5843] block nbd2: Receive control failed (result -32) [ 249.915857][T12316] __nla_validate_parse: 5 callbacks suppressed [ 249.915881][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 250.062915][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 250.279723][T12329] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1808'. [ 250.297185][T12329] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1808'. [ 250.319411][T12331] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1807'. [ 250.354103][T12329] veth9: entered promiscuous mode [ 250.363112][T12329] veth9: entered allmulticast mode [ 250.398137][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 250.411090][T12336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.495832][T12341] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 250.615925][T12347] netlink: 'syz.0.1812': attribute type 11 has an invalid length. [ 250.629474][T12347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1812'. [ 250.646006][T12348] netlink: 'syz.0.1812': attribute type 11 has an invalid length. [ 250.670060][T12348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1812'. [ 250.715821][T12351] syzkaller0: entered promiscuous mode [ 250.755240][T12351] syzkaller0: entered allmulticast mode [ 250.844476][T12351] tipc: Enabled bearer , priority 0 [ 250.878680][T12350] tipc: Resetting bearer [ 250.958876][T12350] tipc: Disabling bearer [ 251.554443][T12388] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 251.622858][T12388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.652114][T12392] bond2: (slave gretap2): making interface the new active one [ 251.666921][T12392] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 251.931530][T12401] syzkaller0: entered promiscuous mode [ 251.939094][T12401] syzkaller0: entered allmulticast mode [ 251.991331][T12401] tipc: Enabled bearer , priority 0 [ 252.005278][T12400] tipc: Resetting bearer [ 252.051984][T12400] tipc: Disabling bearer [ 252.104246][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 252.117134][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 252.524803][T12421] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 252.586078][T12421] xt_hashlimit: max too large, truncated to 1048576 [ 252.618803][T12417] xt_CT: No such helper "syz1" [ 253.104151][T12440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 253.814572][T12472] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 253.999536][T12472] bond3: (slave ip6gretap1): making interface the new active one [ 254.036053][T12472] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 254.618056][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 120 seconds [ 254.635429][ T56] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 120 seconds [ 254.648593][ T56] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 120 seconds [ 254.988922][T12540] sctp: [Deprecated]: syz.1.1864 (pid 12540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.988922][T12540] Use struct sctp_sack_info instead [ 255.028536][T12546] __nla_validate_parse: 20 callbacks suppressed [ 255.028554][T12546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1867'. [ 255.165458][T12562] netlink: 'syz.4.1865': attribute type 9 has an invalid length. [ 255.230049][T12537] netlink: 'syz.4.1865': attribute type 4 has an invalid length. [ 255.258269][T12562] netlink: 'syz.4.1865': attribute type 6 has an invalid length. [ 255.693901][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 255.829869][T12613] vlan3: entered promiscuous mode [ 255.907606][T12613] bridge0: entered promiscuous mode [ 256.309330][T12631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.780690][T12655] x_tables: unsorted entry at hook 2 [ 256.797358][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 256.840052][T12655] dvmrp0: left allmulticast mode [ 257.043676][T12690] xt_hashlimit: size too large, truncated to 1048576 [ 257.113002][T12677] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1878'. [ 257.147838][T12677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.535162][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 257.957477][T12729] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 258.001999][T12732] warn_alloc: 2 callbacks suppressed [ 258.002023][T12732] syz.1.1884: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 258.040402][T12729] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 258.064592][T12732] ,cpuset=/,mems_allowed=0-1 [ 258.184242][T12732] CPU: 1 UID: 0 PID: 12732 Comm: syz.1.1884 Not tainted syzkaller #0 PREEMPT(full) [ 258.184277][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.184307][T12732] Call Trace: [ 258.184317][T12732] [ 258.184327][T12732] dump_stack_lvl+0x189/0x250 [ 258.184366][T12732] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 258.184405][T12732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.184436][T12732] ? __pfx__printk+0x10/0x10 [ 258.184462][T12732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 258.184496][T12732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 258.184537][T12732] warn_alloc+0x214/0x310 [ 258.184572][T12732] ? stack_depot_save_flags+0x40/0x860 [ 258.184614][T12732] ? __pfx_warn_alloc+0x10/0x10 [ 258.184652][T12732] ? kasan_save_track+0x3e/0x80 [ 258.184684][T12732] ? __kasan_kmalloc+0x93/0xb0 [ 258.184716][T12732] ? xsk_setsockopt+0x4dc/0x8d0 [ 258.184743][T12732] ? do_sock_setsockopt+0x17c/0x1b0 [ 258.184766][T12732] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 258.184786][T12732] ? do_syscall_64+0xfa/0xfa0 [ 258.184820][T12732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.184855][T12732] __vmalloc_node_range_noprof+0x125/0x12d0 [ 258.184933][T12732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.184974][T12732] ? __kasan_kmalloc+0x93/0xb0 [ 258.185017][T12732] vmalloc_user_noprof+0xad/0xf0 [ 258.185052][T12732] ? xskq_create+0xbf/0x170 [ 258.185084][T12732] xskq_create+0xbf/0x170 [ 258.185119][T12732] xsk_init_queue+0xb0/0x110 [ 258.185153][T12732] xsk_setsockopt+0x4dc/0x8d0 [ 258.185187][T12732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.185220][T12732] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.185256][T12732] ? aa_sock_opt_perm+0xff/0x1b0 [ 258.185293][T12732] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 258.185312][T12732] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.185336][T12732] do_sock_setsockopt+0x17c/0x1b0 [ 258.185359][T12732] __x64_sys_setsockopt+0x13f/0x1b0 [ 258.185383][T12732] do_syscall_64+0xfa/0xfa0 [ 258.185408][T12732] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.185435][T12732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.185452][T12732] ? clear_bhb_loop+0x60/0xb0 [ 258.185474][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.185491][T12732] RIP: 0033:0x7fb086b8f749 [ 258.185509][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.185525][T12732] RSP: 002b:00007fb087ac0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.185545][T12732] RAX: ffffffffffffffda RBX: 00007fb086de6090 RCX: 00007fb086b8f749 [ 258.185559][T12732] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 258.185570][T12732] RBP: 00007fb086c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 258.185581][T12732] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.185592][T12732] R13: 00007fb086de6128 R14: 00007fb086de6090 R15: 00007fff11e3fdb8 [ 258.185623][T12732] [ 258.185635][T12732] Mem-Info: [ 258.586411][T12732] active_anon:5022 inactive_anon:0 isolated_anon:0 [ 258.586411][T12732] active_file:2820 inactive_file:39947 isolated_file:0 [ 258.586411][T12732] unevictable:768 dirty:108 writeback:0 [ 258.586411][T12732] slab_reclaimable:11105 slab_unreclaimable:101543 [ 258.586411][T12732] mapped:29222 shmem:1360 pagetables:1075 [ 258.586411][T12732] sec_pagetables:0 bounce:0 [ 258.586411][T12732] kernel_misc_reclaimable:0 [ 258.586411][T12732] free:1324618 free_pcp:14422 free_cma:0 [ 258.658907][T12742] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 258.683413][T12732] Node 0 active_anon:20088kB inactive_anon:0kB active_file:11280kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116888kB dirty:432kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13880kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.727814][T12732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 258.767250][T12732] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.813588][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 258.827454][T12732] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 258.838533][T12732] Node 0 DMA32 free:1389616kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20088kB inactive_anon:0kB active_file:11280kB inactive_file:159584kB unevictable:1536kB writepending:432kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:39396kB local_pcp:21100kB free_cma:0kB [ 258.885961][T12732] lowmem_reserve[]: 0 0 0 0 0 [ 258.892440][T12732] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.935148][T12732] lowmem_reserve[]: 0 0 0 0 0 [ 258.943637][T12732] Node 1 Normal free:3892376kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17720kB local_pcp:11312kB free_cma:0kB [ 258.990002][T12732] lowmem_reserve[]: 0 0 0 0 0 [ 258.997445][T12732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.016110][T12732] Node 0 DMA32: 2265*4kB (UM) 1481*8kB (UME) 303*16kB (UM) 171*32kB (UM) 104*64kB (UM) 53*128kB (UME) 26*256kB (UM) 23*512kB (UME) 21*1024kB (UM) 5*2048kB (UME) 316*4096kB (UM) = 1389180kB [ 259.049424][T12732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.067742][T12732] Node 1 Normal: 89*4kB (UME) 45*8kB (UME) 37*16kB (UME) 108*32kB (UME) 31*64kB (UME) 11*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892700kB [ 259.097459][T12732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.113925][T12732] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 259.129915][T12732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.144907][T12732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.156589][T12732] 44124 total pagecache pages [ 259.161487][T12732] 0 pages in swap cache [ 259.169434][T12732] Free swap = 124996kB [ 259.174034][T12732] Total swap = 124996kB [ 259.179146][T12732] 2097051 pages RAM [ 259.184519][T12732] 0 pages HighMem/MovableOnly [ 259.191947][T12732] 424121 pages reserved [ 259.197936][T12732] 0 pages cma reserved [ 259.745253][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 260.151615][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 260.773989][T12816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'. [ 260.801384][T12814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'. [ 261.021263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.053550][T12830] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.450166][T12852] veth0: entered promiscuous mode [ 261.471977][T12851] veth0: left promiscuous mode [ 261.769110][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1919'. [ 262.047982][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 262.458309][T12882] gtp2: entered promiscuous mode [ 262.812106][T12894] netlink: 'syz.3.1931': attribute type 1 has an invalid length. [ 262.850373][T12894] netlink: 'syz.3.1931': attribute type 2 has an invalid length. [ 263.070478][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 263.352399][T12917] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 263.397664][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.578255][ T11] block nbd1: Possible stuck request ffff888025340000: control (read@0,1024B). Runtime 60 seconds [ 263.593592][ T11] block nbd1: Possible stuck request ffff8880253401c0: control (read@1024,1024B). Runtime 60 seconds [ 263.608884][ T11] block nbd1: Possible stuck request ffff888025340380: control (read@2048,1024B). Runtime 60 seconds [ 263.625304][ T11] block nbd1: Possible stuck request ffff888025340540: control (read@3072,1024B). Runtime 60 seconds [ 263.904295][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'. [ 264.186839][T12953] netlink: 'syz.0.1950': attribute type 9 has an invalid length. [ 264.267466][T12956] syzkaller0: entered promiscuous mode [ 264.275649][T12956] syzkaller0: entered allmulticast mode [ 264.386805][T12960] syzkaller1: entered promiscuous mode [ 264.393578][T12960] syzkaller1: entered allmulticast mode [ 264.411359][T12960] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1952'. [ 264.978760][T12985] netlink: 'syz.2.1961': attribute type 11 has an invalid length. [ 265.037977][T12985] netlink: 'syz.2.1961': attribute type 11 has an invalid length. [ 265.066717][T12985] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1961'. [ 265.142557][T12997] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 265.178015][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 265.328867][T13002] openvswitch: netlink: Missing key (keys=40, expected=80) [ 265.359409][T12999] openvswitch: netlink: Missing key (keys=40, expected=80) [ 265.508370][T13011] Cannot find set identified by id 65534 to match [ 265.813593][T13030] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.841901][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 266.295170][T13047] vxcan1: entered allmulticast mode [ 266.643668][T13072] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1979'. [ 267.146931][T13085] x_tables: duplicate underflow at hook 1 [ 267.199067][T13088] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 267.213074][T13088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.413759][T13102] IPv4: Oversized IP packet from 127.202.26.0 [ 267.511108][T13103] veth5: entered allmulticast mode [ 267.541588][T13101] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1989'. [ 267.562080][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 267.593591][T13111] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 267.648704][T13111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.748110][T13120] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1993'. [ 267.759100][T13120] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1993'. [ 267.855422][T13117] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 268.015771][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 268.219817][T13134] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1996'. [ 268.241451][T13134] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.464352][T13144] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 268.495366][T13144] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 268.511734][T13144] tipc: Resetting bearer [ 268.631497][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2002'. [ 268.870110][T13157] sctp: [Deprecated]: syz.2.2006 (pid 13157) Use of int in max_burst socket option. [ 268.870110][T13157] Use struct sctp_assoc_value instead [ 269.516815][T13167] netlink: 'syz.1.2009': attribute type 5 has an invalid length. [ 269.613198][T13177] pim6reg1: entered promiscuous mode [ 269.641584][T13177] pim6reg1: entered allmulticast mode [ 270.183852][T13198] bond6: Unable to set up delay as MII monitoring is disabled [ 270.253946][T13198] bond6 (unregistering): Released all slaves [ 270.304635][T13213] netlink: 'syz.0.2020': attribute type 2 has an invalid length. [ 270.578744][T13228] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 270.581588][T13210] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 270.677346][T13200] macvlan4: entered promiscuous mode [ 270.694913][T13200] macvlan4: entered allmulticast mode [ 270.704553][T13200] bond7: entered promiscuous mode [ 270.729267][T13200] bridge4: entered promiscuous mode [ 270.745774][T13200] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 270.767643][T13200] bond7: left promiscuous mode [ 270.782909][T13200] bridge4: left promiscuous mode [ 271.245592][T13247] __nla_validate_parse: 4 callbacks suppressed [ 271.245614][T13247] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2028'. [ 271.375126][T13247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.481372][T13260] xt_hashlimit: size too large, truncated to 1048576 [ 271.639582][T13267] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.682529][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 271.854718][T13269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.966181][T13275] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2038'. [ 272.029391][T13278] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2038'. [ 272.181082][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 272.562426][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 272.627512][T13301] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2046'. [ 272.697941][T13301] macvtap1: entered promiscuous mode [ 272.705375][T13301] vlan0: entered promiscuous mode [ 272.727440][T13301] macvtap1: entered allmulticast mode [ 272.758976][T13301] vlan0: entered allmulticast mode [ 272.769756][T13301] veth0_vlan: entered allmulticast mode [ 272.782087][T13304] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2049'. [ 272.795908][T13304] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2049'. [ 272.856960][T13309] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2049'. [ 272.945077][T13305] geneve3: entered promiscuous mode [ 273.036690][T13305] geneve3: entered allmulticast mode [ 273.557295][T13341] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 273.683314][T13347] IPv6: sit2: Disabled Multicast RS [ 273.737370][T13341] veth0_virt_wifi: entered allmulticast mode [ 273.879478][T13341] team0: Port device veth0_virt_wifi added [ 273.979007][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.065339][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.222698][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.274202][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.298819][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.323467][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.345270][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.530730][T13363] validate_nla: 4 callbacks suppressed [ 274.530754][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.584860][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.641008][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 274.729980][T13363] netlink: 'syz.0.2058': attribute type 8 has an invalid length. [ 275.084645][T13408] veth0: entered promiscuous mode [ 275.113117][T13408] veth0: left promiscuous mode [ 275.462041][T13420] geneve2: entered promiscuous mode [ 275.479624][T13360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 275.509707][T13360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 275.529072][ T5919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.556976][T13360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 275.636978][T13360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 275.777926][ T9736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.970882][T13440] netlink: 'syz.4.2081': attribute type 2 has an invalid length. [ 276.042987][T13357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.303549][T13458] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 276.405350][T13452] __nla_validate_parse: 6 callbacks suppressed [ 276.405375][T13452] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2086'. [ 276.665337][T13463] bond5 (unregistering): Released all slaves [ 276.728399][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 276.863460][T13466] ip6tnl3: entered promiscuous mode [ 276.880695][T13466] ip6tnl3: entered allmulticast mode [ 276.886154][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 277.003284][T13484] macsec1: entered promiscuous mode [ 277.010047][T13484] macsec1: entered allmulticast mode [ 277.046394][T13484] bond8: (slave macsec1): Error -34 calling dev_set_mtu [ 277.201807][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 277.218871][T13357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.238542][T13357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.316144][ T9736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.332778][T13502] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2096'. [ 277.380154][T13504] netlink: 'syz.1.2097': attribute type 13 has an invalid length. [ 277.396049][T13504] lo: left promiscuous mode [ 277.407733][T13504] tunl0: left promiscuous mode [ 277.415104][T13504] gre0: left promiscuous mode [ 277.423695][T13504] gretap0: left promiscuous mode [ 277.462922][T13504] erspan0: left promiscuous mode [ 277.485953][T13504] ip_vti0: left promiscuous mode [ 277.515227][T13504] sit0: left promiscuous mode [ 277.581186][T13517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2097'. [ 277.595763][T13504] bond0: left allmulticast mode [ 277.601875][T13504] bond_slave_0: left allmulticast mode [ 277.610932][T13504] bond_slave_1: left allmulticast mode [ 277.625763][T13504] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 277.667638][T13504] vxcan1: left allmulticast mode [ 277.752028][T13504] veth0_virt_wifi: left allmulticast mode [ 277.872075][T13504] gtp0: left promiscuous mode [ 277.883090][T13504] bridge1: left promiscuous mode [ 277.889966][T13504] bridge1: left allmulticast mode [ 277.904459][T13504] gretap1: left promiscuous mode [ 277.911992][T13504] gretap1: left allmulticast mode [ 277.961208][T13504] gtp2: left promiscuous mode [ 277.974133][T13504] macvtap1: left promiscuous mode [ 277.981550][T13504] vlan0: left promiscuous mode [ 277.989413][T13504] macvtap1: left allmulticast mode [ 277.996748][T13504] vlan0: left allmulticast mode [ 278.003187][T13504] veth0_vlan: left allmulticast mode [ 278.017159][T13504] ip6tnl3: left promiscuous mode [ 278.022807][T13504] ip6tnl3: left allmulticast mode [ 278.129407][T13520] lo speed is unknown, defaulting to 1000 [ 278.265901][T13532] sctp: [Deprecated]: syz.4.2103 (pid 13532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.265901][T13532] Use struct sctp_sack_info instead [ 278.306227][T13532] sctp: [Deprecated]: syz.4.2103 (pid 13532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.306227][T13532] Use struct sctp_sack_info instead [ 278.657234][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'. [ 278.735142][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'. [ 279.063279][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 279.191356][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2114'. [ 279.564137][T13600] sctp: [Deprecated]: syz.2.2121 (pid 13600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.564137][T13600] Use struct sctp_sack_info instead [ 279.694579][T13589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.748912][T13600] IPVS: Unknown mcast interface: nicvf0 [ 280.270564][T13622] batadv_slave_1: entered promiscuous mode [ 280.313260][T13622] batadv_slave_1: entered allmulticast mode [ 280.338143][T13622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.402478][T13624] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 280.639303][T13634] [ 280.644140][T13634] ====================================================== [ 280.653059][T13634] WARNING: possible circular locking dependency detected [ 280.660616][T13634] syzkaller #0 Not tainted [ 280.665595][T13634] ------------------------------------------------------ [ 280.675357][T13634] syz.1.2131/13634 is trying to acquire lock: [ 280.683562][T13634] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 280.696404][T13634] [ 280.696404][T13634] but task is already holding lock: [ 280.704777][T13634] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 280.717446][T13634] [ 280.717446][T13634] which lock already depends on the new lock. [ 280.717446][T13634] [ 280.729371][T13634] [ 280.729371][T13634] the existing dependency chain (in reverse order) is: [ 280.747530][T13634] [ 280.747530][T13634] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 280.758278][T13634] lock_acquire+0x120/0x360 [ 280.764983][T13634] _raw_spin_lock_bh+0x36/0x50 [ 280.775786][T13634] nr_rt_ioctl+0x390/0xd50 [ 280.782076][T13634] sock_do_ioctl+0xdc/0x300 [ 280.788363][T13634] sock_ioctl+0x576/0x790 [ 280.795456][T13634] __se_sys_ioctl+0xfc/0x170 [ 280.805730][T13634] do_syscall_64+0xfa/0xfa0 [ 280.811313][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.821740][T13634] [ 280.821740][T13634] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 280.834738][T13634] lock_acquire+0x120/0x360 [ 280.841558][T13634] _raw_spin_lock_bh+0x36/0x50 [ 280.849372][T13634] nr_rt_ioctl+0x193/0xd50 [ 280.859465][T13634] sock_do_ioctl+0xdc/0x300 [ 280.869756][T13634] sock_ioctl+0x576/0x790 [ 280.875617][T13634] __se_sys_ioctl+0xfc/0x170 [ 280.886104][T13634] do_syscall_64+0xfa/0xfa0 [ 280.893898][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.904416][T13634] [ 280.904416][T13634] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 280.917131][T13634] validate_chain+0xb9b/0x2140 [ 280.923607][T13634] __lock_acquire+0xab9/0xd20 [ 280.930128][T13634] lock_acquire+0x120/0x360 [ 280.937154][T13634] _raw_spin_lock_bh+0x36/0x50 [ 280.943493][T13634] nr_rt_device_down+0xa9/0x720 [ 280.950237][T13634] nr_device_event+0x137/0x150 [ 280.960427][T13634] notifier_call_chain+0x1b6/0x3e0 [ 280.966770][T13634] __dev_notify_flags+0x18d/0x2e0 [ 280.974488][T13634] netif_change_flags+0xe8/0x1a0 [ 280.983070][T13634] dev_change_flags+0x130/0x260 [ 280.990459][T13634] dev_ioctl+0x7b4/0x1150 [ 280.997269][T13634] sock_do_ioctl+0x22c/0x300 [ 281.010972][T13634] sock_ioctl+0x576/0x790 [ 281.016837][T13634] __se_sys_ioctl+0xfc/0x170 [ 281.023633][T13634] do_syscall_64+0xfa/0xfa0 [ 281.032127][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.045644][T13634] [ 281.045644][T13634] other info that might help us debug this: [ 281.045644][T13634] [ 281.058988][T13634] Chain exists of: [ 281.058988][T13634] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 281.058988][T13634] [ 281.080322][T13634] Possible unsafe locking scenario: [ 281.080322][T13634] [ 281.091046][T13634] CPU0 CPU1 [ 281.097945][T13634] ---- ---- [ 281.105854][T13634] lock(nr_neigh_list_lock); [ 281.113923][T13634] lock(&nr_node->node_lock); [ 281.129597][T13634] lock(nr_neigh_list_lock); [ 281.141718][T13634] lock(nr_node_list_lock); [ 281.147136][T13634] [ 281.147136][T13634] *** DEADLOCK *** [ 281.147136][T13634] [ 281.159548][T13634] 2 locks held by syz.1.2131/13634: [ 281.166160][T13634] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 281.182737][T13634] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 281.200224][T13634] [ 281.200224][T13634] stack backtrace: [ 281.209715][T13634] CPU: 1 UID: 0 PID: 13634 Comm: syz.1.2131 Not tainted syzkaller #0 PREEMPT(full) [ 281.209741][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.209752][T13634] Call Trace: [ 281.209762][T13634] [ 281.209771][T13634] dump_stack_lvl+0x189/0x250 [ 281.209802][T13634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.209825][T13634] ? __pfx__printk+0x10/0x10 [ 281.209844][T13634] ? print_lock_name+0xde/0x100 [ 281.209862][T13634] print_circular_bug+0x2ee/0x310 [ 281.209886][T13634] check_noncircular+0x134/0x160 [ 281.209917][T13634] validate_chain+0xb9b/0x2140 [ 281.209941][T13634] ? rt6_disable_ip+0x6b3/0x720 [ 281.209972][T13634] ? __lock_acquire+0xab9/0xd20 [ 281.209990][T13634] __lock_acquire+0xab9/0xd20 [ 281.210009][T13634] ? nr_rt_device_down+0xa9/0x720 [ 281.210029][T13634] lock_acquire+0x120/0x360 [ 281.210045][T13634] ? nr_rt_device_down+0xa9/0x720 [ 281.210071][T13634] ? nr_rt_device_down+0xa9/0x720 [ 281.210091][T13634] _raw_spin_lock_bh+0x36/0x50 [ 281.210113][T13634] ? nr_rt_device_down+0xa9/0x720 [ 281.210134][T13634] nr_rt_device_down+0xa9/0x720 [ 281.210155][T13634] ? do_raw_spin_unlock+0x122/0x240 [ 281.210182][T13634] nr_device_event+0x137/0x150 [ 281.210202][T13634] notifier_call_chain+0x1b6/0x3e0 [ 281.210226][T13634] __dev_notify_flags+0x18d/0x2e0 [ 281.210246][T13634] ? __pfx___dev_notify_flags+0x10/0x10 [ 281.210263][T13634] ? __dev_change_flags+0x4cc/0x6d0 [ 281.210283][T13634] ? __pfx___dev_change_flags+0x10/0x10 [ 281.210300][T13634] ? full_name_hash+0x92/0xe0 [ 281.210323][T13634] netif_change_flags+0xe8/0x1a0 [ 281.210343][T13634] dev_change_flags+0x130/0x260 [ 281.210362][T13634] dev_ioctl+0x7b4/0x1150 [ 281.210390][T13634] sock_do_ioctl+0x22c/0x300 [ 281.210415][T13634] ? __pfx_sock_do_ioctl+0x10/0x10 [ 281.210444][T13634] sock_ioctl+0x576/0x790 [ 281.210467][T13634] ? __pfx_sock_ioctl+0x10/0x10 [ 281.210489][T13634] ? __fget_files+0x3a0/0x420 [ 281.210505][T13634] ? __fget_files+0x2a/0x420 [ 281.210522][T13634] ? bpf_lsm_file_ioctl+0x9/0x20 [ 281.210541][T13634] ? __pfx_sock_ioctl+0x10/0x10 [ 281.210563][T13634] __se_sys_ioctl+0xfc/0x170 [ 281.210586][T13634] do_syscall_64+0xfa/0xfa0 [ 281.210611][T13634] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.210635][T13634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.210653][T13634] ? clear_bhb_loop+0x60/0xb0 [ 281.210672][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.210689][T13634] RIP: 0033:0x7fb086b8f749 [ 281.210706][T13634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.210721][T13634] RSP: 002b:00007fb087ac0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.210740][T13634] RAX: ffffffffffffffda RBX: 00007fb086de6090 RCX: 00007fb086b8f749 [ 281.210753][T13634] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 281.210764][T13634] RBP: 00007fb086c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.210775][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.210786][T13634] R13: 00007fb086de6128 R14: 00007fb086de6090 R15: 00007fff11e3fdb8 [ 281.210808][T13634] [ 281.661203][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.698992][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 150 seconds [ 284.713643][ T56] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 150 seconds [ 284.734522][ T56] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 150 seconds [ 286.440474][ T5198] udevd[5198]: worker [5890] /devices/virtual/block/nbd1 is taking a long time [ 289.176876][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration