last executing test programs: 1.718526525s ago: executing program 0 (id=2191): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25450000000e0001006e657464657673686d000019daf70188eed311ec3435a59a71997673696d30000008008e000200000048adf5da3729a483462d2ebfd4565790831a6158408ccf60c10cf197b4bac565c9c6817eab25c1265a"], 0x3c}}, 0x800) accept4(r2, &(0x7f00000005c0)=@in6, &(0x7f0000000640)=0x80, 0x80000) (async) r4 = accept4(r2, &(0x7f00000005c0)=@in6, &(0x7f0000000640)=0x80, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) r10 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x7, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x7, 0x4}, {0xfffffff9, 0x43, 0x1, 0x7}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x8, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x0, 0x1800004, 0xfffffff8, 0x400}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x1000000, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x20, 0x8000, 0x2, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'caif0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x8c0b, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x10, 0xeb, 0x0, 0x5, [0x7, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x9, [{@local, 0x3}, {@private=0xa010100, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x8c0b, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x10, 0xeb, 0x0, 0x5, [0x7, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x5e, 0x3, 0x9, [{@local, 0x3}, {@private=0xa010100, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d40)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000fc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x108, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000500)={0x42d, 0x8, 0xfffffeff, 0x2}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000500)={0x42d, 0x8, 0xfffffeff, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x130}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008000) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) 1.648869256s ago: executing program 4 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.46965735s ago: executing program 4 (id=2196): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000440)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f0000000480)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000500)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000600)="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", 0xfd}], 0x1}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000007c0)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000000b40)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000000c40)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r1, r3, 0x25, 0x18, @void}, 0x10) 1.34519326s ago: executing program 4 (id=2199): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7000009, 0x1010, r0, 0xbc473000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$cgroup_int(r1, &(0x7f0000000500)='cpu.weight.nice\x00', 0x2, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="e932ef48b1cf0714940000001b142cec59197bb103402d6045b006", @ANYRES16=r2, @ANYBLOB="100028bd7000fedbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x408c0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000540)=0x401, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000580)=0x98, 0x4) (async) bind$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e22, 0x6f41bcbb, @empty, 0x2}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f00000008c0)={0x1, 0x2, 0xffffffffffffffff, 0x7c68, 0x0, 0x3}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x5) (async) bind$inet6(r1, &(0x7f0000000900)={0xa, 0x14e22, 0xfffffff8, @local, 0x81}, 0xffffffffffffffef) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x50) (async) listen(0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xa7ba) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "1c297ff2bc261194", "736f1292deb18bc813f134cd548f82bfbf0dd9137b75aba4473e21635b2ec613", "6a9a00bf", "066b2ab706d87ab1"}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) 1.239546279s ago: executing program 4 (id=2200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0) 1.122953929s ago: executing program 3 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000500640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 1.122018035s ago: executing program 1 (id=2203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000980), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f00000009c0), 0x10) close(0x3) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000bc0)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc) sendmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000a40)={@remote, 0x87, 0x2, 0x1, 0x5, 0x1, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000ac0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000b80)}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x320) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3bc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x390, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0xc0000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0x0, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}]}}]}, 0x3bc}}, 0x20000000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000058000180060001000a000000063e3876084eae393bd0fa83353a0002852430973ca03cc8000000000000000000000000f200000001060004001f9000000a0006006c626c637200000008000810000000000c000700000000000000004c080009008000000040847308e973c1"], 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000802) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 1.118288344s ago: executing program 4 (id=2204): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@setneightbl={0x34, 0x43, 0x20, 0x70bd25, 0x25dfdbfb, {0x7}, [@NDTA_THRESH3={0x8}, @NDTA_THRESH3={0x8, 0x4, 0xffffffff}, @NDTA_THRESH1={0x8, 0x2, 0x16}, @NDTA_THRESH1={0x8, 0x2, 0x9}]}, 0x34}}, 0x0) 1.10555307s ago: executing program 2 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x48850}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="0300000061100700203e12800800010173697400140002800800140008000000080003000a010102"], 0x40}}, 0x24008044) 470.532779ms ago: executing program 3 (id=2206): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xe, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040010}}, {{&(0x7f0000000300)=@file={0x0, './cgroup/../file0/file0\x00'}, 0xfffffffffffffd2e, 0x0, 0x0, 0x0, 0x0, 0x4044040}}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000100)={'vlan0\x00', 0x2000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000100)={'vlan0\x00', 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001841000000ffffff00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 468.588315ms ago: executing program 2 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@arena={0x21, 0x0, 0x0, 0x11, 0x20000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0xa1, 0x10, 0x10000, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x10000, 0x3, 0x4, 0x4}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xae}, @jmp={0x5, 0x1, 0x0, 0x3, 0x6, 0xc, 0x8}, @generic={0x80, 0x8, 0xb, 0x3ff, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x6d, &(0x7f0000000140)=""/109, 0x41000, 0x8, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[r3, r4, r5, 0x1, r6], &(0x7f00000004c0)=[{0x5, 0x2, 0x3, 0x2}, {0x3, 0x5, 0x6, 0x7}, {0x8001, 0x3, 0x4, 0xc}, {0x3, 0x3, 0x6}, {0x3, 0x2, 0x10, 0x8}, {0x0, 0x2, 0xd, 0x1}, {0x1, 0x5, 0xd, 0x3}], 0x10, 0x4}, 0x94) 466.658549ms ago: executing program 4 (id=2208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2dc, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000028c0)={0x0}, &(0x7f0000002900)=0xc) syz_open_procfs$namespace(r3, &(0x7f0000002940)='ns/cgroup\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a5a01654de54bbd9c4950a4bcb2bb3468d47bb02f83d8ebf5334b086d31a25f22836ba4af5d"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r0, 0x9) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000efff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$inet6(r0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f0000000300)="299c5d225d1a2679427cc5283bf97fe71a48b093417b1d65726d852d8cf222c2e3cb29e4a0d879dbac39c1fd526b2fa2820ed18527dac1d74b27025ddad537dfe1f35e468f3911764d3ed1f3c596d52fd4cbdc28fce71af3518c9b93158eb315e715f00f92a530010532f0268929c7d8a12402742b459626bb914416f0416b1858420ed9a62dd0a55df2b12bc581f9ca11b8c767", &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)="13ad87594d834893bb698ff2ed93488e1954678fe744cc8ec5b3c508e8fea6f1b7bdc9bd0e5016399333cae19ac2a3d1e818979acef8886014bbd6a408931f60b89add0df5e17c1b8acc0c59da4a8f8064a99ed26db60fd4eff7f2f3a075e98fbbc07352c060307fb24b97b0b5c8a34f653c738775c2fff60c8b3e248ea2bb68a294c4733081074197c4dba78a4b041da09708666da45e234856a20da16095e5e001242c1861835524262bc11421d0fbff4667f3a20a1365b85fc7d83e28bcfb4414044cc7d8ea0a3ed2c9d5611bba92aa53ad2bdc6f1af605fc66c17878fffb44487aa9ec56222e88c6e3cc95894452504daa5602c3d4032b0ed7b0d320f59ba1402bc825448037ffae33b49b6f3b60e4806aa39476dba4b536982e670d6b3f9eb3d5facf96c46c9e1e8cec2296b88d856fabd4aaa60fc7d659fca72232de31d41d1e7b76decd1eada121d8f8ff87f5b0d5547a70bb85ca8c794d01004da59110d3fce555bb70af60d8cabb9a9749a0242584b4a9b1ec995c43d17fc5989690a8f2c3e16d91548d5e48a9f6d2a9dfd649c12afc66b2f89092b52579753573d996d444b613f5f9ff7441dafcd31cc2f787d0fab553c100c97b33fde12973dd8378ebf86888cca771881579ed5281a48224800e8334e1219b9e7f4de73ad3893fc03746cfeebf3a43dba6d5e09c25b1c1f997b4aa4c6e64f3b3b0a1a4a4e0b147af2a23e235e3b6334abb48e826215ec68e66d600f7fa105d5ffb964ea7ecfcd7f3fa0f1eb97c8bccb448dbc92f6c3f5b6527dd9dd371bac6e1ca632312de28fca376b017ed03e81da07d86cc4d8025905d9a9f18468897948539f80366924a9aa2382fa2fdb94e41341c6b3b9549dcbee67863e329214a356326e0b3ba4088005eede39305c0ea80cd27256b41696a7ea8408c91d9f5f1694934edb28af109977126cf20dde3ce835c9f0f00c405b6d78235a6b16d22cae8f666357b71bdab7db7fb22bb158340b31512e3b2a9cdc342c0ec726e2b87c3b3fcc63908900de94616e8f33f053b22b8607927d8333ff02ad7c89db3744ce2839a7eb37740310a92c31ec4cc0ccfc4891adf71b6c674dcb08d171ec5ed49496f9212938711e31ca2db93b39dd9e2054e2f29d1f769627ea72aa026eb8dd37291c91b0a53422f6884a3e0d1c9f4f59f428dc497f8ad573179494dcdb2dbc107132c782e5aec421cc6d18863c55dc6bf9743b8ee9373a2f32e1b0ddbc418d95d0477cd4ad24800897a72bb733379ee8ee954ef12034a72cd0e6f0ac28d391488c1d9c9cf489d209a3e9cc7bc0370a7149e0a6a0de5b211e7ba6cc6a040db63ae5bfcaaa1104d6996c7aa7f1afc6cded22ac1c122d012ba5ecfa33cafcc6c021c9cf7e692a84b3f5d6c3583cde0ff801521fca6bd0cb170e4330840e45af2fecbb56e85f39c0da61887fe1b7fb1a96d4c57c5747a879302299162bed3178d0d9840bc18c09b2aa3f8549b8680a69294bbd1840cffe508b6664023e916e77ffa7ea3cd7d100ccbf3a13fde707014abc8174e379ffba679f3f1621c578b1d3858e953f32e693bd95e9fe0a36c30039691f552ce7461557b4b09aa2da7885abf6d231f92da0696806f79e7292a2b9440a4a6114c53967a3f885beea24f5946a434b56fb3b71325e2736e71842021af912132293f60951cc9c3b1f7d93cdf028b083b9ad8036e7478fcab89f29b689efa29a5e27767e5365a29287c3f0e62441db7143551a174dc119bbbbcbd86cfb48c5682e9c41c51d411b5be06acc115a6d6f1e95e56e95947febb075559d860c23dc08128557e85b8a1c47d9bbca5ccedd4735643bdfbefeb443e7fe18d8579e89bcdc1ad53a0cb6969ede6b8410ef4ab2e5548b798be1490f3f2fc7c2816291c23a2b2de1df555444bbc1d78077c24e5618e4bb1ccea163bd88386b480e02398ecfde1043264e52fafb50f2cf8c1321e4ce000876462fc723898ede43ee145623dc4bc534864d270f8fe17a4885016b868b335702d56a7d8aaa70dffcf73194d3b447742334ab0c07d13ecb8bf51d3fc7198355ea16dba825ee58a827f3c013cc84a9f7f53c796e1166b2bc697ce5f8077572d1dafc2392e37e3a49b38b241dc32aca0682564a5bf4edfa92bc77f1409c915175cb39364eff5acf45bcd68c5864dea90f4c963cf0b58e575741bfa183c26ec1c7dd2f68ed322388b281ad7a139cba69e1804e0cb02a6a30d221d3c51e5eab76ab894e54916a9c6591c3c0eeef42b4477455e55cac500d72505bd0d701b1bef572163119163ea64431c94872dcd53ade511254772aa3d0215e97253f8b0a6853d9e1cf3000fd3a70aaab37868c4b207b18594644805289ed811ce54c8c45cbb678ad059709d649a3ef515f864c1807f016d0f28fd20cc9b092a565b9052a624986a719d85891f1cf49024ef54698e66ea04d303c236cd6790b82a0897c0aaec6a32595a5e1651905354f1c263a0251e697a70453d79b693d246eb91f9e511e71b531f388a8732bd502e4be82fa52bfb3e56bc49af2db3a7a4ce97ac6a508e898569f737d84707046f681083981265cbcf93e5b82ce9fd4bb4ca367d1bbff0dfdbefba79bcdc9e6160cba9edf1de3c6da12fd5e5ba5bcc68cc05dd51b5c4e514a2cd2fb79dc981082c7fde1ed0aedb9d17ac9fe9c9332768ff00c260740241aaf0a30c1533b6e8bde3a26eeb3c937e6732903ee75c69fcba604bb9a723971afbbf4a44a9f43bf7251b0127f771ec660f99857f259ebb598113457239dec64fcc30ce582663d6a3524f8a0a7af47c4f8728cbcf56cc353f2e49ec52570ea1498fee4f66cf75fbcebb4cce99706ad585663fb2962cca57156835dba4077bcb535b8e96d0171ee821c492a2b905df342a882a4f9ed0f9079a1e750f7f1ee4a13e605ae0c477cb0e133d2a240b99e9339b2e09d8318e19eeb332ca06367004106a93e97e561fe664cca1e7ec7d785a4d6b904700535f380bbb478c274abdf7bbf353ca54c239d5b007c0c39a6ea2d803af76096c31fec3f6aef67c487af75af69bf81aeaa22ebdeb6bb2911ad7649a40a8dfc2f583d818d95af6e000dfc0d0274ae920c77688fe063056d69d5aa79b4fdb91411ea00f6ff4121d2bd80f98128cdbbe30fd961188881f9d9ea7cda007317335de5515cad0a1d8b83cc2de032b9a018c2645becf66a0dd4ad8fc64ba1cc0a9fb1583b3afd59e99a7cd1a236135c790edf0100c06c92ff1535e4ad409c9fc4a55c89ebfce37ea832beee9fd49588559c2f29cec235a18238eae9affd488730829652de386ae9975a3f5542da25a931f056063328fa46b7f0787bcc899102a2fd40e59c494989df79fe8d27e765e6c3587e46739dde76bc90c76d80f7a6322b732aa879d72678857ac8e5a46d8f3678d34df00a30946cafa1e5e8ccc130ac0c26a8b00a2cf17ba36207dc898f3238b1f84cf7c6e40b4b63bbac189eed19e0d95ec18f5ac30e3ca6efd5cb4ef106c81637e5f70d63dd8f0fc3f9d09f7df47ee29f36bd0e65f44aff11f9e600842a249db64d8ea6b4881b85ebb5aaaad1a96a901341d652d1b38625a3e9692a3885236bc6945592ca7eaccc3b5a8f411954e9bd629727035aac222b00599d084b2cf18c87b2320c423a4db3dd3b5f963f1c6a70d828dc1f2b95999466d7a00f10d75d202f678ccfd59817c55c1718ec59777dffa5fb8f78ffde6bad4b4e22bc343656385bd6bdf71e27cb9618941a1d85eaa88f45fd7823732e581893e1bf5f7f41ca28311136fff69807ac581d099f3300c8e95960c108ebdf8fafcc52495fcd1247453abe8e21f8933e45c1d0cfa40f3418f1c678423dca74b70fec7e10c47e58c92615f41db2f82e0eb8b3197ca56c7141cf76dea906f993486e67988170051d5e2e644de0efea44bb062833a76c4a3824a299d595bc28322dbaf3fbc396a7e42e19322fb93ed2b2169b930dbf0393fd72dc8fd87e6689b9cfdeaef8db78d2421295a07270881be33e2c04ead67708be3434da7d038eb94c47c93799593fc8e8bc73433c84b91585937e31f69dfbb0dce1fce177a2b7bd2f71b2422dc95f0fa5e08cceb70c4fe582cd80e33ffb7358c3fb0b84d5b2aada9cd00e450723eeb30e3044be7fbc3a6914a091038d81bca806724cbe83ff6f5ad03f61ebbd6fd3c4dc42c93f6fa3fa0332977018381ed2f0cfb53496205ad77b8262a8444f08b709f5f761700cebd01c312157c74a0f087ab0843c50ce7df4d960a38971a8bdea34a2ea150d76d8e99b6632ea54505542a0a11984c724581dd165f82d0df4bd369e82ea2cef81ac89b77395d9571c8ab0a098bd7ceab17a8c4d0f68f6615e4ca01a6c03aac276e5e23408b993d87f88497d4134b1dc5d70e68c56e24025eaeb5a912d5bfa725913c816c4d2338ed2343ae93388dfb5299f566cabbb3757ab10d670e438b881470a6d3669fbbd0cc17ee2a3e9635323e5ba56fc07bdcdda803836905a5082bdb6e1f4d52840ad49a4ad630b1d8f187d8a8ee7cff2a90768b39ca284052691b44b43d4f772a59b88f4a9b95b42dbe8b4ced893c86eefd2ce4af453194708010b4417690f37288b4c5e6c9e91b2753d6ee8305efe6459c53986a97e5a34d8b54d87be649ce11d0b968b37f0eafd8c4385de7fc4b91b060f4c9db02254e7f65433555640a11fabb9fddd98cc6aa774b09531bf66fe7e73725767d1090979bec370f86462aa5bb81c0fee03b9115c2b8a896b7ddf757c77212c59ef9d66cb7f990fbd3d6b2b375d0a83cd473582b5dfe5d008154bfa347fc62f5278ec1f074cbaff7e68621883375e4506aeb4c3e3c0b880ffad942706489aa5e84a4124c68f03c5947dc64a2a33b2b8a0f740f4d48f3affc1459b412cf1783692d4764bc780d254f243947d6360eafdf6bf5d7f75f21819570300f47924e7c94253a96f4bdf9aafb11ece2685efc302b9be5d2714428ce6cdfee1f5ef456d92704d1f9cd20723ad2b2299639ef56d42cb334174cc7187394ce70934dc42f8b9066f0cdd2db6cba329c88307509b2e476b60a0f21a1c8c749e3cc1d303c7e0090684a2b25218f4cd8101cba81fc64acc56704bb98da61f81eeed4dd34dd539b4cdc8385c0b6128f152451935b866cb8181ac904e805046cd57cb1ec113545aff30f3d5b87ce2cf677c91dccf800dd6d2ba032984dc84276c79faa5617179a8ac81b6b910d79e833f76e1e19ce09a110a3e31c79259886b61467afa1d2c7a59ada40b887e40cef18413896c601350705a7acdcda9c4a745fbe448b03038aac8860edd2031b82e735f13b4396af02621b94824f792c29ef3805a180ad5d453ca434ae05ea777a70043d8b2c41a368c8f123fd3582d2bfa74be3c02e29c1ca65e10ef6db746ab6e25d28d11ee7bea67cbfd52bfba5fa9167b8a8bcd80e1e72359694bce89f7fa1b27d09bf74c08fb9f044e65952655279f77dcfde0003ff1e50fc165c4ca708232f39730538a2ef0597bc4fcceb335e84ef70771270e344bc7b36931b3f18834d483ac23a86c3e7cdd5238980d5e8d3d3d87f126e3804b3302654eb3b30c93439ff52fd0eca501298d8986a04ac8154c5217fead46575e1401c67af9cb988311f28818aea1a6217a26fe16e4d99e4e5e269f09a96f7390efe98fc2d366ecc4e67fa6b4544651337786efcf34c3a103f260af72fcb7db4fa39adc1a039959ce21d664980e10623509970c7b4a9be52326a2a6c1996403f10bbec321e6a62f1fadfe4f66f1d080560d07a454c04ce", &(0x7f00000023c0)="3777cd59e1657a0c2311e410c2f062f43c63ca949e406d1ba36032798e59e4a8701e5cf8dfd2b5e5921848b7532086c5b4ca2ff9753af255f37daf4b74996f2197c307e49885661f902722409abe0fcb3e210cff42e6ecf7a0f1ed9e2a61b94c15911e8e57b7ff66cd658bd3abfb09621fb08f2f28ba0118dcebbbf0f6c9a495321e40d1ecff2e66342574", 0x9, r5}, 0x38) 458.91229ms ago: executing program 3 (id=2209): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x3, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010101, 0x7640}, {@empty, 0xffff}, {@local, 0x1}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x20, 0x6a, 0x501, 0xffffdffd, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x0) 458.552188ms ago: executing program 0 (id=2210): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a000100ba5e589f816529500a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r1 = socket(0x26, 0x80002, 0x201002) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x1}}, 0x10) 441.616232ms ago: executing program 2 (id=2211): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000600040700000002000006000000100c0000000000"], 0x0, 0x32}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="ec62183f00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="040000000500"/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@dellink={0xfffffffffffffeed, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1032, 0x40000}, [@IFLA_CARRIER={0x0, 0x21, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000010000001900000018000180140002006970766c616e310000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a80)={'gre0\x00', r1, 0x80, 0x8000, 0x6, 0x4, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x66, 0x0, 0x8, 0x4, 0x0, @broadcast, @remote, {[@generic={0x88, 0x5, "d53e1e"}, @lsrr={0x83, 0xf, 0x30, [@remote, @multicast1, @private=0xa010100]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b40)={'hsr0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="6800000092c3d8c8eb4ef24311e4b604cb2eb100e1891c761280e4698a25b5ba30bbd098852b304c7245104de38a5b3c75270cda329f866a77de8a6fb68c87aeec991988ea8b12a78b094a8872852ead8c8334a71f065971515c1aa910986bdf0c178bd6ff952324cc52ef00a822afb419ee493b94ef9630eb13bc606ee782c3b87b9949a138f4b3531be48b8c23442aab39c4e660d3e55869d3159351c45186ffd2644e880f4f9ab892ece70f064cc0c0847d7f654f7fb60d328ee111c6ee856c26da7397130da2b23714b0a7d42687c96005a72eec7a8219d8d820dff2ce63751ad4b2a5305d2c43059d45e4138fe90f6127d582", @ANYRES16=r7, @ANYBLOB="00022dbd7000ffdbdf250700000054000180080003000200000008000300030000000800030002000000080003000100000000000100", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32, @ANYBLOB="44089818f601a505cdd7da71185d7db6066ae0b29196dc2c13bc736709e4e79a6139f991c9466e8c2e6318b41064fc605fdb6e24f4e4edc0a367226de308d9112a911994017557978b7b70f6893ce9a81cc1c8feb4517273a5066fa787a4ce1fba76acf224f5abfb08c797d481b719b5b7f43ca0dbc88510566100d9bb08c10a25ddf766f967000eabe79a70079c515c9cf2c23d76c9ad4729ce60f004c20f70f2955d4744029369ee27b8f0fef961635bdb9b2b3be9d95347dd28d63b50", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1, @ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x48001) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000138000000030a01020000000008000000000000000900010073797a30000000000900030073797a30000000000c00024000000000000000011442355f09a12bf6e4000000000000000000000a84d8a4d9cb328f7e08b4b695798cb0de3f5b6e993d19aa2b7e2c140743f04a2edbc95a94efdd02907c12f4d1e59a090000000000000091c2953882f70e34585388ce22b1d82a1c45b1512d7b642ea45228c68e12b54752f937e682d857b017b6e02d3c964c8284f55f344647f70313e96a182a7c0619faa4fdcf00b734b7ad95341d3387f97ed212948a6b99a87499", @ANYRESHEX=r12, @ANYRES32=r10, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r8, @ANYRES32=r6, @ANYRES64=r9, @ANYRES16=r11], 0x60}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x9}, 0x8) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f0000000d80)={@private2, 0x0}, &(0x7f0000000dc0)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001080)=ANY=[@ANYRES8=r14, @ANYRES16=r7, @ANYBLOB="0008281000000000000000000000b030a83cdc3399495396000000", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08000129", @ANYRESOCT=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200776c616e3100"/20], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000040) bind$inet6(r13, &(0x7f00000009c0)={0xa, 0x4e22, 0x9, @mcast1, 0xa}, 0x1c) socket$packet(0x11, 0x3, 0x300) r15 = socket(0x10, 0x803, 0x0) getsockname$packet(r15, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) 441.182723ms ago: executing program 1 (id=2212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x8000003}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200), 0x2) 439.909ms ago: executing program 3 (id=2213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0xd7, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b7000000010000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001380)={r3, &(0x7f00000013c0)='\x00\x00\x00\x00', &(0x7f0000001400)=@tcp=r1}, 0x20) write(r2, &(0x7f0000001440)='abcdefgh', 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r5, 0x1}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0xd7, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0xe) (async) shutdown(r0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b7000000010000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001380)={r3, &(0x7f00000013c0)='\x00\x00\x00\x00', &(0x7f0000001400)=@tcp=r1}, 0x20) (async) write(r2, &(0x7f0000001440)='abcdefgh', 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r5, 0x1}, 0x8) (async) 437.101882ms ago: executing program 0 (id=2214): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000540)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='\b\x00', 0x2}, {&(0x7f0000000600)="96bc14585c62", 0x6}], 0x2, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18, 0x1000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000400)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) 436.324083ms ago: executing program 0 (id=2215): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f7, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2}, 0x18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="82bbe53be6018610dd1282c879f0bcfb05d62cfc25509504abf9409bde97452ba674b815b99f0116b79bed9b5d3a31e27205a5a34244e2971d1c2d94be545fc5376ed04b1d9dec5c3d3f", 0x4a) r3 = getpid() r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x28, 0x2f, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000ac0)=0x0) r9 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000024c0)={0x0}, &(0x7f0000002500)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002540)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000002640)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002680)=0x0) r13 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0}, &(0x7f0000002700)=0xc) sendmsg$nl_generic(r13, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r14}]}, 0x1c}}, 0x0) r15 = getgid() sendmsg$netlink(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000000c0)={0x18, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x125, 0x0, 0x0, @pid=r3}]}, 0x18}, {&(0x7f00000006c0)={0x3f8, 0x1f, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xc2, 0x80, 0x0, 0x1, [@generic="a0b4a050c1d83e9eeeadc0d7c591c739096f611098cda5b3eb9cc7f887adf1fb17cee121a93871b683c3f1c5d02e175212fbfda8191477ea8f6c46bcb4a8bc97456f412088aefc0640ad8a6787b84b1f8586868200d16e238e30df855b1b454537b55aff7942cee7dcdf57fdab9628cf907c7798497a9e1c8c5da250ec994072280b05f1029019d27e11270b933ab66f70e91cae650f0ff373901256555e61cb28993ec996d303c0d9bd862ba186c767f7cfce527f34f863dd9a5b5dab7c"]}, @nested={0xd4, 0xfc, 0x0, 0x1, [@nested={0x4, 0x1b}, @nested={0x4, 0xf0}, @typed={0xb1, 0xd1, 0x0, 0x0, @binary="26dd41e2cfd67d516848743a2a36dcac8044c0cc2842b97c52007379324b75a502fe72392d2cd5a6782dd18e41485ae5677c4091494260ea2b4564dc79f76cd2271e42a8f46df8298e2e8b0aad573086c2989cd198fb118775ecfb85b2fff1861fb0ca71e387727fc119cda995be61c5db43e7a49db9fc2d8de3964d2a081601802c383b6bdd8cc59661cc9c530381c224f4e1117b4342ba39fb24a2cef66052562bc70c1ca89d7eb430b84309"}, @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@empty}]}, @generic="859b06d6526b43a9f182b6b8a5778aacee9917120b0c2b48382ea40a1f1257c104dae0c1bfd4d63f4c7153c5f91999559633dbd21859cfc67cf3d00cd4d9fca70ee750a17d3a0f449a5914c3c8905438ddbe2d11a2fd979526eee8d4ccff7ffbe4af6185ec31dad5e0abb368c594c2131a5745559bc26b873adf6f853694bb6bdac9db428a3aceb24693033bd01bb7730393961dcf90778675c0d1dd5642acd6d99aa023f98c0d6015f9bf43af27d3501a33bbc6106e6ed9a46e27869acf4ba5f73d6b5eb018", @typed={0x4, 0x130}, @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@private2}, @generic="c56ce895caa4a3be62ba20cac1c8b865df3837cc8539a5cad4914d4bf3d309666144c5ffded4bd2e4a9ba79d18de8736f301443813b62e9869ce9825c7e57c471e5cb2076bfa933ee5fe4bdfac0a346903b504fb42eac68beae11dd15131d7fd733b70a4ba546157f895703cdfdc2bc060228b5cf226758098f2f2d26a4763c5732282958ec91c9cb07f27a3aa13e521ecf589a6dbfaa9af", @typed={0x8, 0x69, 0x0, 0x0, @uid=r5}, @nested={0x14, 0xa9, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9b7d}, @typed={0x8, 0x86, 0x0, 0x0, @uid=r7}]}, @typed={0x8, 0xd5, 0x0, 0x0, @u32=0x7}, @generic="6b448fb9cd2f4207c1defbfc2f0962dea887c51cecdd62e40d0425ef18c35786fbd5354f11398f8e38992ac7cd77a6d2ff59e472c79425faa42d13f36361c08d70c106d8f29a8e67e990cf37d5cdc02298a61307a3dd187ac384aa3c603a4d2f2c35ee3db3c6429697df8a151955d9deafea259b1e82e12161bc4d659618b32f221bb99c95c9ca1469dfc36f4c0430109dd49848b264bf7553582ff79a7b4a55c01e57c907fc61585526c39996b13054c87272"]}, 0x3f8}, {&(0x7f0000000b00)={0x2c0, 0x1f, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x23f, 0x14f, 0x0, 0x1, [@generic="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", @nested={0x4, 0x131}, @nested={0x4, 0x13e}, @nested={0x4, 0x3c}, @generic="8eaa270de980faf361c32656bc4fb84b27a92c419e86e8a6b45c1256947ecbfa0f4f78d905ff6b0df5ab01bbac11b32616f07bfd4b8549da6ca41e85e2e60b04d511bfef82d0977825d5f95dd870ed40a3b04c3ccb3f41443891fc59fc214d23d7328c7ba5acd6a6cd2ad9", @typed={0xf, 0xa8, 0x0, 0x0, @str='{]*\\!)\\]+\'\x00'}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r8}, @generic="fcc01ed4848562e88147ca54433cfc63c8b7620c141eff42b496a6586379a5229da15eec43146ec585d33f25472aeb998a993cbef42bac0b8fc95fb03fc567786c03f6bcfa5fe05f78b5e8608f74642594720c2d7def6ee033b636c83482fecd19742a5ce0cda4ed42c0f9fa92ecf1c221b0ed1a3b24715a8403be4295e4090e55a5c9c2b7e286025be126d0cc3704b88b75b0bc3082e998771f24ecfb25630e11a8b002bbb426ee08c69bb793", @nested={0x4, 0x67}]}, @nested={0x6d, 0x47, 0x0, 0x1, [@nested={0x4, 0x7f}, @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @typed={0x3e, 0xdbd, 0x0, 0x0, @binary="c7f0d53cc4fa37f73993c5c72bd59280be9e95d068efc6690e584a41319c5f81b42a13fa70843f10a22251cf1f8b79657c8733ba5560ec269de3"}, @generic='@\\', @generic="0654df73eda13ea735ec96d106a706437a7a8c041fff42378c88da"]}]}, 0x2c0}, {&(0x7f0000000dc0)={0x294, 0x10, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x19a, 0x22, 0x0, 0x1, [@generic="6077df725aef42d0807e954f7a44e0e954b174d5c2af5181d1d90f5fd992674bd79c5a1a4670f081", @nested={0x4, 0x9b}, @generic="d138fe6d5174ff4e9834083a3e7baf3dca4261e7df1adbe08377f79ebece7f357dca21d71207ea9984f548f9c5549ddf9cf296b48d56d89a568b18e79f5cebc43553f5e03cbaf52868b0409b675dd3d3ccc449d25d111e0f29c60f6b73027c5fab9856470cd9178da9d792a334fe96f59540533c0b5c95334debfbf400b29f2e74684608f70f734e72f2b6cf52c5fd1b1feb8d297922bc2ede883eff0c60f87b012c1b5be4d0a4a7837773bbcffc3a849a87e8d71143189b2b5d8a5dd6433daffb0bffaf23", @typed={0xc, 0xee, 0x0, 0x0, @u64}, @typed={0x5, 0xe7, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x20}, @nested={0x4, 0xb2}, @generic="1dfe1bc3c9212e7a6761906bc33339fc94de3bf661410f912f9a262f3ed1eeb75d9d0c50755fe341b98d82c8dcd4da468dd9b99809467baac51431ca0d28554caec63676ef50ba7a77130c036bfc6de655b19463a9fdee0468d4a4f0cb04df1e2498b32e451d2cc38572dcb4d445c5d698aa0a8e6c90d757189d65a8f6", @nested={0x4, 0x89}, @typed={0x8, 0xa9, 0x0, 0x0, @pid=r9}]}, @typed={0xe5, 0x16a, 0x0, 0x0, @binary="b61997fd844bab3ab200ceb8a4572f7eeeaeae81595b5054bbbd7d2da9e850a9b9362fc6540f0fb780b9547f1940f5b024001243ebe7ee7c47fd2196caa577f84a029b33443e27b7a5ff42e6c8b5a2f355561831eeac4b9e010ea8130fb4334428a15382aea03de62f4c8cdb6f239757c017d681c3eec5a27a3f37f2a67a988a2d13be38dc325bcab93fcc966b01588b8b255c1867e819729badc682616f4b107e18d67904af25ee33eee788e40926c83c346c54a72594b14132f63ea650542d9547410603b38f0ec894246144405ce95210e7adabb2f427f1852051def1038893"}]}, 0x294}, {&(0x7f0000001080)={0x135c, 0x3a, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@generic="42c042bcd10fc36c51fe8d4f70de095e6239e38a9271eda3ee24132f02ea8cb5f083a2a7b9722d5c887e1d227d37bd63835d2a736f24d2de3e11cf0f8e3cbd0da31c5ad03b20a22b9ef2fa771ef71714e2ce3a1c72feb5c4ef278edc3fef4232c5e7ca", @typed={0x8, 0x168, 0x0, 0x0, @ipv4=@local}, @nested={0x18c, 0xe3, 0x0, 0x1, [@generic="c2d423d262a77d09f3947e591482e407d33b0d5dd0f6b084ee9b513033d8492157f1011674a1ce62effbc8fb36d595c779461dad5649184fcd590239c94a909d87d5c0d2629165d68f251b4ca5de125328eff10a4db1e40d1c30c3989ec16743bc", @generic="4b3482a8ff2bdee00b6251ebe53926736388a65d884fd22fa36ef1d377b09335ee688172fa37a1ebaeee7ab3a85fec054244ec774197c463e71be897cbf2103aa230d79599582b7a17a1fa5d5751df546179dacd6e8245995690f53a2b5ab16c8d4183c0df031dc437e0606e269adffe20a6f5410d550c9174a342c34e95ce08d51755e542ded63c5d984b938781a5488c42ee3afcab196ffaf413", @nested={0x4, 0x5c}, @nested={0x4, 0xba}, @typed={0x4, 0x6b}, @generic="43f26961228594c058ffaa29845502a7189d1c7de475d2aea992aa89c56cafa68d70d8ba8d3955400115f8c5090cfd60bc39da8581116d1ee22ebea0b9b23d98a8561fb005a981b657e8691dada4ceb87d44b4590f1276da19280efb4792cc26c5843e844b938585b8e28a7495b9d5a0907ee2f2b2a209c1", @nested={0x4, 0x77}, @nested={0x4, 0x163}]}, @typed={0x5, 0xca, 0x0, 0x0, @str='\x00'}, @nested={0x1123, 0xfd, 0x0, 0x1, [@generic="b682ab8d738abb43a22e6956b00ee31347409aa47d6f7d01a4fc3220617ac2ba440a560dd926e94e3c1629285ebab99e76b819cd97a7b858971220773b198fc7ccbf9f3cca331ce0402739da0d640a59ece7fbb4b610a46da4daf895ad4ef95c9b7b061f3259a4544b7c8bb798b014d747", @generic="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", @nested={0x4, 0xf3}, @typed={0xa, 0xeb, 0x0, 0x0, @str='1:\\\\+\x00'}, @typed={0x8, 0xbb, 0x0, 0x0, @u32=0x10001}, @generic="dd6a5f001fd504a1f0db07fcbf214db452147e44f131eb9da000b20439c5c4089e891f97a3d74f5a65ed343deff04fe895ab1705c86de4378feb9d5862f126d244dec6eb79641bd81df8869d4465acd621ecf5e4712ccb2ee6bfa3daff9ef824b3482b453d562d6d67f1ea38d991720783774053cfcec3", @generic="46e99865f0b78453001329666cb6a5e12e7df9f911bffb", @typed={0x8, 0xa6, 0x0, 0x0, @u32=0xe}]}, @nested={0x10, 0x28, 0x0, 0x1, [@nested={0x4, 0xc}, @nested={0x4, 0x83}, @typed={0x4, 0x14f, 0x0, 0x0, @binary}]}, @nested={0x4, 0x65}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@empty}]}, 0x135c}, {&(0x7f0000002400)={0x40, 0x25, 0x200, 0x1d8970a9, 0x25dfdbff, "", [@generic="212577a67b6086036c4aae26ce3353f4d739a74c02449ce88313ba6a44d805f3ee64f5ba6f4b4a81fe194bd8ac64d532"]}, 0x40}], 0x6, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x40, 0x40000}, 0x20000000) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x2, {0x0, 0xff, 0x4}, 0xfe}, 0x18) 435.240364ms ago: executing program 1 (id=2216): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000440)=@generic={0x0, r5}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x4, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=r7, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r8, 0x0, 0x0}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000a80)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000dc0)=ANY=[@ANYBLOB='..']) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000e40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000e80)='ns/ipc\x00') r12 = openat$cgroup(r11, &(0x7f0000000ec0)='syz1\x00', 0x200002, 0x0) close(r11) close(r12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffff3500000000000000002e"], 0x0, 0x46}, 0x28) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x80, 0x0, 0x2}}, 0x2e) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000f00)=ANY=[@ANYRES16=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/296], 0x170}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) 434.633533ms ago: executing program 2 (id=2217): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x3, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000540)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) 434.012147ms ago: executing program 3 (id=2218): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x30, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8054}, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x2, 0x3, 0x1}, 0x2, 0x5, 0x80008d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x16, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x803}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @generic={0x0, 0x5, 0x3, 0x8, 0x2}, @alu={0x4, 0x0, 0x7, 0x9, 0x4, 0xfffffffffffffff4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x6, 0xb, 0x8, 0xffffffffffffffff, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x6000, 0x6e66}, 0x10, 0x21621, r6, 0x6, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x3, 0x83, 0x9, 0x5}, {0x1, 0x1, 0xb, 0x3}, {0x0, 0x1, 0xc, 0x1}, {0x2, 0x2, 0x0, 0x6}, {0x5, 0x4, 0x10, 0xa}, {0x2, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0xc}, 0x94) 306.868292ms ago: executing program 1 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000014c0)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/157, 0x9d}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/11, 0xb}], 0x4, &(0x7f0000001400)=""/182, 0xb6}, 0x2162) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) 303.498433ms ago: executing program 0 (id=2220): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002800)={{0xffffffffffffffff, &(0x7f0000000000)='{.\'-{\x00', 0x41, &(0x7f0000000040)={@align=0x100000001, {0x2, 0x1ff, 0x800, 0x8}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}, 0x9, &(0x7f00000026c0)=[{0x3, 0x9, &(0x7f0000000100)='$%\x00', &(0x7f0000000140)="61345bd17eafaecdf581da8aefa36528", 0x10, 0xa}, {0x3, 0xf2f, &(0x7f0000000180)=':]%[+!\\$}\x00', &(0x7f00000001c0)="f369aa557e0eb198fa6fe990892f894e7123765223435bad70284d2e98f02e32f3194012876f47810c125a949d7900ebdb", 0x31, 0x28}, {0x1, 0x6, &(0x7f0000000200)='[\'$)-##\xcb,(-\'^%\'\x00', &(0x7f0000000240)="26d6a3bd8c8a1c37902a917d56b9a8a8a849ff9fe5b3e6cf6d574aa2082b59487fa8d667033a46bb1aa02d4bd82faab78826f67cf24da4304a9426daedbc3091462015047fa84252338b0b8da92a4d908611a14f66261e9616518642fe0705352853bcc60a9a02a19f384ec507ed4a4c8737b84a07b3ccb654f57b6b325f70e40bb5e648d75e6a5b57515787502fa7b26c7060b704ee2005582846971c5f92a3fea17d418d208bc394b540", 0xab}, {0x0, 0x6, &(0x7f0000000300)='{^!\x00', &(0x7f0000000340)="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", 0x1000, 0x28}, {0x1, 0xfffff800, &(0x7f0000001340)=']+/\\}$\f\x00', &(0x7f0000001380)="36808a64c6ae88a1094087cbe46c06739122a99062dae38eeac918caae4c2f6b070260ccb5277aebafa8a59faa085e5aae80e2cec839c434255f2eb4430485b53f3b64821ba3635bcf0956431d34eb43ebfb1e4771e0c6f43ca33fb75fc62cb0e7d8cc85b32b9ff13596cb97870bea56c13e2ac94e7ea6", 0x77}, {0x1, 0x8, &(0x7f0000001400)=':/}\'}*{\x00', &(0x7f0000001440)="0fb0421d32ef50b6850263c231b71b779eedd2d5cc5cf543a3522841c405b6802a5be5bc5effe69a9f70ba4c15ee3ba077f4f1fb3d18cc7b19e1385c4f0a64a5903f7a298f7b4f68165232b83ce5d04266de49dfb968743ff7bae1f27095b653f412470e8f2028568f10b6905e4154bd50c2e801f3b9608289fae72ddff7d722d609c5c234164e91cccb783523f77cdfee7c35d8d6f32f1586833da60af413011c92c72372ffbbe6b39920d6f1871eeee291beab71e1f69c1b8ceaf61bec1d25fecffffb1da17c050ca1bfd693e8e1b18e2776a29ddf818f", 0xd8, 0x12}, {0x1, 0x9ef, &(0x7f0000001540)=')+%@\x13*-#[-\x00', &(0x7f0000001580)="890d661149c32c2cc6c5acb2b0531b6c57fde2367bfdffcc42c849dc87aea45b4bcd7677ea6a59e542707f991701a35b24c618081fc1bc704094638e450f91", 0x3f, 0x20}, {0x1, 0x0, &(0x7f00000015c0)='!\x00', &(0x7f0000001600)="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", 0x1000, 0x20}, {0x1, 0xa, &(0x7f0000002600)='\'!\x00', &(0x7f0000002640)="4f1018f2ee4d9221924acb750bacf5d665b865b8491247e8af1b9a6ef723ef0cba30dc7842a76a20d8ee7313d696658c4c019aedf063fcd48e0cc8261df497774c52713212c848581a92a6a83f55940356db3ffd80fb1915cc606edfba", 0x5d, 0x10}]}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000002880)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x80, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) pwrite64(r0, &(0x7f0000002ac0)="69d3000bde823c5df0bb450603d3808c2730e1b18a9ac02eb516d8d1f1d1e9a1b20032e39eee972caf3027e2e70674ef4c2a5a3c21226edc2e5933cfdcb414f418c40f527d056723631beb906e05447b5b32f2c420eccf2e587323d69070b7a659d0ada24b76d53615c415688f25b1a234a7a55fda3f958e5e879e56cbe4676d8609cb24e8327d40c289a3a283b126255ce7b304cba4ab183c8a69968e8ce6ee52c0097a3f1af16dedf5e5ff8fd47ebe48f4615987", 0xb5, 0xc1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup.net/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002bc0)={0x0, 0x36, "92e82ec845c35975aedee02ad63dd8f02d022a40fff96b5f93487363c8eb653c034ebd055c56de8a78b2b35d924954cec8fd218309d6"}, &(0x7f0000002c00)=0x3e) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000002c40)={r3, 0x1}, &(0x7f0000002c80)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002cc0)={'veth0_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002d40)=0x0, &(0x7f0000002d80)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000002e80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)=@getchain={0x5c, 0x66, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xa}, {0xa, 0x1a}, {0xb, 0xe}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffca01}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c2}, 0x40400a1) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000002ec0)=0x4, 0x4) getsockname$packet(r0, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002f40)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000002f80)={r4, 0xffffffffffffffff, 0x80000}, &(0x7f0000002fc0)=0xc) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000003000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x80000000, 0x1, 0xe, 0x2, 0x101, 0x6}, {0x9, 0x4, 0x5, 0x5, 0x1, 0x7}], ['\x00', '\x00']}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000003300)={0x1, 0x2, 0x1000, 0xc9, &(0x7f0000003140)="ba9dd465176959cc3a28a6a58fd094e7151a3ee981b60a857ee510693b8011dcddaccb0916954668c40955ddc78eceb622fe1c7cd14b510f455ba46be7100fa9cb566f504b7cda2bc61dcbd9bbe65bf94ca1342d38c0898ffa266ef61ef2971e7dc3ca15a33c7b1cc12341b505b7020451ee2314e84d72520fa99c5cc6d94aa81084b8e787be44b4ef5810f802ef6bfea805c42f4c38df8d83e3defb15286f6964a89737fabde6d1170a5d7447acdcf1dd065d662905974d6b30ccf053877df2a5a501881bc224d214", 0x84, 0x0, &(0x7f0000003240)="b2c4c7f4ef8e4d99086ac52a35b267d80646a4b8390a608416efaf141bc5ba088a336b17a81b9c4d53a9f24946463daabdb979164e31bc61feafcbc9da4690ee862981904d21d2bb92757146dff1ee2c82384afe3c292bfa58d1a28820cfa5d15329aad99412fb4574635f4d93a106bc482f7bf256bc2d93164a97635ae9a3f378cd2cbe"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003380), r0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000033c0)=""/62, &(0x7f0000003400)=0x3e) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003740)={0x6, 0x18, &(0x7f0000003440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x93a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003500)='syzkaller\x00', 0x7f, 0xff, &(0x7f0000003540)=""/255, 0x40f00, 0x1, '\x00', r7, 0x25, r0, 0x8, &(0x7f0000003640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003680)={0x1, 0x7, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000036c0)=[r0, r0, r0], &(0x7f0000003700)=[{0x1, 0x2, 0x2, 0x8}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x5, 0xe, 0x8}, {0x2, 0x3, 0x3, 0x5}], 0x10, 0xb2}, 0x94) ioctl$NILFS_IOCTL_GET_BDESCS(r8, 0xc0186e87, &(0x7f0000003880)={&(0x7f0000003800)=[{0x4, 0x0, 0x1, 0x0, 0x2e}, {0x2, 0x1, 0x80, 0x40, 0x4}, {0xfffffffffffff448, 0x200, 0x10000, 0x2, 0xfff}], 0x3, 0x28, 0x4, 0x1}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, r10, 0x8d0be000) recvmmsg(r10, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/193, 0xc1}], 0x1, &(0x7f0000003a00)=""/5, 0x5}, 0x5}, {{&(0x7f0000003a40)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003ac0)=""/25, 0x19}, {&(0x7f0000003b00)=""/169, 0xa9}, {&(0x7f0000003bc0)=""/12, 0xc}], 0x3, &(0x7f0000003c40)=""/130, 0x82}, 0xf8df}, {{&(0x7f0000003d00)=@isdn, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000003d80)=""/45, 0x2d}, {&(0x7f0000003dc0)}, {&(0x7f0000003e00)=""/2, 0x2}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/214, 0xd6}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/116, 0x74}], 0x7, &(0x7f0000006040)=""/227, 0xe3}, 0x8}, {{0x0, 0x0, &(0x7f0000006140), 0x0, &(0x7f0000006180)=""/215, 0xd7}, 0x2}, {{&(0x7f0000006280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008740)=[{&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/18, 0x12}, {&(0x7f0000007340)=""/40, 0x28}, {&(0x7f0000007380)=""/139, 0x8b}, {&(0x7f0000007440)=""/3, 0x3}, {&(0x7f0000007480)=""/236, 0xec}, {&(0x7f0000007580)=""/175, 0xaf}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)=""/227, 0xe3}], 0x9, &(0x7f0000008800)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000009800)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000009d40)=[{&(0x7f0000009880)=""/51, 0x33}, {&(0x7f00000098c0)=""/248, 0xf8}, {&(0x7f00000099c0)=""/92, 0x5c}, {&(0x7f0000009a40)=""/234, 0xea}, {&(0x7f0000009b40)=""/94, 0x5e}, {&(0x7f0000009bc0)=""/90, 0x5a}, {&(0x7f0000009c40)=""/187, 0xbb}, {&(0x7f0000009d00)=""/55, 0x37}], 0x8, &(0x7f0000009dc0)=""/3, 0x3}, 0x3}, {{&(0x7f0000009e00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f000000a080)=[{&(0x7f0000009e80)=""/12, 0xc}, {&(0x7f0000009ec0)=""/158, 0x9e}, {&(0x7f0000009f80)=""/191, 0xbf}, {&(0x7f000000a040)=""/11, 0xb}], 0x4, &(0x7f000000a0c0)=""/203, 0xcb}, 0xf}], 0x7, 0x100, &(0x7f000000a380)={0x0, 0x3938700}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f000000a700)={&(0x7f000000a3c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000000a6c0)={&(0x7f000000a400)={0x2a4, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x3d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "c3feafdd"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "946b2cd384c95f40c6962fc2606ea5cab527db1074225b076bd5dc7f6b5fcac2009c0446e44f20ce3fe48d4715627a93aca9a4d32c38c3813fde57cfa30b53b9a582dceeeaaa000f675199fb2364b5658cdd9c8615d46ad10807a2e8220f07a6662db603b994dfcf9a03bd1b5121bb19b23e1960fa19718100e81892136ddb3dc6a7d458a84cba5200cb6849d8af8a7cffff3eaa15d805c63c89fe0bc59c768a6f9340e260f74e5f7aeb0a40b6cfc4edb7f95babb169c1b0"}, @NL80211_ATTR_FILS_ERP_RRK={0xd4, 0xfc, "3c863ac2ef387dfbfd108a36c74928599ce87e2b2b6e3149a953de28040d05e9e1dccb949a6d196a9f85d52be2a8eb6bcaf6cc31c259d1a0a4d2c73578b81e8e9395a118a57b9bef41198be07b365a13b16a16b132afe96a2f2ec615ae759872302434637ef204941347e90ab254591b7fe90dc297fd6ce9326a5e561f0c8581d0457a8e915d3f46bcc62a4bc1649e8165d65e7848aee608c916304e5e2bf49b75e29ff1deabe818a6c09dd7c879e1067e76a2db92a1cc9d628b66be6fd69e120e0c88cd159515c1ddba6509178e8e5e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xee44}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xb3, 0xfa, "45acd6c32ee8e07f7191ecb6d57b0168227f2de79fa065122b0b733badbc79e85633649b834d0e6762780d658cbf58727cfa4c800c5b7090992dc33078fb894fbc586b735647037c62c7cdad02ec9aac9e665aca097921f8a86ad8a7da0b6e36c43e4d0aba493f5a5a5b6d2f0dfcebdaf96a6f16cc080d5ff1172f2d2f9493814ac1f90e0e94b385ee11cbe4804a9045c404cc3ee62a9da45cb03c1851530c312878261447fd6f0fad24729410e774"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "a4835820537439fa418a4ccd7846498f"}], @NL80211_ATTR_IE={0x1b, 0x2a, [@supported_rates={0x1, 0x3, [{0x6c, 0x1}, {0x2f, 0x1}, {0x4}]}, @mic={0x8c, 0x10, {0xc2, "1d99bdd8ba99", @short="fcb0a4adfde040b1"}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x48400}, 0x400c151) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f000000a780)={r5, 0x9, 0xa}) syz_genetlink_get_family_id$tipc2(&(0x7f000000a740), r11) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f000000a7c0)={0x20000000}) ioctl(r2, 0xe83, &(0x7f000000a800)="0ba362ecbdb893f4fbacc04bdf2ab2de6e6bc4bb567f4d471b060f1d85ce8af919cbe70e32e8c7cbb3062ab1ff192ae7f5e61cd04c1fbab23404df4fac73393637a7740fa55ad5a832cabe9b8e886c06e6e18b091c48ceaf4f5895d640aaa48f602358caf88eff8b06095e21484789e08889a06d685a21773bffb8") 286.573978ms ago: executing program 2 (id=2221): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="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", 0x12d}, {&(0x7f00000002c0)="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", 0xfe}], 0x2) 271.638053ms ago: executing program 1 (id=2222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x300, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4, 0x41100}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) socketpair(0x25, 0x80000, 0xa, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x1e8, 0x16, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x184, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0xe0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xb6, 0x6, "1087b0a30e0e38091156710d029bf70052ed42199e5cd9e027a57b00020df74de49f81d0c588266e2c394e96bcab438b1f897a5a9e3f6c01ef98edb0de0690987aec166b74f6d670d9fa655b872c6a75e72274a8a2e9c172e5c3cd4cf058b7b657953cd97deae9d014004363c6e5373f04978a06072a7ae94a9bd1b45427c85f02ee4c4253e312428dd6db0ae9f8441bbe9a810f77ec45d7ade93d573056388b056041a7d0edae68e70095f4e2e466e7163b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15e}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x284, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}, @NFTA_FLOWTABLE_HOOK={0x194, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nr0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xc}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x4000800}, 0x40801) 99.39754ms ago: executing program 2 (id=2223): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000140)=""/136, &(0x7f0000000200)=0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x21010000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000780)=""/153, 0x99}], 0x1, &(0x7f0000000840)=""/229, 0xe5}, 0x0) sendmsg$tipc(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) (async) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000700)={0x54, r8, 0x1, 0xfffffffd, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x48, 0x36, 0x6c, 0x36, 0x6c, 0x2, 0x5, 0x5, 0x60, 0x6, 0x30, 0x36, 0x48, 0x6, 0x60, 0x2, 0x18, 0x36, 0x2, 0x1b, 0x6, 0x12, 0x2, 0x12, 0x6, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x54}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=@newtfilter={0xb0, 0x2c, 0x2, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x44, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x58}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xc7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf0}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = socket(0xf, 0x80000, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r15, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async, rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 98.752906ms ago: executing program 0 (id=2224): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r3, 0x4) 63.643939ms ago: executing program 3 (id=2225): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'netdevsim0\x00', &(0x7f0000000600)=@ethtool_rxnfc={0x29, 0x11, 0x1ff, {0x10, @udp_ip4_spec={@empty, @broadcast, 0x6, 0x4e24, 0x6}, {0x0, @remote, 0x8, 0xa634, [0x0, 0xd900]}, @hdata="d172a16bac5df3bf80ec20588455847afc2be852c2cc9a26c6a297bc348e032f22fb15bb9aa941dc1490cfefc52a531c655f967a", {0x0, @random='y\\0gX|', 0x0, 0x7, [0x3, 0x4]}, 0xfffffffffffffe01, 0x7}}}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000500)=0x100, 0x4) write(r1, &(0x7f0000000540)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000414010000000008000100010000000800010002000000080001000800010000000000080001000200000008000100000000000800010001000000080001000100"/84], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0xc090) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000440)) sendto$inet6(r5, &(0x7f00000002c0)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, &(0x7f00000004c0)={0x1, 0x2, [0x77e, 0x65e, 0x4f9, 0xc3f]}) sendto$inet6(r0, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x100f21}, 0x1c) 0s ago: executing program 1 (id=2226): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x1000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x5402b000) r1 = socket(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000140001060000000000d74dd9fdfa0000"], 0x14}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000380)=""/152, &(0x7f0000000440)=0x98) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 78.695916][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.718306][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.718322][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.857016][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.857033][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.955682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.955699][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.073448][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.073467][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.263942][ T5638] Bluetooth: hci1: command tx timeout [ 79.263973][ T5638] Bluetooth: hci4: command tx timeout [ 79.263994][ T5638] Bluetooth: hci2: command tx timeout [ 79.343187][ T53] Bluetooth: hci3: command tx timeout [ 79.343216][ T53] Bluetooth: hci0: command tx timeout [ 79.363524][ T5847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.447209][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.506883][ T5865] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.525414][ T5865] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 79.674311][ T5868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.832554][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.946706][ T5900] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 79.946726][ T5900] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 79.946738][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.246281][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 80.518675][ T5939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'. [ 80.592714][ T5944] netlink: 'syz.2.30': attribute type 58 has an invalid length. [ 80.862224][ T5962] Zero length message leads to an empty skb [ 80.922782][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880338e2c00: rx timeout, send abort [ 80.923585][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880338e2c00: 0x1ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 81.116635][ T5980] Bluetooth: MGMT ver 1.23 [ 81.658897][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.658922][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.685599][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.685618][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.856219][ T6025] syz.4.47 uses obsolete (PF_INET,SOCK_PACKET) [ 81.984204][ T6030] Bluetooth: hci0: unsupported parameter 5135 [ 81.984225][ T6030] Bluetooth: hci0: unsupported parameter 8192 [ 81.984244][ T6030] Bluetooth: hci0: unsupported parameter 5135 [ 81.984255][ T6030] Bluetooth: hci0: unsupported parameter 8192 [ 82.109214][ T6035] geneve2: entered promiscuous mode [ 82.109235][ T6035] geneve2: entered allmulticast mode [ 82.162778][ T6038] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 82.307529][ T5750] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.338979][ T6043] netlink: 'syz.4.53': attribute type 5 has an invalid length. [ 82.415800][ T6049] syzkaller0: entered promiscuous mode [ 82.415820][ T6049] syzkaller0: entered allmulticast mode [ 83.270780][ T6107] x_tables: ip_tables: osf match: only valid for protocol 6 [ 83.320624][ T6111] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20001 [ 83.452162][ T6121] veth0_to_bond: entered allmulticast mode [ 83.696849][ T6129] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 84.121596][ T6159] __nla_validate_parse: 11 callbacks suppressed [ 84.121616][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 84.389127][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 84.409973][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'. [ 85.079213][ T6206] syzkaller0: entered promiscuous mode [ 85.079236][ T6206] syzkaller0: entered allmulticast mode [ 85.116292][ T5638] Bluetooth: hci3: unexpected event 0x3b length: 11 > 10 [ 85.503012][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 85.531349][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 85.635070][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.103'. [ 85.702137][ T6247] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 85.715495][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 85.715518][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'. [ 85.781248][ T6252] sock: sock_timestamping_bind_phc: sock not bind to device [ 85.831100][ T6254] netlink: 256 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.886867][ T6257] netlink: zone id is out of range [ 85.886880][ T6257] netlink: zone id is out of range [ 85.886888][ T6257] netlink: zone id is out of range [ 85.886896][ T6257] netlink: zone id is out of range [ 85.886903][ T6257] netlink: zone id is out of range [ 85.886910][ T6257] netlink: zone id is out of range [ 85.886917][ T6257] netlink: zone id is out of range [ 85.886924][ T6257] netlink: zone id is out of range [ 85.886931][ T6257] netlink: zone id is out of range [ 86.133751][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 86.620208][ T50] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 86.636799][ T24] cfg80211: failed to load regulatory.db [ 86.857966][ T6339] can: request_module (can-proto-0) failed. [ 86.878665][ T6339] syzkaller0: entered promiscuous mode [ 86.878684][ T6339] syzkaller0: entered allmulticast mode [ 89.480711][ T6310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.676645][ T6380] ip6t_srh: unknown srh match flags 4000 [ 89.724281][ T984] IPVS: starting estimator thread 0... [ 89.787175][ T6397] xt_NFQUEUE: number of total queues is 0 [ 89.814225][ T6386] IPVS: using max 28 ests per chain, 67200 per kthread [ 89.875563][ T53] block nbd0: Receive control failed (result -32) [ 89.875929][ T5638] block nbd0: Receive control failed (result -32) [ 89.995799][ T6409] netlink: 'syz.4.146': attribute type 3 has an invalid length. [ 90.023610][ T6411] sctp: [Deprecated]: syz.2.147 (pid 6411) Use of int in max_burst socket option. [ 90.023610][ T6411] Use struct sctp_assoc_value instead [ 90.177257][ T6422] warning: `syz.2.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.312614][ T6428] __nla_validate_parse: 3 callbacks suppressed [ 90.312633][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.151'. [ 90.370401][ T6437] netlink: 'syz.1.153': attribute type 32 has an invalid length. [ 90.452698][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 90.479927][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.151'. [ 90.636210][ T6448] net_ratelimit: 24 callbacks suppressed [ 90.636227][ T6448] netlink: zone id is out of range [ 90.636238][ T6448] netlink: zone id is out of range [ 90.636245][ T6448] netlink: zone id is out of range [ 90.808076][ T6462] netlink: 'syz.2.159': attribute type 2 has an invalid length. [ 90.907885][ T6468] IPv6: sit1: Disabled Multicast RS [ 91.357238][ T6490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 91.372831][ T6490] netlink: 'syz.2.168': attribute type 3 has an invalid length. [ 91.372849][ T6490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.168'. [ 91.397328][ T6486] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.405618][ T6493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 91.407157][ T6490] netlink: 'syz.2.168': attribute type 3 has an invalid length. [ 91.407171][ T6490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.168'. [ 91.452011][ T6484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.166'. [ 91.700958][ T6499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.737001][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 91.739184][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 91.772810][ T6506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.861148][ T6506] IPv6: sit1: Disabled Multicast RS [ 92.301305][ T9] hid-generic 0005:046D:8000.0001: unknown main item tag 0x4 [ 92.301341][ T9] hid-generic 0005:046D:8000.0001: item fetching failed at offset 5/6 [ 92.307906][ T9] hid-generic 0005:046D:8000.0001: probe with driver hid-generic failed with error -22 [ 92.619021][ T6548] netlink: 'syz.0.179': attribute type 11 has an invalid length. [ 93.001741][ T6574] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 93.021068][ T6574] bond1 (unregistering): Released all slaves [ 93.132049][ T6594] ip_tables: iptables: counters copy to user failed while replacing table [ 93.132471][ T6594] ip_tables: iptables: counters copy to user failed while replacing table [ 93.395056][ T6601] bond1: option fail_over_mac: invalid value (16) [ 93.397349][ T6601] bond1 (unregistering): Released all slaves [ 93.563305][ T6615] syzkaller0: entered promiscuous mode [ 93.563326][ T6615] syzkaller0: entered allmulticast mode [ 93.567921][ T6625] batman_adv: batadv0: Adding interface: dummy0 [ 93.567936][ T6625] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.567964][ T6625] batman_adv: batadv0: Interface activated: dummy0 [ 93.611132][ T6625] batadv0: mtu less than device minimum [ 93.612658][ T6625] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.654603][ T6626] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 93.660195][ T6626] batadv0: entered promiscuous mode [ 93.660206][ T6626] batadv0: entered allmulticast mode [ 93.660638][ T6626] bridge0: port 3(batadv0) entered blocking state [ 93.660741][ T6626] bridge0: port 3(batadv0) entered disabled state [ 93.662439][ T6626] batadv0: failed to initialize vlan filtering on this port [ 97.974078][ T6628] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 97.977401][ T6628] net_ratelimit: 20 callbacks suppressed [ 97.977412][ T6628] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.016738][ T6658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.076989][ T6668] __nla_validate_parse: 9 callbacks suppressed [ 98.077009][ T6668] netlink: 96 bytes leftover after parsing attributes in process `syz.2.212'. [ 98.433863][ T6696] Bluetooth: MGMT ver 1.23 [ 98.827049][ T6718] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 98.827367][ T6719] netlink: 'syz.3.223': attribute type 10 has an invalid length. [ 98.829471][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.830503][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.878603][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.878735][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.879439][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.879578][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.894010][ T6718] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.895516][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.895691][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.902975][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 98.903898][ T6718] bridge_slave_1: left allmulticast mode [ 98.903917][ T6718] bridge_slave_1: left promiscuous mode [ 98.904279][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.938431][ T6718] bridge_slave_0: left allmulticast mode [ 98.938451][ T6718] bridge_slave_0: left promiscuous mode [ 98.938639][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.991527][ T6718] bond0: (slave bridge0): Releasing backup interface [ 99.022832][ T6728] bridge_slave_1: default FDB implementation only supports local addresses [ 99.029839][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 99.040678][ T6730] macvtap1: entered promiscuous mode [ 99.040696][ T6730] hsr0: entered promiscuous mode [ 99.041171][ T6730] macvtap1: entered allmulticast mode [ 99.041185][ T6730] hsr0: entered allmulticast mode [ 99.041196][ T6730] hsr_slave_0: entered allmulticast mode [ 99.041210][ T6730] hsr_slave_1: entered allmulticast mode [ 99.092030][ T6732] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 99.175516][ T6739] tipc: Failed to remove unknown binding: 66,0,0/0:2217015710/2217015711 [ 99.175747][ T6739] tipc: Failed to remove unknown binding: 66,0,0/0:2217015710/2217015711 [ 99.237601][ T6741] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 99.477875][ T6756] x_tables: unsorted underflow at hook 2 [ 99.790572][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.242'. [ 100.160601][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 100.228115][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 100.248493][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 100.345604][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 100.358970][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 100.731240][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 100.732029][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.754801][ T6833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.810572][ T6852] netlink: 256 bytes leftover after parsing attributes in process `syz.2.262'. [ 100.810604][ T6852] netlink: 256 bytes leftover after parsing attributes in process `syz.2.262'. [ 100.914159][ T6861] sctp: [Deprecated]: syz.2.265 (pid 6861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.914159][ T6861] Use struct sctp_sack_info instead [ 100.916409][ T6863] netlink: 'syz.4.264': attribute type 7 has an invalid length. [ 100.916425][ T6863] netlink: 'syz.4.264': attribute type 8 has an invalid length. [ 100.916964][ T6862] team0: Device ipvlan0 failed to register rx_handler [ 101.118706][ T6871] netlink: 'syz.2.268': attribute type 1 has an invalid length. [ 103.571272][ T6826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.646832][ T6879] xt_ecn: cannot match TCP bits for non-tcp packets [ 103.757418][ T6884] __nla_validate_parse: 5 callbacks suppressed [ 103.757435][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'. [ 103.757475][ T6884] openvswitch: netlink: Flow key attr not present in new flow. [ 103.827468][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 104.138340][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 104.170429][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 104.170718][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 104.614740][ T6943] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 104.624922][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 104.632054][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 104.722329][ T6946] ip_tables: iptables: counters copy to user failed while replacing table [ 104.877104][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 104.920938][ T6954] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.932403][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 105.254158][ T6978] syzkaller0: entered promiscuous mode [ 105.254179][ T6978] syzkaller0: entered allmulticast mode [ 105.300169][ T6978] tipc: Started in network mode [ 105.300200][ T6978] tipc: Node identity be323ccaed85, cluster identity 4711 [ 105.301098][ T6978] tipc: Enabled bearer , priority 0 [ 105.330253][ T6977] tipc: Resetting bearer [ 105.366824][ T6977] tipc: Disabling bearer [ 105.566362][ T6999] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 105.566381][ T6999] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 105.566391][ T6999] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.307'. [ 106.389445][ T7041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.479713][ T7052] bridge_slave_1: left allmulticast mode [ 106.479736][ T7052] bridge_slave_1: left promiscuous mode [ 106.479947][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.505994][ T7052] bridge_slave_0: left allmulticast mode [ 106.506210][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.905391][ T7077] xt_hashlimit: size too large, truncated to 1048576 [ 107.223433][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.225264][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.225299][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.225346][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.430390][ T7130] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 110.072588][ T7102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.312248][ T7149] __nla_validate_parse: 10 callbacks suppressed [ 110.312269][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.312472][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.312710][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.312975][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.359389][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.359630][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.360044][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.360239][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.360441][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.360670][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.845557][ T7199] syzkaller0: entered promiscuous mode [ 110.845577][ T7199] syzkaller0: entered allmulticast mode [ 111.181269][ T7215] pim6reg: entered allmulticast mode [ 111.412403][ T7239] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 111.431540][ C0] Illegal XDP return value 16128 on prog (id 66) dev veth0_to_bridge, expect packet loss! [ 111.476900][ T7246] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 112.199603][ T7303] ip_vti0: entered promiscuous mode [ 112.390510][ T7311] bond1: entered promiscuous mode [ 112.391044][ T7311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.404183][ T7321] bridge2: entered promiscuous mode [ 112.404201][ T7321] bridge2: entered allmulticast mode [ 112.834939][ T7342] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.882822][ T7352] netlink: 'syz.2.396': attribute type 21 has an invalid length. [ 112.897430][ T7354] netlink: 'syz.2.396': attribute type 21 has an invalid length. [ 114.193301][ T7427] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 114.382239][ T7441] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 114.961959][ T7473] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.199088][ T7492] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 115.218803][ T7495] tipc: Enabling of bearer rejected, failed to enable media [ 115.518579][ T7518] __nla_validate_parse: 43 callbacks suppressed [ 115.518599][ T7518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.439'. [ 116.047397][ T7551] netlink: ct family unspecified [ 116.082376][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.381375][ T7573] netlink: 100 bytes leftover after parsing attributes in process `syz.1.457'. [ 116.392060][ T7567] netlink: 148 bytes leftover after parsing attributes in process `syz.4.455'. [ 116.476191][ T7578] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 116.496572][ T7567] bond1: entered allmulticast mode [ 116.497521][ T7567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.530689][ T7578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.552008][ T7578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'. [ 116.649493][ T7582] ip_tables: iptables: counters copy to user failed while replacing table [ 116.688840][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 116.690587][ T7591] netlink: 80 bytes leftover after parsing attributes in process `syz.0.462'. [ 116.722644][ T7592] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.462'. [ 116.742562][ T7595] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 116.832816][ T7600] bond2 (unregistering): Released all slaves [ 116.952118][ T7605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.974165][ T7607] Bluetooth: MGMT ver 1.23 [ 117.089803][ T7616] tipc: Started in network mode [ 117.089820][ T7616] tipc: Node identity , cluster identity 4711 [ 117.089832][ T7616] tipc: Failed to set node id, please configure manually [ 117.089875][ T7616] tipc: Enabling of bearer rejected, failed to enable media [ 117.233940][ T7621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 117.381378][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 117.381401][ T7631] netlink: 14 bytes leftover after parsing attributes in process `syz.4.475'. [ 117.601183][ T7649] syzkaller0: entered promiscuous mode [ 117.601204][ T7649] syzkaller0: entered allmulticast mode [ 118.010029][ T7683] netlink: 'syz.3.486': attribute type 9 has an invalid length. [ 118.145729][ T7693] xt_hashlimit: size too large, truncated to 1048576 [ 118.308376][ T7706] tipc: Enabled bearer , priority 10 [ 118.309308][ T7706] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 118.332446][ T7706] geneve2: entered promiscuous mode [ 118.332466][ T7706] geneve2: entered allmulticast mode [ 118.465091][ T7714] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 118.470174][ T7714] bond2 (unregistering): Released all slaves [ 118.570808][ T7722] netlink: 'syz.0.497': attribute type 4 has an invalid length. [ 118.598088][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 118.598314][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 118.598511][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 118.598724][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 118.598924][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 118.599117][ T7723] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 119.025923][ T53] Bluetooth: hci4: command tx timeout [ 119.025956][ T53] Bluetooth: hci3: command tx timeout [ 119.094512][ T7746] ip_tables: iptables: counters copy to user failed while replacing table [ 119.424279][ T24] tipc: Node number set to 1404517578 [ 119.948515][ T7810] tipc: Started in network mode [ 119.948542][ T7810] tipc: Node identity e0000001, cluster identity 4711 [ 119.948598][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 120.056651][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 120.282363][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.443946][ T7849] lo: entered allmulticast mode [ 120.468562][ T7844] lo: left allmulticast mode [ 120.576972][ T7858] syzkaller1: entered promiscuous mode [ 120.576991][ T7858] syzkaller1: entered allmulticast mode [ 120.871966][ T7876] __nla_validate_parse: 18 callbacks suppressed [ 120.871984][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.871997][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.947866][ T7881] geneve2: entered promiscuous mode [ 121.047546][ T7893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.543'. [ 121.158467][ T7901] sctp: [Deprecated]: syz.4.541 (pid 7901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.158467][ T7901] Use struct sctp_sack_info instead [ 121.540816][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 123.854564][ T7876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.077427][ T7942] validate_nla: 46 callbacks suppressed [ 124.077455][ T7942] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 124.077468][ T7942] netlink: 224 bytes leftover after parsing attributes in process `syz.1.555'. [ 124.223913][ T7951] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 124.272739][ T7956] netlink: 'syz.4.557': attribute type 12 has an invalid length. [ 124.335691][ T7956] bond2: option primary_reselect: invalid value (255) [ 124.339466][ T7956] bond2 (unregistering): Released all slaves [ 124.378170][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 124.379475][ T7966] netlink: 'syz.0.560': attribute type 6 has an invalid length. [ 124.395615][ T7970] netlink: 'syz.0.560': attribute type 6 has an invalid length. [ 124.396068][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 124.399272][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.557'. [ 124.706505][ T7993] netlink: 'syz.0.565': attribute type 10 has an invalid length. [ 124.707264][ T7993] veth1_macvtap: left promiscuous mode [ 124.716331][ T7993] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 124.739974][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'. [ 124.740005][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'. [ 124.872096][ T8002] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 125.109995][ T8009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.209854][ T8009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.277903][ T8009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.365533][ T8009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.452865][ T8032] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 125.472135][ T8035] syzkaller0: entered promiscuous mode [ 125.472148][ T8035] syzkaller0: entered allmulticast mode [ 125.554006][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.585390][ T85] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.585442][ T85] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.597237][ T85] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.672216][ T8042] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 125.698536][ T8045] lo speed is unknown, defaulting to 1000 [ 125.698596][ T8045] lo speed is unknown, defaulting to 1000 [ 125.699744][ T8045] lo speed is unknown, defaulting to 1000 [ 125.700995][ T8045] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 125.701027][ T8045] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 125.701065][ T8045] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 125.742384][ T8045] lo speed is unknown, defaulting to 1000 [ 125.749278][ T8045] lo speed is unknown, defaulting to 1000 [ 125.754193][ T8045] lo speed is unknown, defaulting to 1000 [ 125.760697][ T8045] lo speed is unknown, defaulting to 1000 [ 125.765222][ T8045] lo speed is unknown, defaulting to 1000 [ 125.814227][ T8048] tipc: Started in network mode [ 125.814251][ T8048] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 125.814421][ T8048] tipc: Enabled bearer , priority 0 [ 125.939140][ T8054] __nla_validate_parse: 4 callbacks suppressed [ 125.939159][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.589'. [ 126.153547][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 126.355904][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 126.357290][ T8077] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 126.478381][ T8081] syzkaller0: entered promiscuous mode [ 126.478402][ T8081] syzkaller0: entered allmulticast mode [ 126.495822][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.495861][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.495891][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.498106][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.602298][ T8090] syzkaller1: entered promiscuous mode [ 126.602312][ T8090] syzkaller1: entered allmulticast mode [ 126.615317][ T8092] netlink: 176 bytes leftover after parsing attributes in process `syz.2.601'. [ 126.615337][ T8092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.601'. [ 126.969992][ T8107] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 126.987481][ T8113] syzkaller0: entered promiscuous mode [ 126.987503][ T8113] syzkaller0: entered allmulticast mode [ 126.989486][ T126] tipc: Node number set to 43690 [ 126.991276][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.991910][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.011298][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.011414][ T8107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.011684][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.011831][ T8107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.040557][ T8107] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.340683][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'. [ 127.399245][ T8127] netlink: 'syz.2.611': attribute type 12 has an invalid length. [ 128.627298][ T8130] tipc: Resetting bearer [ 128.667492][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 129.010766][ T8177] netlink: 88 bytes leftover after parsing attributes in process `syz.3.626'. [ 129.011662][ T8178] netlink: 88 bytes leftover after parsing attributes in process `syz.3.626'. [ 129.110642][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.627'. [ 129.211542][ T8195] xt_nat: multiple ranges no longer supported [ 130.277450][ T8259] tipc: Enabled bearer , priority 10 [ 130.516362][ T8269] netlink: 'syz.3.652': attribute type 5 has an invalid length. [ 130.919349][ T8282] syzkaller0: entered promiscuous mode [ 130.919373][ T8282] syzkaller0: entered allmulticast mode [ 131.318371][ T8313] __nla_validate_parse: 6 callbacks suppressed [ 131.318390][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 131.322976][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 131.501318][ T8319] xt_socket: unknown flags 0xc [ 131.510616][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880551b3000: rx timeout, send abort [ 132.010680][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880551b3000: abort rx timeout. Force session deactivation [ 132.488981][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 132.597995][ T8328] lo: entered promiscuous mode [ 132.629743][ T8328] tunl0: entered promiscuous mode [ 132.649127][ T8328] gre0: entered promiscuous mode [ 132.706069][ T8328] gretap0: entered promiscuous mode [ 132.707718][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.762937][ T8328] erspan0: entered promiscuous mode [ 132.834985][ T8350] ip_tables: iptables: counters copy to user failed while replacing table [ 132.897510][ T8340] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 132.949245][ T8361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.672'. [ 132.949268][ T8361] netlink: 43 bytes leftover after parsing attributes in process `syz.0.672'. [ 132.949283][ T8361] netlink: 'syz.0.672': attribute type 5 has an invalid length. [ 132.949294][ T8361] netlink: 43 bytes leftover after parsing attributes in process `syz.0.672'. [ 133.084985][ T8367] ip_tables: iptables: counters copy to user failed while replacing table [ 133.766374][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 133.905888][ T8419] netlink: 88 bytes leftover after parsing attributes in process `syz.1.685'. [ 133.918335][ T8418] netlink: 144 bytes leftover after parsing attributes in process `syz.3.687'. [ 133.919167][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 133.952524][ T8418] x_tables: duplicate underflow at hook 1 [ 134.344791][ T8440] bond2: entered promiscuous mode [ 134.344813][ T8440] bond2: entered allmulticast mode [ 134.458764][ T8446] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 134.700235][ T8455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.752661][ T8454] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 134.892060][ T8465] IPVS: Scheduler module ip_vs_sip not found [ 135.320975][ T8488] ip_tables: iptables: counters copy to user failed while replacing table [ 135.475755][ T8504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.759624][ T8582] __nla_validate_parse: 10 callbacks suppressed [ 136.759643][ T8582] netlink: 9 bytes leftover after parsing attributes in process `syz.0.735'. [ 136.759853][ T8582] 0·: renamed from hsr0 (while UP) [ 136.764362][ T8582] 0·: entered allmulticast mode [ 136.764381][ T8582] hsr_slave_0: entered allmulticast mode [ 136.764405][ T8582] hsr_slave_1: entered allmulticast mode [ 136.765117][ T8582] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 137.070405][ T8596] xt_CT: No such helper "pptp" [ 137.131181][ T8603] xt_l2tp: wrong L2TP version: 255 [ 137.241208][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 137.246873][ T8612] netlink: 'syz.2.744': attribute type 2 has an invalid length. [ 137.267003][ T8609] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 137.316897][ T8609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.374694][ T8624] vlan0: entered promiscuous mode [ 137.418594][ T8627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.751'. [ 137.422837][ T8627] netlink: 48 bytes leftover after parsing attributes in process `syz.3.751'. [ 137.472276][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 137.475612][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 137.536930][ T8632] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.622197][ T8638] syzkaller0: entered promiscuous mode [ 137.622217][ T8638] syzkaller0: entered allmulticast mode [ 137.715370][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.757'. [ 137.808918][ T8648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.812649][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 137.812667][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 137.848840][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.864022][ T8648] bond1: (slave bond0): making interface the new active one [ 137.881826][ T8648] bond1: (slave bond0): Enslaving as an active interface with an up link [ 137.968524][ T8655] bond1 (unregistering): (slave bond0): Releasing active interface [ 137.977617][ T8655] bond1 (unregistering): Released all slaves [ 138.018330][ T8659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.105471][ T8658] veth1_macvtap: entered promiscuous mode [ 138.108529][ T8658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.111081][ T8658] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 138.253332][ T8664] vcan0: tx address claim with dlc 0 [ 138.322614][ T8669] netlink: 'syz.3.761': attribute type 12 has an invalid length. [ 138.339924][ T8670] IPVS: set_ctl: invalid protocol: 166 255.255.255.255:20000 [ 138.402842][ T8674] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 138.550729][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 139.028628][ T8705] xt_hashlimit: size too large, truncated to 1048576 [ 139.086533][ T8708] xt_hashlimit: size too large, truncated to 1048576 [ 139.112438][ T5294] veth1_vlan: left promiscuous mode [ 139.310566][ T8720] nbd: must specify an index to disconnect [ 139.600441][ T8726] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.737464][ T8726] lo speed is unknown, defaulting to 1000 [ 142.125850][ T8723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.783261][ T9] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 194.150131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.223288][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 196.223379][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.223416][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.223487][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 206.067478][ T8797] __nla_validate_parse: 4 callbacks suppressed [ 206.067499][ T8797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 206.068122][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 206.076889][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 206.076918][ T8796] netlink: 'syz.4.779': attribute type 11 has an invalid length. [ 206.076930][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 206.097580][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 206.097608][ T8796] netlink: 'syz.4.779': attribute type 11 has an invalid length. [ 206.097620][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 206.147545][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.775'. [ 206.151742][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.151975][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.152467][ T85] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.154972][ T85] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.232162][ T8802] xt_hashlimit: size too large, truncated to 1048576 [ 206.365281][ T8810] xt_bpf: check failed: parse error [ 206.368662][ T8810] syzkaller1: entered allmulticast mode [ 206.401952][ T8818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.784'. [ 206.859652][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 207.206109][ T8863] netlink: 'syz.0.800': attribute type 4 has an invalid length. [ 207.309400][ T8874] netlink: 'syz.1.801': attribute type 17 has an invalid length. [ 207.309420][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'. [ 207.648355][ T8889] netlink: 'syz.1.805': attribute type 30 has an invalid length. [ 207.653037][ T8891] netlink: 'syz.1.805': attribute type 30 has an invalid length. [ 207.755930][ T8889] bond2: option arp_missed_max: invalid value (0) [ 207.755959][ T8889] bond2: option arp_missed_max: allowed values 1 - 255 [ 207.782108][ T8889] bond2 (unregistering): Released all slaves [ 207.809182][ T8895] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 207.809306][ T8896] netlink: 'syz.1.805': attribute type 4 has an invalid length. [ 207.961258][ T8891] bond2: option arp_missed_max: invalid value (0) [ 207.961280][ T8891] bond2: option arp_missed_max: allowed values 1 - 255 [ 207.968105][ T8891] bond2 (unregistering): Released all slaves [ 208.018570][ T8915] bridge0: port 3(wlan0) entered blocking state [ 208.018678][ T8915] bridge0: port 3(wlan0) entered disabled state [ 208.018812][ T8915] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 208.020776][ T8915] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 208.424401][ T8921] tipc: MTU too low for tipc bearer [ 208.727083][ T8961] netlink: 'syz.1.825': attribute type 4 has an invalid length. [ 208.938006][ T8977] bond3: entered promiscuous mode [ 208.938072][ T8977] bond3: entered allmulticast mode [ 208.938465][ T8977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.940958][ T8976] netlink: 'syz.1.830': attribute type 8 has an invalid length. [ 209.322016][ T9010] siw: device registration error -23 [ 209.666445][ T9033] syzkaller1: entered allmulticast mode [ 209.821093][ T9044] tc_dump_action: action bad kind [ 210.406095][ T9074] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 210.428379][ T9074] bond4 (unregistering): Released all slaves [ 210.812643][ T9089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.902906][ T9089] bond4: (slave geneve2): making interface the new active one [ 210.911172][ T9089] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 210.933846][ T9106] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.116876][ T9119] validate_nla: 3 callbacks suppressed [ 211.116894][ T9119] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 211.142252][ T9119] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 211.152613][ T9119] team0: Port device wlan0 added [ 211.288697][ T9147] netlink: 'syz.2.877': attribute type 11 has an invalid length. [ 211.288715][ T9147] __nla_validate_parse: 19 callbacks suppressed [ 211.288725][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 211.315710][ T9150] netlink: 'syz.2.877': attribute type 11 has an invalid length. [ 211.315727][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 211.385150][ T9159] ip_tables: iptables: counters copy to user failed while replacing table [ 211.386622][ T9159] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 211.428198][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 211.999732][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 211.999756][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 212.029882][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 212.029912][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 213.880097][ T9113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.980823][ T9205] netlink: 'syz.4.891': attribute type 10 has an invalid length. [ 214.005608][ T9205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 214.298456][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 214.584986][ T9251] netlink: 196 bytes leftover after parsing attributes in process `syz.3.904'. [ 214.596176][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 214.944629][ T9257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 216.106813][ T9287] bond1: entered allmulticast mode [ 216.107315][ T9287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.123690][ T9287] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.127703][ T9287] macvlan2: entered allmulticast mode [ 216.127720][ T9287] bond0: entered allmulticast mode [ 216.127732][ T9287] bond_slave_0: entered allmulticast mode [ 216.127746][ T9287] bond_slave_1: entered allmulticast mode [ 216.128852][ T9287] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 216.189044][ T9289] ip6gretap1: entered allmulticast mode [ 216.190368][ T9289] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 217.062650][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 217.062739][ T9293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.081471][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.577535][ T9255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.729347][ T9301] erspan0: entered promiscuous mode [ 217.826503][ T9310] syz_tun: entered allmulticast mode [ 217.902444][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.917'. [ 217.902466][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.917'. [ 217.902799][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.917'. [ 217.951764][ T9309] syz_tun: left allmulticast mode [ 218.287240][ T9339] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 218.289381][ T9339] batman_adv: batadv0: Adding interface: gretap1 [ 218.289395][ T9339] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.289422][ T9339] batman_adv: batadv0: Interface activated: gretap1 [ 218.388009][ T9342] netlink: 196 bytes leftover after parsing attributes in process `syz.1.926'. [ 218.461083][ T9349] block nbd0: reconnected socket [ 218.462803][ T5643] block nbd0: Receive control failed (result -32) [ 218.478087][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 218.692135][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 218.744588][ T9366] netlink: 872 bytes leftover after parsing attributes in process `syz.4.931'. [ 219.547828][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.579564][ T9390] bond2: entered promiscuous mode [ 219.579859][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.580381][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.584933][ T9391] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.584950][ T9391] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 219.584964][ T9391] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 219.638708][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.638828][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.638944][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.639075][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.639220][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.639330][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.639438][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.639547][ T9390] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 219.646544][ T9393] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.646563][ T9393] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 219.769966][ T9395] ip_tables: iptables: counters copy to user failed while replacing table [ 220.802017][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 220.814352][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 220.865081][ T9411] syzkaller1: entered promiscuous mode [ 220.865095][ T9411] syzkaller1: entered allmulticast mode [ 221.339246][ T9352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.116089][ T9472] __nla_validate_parse: 35 callbacks suppressed [ 222.116108][ T9472] netlink: 356 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.130991][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.131043][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.131343][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.149182][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.161069][ T9472] syzkaller0: entered promiscuous mode [ 222.161086][ T9472] syzkaller0: entered allmulticast mode [ 222.178995][ T9473] netlink: 108 bytes leftover after parsing attributes in process `syz.2.952'. [ 222.203425][ T9477] netlink: 108 bytes leftover after parsing attributes in process `syz.2.952'. [ 222.559585][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 222.714629][ T9501] bond0: (slave dummy0): Releasing backup interface [ 222.791645][ T5643] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 222.811284][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 223.097210][ T9543] xt_hashlimit: size too large, truncated to 1048576 [ 223.357195][ T9560] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 223.557053][ T9577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.557447][ T9578] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.570241][ T9578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.977'. [ 223.630594][ T9575] syzkaller1: entered promiscuous mode [ 223.630613][ T9575] syzkaller1: entered allmulticast mode [ 224.074155][ T9610] bridge3: entered promiscuous mode [ 224.075366][ T9610] bridge3: entered allmulticast mode [ 224.115565][ T9612] veth2: entered promiscuous mode [ 224.115584][ T9612] veth2: entered allmulticast mode [ 224.162795][ T9621] tipc: MTU too low for tipc bearer [ 224.472108][ T9644] Bluetooth: hci0: unsupported parameter 5135 [ 224.472129][ T9644] Bluetooth: hci0: unsupported parameter 8192 [ 224.472141][ T9644] Bluetooth: hci0: unsupported parameter 5135 [ 224.472152][ T9644] Bluetooth: hci0: unsupported parameter 8192 [ 225.038981][ T9677] gretap0: entered promiscuous mode [ 225.311425][ T9693] validate_nla: 27 callbacks suppressed [ 225.311443][ T9693] netlink: 'syz.0.1002': attribute type 21 has an invalid length. [ 225.311459][ T9693] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.311763][ T9693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.311775][ T9693] IPv6: NLM_F_CREATE should be set when creating new route [ 225.311814][ T9693] IPv6: NLM_F_CREATE should be set when creating new route [ 225.311838][ T9693] IPv6: NLM_F_CREATE should be set when creating new route [ 225.342995][ T9693] block nbd1: Unsupported socket: should be TCP or UNIX. [ 225.376853][ T9697] bond0: entered allmulticast mode [ 225.376873][ T9697] bond_slave_0: entered allmulticast mode [ 225.376889][ T9697] bond_slave_1: entered allmulticast mode [ 225.790015][ T9725] pim6reg1: entered promiscuous mode [ 225.790035][ T9725] pim6reg1: entered allmulticast mode [ 226.921639][ T5643] Bluetooth: hci1: Malformed Event: 0x02 [ 227.197719][ T9816] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 227.363184][ T9833] raw_sendmsg: syz.0.1039 forgot to set AF_INET. Fix it! [ 227.567083][ T9847] batman_adv: batadv0: Adding interface: syzkaller0 [ 227.567101][ T9847] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.567128][ T9847] batman_adv: batadv0: Interface activated: syzkaller0 [ 227.573242][ T9847] __nla_validate_parse: 51 callbacks suppressed [ 227.573257][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 227.620124][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 227.919937][ T9874] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 227.935713][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1053'. [ 228.144865][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 228.169836][ T9889] bridge4: entered allmulticast mode [ 228.225609][ T9895] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1058'. [ 228.225631][ T9895] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1058'. [ 228.225644][ T9895] netlink: 'syz.1.1058': attribute type 6 has an invalid length. [ 228.225655][ T9895] netlink: 'syz.1.1058': attribute type 5 has an invalid length. [ 228.226612][ T9895] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1058'. [ 228.575893][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.602014][ T9920] bridge_slave_0 (unregistering): left allmulticast mode [ 228.604718][ T9920] bridge_slave_0 (unregistering): left promiscuous mode [ 228.604793][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.697162][ T9927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'. [ 228.707874][ T9925] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1067'. [ 228.707909][ T9925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1067'. [ 228.901181][ T9940] netlink: 'syz.2.1070': attribute type 21 has an invalid length. [ 229.235597][ T9960] xt_hashlimit: size too large, truncated to 1048576 [ 229.290892][ T9962] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 229.426667][ T9972] xt_HMARK: proto mask must be zero with L3 mode [ 229.525697][ T9976] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 229.577597][ T9976] bond2: entered promiscuous mode [ 229.577905][ T9976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.578557][ T9981] netlink: 'syz.2.1082': attribute type 3 has an invalid length. [ 229.587558][ T9981] netlink: Conntrack attr has 8 unknown bytes [ 229.623011][ T9982] bond2: (slave bridge3): making interface the new active one [ 229.623031][ T9982] bridge3: entered promiscuous mode [ 229.637928][ T9982] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 229.689122][ T9985] macvlan3: entered promiscuous mode [ 229.689140][ T9985] bond0: entered promiscuous mode [ 229.689152][ T9985] bond_slave_0: entered promiscuous mode [ 229.689345][ T9985] bond_slave_1: entered promiscuous mode [ 229.689651][ T9985] macvlan3: entered allmulticast mode [ 229.690819][ T9985] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.691805][ T9985] bond0: left promiscuous mode [ 229.691821][ T9985] bond_slave_0: left promiscuous mode [ 229.692028][ T9985] bond_slave_1: left promiscuous mode [ 229.705752][ T9982] xt_cluster: node mask cannot exceed total number of nodes [ 229.806402][ T9982] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.806426][ T9982] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 231.415422][T10089] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 231.566165][T10093] bond2: (slave geneve2): making interface the new active one [ 231.572867][T10093] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 231.591480][ T3670] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.592654][ T3670] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.592694][ T3670] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.592727][ T3670] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.683205][T10096] xt_HMARK: spi-set and port-set can't be combined [ 231.683460][T10090] xt_HMARK: spi-set and port-set can't be combined [ 231.708618][T10103] netlink: 'syz.2.1106': attribute type 3 has an invalid length. [ 231.782620][T10080] infiniband syz2: set active [ 231.782728][T10080] infiniband syz2: added bridge_slave_1 [ 231.827966][T10080] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.827995][T10080] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.828031][T10080] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.921481][T10080] RDS/IB: syz2: added [ 231.921534][T10080] smc: adding ib device syz2 with port count 1 [ 231.921550][T10080] smc: ib device syz2 port 1 has no pnetid [ 232.623832][T10156] syzkaller1: entered promiscuous mode [ 232.623854][T10156] syzkaller1: entered allmulticast mode [ 235.073442][T10121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.074102][T10128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.075056][T10149] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 235.075076][T10149] __nla_validate_parse: 20 callbacks suppressed [ 235.075086][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 235.311189][T10181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1120'. [ 235.349876][T10180] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 235.351900][T10180] bond4 (unregistering): Released all slaves [ 235.407649][T10175] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 235.607806][T10204] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1128'. [ 235.925630][T10235] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 236.048717][T10240] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.050161][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 236.188984][T10252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.239330][T10246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.257557][T10246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.259210][T10246] veth1_vlan: entered promiscuous mode [ 236.433228][T10273] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1150'. [ 236.622863][T10278] netlink: 'syz.4.1152': attribute type 1 has an invalid length. [ 236.650665][T10280] tipc: Started in network mode [ 236.650693][T10280] tipc: Node identity ce035a68fa1c, cluster identity 4711 [ 236.650900][T10280] tipc: Enabled bearer , priority 0 [ 237.252451][T10303] syzkaller0: entered promiscuous mode [ 237.252472][T10303] syzkaller0: entered allmulticast mode [ 237.553544][T10310] syzkaller0: left promiscuous mode [ 237.553566][T10310] syzkaller0: left allmulticast mode [ 237.763180][ T24] tipc: Node number set to 874469992 [ 238.210077][T10336] xt_hashlimit: invalid interval [ 238.450005][T10356] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1168'. [ 238.547919][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1169'. [ 238.590676][T10362] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 238.590827][T10363] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 238.694158][T10367] syz.4.1171 (10367) used obsolete PPPIOCDETACH ioctl [ 240.622877][T10314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.637122][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 240.946369][T10383] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1177'. [ 240.947285][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'. [ 241.010612][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 241.381537][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 241.412502][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1188'. [ 241.623704][T10441] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 241.681211][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 241.821889][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.826967][T10447] bond_slave_0: entered promiscuous mode [ 241.827023][T10447] bond_slave_1: entered promiscuous mode [ 241.907278][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 241.924795][T10447] 8021q: adding VLAN 0 to HW filter on device eth0 [ 241.926581][T10447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 241.928045][T10447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 241.929446][T10447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 241.962422][T10447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.978499][ T24] lo speed is unknown, defaulting to 1000 [ 241.984990][ T24] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 241.999069][T10450] smc: net device lo applied user defined pnetid SYZ0 [ 242.046262][ T42] bond1: (slave ip6gretap1): link status up again after 0 ms [ 242.066193][ T1115] bond1: (slave ip6gretap1): link status up again after 0 ms [ 242.085410][ T42] bond1: (slave ip6gretap1): link status up again after 0 ms [ 242.104993][ T1115] bond1: (slave ip6gretap1): link status up again after 0 ms [ 242.123571][ T85] bond1: (slave ip6gretap1): link status up again after 0 ms [ 242.123659][ T85] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.238908][T10477] veth1_macvtap: left promiscuous mode [ 242.238934][T10477] macsec0: entered allmulticast mode [ 242.253302][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.267758][T10477] veth1_macvtap: entered promiscuous mode [ 242.267777][T10477] veth1_macvtap: entered allmulticast mode [ 242.268549][T10477] macsec0: left allmulticast mode [ 242.268566][T10477] veth1_macvtap: left allmulticast mode [ 242.363558][ T1115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.373718][T10481] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1201'. [ 242.494712][ T42] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.516207][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 242.605903][ T1115] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.757930][T10493] sctp: [Deprecated]: syz.0.1206 (pid 10493) Use of int in max_burst socket option deprecated. [ 242.757930][T10493] Use struct sctp_assoc_value instead [ 242.798292][ T1115] IPVS: starting estimator thread 0... [ 242.886387][T10497] IPVS: using max 29 ests per chain, 69600 per kthread [ 243.159697][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 0 < 9 [ 243.175521][T10519] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 243.472488][T10535] bond0: left allmulticast mode [ 243.472508][T10535] bond_slave_0: left allmulticast mode [ 243.472523][T10535] bond_slave_1: left allmulticast mode [ 243.485314][ T13] bond0: (slave bond_slave_0): interface is now down [ 243.485342][ T13] bond0: (slave bond_slave_1): interface is now down [ 243.660734][T10544] netlink: 'syz.2.1219': attribute type 21 has an invalid length. [ 243.660755][T10544] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.660854][T10544] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 243.732528][T10550] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 244.035698][T10553] bond3: (slave gretap1): making interface the new active one [ 244.039576][T10553] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 244.322690][T10577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 244.322790][T10577] syzkaller1: linktype set to 823 [ 244.715567][T10596] bond_slave_0: left promiscuous mode [ 244.715596][T10596] bond_slave_1: left promiscuous mode [ 244.757119][T10596] veth0_to_bond: left allmulticast mode [ 244.781119][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.830403][T10596] vlan0: left promiscuous mode [ 244.889170][T10596] tipc: Resetting bearer [ 244.889201][T10596] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 244.948111][T10596] geneve2: left promiscuous mode [ 244.992178][T10596] bond1: left allmulticast mode [ 244.992197][T10596] macvlan2: left allmulticast mode [ 244.992208][T10596] bond0: left allmulticast mode [ 244.992218][T10596] bond_slave_0: left allmulticast mode [ 244.992232][T10596] bond_slave_1: left allmulticast mode [ 244.992273][T10596] ip6gretap1: left allmulticast mode [ 245.030871][T10596] batman_adv: batadv0: Interface deactivated: gretap1 [ 245.040983][T10596] bond2: left promiscuous mode [ 245.071458][T10596] bridge4: left allmulticast mode [ 245.101596][ T51] lo speed is unknown, defaulting to 1000 [ 245.101631][ T51] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 245.103413][ T42] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.103440][ T42] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.105622][ T1018] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.105645][ T1018] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.105678][ T1018] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.105699][ T1018] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.105729][ T1018] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.105750][ T1018] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.109641][T10606] netlink: 'syz.4.1236': attribute type 12 has an invalid length. [ 245.187070][T10610] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 245.209663][T10610] bond4 (unregistering): Released all slaves [ 245.463353][T10620] netlink: 'syz.4.1238': attribute type 12 has an invalid length. [ 245.463372][T10620] netlink: 'syz.4.1238': attribute type 29 has an invalid length. [ 245.984523][ T42] bond0: (slave bond_slave_0): interface is now down [ 245.984547][ T42] bond0: (slave bond_slave_1): interface is now down [ 245.987633][ T42] bond0: now running without any active interface! [ 247.410649][T10585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.575601][T10623] __nla_validate_parse: 13 callbacks suppressed [ 247.575620][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 247.697306][T10634] net_ratelimit: 17 callbacks suppressed [ 247.697325][T10634] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.782988][T10647] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.784843][T10647] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 247.788208][T10647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1246'. [ 247.895194][T10646] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1245'. [ 248.377310][T10681] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1253'. [ 248.631082][T10697] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1257'. [ 248.657207][T10696] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 248.657227][T10696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1256'. [ 248.863459][T10700] 0: reclassify loop, rule prio 0, protocol 03 [ 249.332995][T10733] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1267'. [ 249.347786][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 249.347805][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 249.347828][T10733] netlink: 'syz.1.1267': attribute type 15 has an invalid length. [ 249.420409][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 249.420441][T10733] netlink: 'syz.1.1267': attribute type 15 has an invalid length. [ 249.443608][ T42] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 249.443645][ T42] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 249.443676][ T42] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 249.443705][ T42] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 249.571298][T10745] bridge5: entered promiscuous mode [ 249.571362][T10745] bridge5: entered allmulticast mode [ 249.651236][T10747] xt_hashlimit: size too large, truncated to 1048576 [ 250.066201][T10785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.069353][T10785] xt_hashlimit: size too large, truncated to 1048576 [ 250.170613][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.206977][T10789] bridge_slave_0 (unregistering): left allmulticast mode [ 250.207000][T10789] bridge_slave_0 (unregistering): left promiscuous mode [ 250.207072][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.238106][T10794] xt_hashlimit: size too large, truncated to 1048576 [ 250.319368][T10793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.872812][T10831] batman_adv: batadv0: Adding interface: dummy0 [ 250.872828][T10831] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.872853][T10831] batman_adv: batadv0: Interface activated: dummy0 [ 251.005029][T10831] batadv0: mtu less than device minimum [ 251.006560][T10831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.008047][T10831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.009522][T10831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.010984][T10831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.012454][T10831] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.062455][T10836] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 251.080736][T10836] batadv0: entered promiscuous mode [ 251.080753][T10836] batadv0: entered allmulticast mode [ 251.081454][T10836] bridge0: port 3(batadv0) entered blocking state [ 251.081561][T10836] bridge0: port 3(batadv0) entered disabled state [ 251.115056][T10836] batadv0: failed to initialize vlan filtering on this port [ 251.166076][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.166298][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.166442][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.166573][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.166704][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.166834][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.181213][T10839] netlink: 'syz.2.1296': attribute type 12 has an invalid length. [ 251.343137][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 251.491811][T10850] FAULT_INJECTION: forcing a failure. [ 251.491811][T10850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 251.491856][T10850] CPU: 1 UID: 0 PID: 10850 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) [ 251.491884][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 251.491902][T10850] Call Trace: [ 251.491909][T10850] [ 251.491917][T10850] dump_stack_lvl+0xe8/0x150 [ 251.491952][T10850] should_fail_ex+0x410/0x560 [ 251.491984][T10850] _copy_to_user+0x31/0xb0 [ 251.492012][T10850] simple_read_from_buffer+0xe1/0x170 [ 251.492039][T10850] proc_fail_nth_read+0x1bb/0x230 [ 251.492068][T10850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.492098][T10850] ? rw_verify_area+0x24a/0x4c0 [ 251.492122][T10850] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.492147][T10850] vfs_read+0x213/0xa80 [ 251.492174][T10850] ? __pfx___mutex_lock+0x10/0x10 [ 251.492194][T10850] ? __pfx_vfs_read+0x10/0x10 [ 251.492217][T10850] ? __fget_files+0x2a/0x420 [ 251.492236][T10850] ? __fget_files+0x3a2/0x420 [ 251.492254][T10850] ? __fget_files+0x2a/0x420 [ 251.492278][T10850] ? fdget+0x1ac/0x250 [ 251.492306][T10850] ksys_read+0x150/0x270 [ 251.492330][T10850] ? __pfx_ksys_read+0x10/0x10 [ 251.492363][T10850] do_syscall_64+0x166/0x520 [ 251.492381][T10850] ? trace_irq_disable+0x3b/0x140 [ 251.492402][T10850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.492420][T10850] ? clear_bhb_loop+0x70/0xc0 [ 251.492443][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.492461][T10850] RIP: 0033:0x7f8832d5fd8e [ 251.492483][T10850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.492497][T10850] RSP: 002b:00007f8833bbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.492518][T10850] RAX: ffffffffffffffda RBX: 00007f8833bbd6c0 RCX: 00007f8832d5fd8e [ 251.492531][T10850] RDX: 000000000000000f RSI: 00007f8833bbd0a0 RDI: 0000000000000004 [ 251.492542][T10850] RBP: 00007f8833bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 251.492553][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.492564][T10850] R13: 00007f8833026038 R14: 00007f8833025fa0 R15: 00007ffe3dbbf548 [ 251.492597][T10850] [ 252.450254][T10900] geneve3: entered promiscuous mode [ 252.450276][T10900] geneve3: entered allmulticast mode [ 252.451531][ T146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.466805][ T146] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.467516][ T146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.467547][ T146] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.745174][T10916] __nla_validate_parse: 76 callbacks suppressed [ 252.745193][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 252.909464][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 252.931034][T10922] net_ratelimit: 17 callbacks suppressed [ 252.931048][T10922] ip_tables: iptables: counters copy to user failed while replacing table [ 253.285381][T10950] netlink: ct family unspecified [ 253.337175][ T146] IPVS: starting estimator thread 0... [ 253.423566][T10955] IPVS: using max 34 ests per chain, 81600 per kthread [ 253.423653][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 253.545769][T10957] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1331'. [ 253.785045][T10970] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1332'. [ 254.164901][T10985] xt_IDLETIMER: label is empty or not nul-terminated [ 254.408027][T10987] ip_tables: iptables: counters copy to user failed while replacing table [ 254.477649][T10988] validate_nla: 60 callbacks suppressed [ 254.477666][T10988] netlink: 'syz.0.1335': attribute type 15 has an invalid length. [ 254.477678][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1335'. [ 255.327943][T10994] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 255.351038][T10994] bond5: entered promiscuous mode [ 255.351439][T10994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.398699][T10994] syzkaller0: entered promiscuous mode [ 255.398715][T10994] syzkaller0: entered allmulticast mode [ 255.503828][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 255.587517][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.592729][T10962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.707782][T11005] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 256.821603][ T29] audit: type=1804 audit(1793208994.469:2): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1339" name="/newroot/292/cgroup.controllers" dev="tmpfs" ino=1506 res=1 errno=0 [ 256.830745][ T29] audit: type=1800 audit(1793208994.479:3): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1339" name="cgroup.controllers" dev="tmpfs" ino=1506 res=0 errno=-22 [ 257.086304][T10999] syzkaller0: entered promiscuous mode [ 257.086320][T10999] syzkaller0: entered allmulticast mode [ 257.087166][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1337'. [ 257.584531][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 257.886814][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1343'. [ 258.629709][T11005] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 258.676553][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 258.676579][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 258.931372][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 258.960490][T11046] netlink: 70 bytes leftover after parsing attributes in process `syz.3.1347'. [ 258.960526][T11046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.968977][T11031] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.032720][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 259.071135][T11047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.673246][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 259.762342][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 260.035305][T11108] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 260.094445][T11108] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.118426][T11109] bond4: (slave veth0_to_bond): making interface the new active one [ 260.133982][T11109] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 260.240649][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 260.295501][T11119] ip_tables: iptables: counters copy to user failed while replacing table [ 260.907381][T11170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 261.135536][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 261.224529][T11185] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 261.366046][T11189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.457753][T11190] bond3: (slave veth3): Enslaving as an active interface with an up link [ 261.491244][T11189] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 261.508248][T11189] bond3: (slave wlan1): Enslaving as an active interface with an up link [ 261.743551][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 262.009708][T11248] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 262.278464][T11261] sit1: entered promiscuous mode [ 262.278485][T11261] sit1: entered allmulticast mode [ 262.297937][T11259] tipc: Enabled bearer , priority 0 [ 262.303852][T11259] syzkaller0: entered promiscuous mode [ 262.303870][T11259] syzkaller0: entered allmulticast mode [ 262.418080][T11259] tipc: Resetting bearer [ 262.430124][T11258] tipc: Resetting bearer [ 262.447864][T11258] tipc: Disabling bearer [ 262.671625][T11277] can: request_module (can-proto-5) failed. [ 262.952151][T11298] syzkaller0: entered promiscuous mode [ 262.952175][T11298] syzkaller0: entered allmulticast mode [ 263.026421][T11305] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 263.217497][T11306] bond4: (slave bridge4): making interface the new active one [ 263.218743][T11306] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 263.250472][T11316] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 263.479252][T11327] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 263.497087][T11327] bond5 (unregistering): Released all slaves [ 263.508601][T11337] Bluetooth: ISO socket layer initialized [ 263.542853][T11336] __nla_validate_parse: 76 callbacks suppressed [ 263.542868][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1418'. [ 263.682497][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 263.684229][T11342] netlink: 'syz.0.1419': attribute type 6 has an invalid length. [ 263.823201][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 263.861905][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 263.870361][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 264.141159][T11379] netlink: 'syz.3.1428': attribute type 7 has an invalid length. [ 264.141179][T11379] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1428'. [ 264.168092][T11227] IPVS: starting estimator thread 0... [ 264.192979][T11385] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1430'. [ 264.219771][T11385] tipc: Enabling of bearer rejected, failed to enable media [ 264.253180][T11383] IPVS: using max 27 ests per chain, 64800 per kthread [ 264.331613][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 264.349473][ T126] dummy0: entered promiscuous mode [ 264.351023][T11389] macvlan2: entered allmulticast mode [ 264.351042][T11389] dummy0: entered allmulticast mode [ 264.510801][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 264.880584][T11414] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1442'. [ 264.911377][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 265.065781][T11431] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 265.137274][T11435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.248070][T11440] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 265.250206][T11440] bond4 (unregistering): Released all slaves [ 265.428130][T11426] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 266.299338][T11449] syz.1.1451 (11449) used greatest stack depth: 19112 bytes left [ 266.592143][T11503] macvtap2: entered promiscuous mode [ 266.592164][T11503] vlan0: entered promiscuous mode [ 266.592769][T11503] macvtap2: entered allmulticast mode [ 266.592782][T11503] vlan0: entered allmulticast mode [ 266.592792][T11503] veth0_vlan: entered allmulticast mode [ 266.696066][T11496] syz.2.1463 (11496) used greatest stack depth: 15936 bytes left [ 266.721223][T11510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.098202][T11534] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20004 [ 267.112323][T11535] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 267.185730][T11539] netlink: 'syz.1.1476': attribute type 15 has an invalid length. [ 267.237157][T11535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.238932][T11543] xt_cluster: node mask cannot exceed total number of nodes [ 267.354374][ T42] bridge0: port 3(wlan0) entered blocking state [ 267.354482][ T42] bridge0: port 3(wlan0) entered forwarding state [ 267.458819][T11553] ip_tables: iptables: counters copy to user failed while replacing table [ 267.474482][T11556] ip_tables: iptables: counters copy to user failed while replacing table [ 267.592398][T11562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.750326][T11618] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 268.750478][T11618] gretap2: entered promiscuous mode [ 268.750492][T11618] gretap2: entered allmulticast mode [ 268.783492][T11619] smc: net device team0 applied user defined pnetid SYZ2 [ 268.809733][T11619] netlink: 'syz.1.1498': attribute type 21 has an invalid length. [ 269.026993][T11628] __nla_validate_parse: 170 callbacks suppressed [ 269.027013][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1502'. [ 269.027025][T11628] tipc: Invalid UDP bearer configuration [ 269.027064][T11628] tipc: Enabling of bearer rejected, failed to enable media [ 269.077627][T11638] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'. [ 269.134782][T11645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'. [ 269.218690][T11651] netlink: 'syz.0.1509': attribute type 21 has an invalid length. [ 269.218711][T11651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1509'. [ 269.218783][T11651] netlink: 'syz.0.1509': attribute type 5 has an invalid length. [ 269.218795][T11651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1509'. [ 269.315756][T11655] Bluetooth: hci0: unsupported parameter 5135 [ 269.315791][T11655] Bluetooth: hci0: unsupported parameter 8192 [ 269.315804][T11655] Bluetooth: hci0: unsupported parameter 5135 [ 269.315816][T11655] Bluetooth: hci0: unsupported parameter 8192 [ 269.425694][T11665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1513'. [ 269.430780][T11666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1513'. [ 269.568945][T11675] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 269.575910][T11675] sctp: [Deprecated]: syz.4.1516 (pid 11675) Use of int in max_burst socket option deprecated. [ 269.575910][T11675] Use struct sctp_assoc_value instead [ 269.660291][T11677] pimreg: entered allmulticast mode [ 269.676369][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 269.884947][T11702] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1523'. [ 270.196610][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 270.629924][T11741] can: request_module (can-proto-0) failed. [ 270.648462][T11744] tipc: Enabling of bearer rejected, failed to enable media [ 270.654384][T11744] syzkaller0: entered promiscuous mode [ 270.654401][T11744] syzkaller0: entered allmulticast mode [ 270.744180][T11750] ip_tables: iptables: counters copy to user failed while replacing table [ 270.848508][T11753] netlink: 'syz.1.1536': attribute type 6 has an invalid length. [ 270.848529][T11753] netlink: 'syz.1.1536': attribute type 5 has an invalid length. [ 271.371213][T11778] syzkaller0: entered promiscuous mode [ 271.371234][T11778] syzkaller0: entered allmulticast mode [ 271.371553][T11778] batman_adv: batadv0: Interface activated: syzkaller0 [ 271.372633][ T42] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.372674][ T42] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.372707][ T42] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.372739][ T42] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.852056][T11798] ip6t_REJECT: ECHOREPLY is not supported [ 271.867268][T11800] tipc: Enabling of bearer rejected, failed to enable media [ 271.958469][T11798] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 272.205519][T11819] netlink: 'syz.2.1555': attribute type 2 has an invalid length. [ 272.776576][T11860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.776989][T11860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.977046][T11878] ip_tables: iptables: counters copy to user failed while replacing table [ 273.283645][T11898] x_tables: duplicate underflow at hook 1 [ 273.283724][T11898] x_tables: duplicate underflow at hook 1 [ 273.283795][T11898] x_tables: duplicate underflow at hook 1 [ 273.284181][T11898] x_tables: duplicate underflow at hook 1 [ 273.284258][T11898] x_tables: duplicate underflow at hook 1 [ 273.284329][T11898] x_tables: duplicate underflow at hook 1 [ 273.284409][T11898] x_tables: duplicate underflow at hook 1 [ 273.284477][T11898] x_tables: duplicate underflow at hook 1 [ 273.284545][T11898] x_tables: duplicate underflow at hook 1 [ 273.284613][T11898] x_tables: duplicate underflow at hook 1 [ 273.585521][T11917] ip_tables: iptables: counters copy to user failed while replacing table [ 273.983621][T11936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.038897][ T51] hid-generic 0005:10CF:4155.0002: unknown main item tag 0x0 [ 274.061186][T11941] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 274.146533][ T51] hid-generic 0005:10CF:4155.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 274.192754][T11941] bond6: entered promiscuous mode [ 274.195308][T11941] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.266190][T11941] bond6: (slave bridge3): making interface the new active one [ 274.267481][T11941] bridge3: entered promiscuous mode [ 274.268619][T11941] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 274.653643][T11966] __nla_validate_parse: 12 callbacks suppressed [ 274.653662][T11966] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1602'. [ 274.770685][T11974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1605'. [ 274.770709][T11974] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1605'. [ 275.098076][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 275.155820][T12004] syzkaller1: entered promiscuous mode [ 275.155842][T12004] syzkaller1: entered allmulticast mode [ 275.162373][ T4950] Bluetooth: hci2: unexpected cc 0x2060 length: 8 > 7 [ 275.162411][ T4950] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 275.458183][T12020] sctp: [Deprecated]: syz.0.1620 (pid 12020) Use of int in maxseg socket option. [ 275.458183][T12020] Use struct sctp_assoc_value instead [ 275.458356][T12021] sctp: [Deprecated]: syz.0.1620 (pid 12021) Use of int in max_burst socket option. [ 275.458356][T12021] Use struct sctp_assoc_value instead [ 275.458887][T12020] sctp: [Deprecated]: syz.0.1620 (pid 12020) Use of int in max_burst socket option. [ 275.458887][T12020] Use struct sctp_assoc_value instead [ 275.951036][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 276.097435][T12053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.148037][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 276.282195][T12067] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.294551][T12067] veth0: entered allmulticast mode [ 276.299101][T12071] openvswitch: netlink: Flow key attr not present in new flow. [ 276.322279][T12071] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 276.322297][T12071] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1637'. [ 276.394845][T12077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1638'. [ 276.644784][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 276.647760][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 276.956499][T12101] team0: Port device team_slave_1 removed [ 277.725900][T12135] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 277.752400][T12133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.752725][T12127] bond5: entered promiscuous mode [ 277.752743][T12127] bond5: entered allmulticast mode [ 277.853825][T12133] syzkaller1: entered promiscuous mode [ 277.853847][T12133] syzkaller1: entered allmulticast mode [ 278.251152][T12166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.283748][T12167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.766859][T12189] netlink: 'syz.4.1669': attribute type 6 has an invalid length. [ 279.130196][T12206] netlink: 'syz.4.1675': attribute type 97 has an invalid length. [ 279.130222][T12206] netlink: 'syz.4.1675': attribute type 97 has an invalid length. [ 279.157754][T12206] netlink: zone id is out of range [ 279.157775][T12206] netlink: zone id is out of range [ 279.157782][T12206] netlink: zone id is out of range [ 279.157790][T12206] netlink: zone id is out of range [ 279.157810][T12206] netlink: get zone limit has 8 unknown bytes [ 279.548026][T12218] bond0: Error: CAN devices cannot be enslaved [ 279.577522][T12225] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 1, id = 0 [ 279.578922][T12222] bond0: Error: CAN devices cannot be enslaved [ 279.798689][T12240] Unknown options in mask 4 [ 279.805592][T12240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.812359][T12240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.817229][T12241] smc: smcd device lo applied user defined pnetid SYZ0 [ 279.996160][T12251] __nla_validate_parse: 8 callbacks suppressed [ 279.996176][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 279.996196][T12251] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1692'. [ 279.996210][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 280.044025][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 280.111504][T12259] netlink: 'syz.1.1693': attribute type 10 has an invalid length. [ 280.136828][T12259] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.159746][T12259] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.159906][T12259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.181980][ T62] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 280.204883][T12259] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.511030][T12287] xt_l2tp: wrong L2TP version: 255 [ 280.514824][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 280.589104][T12289] ip_tables: iptables: counters copy to user failed while replacing table [ 280.817671][T12304] syzkaller1: entered promiscuous mode [ 280.817692][T12304] syzkaller1: entered allmulticast mode [ 280.942206][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 281.157710][T12325] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1712'. [ 281.158386][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 281.239515][T12293] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 281.280121][T12293] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 281.732912][T12345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1718'. [ 281.773821][T12347] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1716'. [ 282.205881][T12384] 8021q: VLANs not supported on lo [ 282.644021][T12409] C: renamed from lo (while UP) [ 283.088543][T12432] batman_adv: batadv0: Adding interface: syz_tun [ 283.088559][T12432] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.088585][T12432] batman_adv: batadv0: Interface activated: syz_tun [ 283.100130][T12429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.716344][T12472] net_ratelimit: 4 callbacks suppressed [ 283.716362][T12472] ip_tables: iptables: counters copy to user failed while replacing table [ 283.832114][T12481] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 283.832784][T12481] netlink: 'syz.0.1754': attribute type 21 has an invalid length. [ 283.832864][T12481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.832873][T12481] IPv6: NLM_F_CREATE should be set when creating new route [ 283.832931][T12481] IPv6: NLM_F_CREATE should be set when creating new route [ 283.833040][T12481] IPv6: NLM_F_CREATE should be set when creating new route [ 283.932683][T12481] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 283.968581][T12484] bridge_slave_1: default FDB implementation only supports local addresses [ 284.159386][T12489] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 284.431040][T12329] udevd[12329]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 284.475941][T12513] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 284.504368][T12512] xt_check_table_hooks: 23 callbacks suppressed [ 284.504386][T12512] x_tables: duplicate underflow at hook 3 [ 284.688735][T12522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.005173][T12547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.222730][T12558] __nla_validate_parse: 15 callbacks suppressed [ 285.222750][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 285.356247][T12567] ipt_ECN: cannot use operation on non-tcp rule [ 285.358074][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1778'. [ 285.358107][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1778'. [ 285.761817][T12598] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1786'. [ 285.761841][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1786'. [ 285.845875][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 285.849155][T12603] netlink: 'syz.3.1789': attribute type 6 has an invalid length. [ 285.850712][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1789'. [ 285.850730][T12603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1789'. [ 286.059153][T12610] bridge0: port 1(veth1_to_bridge) entered blocking state [ 286.059449][T12610] bridge0: port 1(veth1_to_bridge) entered disabled state [ 286.059622][T12610] veth1_to_bridge: entered allmulticast mode [ 286.061462][T12610] veth1_to_bridge: entered promiscuous mode [ 286.062490][T12610] bridge0: port 1(veth1_to_bridge) entered blocking state [ 286.062600][T12610] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 286.429163][T12627] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.597342][T12673] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004 [ 287.646509][T12675] Bluetooth: hci0: unsupported parameter 5135 [ 287.646530][T12675] Bluetooth: hci0: unsupported parameter 8192 [ 287.646543][T12675] Bluetooth: hci0: unsupported parameter 5135 [ 287.646554][T12675] Bluetooth: hci0: unsupported parameter 8192 [ 287.649783][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1805'. [ 287.790893][T12683] bridge5: entered promiscuous mode [ 287.790959][T12683] bridge5: entered allmulticast mode [ 287.900297][T12686] netlink: 'syz.0.1811': attribute type 2 has an invalid length. [ 287.900316][T12686] netlink: 'syz.0.1811': attribute type 2 has an invalid length. [ 287.929604][T12700] netlink: 'syz.0.1811': attribute type 2 has an invalid length. [ 287.929623][T12700] netlink: 'syz.0.1811': attribute type 2 has an invalid length. [ 288.043449][T12702] x_tables: duplicate underflow at hook 2 [ 288.046352][T12705] x_tables: duplicate underflow at hook 2 [ 288.085243][T12707] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 288.085263][T12707] netlink: 'syz.3.1816': attribute type 2 has an invalid length. [ 288.402648][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f61800: rx timeout, send abort [ 288.505105][T12731] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1824'. [ 288.685949][T12744] netlink: 'syz.1.1826': attribute type 10 has an invalid length. [ 288.708500][T12744] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.710851][T12065] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 288.715687][T12744] bond0: (slave team0): Enslaving as an active interface with an up link [ 288.902698][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032f61800: abort rx timeout. Force session deactivation [ 289.705159][T12796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.728598][T12796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.877114][T12795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.897673][T12795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.931834][T12816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.989157][T12822] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 290.003395][T12822] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 290.138824][T12831] netlink: 'syz.3.1852': attribute type 12 has an invalid length. [ 290.236538][T12837] team0: Port device wlan0 removed [ 290.333945][T12838] xt_socket: unknown flags 0x8 [ 290.404165][T12851] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 290.404185][T12851] netlink: 'syz.2.1857': attribute type 2 has an invalid length. [ 290.616955][T12861] __nla_validate_parse: 7 callbacks suppressed [ 290.616975][T12861] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1860'. [ 290.618123][ T29] audit: type=1800 audit(1793209028.269:4): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1858" name="ip6tnl0" dev="tmpfs" ino=1786 res=0 errno=-22 [ 291.001609][T12882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 291.158251][T12891] veth5: entered allmulticast mode [ 291.340932][T12900] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1871'. [ 291.414886][T12902] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 291.485727][T12908] ip_tables: iptables: counters copy to user failed while replacing table [ 291.517130][T12910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1876'. [ 291.519590][T12910] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1876'. [ 291.699737][T12917] ip_tables: iptables: counters copy to user failed while replacing table [ 291.785474][T12917] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 291.836491][T12927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1878'. [ 291.851708][T12917] bond6: entered promiscuous mode [ 291.852152][T12917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.946385][T12931] nbd2: detected capacity change from 0 to 63 [ 291.961066][T12917] bond6: (slave bridge6): making interface the new active one [ 291.961087][T12917] bridge6: entered promiscuous mode [ 291.961106][ T4950] block nbd2: Receive control failed (result -32) [ 291.969092][T12917] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 291.991253][ T2037] block nbd2: Dead connection, failed to find a fallback [ 291.991281][ T2037] block nbd2: shutting down sockets [ 291.991368][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.991453][ T2037] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.991832][ T2037] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 291.991856][ T2037] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.991871][ T2037] Buffer I/O error on dev nbd2, logical block 2, async page read [ 291.991885][ T2037] Buffer I/O error on dev nbd2, logical block 3, async page read [ 291.997257][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 291.997283][ T2037] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.997299][ T2037] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.997312][ T2037] Buffer I/O error on dev nbd2, logical block 2, async page read [ 291.997326][ T2037] Buffer I/O error on dev nbd2, logical block 3, async page read [ 291.998481][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 291.998505][ T2037] Buffer I/O error on dev nbd2, logical block 0, async page read [ 291.998520][ T2037] Buffer I/O error on dev nbd2, logical block 1, async page read [ 291.998911][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 291.999237][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 291.999405][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 291.999538][ T2037] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.999640][ T2037] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.999735][ T2037] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 292.000145][T12932] ldm_validate_partition_table(): Disk read failed. [ 292.002259][T12932] Dev nbd2: unable to read RDB block 0 [ 292.003739][T12932] nbd2: unable to read partition table [ 292.038875][T12932] ldm_validate_partition_table(): Disk read failed. [ 292.041403][T12932] Dev nbd2: unable to read RDB block 0 [ 292.043555][T12932] nbd2: unable to read partition table [ 292.276667][T12938] xt_IDLETIMER: timeout value is zero [ 292.313378][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 292.317603][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 292.697136][T12963] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1895'. [ 292.986011][T12987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.154964][T13001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 293.356013][T13014] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 293.378892][T13016] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 293.472681][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 293.571689][T13023] veth3: entered allmulticast mode [ 293.629898][T13024] veth5: entered allmulticast mode [ 293.646276][T13022] veth6: entered allmulticast mode [ 293.729097][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 294.463020][ T4950] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 294.480762][ T4950] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 294.538992][T13108] netlink: 'syz.2.1930': attribute type 2 has an invalid length. [ 295.368206][T13152] sctp: [Deprecated]: syz.3.1945 (pid 13152) Use of int in maxseg socket option. [ 295.368206][T13152] Use struct sctp_assoc_value instead [ 295.472512][T13159] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 295.538282][T13159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.719202][T13171] __nla_validate_parse: 8 callbacks suppressed [ 295.719221][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 295.801589][T13176] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.806227][T13173] netlink: 'syz.1.1955': attribute type 1 has an invalid length. [ 295.806477][T13172] netlink: 'syz.1.1955': attribute type 1 has an invalid length. [ 295.999271][T13192] netlink: 'syz.2.1962': attribute type 18 has an invalid length. [ 296.032048][T13190] tipc: Enabled bearer , priority 0 [ 296.032554][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.033009][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.057354][T13188] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 296.057387][T13188] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 296.058289][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.058753][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.094284][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.094784][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.095301][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.096523][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.097005][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.097546][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.098006][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.098540][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.099013][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.099547][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.100045][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.100582][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.101066][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.101528][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.102073][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.156871][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.157331][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.161588][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.170693][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.171187][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.171631][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.176510][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.176979][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.178018][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.179961][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.182905][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.183610][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.186200][T13190] tipc: Enabling of bearer rejected, already enabled [ 296.290050][T13203] ip_tables: iptables: counters copy to user failed while replacing table [ 296.471860][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 296.471885][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1971'. [ 296.556358][T13216] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1972'. [ 296.673041][T13215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1971'. [ 296.673446][T13215] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1971'. [ 296.678851][T13215] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.1971'. [ 296.844857][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 296.967392][T13234] bond8: option xmit_hash_policy: invalid value (64) [ 296.980603][T13234] bond8 (unregistering): Released all slaves [ 297.050100][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1976'. [ 297.090300][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1976'. [ 297.143796][ T51] tipc: Node number set to 3758096385 [ 297.251562][T13257] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 297.259748][T13258] syzkaller1: entered promiscuous mode [ 297.259768][T13258] syzkaller1: entered allmulticast mode [ 297.484955][T13266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.560537][T13266] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.561043][T13266] gretap2: entered promiscuous mode [ 297.561059][T13266] gretap2: entered allmulticast mode [ 297.677475][T13277] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 297.677500][T13277] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 298.075148][T13305] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 298.196190][T13305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.198642][T13305] bond8: (slave bond9): making interface the new active one [ 298.199175][T13305] bond8: (slave bond9): Enslaving as an active interface with an up link [ 298.261684][T13305] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 298.649961][T13335] Bluetooth: hci0: unsupported parameter 5135 [ 298.649984][T13335] Bluetooth: hci0: unsupported parameter 8192 [ 298.649996][T13335] Bluetooth: hci0: unsupported parameter 5135 [ 298.650008][T13335] Bluetooth: hci0: unsupported parameter 8192 [ 298.685490][ T4950] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 298.750628][T13344] netlink: 'syz.4.2007': attribute type 1 has an invalid length. [ 298.866574][T13353] bond5: (slave gretap2): making interface the new active one [ 298.867051][T13353] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 298.894865][T13347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.896857][T13347] bond5: (slave bond6): Enslaving as a backup interface with an up link [ 298.960563][T13366] unsupported nlmsg_type 40 [ 299.825396][T13426] netlink: 'syz.0.2031': attribute type 4 has an invalid length. [ 301.815206][T13584] tipc: Resetting bearer [ 301.815460][T13584] tipc: Resetting bearer [ 302.500404][T13401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.670892][T13592] __nla_validate_parse: 9 callbacks suppressed [ 302.670914][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 302.685054][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 302.986340][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 303.043291][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 303.050667][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2048'. [ 303.295704][T13628] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2051'. [ 303.299603][T13636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2053'. [ 303.557486][T13658] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2061'. [ 303.744716][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 304.262872][T13692] netlink: 'syz.2.2069': attribute type 19 has an invalid length. [ 306.223287][T13628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.223461][T13670] nbd: must specify an index to disconnect [ 306.445164][T13704] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 306.449440][T13701] xt_TCPMSS: Only works on TCP SYN packets [ 306.449840][T13704] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 306.454415][T13698] netlink: 'syz.0.2071': attribute type 11 has an invalid length. [ 306.454433][T13698] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2071'. [ 306.531234][T13711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.699062][T13717] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.699097][T13717] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.833878][T13717] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.833911][T13717] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.865858][T13724] tipc: Enabling of bearer rejected, already enabled [ 306.934737][T13724] syzkaller0: mtu less than device minimum [ 306.952165][T13717] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.952198][T13717] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.083833][T13717] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.083868][T13717] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.454096][T11208] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.454127][T11208] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.454165][T11208] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.454187][T11208] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.454719][T13763] netlink: 'syz.1.2087': attribute type 3 has an invalid length. [ 307.473365][T13766] IPVS: fo: FWM 3 0x00000003 - no destination available [ 307.503373][T11210] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.503402][T11210] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.503454][T11210] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.503476][T11210] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.771685][T13776] batman_adv: batadv0: Interface deactivated: dummy0 [ 307.790416][T13779] __nla_validate_parse: 3 callbacks suppressed [ 307.790434][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 307.796900][T13776] veth0: entered promiscuous mode [ 307.802957][T13774] veth0: left promiscuous mode [ 308.010898][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 308.042573][T13788] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.060240][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.060490][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.060709][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.060910][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.061125][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.061355][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.061574][T13788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2098'. [ 308.260248][T13805] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 308.372067][T13817] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 308.518297][T13821] bond9: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 308.520523][T13821] bond9 (unregistering): Released all slaves [ 308.580659][T13829] netlink: 'syz.2.2108': attribute type 9 has an invalid length. [ 309.507256][T13887] x_tables: duplicate underflow at hook 1 [ 309.561075][T13891] sctp: [Deprecated]: syz.1.2128 (pid 13891) Use of int in max_burst socket option. [ 309.561075][T13891] Use struct sctp_assoc_value instead [ 309.859522][T13909] nbd: must specify at least one socket [ 310.195933][T13938] sit0: entered promiscuous mode [ 310.214370][T13938] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 310.435117][T13947] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 310.565965][T13965] syzkaller0: entered promiscuous mode [ 310.565987][T13965] syzkaller0: entered allmulticast mode [ 313.136392][T13933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.327976][T13986] xt_ecn: cannot match TCP bits for non-tcp packets [ 313.426144][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.596779][T14007] macvlan3: entered promiscuous mode [ 313.596799][T14007] bond0: entered promiscuous mode [ 313.596812][T14007] bond_slave_0: entered promiscuous mode [ 313.597002][T14007] bond_slave_1: entered promiscuous mode [ 313.597193][T14007] bridge0: entered promiscuous mode [ 313.597789][T14007] macvlan3: entered allmulticast mode [ 313.597805][T14007] bond0: entered allmulticast mode [ 313.597817][T14007] bond_slave_0: entered allmulticast mode [ 313.597832][T14007] bond_slave_1: entered allmulticast mode [ 313.597845][T14007] bridge0: entered allmulticast mode [ 313.602422][T14007] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 313.626196][T14007] bond0: left allmulticast mode [ 313.626213][T14007] bond_slave_0: left allmulticast mode [ 313.626228][T14007] bond_slave_1: left allmulticast mode [ 313.626241][T14007] bridge0: left allmulticast mode [ 313.626341][T14007] bond0: left promiscuous mode [ 313.688496][ T5743] bond_slave_0: left promiscuous mode [ 313.688518][ T5743] bond_slave_1: left promiscuous mode [ 313.688630][ T5743] bridge0: left promiscuous mode [ 313.915653][T14028] __nla_validate_parse: 84 callbacks suppressed [ 313.915674][T14028] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2166'. [ 314.287042][T14050] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2172'. [ 314.315749][T14049] netlink: 'syz.1.2173': attribute type 2 has an invalid length. [ 314.370151][T14055] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 314.370605][T14055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.499635][T14069] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 314.515613][T14063] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 314.515630][T14063] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 314.515643][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 314.588052][T14069] block nbd1: server does not support multiple connections per device. [ 314.611001][T14069] block nbd1: shutting down sockets [ 314.622335][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 314.677763][T14069] team0 (unregistering): Port device team_slave_0 removed [ 314.707712][T14069] team0 (unregistering): Port device team_slave_1 removed [ 314.915388][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2187'. [ 314.915413][T14092] block nbd1: Unsupported socket: should be TCP or UNIX. [ 315.004548][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2191'. [ 315.017263][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 315.220341][T14122] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 315.220341][T14122] Please contact the netfilter-devel mailing list or update your nftables rules. [ 315.719622][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'. [ 315.724974][T14157] netlink: 'syz.1.2203': attribute type 26 has an invalid length. [ 315.873422][T14166] sock: sock_set_timeout: `syz.4.2208' (pid 14166) tries to set negative timeout [ 316.337315][T14191] netlink: 'syz.0.2215': attribute type 2 has an invalid length. [ 316.522423][T14202] sit0: entered promiscuous mode [ 316.522570][T14202] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 316.522585][T14202] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2221'. [ 316.729516][T14212] [ 316.731872][T14212] ====================================================== [ 316.738888][T14212] WARNING: possible circular locking dependency detected [ 316.745918][T14212] syzkaller #0 Not tainted [ 316.750329][T14212] ------------------------------------------------------ [ 316.757346][T14212] syz.0.2224/14212 is trying to acquire lock: [ 316.763395][T14212] ffff88801d2ffa10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 316.773922][T14212] [ 316.773922][T14212] but task is already holding lock: [ 316.781268][T14212] ffffffff8fbe5af0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 316.791354][T14212] [ 316.791354][T14212] which lock already depends on the new lock. [ 316.791354][T14212] [ 316.801751][T14212] [ 316.801751][T14212] the existing dependency chain (in reverse order) is: [ 316.810747][T14212] [ 316.810747][T14212] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 316.818464][T14212] cpus_read_lock+0x3d/0x160 [ 316.823562][T14212] static_key_slow_inc+0x12/0x30 [ 316.829006][T14212] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 316.835232][T14212] nbd_genl_foreach_sock+0x265/0x450 [ 316.841033][T14212] nbd_genl_reconfigure+0xbbb/0x1040 [ 316.846827][T14212] genl_family_rcv_msg_doit+0x233/0x340 [ 316.852880][T14212] genl_rcv_msg+0x614/0x7a0 [ 316.857893][T14212] netlink_rcv_skb+0x226/0x4a0 [ 316.863164][T14212] genl_rcv+0x28/0x40 [ 316.867653][T14212] netlink_unicast+0x8ef/0xa80 [ 316.872920][T14212] netlink_sendmsg+0x7f0/0xb20 [ 316.878190][T14212] sock_sendmsg_nosec+0x14e/0x190 [ 316.883721][T14212] ____sys_sendmsg+0x54e/0x850 [ 316.888996][T14212] ___sys_sendmsg+0x2a5/0x360 [ 316.894180][T14212] __x64_sys_sendmsg+0x1b1/0x290 [ 316.899619][T14212] do_syscall_64+0x166/0x520 [ 316.904710][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.911107][T14212] [ 316.911107][T14212] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 316.918733][T14212] __mutex_lock+0x197/0x15a0 [ 316.923826][T14212] nbd_queue_rq+0x373/0xff0 [ 316.928843][T14212] blk_mq_dispatch_rq_list+0x499/0x1990 [ 316.934895][T14212] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 316.941733][T14212] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 316.948221][T14212] blk_mq_run_work_fn+0x167/0x2f0 [ 316.953757][T14212] process_scheduled_works+0xc3d/0x1630 [ 316.959816][T14212] worker_thread+0xa47/0xfb0 [ 316.964914][T14212] kthread+0x38b/0x480 [ 316.969487][T14212] ret_from_fork+0x514/0xb70 [ 316.974581][T14212] ret_from_fork_asm+0x1a/0x30 [ 316.979848][T14212] [ 316.979848][T14212] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 316.987042][T14212] __mutex_lock+0x197/0x15a0 [ 316.992137][T14212] nbd_queue_rq+0xc1/0xff0 [ 316.997063][T14212] blk_mq_dispatch_rq_list+0x499/0x1990 [ 317.003116][T14212] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 317.009951][T14212] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 317.016440][T14212] blk_mq_run_work_fn+0x167/0x2f0 [ 317.021975][T14212] process_scheduled_works+0xc3d/0x1630 [ 317.028030][T14212] worker_thread+0xa47/0xfb0 [ 317.033132][T14212] kthread+0x38b/0x480 [ 317.037715][T14212] ret_from_fork+0x514/0xb70 [ 317.042819][T14212] ret_from_fork_asm+0x1a/0x30 [ 317.048090][T14212] [ 317.048090][T14212] -> #4 (set->srcu){.+.+}-{0:0}: [ 317.055202][T14212] __synchronize_srcu+0xca/0x2f0 [ 317.060651][T14212] elevator_switch+0x1e8/0x7b0 [ 317.065918][T14212] elevator_change+0x2fa/0x480 [ 317.071193][T14212] elevator_set_default+0x375/0x440 [ 317.076895][T14212] blk_register_queue+0x404/0x4f0 [ 317.082427][T14212] __add_disk+0x6b8/0xdb0 [ 317.087264][T14212] add_disk_fwnode+0x100/0x3a0 [ 317.092542][T14212] nbd_dev_add+0x733/0xb60 [ 317.097468][T14212] nbd_init+0x168/0x1f0 [ 317.102124][T14212] do_one_initcall+0x250/0x870 [ 317.107395][T14212] do_initcall_level+0x10a/0x1a0 [ 317.112836][T14212] do_initcalls+0x59/0xa0 [ 317.117672][T14212] kernel_init_freeable+0x29d/0x3e0 [ 317.123375][T14212] kernel_init+0x22/0x1d0 [ 317.128213][T14212] ret_from_fork+0x514/0xb70 [ 317.133304][T14212] ret_from_fork_asm+0x1a/0x30 [ 317.138578][T14212] [ 317.138578][T14212] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 317.146376][T14212] __mutex_lock+0x197/0x15a0 [ 317.151470][T14212] elevator_change+0x1af/0x480 [ 317.156740][T14212] elevator_set_none+0xb5/0x140 [ 317.162095][T14212] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 317.168409][T14212] nbd_start_device+0x189/0xb30 [ 317.173772][T14212] nbd_genl_connect+0x167d/0x1cd0 [ 317.179310][T14212] genl_family_rcv_msg_doit+0x233/0x340 [ 317.185358][T14212] genl_rcv_msg+0x614/0x7a0 [ 317.190372][T14212] netlink_rcv_skb+0x226/0x4a0 [ 317.195640][T14212] genl_rcv+0x28/0x40 [ 317.200132][T14212] netlink_unicast+0x8ef/0xa80 [ 317.205398][T14212] netlink_sendmsg+0x7f0/0xb20 [ 317.210675][T14212] sock_sendmsg_nosec+0x14e/0x190 [ 317.216218][T14212] ____sys_sendmsg+0x54e/0x850 [ 317.221499][T14212] ___sys_sendmsg+0x2a5/0x360 [ 317.226702][T14212] __x64_sys_sendmsg+0x1b1/0x290 [ 317.232153][T14212] do_syscall_64+0x166/0x520 [ 317.237253][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.243655][T14212] [ 317.243655][T14212] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 317.252250][T14212] blk_alloc_queue+0x544/0x690 [ 317.257539][T14212] __blk_mq_alloc_disk+0x194/0x390 [ 317.263165][T14212] nbd_dev_add+0x494/0xb60 [ 317.268094][T14212] nbd_init+0x168/0x1f0 [ 317.272755][T14212] do_one_initcall+0x250/0x870 [ 317.278032][T14212] do_initcall_level+0x10a/0x1a0 [ 317.283477][T14212] do_initcalls+0x59/0xa0 [ 317.288311][T14212] kernel_init_freeable+0x29d/0x3e0 [ 317.294014][T14212] kernel_init+0x22/0x1d0 [ 317.298851][T14212] ret_from_fork+0x514/0xb70 [ 317.303942][T14212] ret_from_fork_asm+0x1a/0x30 [ 317.309209][T14212] [ 317.309209][T14212] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 317.316402][T14212] fs_reclaim_acquire+0x71/0x100 [ 317.321848][T14212] kmem_cache_alloc_noprof+0x5f/0x600 [ 317.327725][T14212] __kernfs_iattrs+0xdd/0x380 [ 317.332911][T14212] kernfs_iop_setattr+0xe6/0x3f0 [ 317.338357][T14212] notify_change+0xbba/0xea0 [ 317.343458][T14212] do_truncate+0x1c2/0x250 [ 317.348378][T14212] path_openat+0x18a6/0x20f0 [ 317.353473][T14212] do_file_open+0x23e/0x4a0 [ 317.358484][T14212] do_sys_openat2+0x115/0x200 [ 317.363670][T14212] __x64_sys_openat+0x138/0x170 [ 317.369034][T14212] do_syscall_64+0x166/0x520 [ 317.374127][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.380523][T14212] [ 317.380523][T14212] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 317.389017][T14212] __lock_acquire+0x164c/0x2de0 [ 317.394377][T14212] lock_acquire+0x115/0x350 [ 317.399390][T14212] down_read+0x45/0x320 [ 317.404051][T14212] kernfs_iop_permission+0x7f/0x430 [ 317.409760][T14212] inode_permission+0x3e0/0x600 [ 317.415117][T14212] cgroup_attach_permissions+0x28e/0x9f0 [ 317.421259][T14212] __cgroup_procs_write+0x235/0x2f0 [ 317.426963][T14212] cgroup_threads_write+0x24/0x50 [ 317.432493][T14212] cgroup_file_write+0x331/0x8f0 [ 317.437935][T14212] kernfs_fop_write_iter+0x3a4/0x540 [ 317.443729][T14212] vfs_write+0x612/0xba0 [ 317.448477][T14212] ksys_write+0x150/0x270 [ 317.453313][T14212] do_syscall_64+0x166/0x520 [ 317.458405][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.464803][T14212] [ 317.464803][T14212] other info that might help us debug this: [ 317.464803][T14212] [ 317.475010][T14212] Chain exists of: [ 317.475010][T14212] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 317.475010][T14212] [ 317.488986][T14212] Possible unsafe locking scenario: [ 317.488986][T14212] [ 317.496417][T14212] CPU0 CPU1 [ 317.501763][T14212] ---- ---- [ 317.507112][T14212] rlock(cpu_hotplug_lock); [ 317.511686][T14212] lock(&nsock->tx_lock); [ 317.518605][T14212] lock(cpu_hotplug_lock); [ 317.525612][T14212] rlock(&root->kernfs_iattr_rwsem); [ 317.530970][T14212] [ 317.530970][T14212] *** DEADLOCK *** [ 317.530970][T14212] [ 317.539090][T14212] locks held by syz.0.2224/14212: 5, last CPU#1: [ 317.545403][T14212] #0: ffff88807e9127f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 317.554439][T14212] #1: ffff88807fe18460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 317.563307][T14212] #2: ffff888036edc880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 317.573035][T14212] #3: ffffffff8fd9a160 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x14f/0x260 [ 317.582781][T14212] #4: ffffffff8fbe5af0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 317.593294][T14212] [ 317.593294][T14212] stack backtrace: [ 317.599167][T14212] CPU: 1 UID: 0 PID: 14212 Comm: syz.0.2224 Not tainted syzkaller #0 PREEMPT(full) [ 317.608602][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.618643][T14212] Call Trace: [ 317.621905][T14212] [ 317.624822][T14212] dump_stack_lvl+0xe8/0x150 [ 317.629403][T14212] print_circular_bug+0x2e2/0x300 [ 317.634417][T14212] check_noncircular+0x12f/0x150 [ 317.639347][T14212] __lock_acquire+0x164c/0x2de0 [ 317.644185][T14212] ? __lock_acquire+0x747/0x2de0 [ 317.649107][T14212] ? __bfs+0x153/0x290 [ 317.653163][T14212] ? __pfx_hlock_conflict+0x10/0x10 [ 317.658352][T14212] lock_acquire+0x115/0x350 [ 317.662837][T14212] ? kernfs_iop_permission+0x7f/0x430 [ 317.668200][T14212] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.673999][T14212] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.679797][T14212] down_read+0x45/0x320 [ 317.683949][T14212] ? kernfs_iop_permission+0x7f/0x430 [ 317.689313][T14212] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.695107][T14212] kernfs_iop_permission+0x7f/0x430 [ 317.700295][T14212] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.706091][T14212] inode_permission+0x3e0/0x600 [ 317.710930][T14212] cgroup_attach_permissions+0x28e/0x9f0 [ 317.716553][T14212] __cgroup_procs_write+0x235/0x2f0 [ 317.721741][T14212] cgroup_threads_write+0x24/0x50 [ 317.726752][T14212] ? __pfx_cgroup_threads_write+0x10/0x10 [ 317.732459][T14212] cgroup_file_write+0x331/0x8f0 [ 317.737388][T14212] ? __pfx_cgroup_file_write+0x10/0x10 [ 317.742830][T14212] ? __kmalloc_noprof+0x387/0x710 [ 317.747843][T14212] ? __pfx_cgroup_file_write+0x10/0x10 [ 317.753283][T14212] kernfs_fop_write_iter+0x3a4/0x540 [ 317.758554][T14212] vfs_write+0x612/0xba0 [ 317.762788][T14212] ? __pfx_vfs_write+0x10/0x10 [ 317.767537][T14212] ? __fget_files+0x3a2/0x420 [ 317.772197][T14212] ? __fget_files+0x2a/0x420 [ 317.776776][T14212] ? fdget+0x1ac/0x250 [ 317.780832][T14212] ksys_write+0x150/0x270 [ 317.785149][T14212] ? __pfx_ksys_write+0x10/0x10 [ 317.789991][T14212] do_syscall_64+0x166/0x520 [ 317.794564][T14212] ? trace_irq_disable+0x3b/0x140 [ 317.799577][T14212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.805626][T14212] ? clear_bhb_loop+0x70/0xc0 [ 317.810293][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.816171][T14212] RIP: 0033:0x7f021459f559 [ 317.820573][T14212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.840163][T14212] RSP: 002b:00007f02154a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.848561][T14212] RAX: ffffffffffffffda RBX: 00007f0214825fa0 RCX: 00007f021459f559 [ 317.856517][T14212] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000004 [ 317.864470][T14212] RBP: 00007f0214636b20 R08: 0000000000000000 R09: 0000000000000000 [ 317.872424][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.880379][T14212] R13: 00007f0214826038 R14: 00007f0214825fa0 R15: 00007ffe3c35da38 [ 317.888347][T14212] [ 317.922275][T14214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2225'. [ 318.013599][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031686][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031743][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031799][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031846][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031894][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 318.031941][T14215] netlink: 'syz.2.2223': attribute type 1 has an invalid length.