last executing test programs: 2.298175689s ago: executing program 3 (id=1654): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="00000f0000080000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000680)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0xf7, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000080), &(0x7f0000000400), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000300)='ns/net\x00') socket$inet6(0xa, 0x80001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)=ANY=[@ANYBLOB="62ecee00", @ANYRES16=r7, @ANYBLOB="1b0d29bd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x608202, 0x0) close(r9) socket$inet(0x2, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 1.842763109s ago: executing program 0 (id=1657): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003140)={'pim6reg0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x43, 0xffffb00e, 0x200, 0x72, "c9cc24329832952305112ce4cee1d4a51de6d71fe4fee0ebf4d98f3be3fec7851aac162efcd31506aad6e1cf26f75a53fdfe3407ce70077b42fec2aa1cdf9690cf49c177cfc2a8c851cf274f0e6f2a11a6041d42a9a3fb2a2397164bbca991340200000000000000b98138cb177d0cd5b0ba"}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}], 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x18}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.7367878s ago: executing program 3 (id=1660): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa1, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x3b, {0x73}}}], 0x18}, 0x440e0) 1.597360671s ago: executing program 1 (id=1661): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x2, 0xbabd}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) ppoll(&(0x7f0000000080)=[{r5, 0x2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000000c0)={0x8, 0x1, 0x9, 0xf, 0x3}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="1c002f800c00038008000100e0ffffff0b0002000203aaaaaaaaaaaa"], 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r11) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r11) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x48004) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001090004000000a60c0000000000000000000004006eec00be00442ffffe80000000001d0000000000000000aaff020000000000000000be000000030c000800050086dd88a888be000000021609660501000000000288a8080022eb00020000200cf0080200000000000002000494030800655800000002000000000000000000"], 0x86) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001090004000000a60c0000000000000000000004006eec00be00442ffffe80000000001d0000000000000000aaff020000000000000000be000000030c000800050086dd88a888be000000021609660501000000000288a8080022eb00020000200cf0080200000000000002000494030800655800000002000000000000000000"], 0x86) 1.529181854s ago: executing program 2 (id=1662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) 1.527258491s ago: executing program 4 (id=1663): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) 1.375063504s ago: executing program 2 (id=1664): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a9554328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c5a01ba62ed8f2c6a503dd1b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341d13d244359718ac3dad595712a4051bb6cf826ab757193fc093b8b3353fbbb278d19000000000000007b61805ed430ef06000000000000001e93f640f159320c8b088f4d64977b2eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751df38c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b777d73a63246ce6f0467167626329ab91df7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c230f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6ee02412064730700aeff2b69c2f2bf6f691c3560e068743ae8e8771280dac7fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c56d9abc40c64a20c14ff0b1bf4d23fe07ae90f503ba9c64bf89b26e7d8d70710b04f9ece69023acadbb4582272e5b3a0429a5675e5a9554de54945d9a270180e0545b0c824ad36f7cc8be12b3874d5a19349b0ede845e9ece24d546d3af1bae069b89f6ecf2aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d8fc9a28c6b8e00250a7f2eeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d1690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1be3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be4c4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a6df5bdc6f7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dcdb951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02c0c714c2862ddbe567755f05a1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1e88f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c21181f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae65e9f2cc9a5129e385b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfe63c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738bf356131ca53e9d7ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e4c26497c029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de817394eb580240d556d0f0b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd49457536430ffbd3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc3126bf1760243d51a197d3ecfd74bd625e9f496175cfeaaa020817d33d513f3e97854ea76e04e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c3b5a620fc84e1c735647895713cbcea57b2277831f8f633f0d29371e645e5544e57010a9b76457f6ad73231a9f31f6bbb1b95248aeda5a9df9dea643a792bb0910e45fce298ab0a0298fc33a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b96acf060f74084760d226f50edb115c2e075f3c663a4b4169b900fa0a13cf796e0d7a9dad86953c13ed6241206d68ae194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b9d5dd8bf6c28653eb84f117e476e052a9db790e0a71dac9d8b343efebdc026860000000000000000000000000000aad579302085dfdf75bea24798c680b3de341e3bd57543bf74fd58bcebdbb883c743ed43ba7f540f2c4e0310c21e7deff9e45b8bd2cf65bb584091b8e80e34b3e59185fe32d1d73dd4f62712a39b1366c71420b339ec1295f79b1516723b6b80a7e99e5aa6536982c02275fc53fa3ef14d9fccb05f9c4e69a3af0fde863af2d9a0f8a94fc571b0ab4ad714f41fa4ee0bf14a8b44e3c41a3125be95e4b23d5f05395852761bfaebe0db979d5f3991d826cc74542b85cfd0dba66bc93cfd79178ab0b79fa3b29ff9c19e0424513c91980187c9d94b8354337a1fc782505db900c47d83bd49276cfe6e242ba8365b1ea4598a21f50f5415a70990b5bb4a1f6bd8acdf2c7da3d648754767089c9b5ceb556fafa3cc5afd2f3e9a62a90262a76ff89a2751b59a744f0d3f36ca503357daa3e29ce6f357dc1e4839277d003e93fdbb955e1a1302a76aea7e73835094fb15464e94e814c77c293121d0433e80d444c4ca17abaf32b521d8686666055da023aef9c8df3e80d2ed640ed10aa19a036dcef172dbd3b3600b69d7b90c6222e167d7c76059f2b5f3b3004e8a20d1f6612efeb629573be97aa949c6016e7e56283e84986aaa4fc8a098708ebe36f377ada63d9b464c39342e0682549862de3ec75e7b031bc49f341a21417fb6375e8701481b59d1722c836961804666801678eb25750b520bf1615a4bbf30aa74d60ec6b657f2dd298b0419da43fc708a60c94a7ff2fd6a2d08005ad73c9e2d6143d2857be8fb3f12bfa6628bccb153e39172d07563d6a1dc75c347c08060304f091230bd74b49ecdd13bf480db3984622a167c8603b8c501280059a7b6123c8f8cd217f64eccc2dffe4f3a1e8c9a96a13d8126f3ea26779fbd0069d729a7764d4ddd7d9d820b0de2530969362b94b974678527f5bac7eb8d6e321b2be0b2f7534634a5ecd1248d7ad7e8e03163e92e9f1d620e28597bd881eea0981e8adfd70b670b0763ce9226f7c3e156b353e22fdea6942b577bbc539aab23cbd46bdd0ea1e67140c759f208c12dc57f3100000000000000e4965fcb6c2749955eac9476687e63b41c6282bbcb0c3d8b0c9493a3a5f6d879d7257b4b68dc7cac3d9d5f5bbe937c501866ee4042b250e516ec074559e1e551167138766eeecb6941e8305d9cde1800c821536f9d25bd14163890842a08135bdb7a90db630b18f099855a7d9de65c80fa71ff90e873361d0e11a7dfebe56ffb2000b711a0b7914d6351ff60593e48af60e1ffecba7cd6f8ab662eb3c8f3164139e994d6a706afb92722595d649a04f1ff64e5634e7cb9106173a96bf47f7085e7eecdfdc1b6507b851c4ba43312726cfec58dedece1355a087c1b60882713a6161914f09267e2ce8aa886b380add5cd92e185d345c9b2933a78a4215133e8e7247fa444aee30bfb6c17ef537fba43aad323f552c01e17514d5db387e4bf9341ccf5931fc75350f8dcef3ed3e74d674865249b879466f0e3cf0dc9e3d8720ea261e6996b844501e374a0e9878c1d02fd3d6e2ae5d7677892d7a5cdf4b7fa8f315b41552d07495f034e1fa0a2c9a34b7f66638e775dacb33e9b5cd3f4193bdebb7e86090dd265ee2b3ca9bd32d19ef229a050e910263d916670d8006067f5c0a1d8219b4a74b6092656f3b96f060000005ca3eca5d6295a1c11be907fad3bf9ccdf9898a084bbcc0a3714691c6c28fc34c44f9a46d6caf3b93d5d9ad8e3a25d34da57b203af917f5359952468fcddbf43d8fd1add972fd5d361c5be3e8b3280bbfa97e9826163537c99ff461123a1d9f93880feb5f953217f1e633bfb221a7822513278c36abcb6a4009e5037b3f56f9172bd70331817862c5e129d830d4f13e9793dad49b6bf286d2a539d089393d481931735a544f4e86b51a91106ce86d278a0712eab917d843ecc7d031e99d230689210e5afbcbb0a6cff33b40e7b637a8171d7b28fcaee54bb0fb7e2dd92c6cf2130f9fa4482512ae356c5907533108113a9a98b0508e4041df8e99b4136a66f58a6e91e2017dc7e095e8e4776d396797e089e9b42fdee33e76c28a636893510ed71166086bb4c1f3363dfd0abf0b2ea8ceba68c7d9a22a8342059862985d987083d80761bd699c3ee77473263a77ea65eac8a4c3b6b87f399575a15a2db143f6aac363644fd45372d6f43baebc7c3547780d1d079e225962733e0c0d3f364cbe9bcec7caaa8d372da63b213d4554e9ced54c2d59a97b814f1d700"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000640000000000c0000000c000000020000000000000000000008020000000000"], 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0xc040}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) 1.212597186s ago: executing program 2 (id=1665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="002f35b49de1d52ffdacfa1124d1ff0000000000c3bbea4cf633ccc27980c563bf84b4228c53c3330a93787f1423b06fafd416524caecd0dc826b0dfdcb737fc8b88a62a1d51c36d8ad2bede7a51fa1cdf66", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r1, &(0x7f0000000340)="07000300010001", 0x7) (async, rerun: 32) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000001c0)={{r1}, 0x7, &(0x7f0000000100)=[0x7ff, 0x5, 0xfffffffffffffff8, 0x4, 0x8000, 0x7926, 0x5], 0xfffffffeffffffff, 0xc, 0x1}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x6, 0x2, @loopback, @remote, 0x8000, 0x1, 0x7, 0xba7}}) (async) r4 = socket(0x27, 0x5, 0x7fff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={0x60, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000380)=0x14) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r3, 0x29, 0x0, 0xdc, 0xe, 0x21, @empty, @private1, 0x80, 0x10, 0x3, 0x4}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'tunl0\x00', r3, 0x700, 0x700, 0x5de48795, 0xaf, {{0x27, 0x4, 0x2, 0x3, 0x9c, 0x67, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xa9, 0x3, 0xc, [{@loopback, 0x2f42}, {@loopback, 0x7}, {@broadcast, 0xe249}, {@private=0xa010102, 0x800}, {@local, 0x9}, {@empty, 0x7}, {@remote, 0x800}, {@remote, 0x3}]}, @lsrr={0x83, 0xb, 0x9, [@empty, @remote]}, @timestamp_addr={0x44, 0x24, 0xc0, 0x1, 0x1, [{@empty}, {@loopback, 0xb}, {@broadcast}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0x3, [0x5, 0xfffffff8, 0x8]}, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000bc0)={&(0x7f0000000140), 0xc, &(0x7f0000000b80)={&(0x7f00000005c0)={0x584, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8b4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f6305ca}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x2, 0x3, 0x1000}]}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1.084578099s ago: executing program 4 (id=1666): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="1cead2d039bc555d5e687fb9725c98ebad4f3832e77bbc967d56081d902d1a7bb30e111a7c556054355a1fbf90758f0384e65bf9eb075b88f0282cee97fda3ce495f311b126b261c686b8f6a645ecbe5ee8193f5c0f3e55a3bdc33beb7c1ce1a55cbfb389e67e9637149ba91237927340225e646aeace2eb7e44b303e44c9a65b64537204ebb9f9233e411b379fb321e7f1bf5496c920afef92f7ad8faa8975136d73c8f6bf861004ed24323d8deec8b0c74298db5221039837cd60ac7096559d49fe23d4b3d4b264856b003676d381e1233f159a8438976", 0xd8}], 0x1, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_ttl={{0x14}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x81}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/250, 0xfa}, {&(0x7f00000016c0)=""/52, 0x34}], 0x3, 0x9ce5, 0x2) 1.051214668s ago: executing program 0 (id=1667): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x44, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x50) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/16, 0x10, 0x401, 0x1}) sendmsg$inet6(r3, &(0x7f0000001800)={&(0x7f0000000340)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="517aa40182e6f15251efc8e6bfebbb9734c6b9bb541a06454115320b2fd19ce1a5557eb990f5d731e27d989e794432338b13f59c8c8d126f07d25f845b1ffedec79f921fb1b16d9c2b98c9030d154ce4fef51e7702c90bfd126d001f6ddf4503b30fd8aa066206f5f4de3be42b6d2ff52898aa7754ff3e0eb5f08c151a7c05", 0x7f}, {&(0x7f0000000440)="1b756d7deb4eb37fabf173b729b89332634069c7235f9db601712d7d4f28618e5437b7eee110c2960d708a4197a1cc95b059079f8c27c127bf5dc7e05cc058f0e699a5d007c61d94bfd49302ba1fc7b805f92edb3682ddeeb63cbf798b125f1dc3e16da3fcc8600d84bd2404485ac9e7f7fe69752f88b7febe02784a654f38ee91380e2c44408fdbb0b2defd964a32f1dbd720869ef469c582b7f5e0e4695af52a28d645eb5ff49c3f313227f2852f49d4d320d3864b5a1339aa6f4b4539a9332c5a0f45c07604ec913a5b56f928e83106ad6c2d7797f9704d306bbc4d3b21e51908ea4dedef54d29f63137e359e3f8627", 0xf1}, {&(0x7f0000000540)="b21f1abac23c2a48a97e8fd2fc1440756ec05752e88f954ac192c5e4ab4d057821c08ba489dc7303800e2e6f", 0x2c}, {&(0x7f0000000600)="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", 0x3e1}], 0x4, &(0x7f0000001780)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x8, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x50}, 0x20000040) (async) sendmsg$inet6(r3, &(0x7f0000001800)={&(0x7f0000000340)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="517aa40182e6f15251efc8e6bfebbb9734c6b9bb541a06454115320b2fd19ce1a5557eb990f5d731e27d989e794432338b13f59c8c8d126f07d25f845b1ffedec79f921fb1b16d9c2b98c9030d154ce4fef51e7702c90bfd126d001f6ddf4503b30fd8aa066206f5f4de3be42b6d2ff52898aa7754ff3e0eb5f08c151a7c05", 0x7f}, {&(0x7f0000000440)="1b756d7deb4eb37fabf173b729b89332634069c7235f9db601712d7d4f28618e5437b7eee110c2960d708a4197a1cc95b059079f8c27c127bf5dc7e05cc058f0e699a5d007c61d94bfd49302ba1fc7b805f92edb3682ddeeb63cbf798b125f1dc3e16da3fcc8600d84bd2404485ac9e7f7fe69752f88b7febe02784a654f38ee91380e2c44408fdbb0b2defd964a32f1dbd720869ef469c582b7f5e0e4695af52a28d645eb5ff49c3f313227f2852f49d4d320d3864b5a1339aa6f4b4539a9332c5a0f45c07604ec913a5b56f928e83106ad6c2d7797f9704d306bbc4d3b21e51908ea4dedef54d29f63137e359e3f8627", 0xf1}, {&(0x7f0000000540)="b21f1abac23c2a48a97e8fd2fc1440756ec05752e88f954ac192c5e4ab4d057821c08ba489dc7303800e2e6f", 0x2c}, {&(0x7f0000000600)="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", 0x3e1}], 0x4, &(0x7f0000001780)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x8, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x50}, 0x20000040) 1.031336031s ago: executing program 1 (id=1668): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x5f5, 0x9, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r4 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, @address_request}}}}, 0x0) 969.082371ms ago: executing program 3 (id=1669): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) recvmmsg(r1, &(0x7f0000006bc0)=[{{}, 0xfff}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/221, 0xdd}], 0x1}, 0x8000}, {{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/152, 0x98}, {&(0x7f0000001500)=""/115, 0x73}, {&(0x7f0000001580)=""/202, 0xca}], 0x6, &(0x7f0000001700)=""/92, 0x5c}, 0xfffffffd}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000002900)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/223, 0xdf}], 0x2, &(0x7f0000002940)=""/212, 0xd4}, 0x3}, {{&(0x7f0000002a40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002ac0)=""/14, 0xe}, {&(0x7f0000002b00)=""/120, 0x78}, {&(0x7f0000002b80)=""/40, 0x28}, {&(0x7f0000002bc0)=""/41, 0x29}, {&(0x7f0000002c00)=""/43, 0x2b}], 0x5}, 0x9}, {{&(0x7f0000002cc0)=@generic, 0x80, &(0x7f0000003300)=[{&(0x7f0000002d40)=""/155, 0x9b}, {&(0x7f0000002e00)=""/47, 0x2f}, {&(0x7f0000002e40)=""/164, 0xa4}, {&(0x7f0000002f00)=""/116, 0x74}, {&(0x7f0000002f80)=""/136, 0x88}, {&(0x7f0000003040)=""/232, 0xe8}, {&(0x7f0000003140)=""/182, 0xb6}, {&(0x7f0000003200)=""/104, 0x68}, {&(0x7f0000003280)=""/96, 0x60}], 0x9, &(0x7f00000033c0)=""/112, 0x70}, 0x5}, {{&(0x7f0000003440)=@nfc_llcp, 0x80, &(0x7f0000003840)=[{&(0x7f00000034c0)=""/131, 0x83}, {&(0x7f0000003580)=""/12, 0xc}, {&(0x7f00000035c0)=""/221, 0xdd}, {&(0x7f00000036c0)=""/90, 0x5a}, {&(0x7f0000003740)=""/102, 0x66}, {&(0x7f00000037c0)=""/84, 0x54}], 0x6, &(0x7f00000038c0)=""/4096, 0x1000}, 0x7ff}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/168, 0xa8}, {&(0x7f0000006980)=""/199, 0xc7}, {&(0x7f0000006a80)=""/129, 0x81}], 0x5}, 0x1c000000}], 0x8, 0x10041, &(0x7f0000006dc0)={0x0, 0x3938700}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 852.070075ms ago: executing program 2 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) 830.34652ms ago: executing program 4 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r1}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) r2 = socket(0xa, 0x3, 0x3a) setsockopt(r2, 0x80000001, 0x2, &(0x7f0000000000)="d6630f9501ff8d4b1587446966bf038df79a0434cc36118f1d76c1ca0ee039f12a8fd424de", 0x25) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r3, &(0x7f0000000080)="9477fe4b2d62e1a7c1df3aee768b7ba5d6f78147b3327e4028d988dbb0157aeae92b4f792309385a4421e956d90df230ff6ec33ca51530e9f377ebca3cef78f5134f5fc86dc78c7f6dcbd9f2dce983d712cb36ab19178debe765307b625502d87c550b7cfe78cdd2ca4738f52429e6c8135ca7e36e", 0x75, 0x4000080, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 732.016309ms ago: executing program 3 (id=1672): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffd, 0x8, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x7, 0xffffffff, 0x10000, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @private=0xa010101, {[@timestamp={0x44, 0x20, 0x6e, 0x0, 0xd, [0x6, 0x48000000, 0x9, 0x7, 0x5, 0x400, 0x94d8]}, @timestamp={0x44, 0x2c, 0x27, 0x0, 0x1, [0x54e, 0x8, 0x9, 0xfffffffe, 0x4, 0x1, 0x1, 0x0, 0xa, 0xfffffff2]}, @end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x5, 0x7, 0x180, 0x3, 0x1, r1}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, r2, 0x100, 0x70bd2b, 0x9, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x45) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x124, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/-\x00'}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'ip_vti0\x00', r3, 0x80, 0x700, 0x7, 0x8, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x88, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0x34, 0x6a, 0x1, 0x3, [{@empty, 0x800}, {@broadcast, 0x5aedc1a4}, {@broadcast, 0x24}, {@loopback}, {@local, 0x8000}, {@empty, 0x1000}]}, @timestamp={0x44, 0x18, 0xec, 0x0, 0x8, [0xff9, 0x0, 0x5, 0x9, 0x666]}]}}}}}) socketpair(0x15, 0xa, 0x2, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000007c0)="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") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000a40), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x33, 0x8, 0x0, 0x47}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xe9, 0x9, 0x0, '\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x4040) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000f40)={@private2}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip6tnl0\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', r5, 0x29, 0x0, 0x4, 0x40, 0x20, @private0, @loopback, 0x7, 0x40, 0x4, 0x6}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x50}}, 0x48000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x94, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x498153ee}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, r9, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x41}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000014c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r10, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000015c0)={'ip6_vti0\x00', 0x8000}) syz_genetlink_get_family_id$gtp(&(0x7f0000001600), r0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f00000028c0)={{r0, &(0x7f0000001640)='N-%{{\x00', 0x4002, &(0x7f0000001680)={@align=0x10, {0x3, 0x6, 0xfffffff9}}, 0x7, &(0x7f00000016c0), &(0x7f0000001700)=0x9}, 0x2, &(0x7f0000002880)=[{0x1, 0x8, &(0x7f0000001740)='CT\x00', &(0x7f0000001780)="764f7508d9dcb4b16c55a2c7e3a9cd205bfe18bc25ec8c2bd1c692ee436a1fa4b0ef1a89a6e816a743b2ec869ce0c6eed215e97bf3941aa2b4b85e74dc8b6afcb9ee65ddd953a926c8eb9c5205025dec17a9bf6d387799aa86d21cb5d219189021d0804b1c0e32e714902abd9ced8945bc823d0fd9cfc97e3cae48b6934cd97b5fe92ad6e3d05b49f105298dd56695ed7adabb131be21216866acc9657771c6a8b52c2a0cb9f037efda94ca7", 0xac, 0x12}, {0x1, 0x10, &(0x7f0000001840)=')\x00', &(0x7f0000001880)="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", 0x1000, 0x2}]}) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000002980), r7) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x188005}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x24, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002a80)) 731.6065ms ago: executing program 0 (id=1673): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x80010000, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 625.66749ms ago: executing program 3 (id=1674): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x5, 0x0, 0x4) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 588.617609ms ago: executing program 4 (id=1675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x9, 0x2, 0x2, @remote, @private2, 0x1, 0x1, 0x7, 0x7}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x31, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x7, 0x8, 0x8, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x68, &(0x7f00000009c0)=""/104, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x8, 0x7, 0x10}, 0x10, 0x0, r3, 0x1, &(0x7f0000000ac0)=[r2, r1, r0, r2, r2, r0, r2], &(0x7f0000000b00)=[{0x3, 0x4, 0x7, 0x9}], 0x10, 0x9}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x93}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @alu={0xc, 0x0, 0x6, 0x9, 0x7, 0x4, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x49, &(0x7f0000000440)=""/73, 0x41100, 0x50, '\x00', r5, 0x18, r6, 0x8, &(0x7f0000000740)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x4, 0xf, 0x7fffffff}, 0x10, 0x22642, r7, 0x9, &(0x7f0000000c80)=[r0, r8, r0], &(0x7f0000000cc0)=[{0x2, 0x1, 0xa, 0x5}, {0x5, 0x3, 0x4, 0xa}, {0x5, 0x4, 0x8, 0xf}, {0x5, 0x2, 0xf, 0x8}, {0x3, 0x1, 0xa, 0xc}, {0x4, 0x1, 0x2}, {0x3, 0x4, 0xa, 0xa}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x1, 0x4, 0x6}], 0x10, 0x800}, 0x94) 533.077666ms ago: executing program 1 (id=1676): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x42) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010007000000440b00000600000088a8000014"], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 521.8813ms ago: executing program 2 (id=1677): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 487.458012ms ago: executing program 3 (id=1678): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)={0x118, 0x2a, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0xfb}]}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f934e2f6a9c8ab9467d996576b3", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000b40)={{r0, &(0x7f0000000280)='&+\x00', 0x143800, &(0x7f00000002c0)={@_ha_fsid={[0x14, 0x2]}, {0x1, 0x2, 0xfffffff9, 0xee7f}}, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0xfffffffb}, 0x3, &(0x7f0000000a80)=[{0x2, 0x9, &(0x7f0000000640)='\xff\xff', &(0x7f00000008c0)="209983e7cb17fa50bfdcaa2f55d2f31dc192791c778b5f75e9246c55aa56e3f72414e1a3c27cb3c2a75461a19f75537abea66d19e9ff6d83f4e94f73209ac0fd515bb58489ef9789f0ec741f0b5209ba644cab86c1c09f0ab4b8825cf165b49d15fb8aa664dd", 0x66}, {0x3, 0x6, &(0x7f0000000940)='\'-\'\x00', &(0x7f0000000980)="055704d605567e1261a1e7723313fb3e9a7f010af1945ae1625e1c040446303cf91d96ec99e0fc2193106de316f636888bf23c46cb36fb988406869e57a8ae", 0x3f, 0xa}, {0x2, 0x81, &(0x7f00000009c0)='\xff\xff', &(0x7f0000000a00)="affe9de7478bc0409b9dd39e84d69350bbcb35172c00da17de0b9d335db8d4474628be0e51142c21e62de817c63e9e129a673731daf306b48c36df43d8a4a8b6c6ac31c2d7b8935e5d83afe89aefa178386e3dd4e7a637d22c4d9cb51db0ce29", 0x60, 0x18}]}) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400e91a020105000000f000000000000200000816112f994e21d24cee932709b32dcbf076dac0d576f289113f52d6308dd8493b5e09611010eff18f97e47984eb620a5e57b2e4ea4bcfab78156906bee78e4ff132fa0b7f7fdd69492ef9d12dd8f19625b7da02ef865ffff67e8333cb65259a54380e7e4839161032763c502614eb4962baea45a1005d16bc1bff3b8624a9c91192dd716457d91a99b83e66920aab781e32d3a1515a374ebb19b291803afd188d54d579c26cc31623b94ce29739c10e6759d0ebd478574ef803c23aa4"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000cc0)=0x14) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000240), 0x3) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) 368.454528ms ago: executing program 1 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) close(0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendto$packet(r1, &(0x7f0000000380)="b8d1d5ec", 0x4, 0x4000000, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 368.22947ms ago: executing program 0 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 300.704215ms ago: executing program 4 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 212.489223ms ago: executing program 0 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000080)='*\x00', 0x0, &(0x7f00000000c0)={@align=0x3, {0x5, 0x200, 0x2, 0x2}}, 0x3, &(0x7f0000000100), &(0x7f0000000200)=0x9}) 121.068437ms ago: executing program 1 (id=1683): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a}, 0x20) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0xf}, 0x94) 105.416654ms ago: executing program 0 (id=1684): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x7d812381}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) 88.112957ms ago: executing program 2 (id=1685): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x4, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)={0x3c, 0xf, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x10, [0x10, 0x1c, 0x6]}}, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0xf67e, [0x3, 0x0, 0x0, 0xfffffffffffffffd]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x88) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xf41}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xb}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4c980) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2b0000, 0x0) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000500)=0x1) (async) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @local}, &(0x7f0000000580)=0x10, 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000005c0)={'TPROXY\x00'}, &(0x7f0000000600)=0x1e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, r1, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x2, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x4}], &(0x7f0000000680)='GPL\x00', 0x1, 0x39, &(0x7f00000006c0)=""/57, 0x41100, 0x10, '\x00', r7, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)=[r8, r9, r10, r11, r12, r13], &(0x7f0000000b40)=[{0x4, 0x1, 0x2, 0x2}, {0x1, 0x4, 0xf, 0x8}, {0x5, 0x1, 0x3, 0xb}, {0x2, 0x1, 0xc, 0x6}, {0x1, 0x4, 0xe, 0x1}, {0x3, 0x2, 0x9, 0x6}, {0x5, 0x4, 0xc, 0x1}, {0x1, 0x5, 0x4}], 0x10, 0x3}, 0x94) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000000c80), 0x3) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r6, 0x0, 0x89, 0xfa, &(0x7f0000000cc0)="d1caa51a382a3b445d189c76ea0953fb886de320099d2b292f523ecfbfc4ca8d1283db72ea411b9052e33df3dabcfe38804ac63e32e5b677c69f2c1f3f8d35f4d876a1d8737be9165586d64f8740dee5bd4c796c0409226677bc2021e2870815ed719f1eaaac64f87cf687fce42afc9bc99a7a1b5a8f4e62acb8734a7850fee76e9d1771f2a8aa3b4f", &(0x7f0000000d80)=""/250, 0x8d9, 0x0, 0x80, 0x7f, &(0x7f0000000e80)="9bf76138f690beac1273d4edfe3ac9aaee1cac103a3f5af9aa1df3311f20098f63d3f404b720e0b2ec02f54373f6662b71d58c6815a35ea916f9fa5e49e138cf3a7e7cb0cda08b591fe040bef74c576e8970b73e28eae331b232eaacac7b2f38fa03a31367e82e1ba94e8780720b0bbd926989809480d86f0bece4cec444aede", &(0x7f0000000f00)="bfabf11811749d9097aa4748a4d17fa195a05b3fd40c7b392f1f757be8c7d5263e56394cba9f107c49d293e7db8140762600d7871d6e0912afb1cb3f947b86b72ed369c3268fada79063654fd926142442ee58cc5cf82916e2c91395de1097d4fc045c3212ee435ffb0a08385e21e6bfa1badc45867c62acace543dcfe3e54", 0x1, 0x0, 0x62}, 0x50) (async) sendto$inet(r14, &(0x7f0000001000)="293f3a10515384dd8464dea4f437a30086977e2833743fa6dc8a3b480fb844d2f13b2ea15d3bc7615eb71f82a829864dad49bbaa2b0df2e9fb9309a697c9752dd01c0de6b22becfd76208e1d7e3308016b5ad85b1453bf249102ccf599c1b8e489fe1eb49c6e261ee1aedafe2a2dc33ba28809ec9a709c13ce23e885dbe69f292bb35edac86d714a17903ebafc159e63f59246daff21cef5d2095e582645a73fd3b7", 0xa2, 0x4000080, &(0x7f00000010c0)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r2, &(0x7f0000001100)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c) socket(0x70, 0x80000, 0x800) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x4044805) 41.103099ms ago: executing program 4 (id=1686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x10}}, @cred={{0x20}}], 0x30, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000300)="4c0af54d02785cb7bdb2cbacd06c7d8b05181f52aa45704643ad073f365d71ff9900192c2a", 0x25}, {&(0x7f0000000340)}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000400)="e59971475c3ade7426df9d0674a6142ca0efee006fe6b327e26df4ac73c672bd8622aa076ab42450e6ab399698aa", 0x2e}, {&(0x7f0000000440)="cfb898050e1fffde46a3b87aa33b31d5d85abada3a85e117f6923b9be24a4a4c0091459740043922ee70bf6153c0b83e7f69a5c198c264b0e63a4a64be8efd7263ed7307e2b8013d68b59e7252ca7cc69852530a8666352711b6a6f893aa5a70b7ee81779df53e388eb4e5baba8a70d8b67b90a45faed37b23bb79be44b746d469f08226a4d1ddad950287f1b859c86626f13abbae25540a628f5437eb79721783c0464d199b23c3e0ff9c639153d6e96d875f8e4b90defc3d8f2bb1fde5def04da49dbda23900d28d436486fe833bf136b0c1aa5a54b76c84d474f2", 0xdc}, {&(0x7f0000000540)="ac472182de310bc709d881675fbdbabc6fd3f49ff9ba54b838341b9885a4b0e9cb64456c2aced25af0e71ef26eb72aa7bf318c97c3ff882117ca5a9dae324013746384e0204b3496974bcbcf22bc5c6920b1768335de4626a563c6ee8b01bdc502ef83be82c86202d5", 0x69}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="5c1350c9a82c7442289f8cd6810724b786af108b672ae6ce29fdeb0b0efcda9b914cfc580122a51e2b0aa7c0a3fc4c4402751f851388d68c729ddf30267678a80b9da67ed3367977c02111019dd6d3ed06bc3365face110d84ac8283a23704a093b6c23a6cae7ab6c7409052918e2ed31e57571773c5034fa198e0303320d62a326a685abb38bb2198b7ab473ed1422b890ec1c82d3c56efb96df94ad4af88ad3c1beca8c38d2f34a9a30a5c7cae8a78fcf923aae925d3db0a8f1d28ae59d73f065011a593be5e1d1fd2d7ddbb68e8ef41ce38d8e09538af73b2befc1484052b64698943", 0xe4}, {0x0}], 0xa, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}], 0xb8, 0x20008880}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x4c054) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x21010000) 0s ago: executing program 1 (id=1687): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) kernel console output (not intermixed with test programs): 45454][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.652860][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.669033][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.669904][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.677157][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.685617][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.693542][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.706262][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.706473][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.715641][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.724337][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.728117][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.734932][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.742871][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.749741][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.762597][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.763454][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.769747][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.792294][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.331135][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.338775][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.346009][ T5627] bridge_slave_0: entered allmulticast mode [ 78.353342][ T5627] bridge_slave_0: entered promiscuous mode [ 78.390707][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.398080][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.405473][ T5627] bridge_slave_1: entered allmulticast mode [ 78.412290][ T5627] bridge_slave_1: entered promiscuous mode [ 78.519421][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.526805][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.533912][ T5628] bridge_slave_0: entered allmulticast mode [ 78.541061][ T5628] bridge_slave_0: entered promiscuous mode [ 78.550787][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.598606][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.605829][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.612954][ T5628] bridge_slave_1: entered allmulticast mode [ 78.620015][ T5628] bridge_slave_1: entered promiscuous mode [ 78.628615][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.656554][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.663698][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.670883][ T5626] bridge_slave_0: entered allmulticast mode [ 78.678251][ T5626] bridge_slave_0: entered promiscuous mode [ 78.714433][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.721588][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.728943][ T5638] bridge_slave_0: entered allmulticast mode [ 78.735929][ T5638] bridge_slave_0: entered promiscuous mode [ 78.743145][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.750396][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.758253][ T5626] bridge_slave_1: entered allmulticast mode [ 78.765403][ T5626] bridge_slave_1: entered promiscuous mode [ 78.772409][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.780510][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.788560][ T5625] bridge_slave_0: entered allmulticast mode [ 78.796196][ T5625] bridge_slave_0: entered promiscuous mode [ 78.821761][ T5627] team0: Port device team_slave_0 added [ 78.827814][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.836260][ T5636] Bluetooth: hci4: command tx timeout [ 78.836267][ T4943] Bluetooth: hci0: command tx timeout [ 78.836702][ T4943] Bluetooth: hci2: command tx timeout [ 78.842219][ T5637] Bluetooth: hci1: command tx timeout [ 78.847868][ T4943] Bluetooth: hci3: command tx timeout [ 78.854406][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.872062][ T5638] bridge_slave_1: entered allmulticast mode [ 78.879173][ T5638] bridge_slave_1: entered promiscuous mode [ 78.893254][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.900450][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.907637][ T5625] bridge_slave_1: entered allmulticast mode [ 78.915387][ T5625] bridge_slave_1: entered promiscuous mode [ 78.924257][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.935882][ T5627] team0: Port device team_slave_1 added [ 78.983140][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.019034][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.048250][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.055324][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.081761][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.095874][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.107020][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.126649][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.137514][ T5628] team0: Port device team_slave_0 added [ 79.143646][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.151674][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.182840][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.197214][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.218517][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.229863][ T5628] team0: Port device team_slave_1 added [ 79.262017][ T5626] team0: Port device team_slave_0 added [ 79.286752][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.293700][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.319885][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.342344][ T5626] team0: Port device team_slave_1 added [ 79.358814][ T5625] team0: Port device team_slave_0 added [ 79.365147][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.373056][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.399164][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.412681][ T5638] team0: Port device team_slave_0 added [ 79.438003][ T5625] team0: Port device team_slave_1 added [ 79.451329][ T5638] team0: Port device team_slave_1 added [ 79.502058][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.509307][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.535548][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.551179][ T5627] hsr_slave_0: entered promiscuous mode [ 79.557849][ T5627] hsr_slave_1: entered promiscuous mode [ 79.572680][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.580068][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.605994][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.626906][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.633918][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.659974][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.686787][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.693807][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.720012][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.731618][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.738726][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.764662][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.797285][ T5628] hsr_slave_0: entered promiscuous mode [ 79.803447][ T5628] hsr_slave_1: entered promiscuous mode [ 79.809636][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 79.815436][ T5628] Cannot create hsr debugfs directory [ 79.827842][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.834800][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.860804][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.923368][ T5626] hsr_slave_0: entered promiscuous mode [ 79.929692][ T5626] hsr_slave_1: entered promiscuous mode [ 79.936172][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 79.941908][ T5626] Cannot create hsr debugfs directory [ 80.067007][ T5625] hsr_slave_0: entered promiscuous mode [ 80.073232][ T5625] hsr_slave_1: entered promiscuous mode [ 80.079535][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 80.085303][ T5625] Cannot create hsr debugfs directory [ 80.107307][ T5638] hsr_slave_0: entered promiscuous mode [ 80.113530][ T5638] hsr_slave_1: entered promiscuous mode [ 80.120478][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 80.126367][ T5638] Cannot create hsr debugfs directory [ 80.489633][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.501898][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.509747][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.519005][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.537235][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.547922][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.582689][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.593402][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.648922][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.659293][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.681709][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.692311][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.700485][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.710191][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.727572][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.736980][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.800913][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.812882][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.831388][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.841232][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.861140][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.871850][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.881748][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.890649][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.914259][ T4943] Bluetooth: hci3: command tx timeout [ 80.925107][ T4943] Bluetooth: hci1: command tx timeout [ 80.925903][ T5636] Bluetooth: hci2: command tx timeout [ 80.931587][ T4943] Bluetooth: hci0: command tx timeout [ 80.936470][ T5637] Bluetooth: hci4: command tx timeout [ 80.998312][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.008134][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.016311][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.025553][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.033242][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.043280][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.051154][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.061046][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.132210][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.188833][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.211357][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.220632][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.237539][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.244977][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.258359][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.267738][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.276184][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.285747][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.295531][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.309910][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.323948][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.357362][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.364519][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.392849][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.415283][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.440118][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.447483][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.456688][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.463780][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.506280][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.533550][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.540729][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.596902][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.604093][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.703850][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.818228][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.892919][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.900100][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.926061][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.937824][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.945004][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.021589][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.055028][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.062198][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.127359][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.134542][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.662413][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.856202][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.902179][ T5627] veth0_vlan: entered promiscuous mode [ 82.957197][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.976651][ T5627] veth1_vlan: entered promiscuous mode [ 82.996552][ T5637] Bluetooth: hci2: command tx timeout [ 82.996636][ T5636] Bluetooth: hci0: command tx timeout [ 83.001971][ T5637] Bluetooth: hci3: command tx timeout [ 83.001993][ T5637] Bluetooth: hci4: command tx timeout [ 83.002011][ T5637] Bluetooth: hci1: command tx timeout [ 83.043716][ T5628] veth0_vlan: entered promiscuous mode [ 83.067645][ T5628] veth1_vlan: entered promiscuous mode [ 83.162023][ T5627] veth0_macvtap: entered promiscuous mode [ 83.220000][ T5627] veth1_macvtap: entered promiscuous mode [ 83.233228][ T5628] veth0_macvtap: entered promiscuous mode [ 83.250611][ T5626] veth0_vlan: entered promiscuous mode [ 83.266253][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.296156][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.309560][ T5628] veth1_macvtap: entered promiscuous mode [ 83.323543][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.334645][ T5626] veth1_vlan: entered promiscuous mode [ 83.355676][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.391469][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.419100][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.428978][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.446171][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.454454][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496256][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.540742][ T5626] veth0_macvtap: entered promiscuous mode [ 83.551761][ T100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579845][ T100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.602004][ T5625] veth0_vlan: entered promiscuous mode [ 83.609354][ T5626] veth1_macvtap: entered promiscuous mode [ 83.621310][ T100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.635349][ T100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701787][ T5625] veth1_vlan: entered promiscuous mode [ 83.712289][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.767387][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.777867][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.779288][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.841418][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.850762][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.856450][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.865842][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.879827][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.898142][ T5638] veth0_vlan: entered promiscuous mode [ 83.913839][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.922775][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.951060][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.962664][ T5638] veth1_vlan: entered promiscuous mode [ 83.972802][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996594][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.005514][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.072325][ T5625] veth0_macvtap: entered promiscuous mode [ 84.122222][ T5625] veth1_macvtap: entered promiscuous mode [ 84.139476][ T5824] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.149241][ T5824] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.269448][ T5826] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 84.277170][ T5638] veth0_macvtap: entered promiscuous mode [ 84.289894][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.305603][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.319141][ T5638] veth1_macvtap: entered promiscuous mode [ 84.330006][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.337833][ T5826] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.359573][ T5830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.380594][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.391813][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.401197][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.403872][ T5831] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.422458][ T5829] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.439510][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.448950][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.461945][ T5829] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.478333][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.478537][ T5828] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.488323][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523769][ T5831] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.549095][ T5833] netlink: zone id is out of range [ 84.554504][ T5833] netlink: zone id is out of range [ 84.560064][ T5833] netlink: zone id is out of range [ 84.566647][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572789][ T5831] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.581619][ T5833] netlink: zone id is out of range [ 84.593767][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.596996][ T5833] netlink: zone id is out of range [ 84.610543][ T5833] netlink: zone id is out of range [ 84.620772][ T5833] netlink: zone id is out of range [ 84.630711][ T5833] netlink: zone id is out of range [ 84.650695][ T5833] netlink: zone id is out of range [ 84.657826][ T5833] netlink: zone id is out of range [ 84.663119][ T5833] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 84.687029][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.721859][ T5833] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 84.748860][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.782059][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.795780][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.808620][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.831607][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.945059][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.970654][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.055980][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.074869][ T5636] Bluetooth: hci1: command tx timeout [ 85.074908][ T4943] Bluetooth: hci4: command tx timeout [ 85.080287][ T5636] Bluetooth: hci3: command tx timeout [ 85.086073][ T5637] Bluetooth: hci2: command tx timeout [ 85.093767][ T5636] Bluetooth: hci0: command tx timeout [ 85.113226][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.140138][ T5843] vlan2: entered promiscuous mode [ 85.145617][ T5843] bridge0: entered promiscuous mode [ 85.220748][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.236654][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.408041][ T5858] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.600944][ T5870] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 85.609135][ T5870] netlink: 'syz.1.14': attribute type 7 has an invalid length. [ 85.618229][ T5870] netlink: 'syz.1.14': attribute type 8 has an invalid length. [ 85.626308][ T5870] NCSI netlink: No device for ifindex 65584 [ 85.706450][ T5874] trusted_key: syz.0.15 sent an empty control message without MSG_MORE. [ 85.746628][ T5874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.754285][ T5874] IPv6: NLM_F_CREATE should be set when creating new route [ 85.773062][ T5874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.780947][ T5874] Zero length message leads to an empty skb [ 86.129587][ T5888] bond0: Error: Cannot enslave bond to itself. [ 86.335498][ T5897] syzkaller1: entered promiscuous mode [ 86.360466][ T5897] syzkaller1: entered allmulticast mode [ 86.600886][ T5914] SET target dimension over the limit! [ 86.618865][ T809] cfg80211: failed to load regulatory.db [ 86.992769][ T5935] netlink: 'syz.0.35': attribute type 13 has an invalid length. [ 87.061705][ T5914] netlink: 'syz.4.30': attribute type 4 has an invalid length. [ 87.499486][ T5925] syzkaller0: entered promiscuous mode [ 87.508126][ T5925] syzkaller0: entered allmulticast mode [ 87.523916][ T5961] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.571678][ T5955] syzkaller0: entered promiscuous mode [ 87.591410][ T5955] syzkaller0: entered allmulticast mode [ 87.902791][ T5974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.922214][ T5973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.256300][ T6008] netlink: 'syz.4.51': attribute type 13 has an invalid length. [ 89.283364][ T6008] gretap0: refused to change device tx_queue_len [ 89.316294][ T6011] netlink: 'syz.0.52': attribute type 2 has an invalid length. [ 89.346023][ T6011] __nla_validate_parse: 8 callbacks suppressed [ 89.346041][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 89.483099][ T6019] xt_cgroup: xt_cgroup: no path or classid specified [ 89.509637][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 89.512067][ T6017] bridge0: port 3(dummy0) entered blocking state [ 89.561657][ T6017] bridge0: port 3(dummy0) entered disabled state [ 89.571534][ T6017] dummy0: entered allmulticast mode [ 89.595707][ T6025] net_ratelimit: 5 callbacks suppressed [ 89.595722][ T6025] openvswitch: netlink: Missing key (keys=40, expected=100) [ 89.595782][ T6017] dummy0: entered promiscuous mode [ 89.603396][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 89.619237][ T6017] bridge0: port 3(dummy0) entered blocking state [ 89.631095][ T6017] bridge0: port 3(dummy0) entered forwarding state [ 89.691095][ T6029] netlink: 'syz.3.61': attribute type 21 has an invalid length. [ 90.101827][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.112457][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.134814][ T6055] netlink: 'syz.2.67': attribute type 16 has an invalid length. [ 90.144407][ T6055] netlink: 'syz.2.67': attribute type 17 has an invalid length. [ 90.228580][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.235810][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.251391][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.258625][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.375780][ T6055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.432069][ T6060] IPVS: Scheduler module ip_vs_sip not found [ 90.650362][ T6069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 90.783989][ T6079] tipc: Enabling of bearer rejected, failed to enable media [ 90.991609][ T6092] team0: entered promiscuous mode [ 91.014280][ T6092] team_slave_0: entered promiscuous mode [ 91.038631][ T6092] team_slave_1: entered promiscuous mode [ 91.191172][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.84'. [ 91.278704][ T6104] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 91.305250][ T6104] bond1 (unregistering): Released all slaves [ 91.518097][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 91.697949][ T6124] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 91.711553][ T6124] bond1 (unregistering): Released all slaves [ 91.836052][ T6139] netlink: 92 bytes leftover after parsing attributes in process `syz.4.93'. [ 91.910261][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.94'. [ 92.066392][ T6154] netlink: 72 bytes leftover after parsing attributes in process `syz.1.97'. [ 92.093705][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.99'. [ 92.111741][ T6160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.125602][ T6160] gretap1: entered promiscuous mode [ 92.130957][ T6160] gretap1: entered allmulticast mode [ 92.257356][ T6173] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 92.403514][ T6181] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 92.451421][ T6181] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 92.475417][ T6181] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 92.519401][ T6181] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.522938][ T6187] netlink: 'syz.4.105': attribute type 8 has an invalid length. [ 92.536635][ T6181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.550764][ T6185] veth1_macvtap: left promiscuous mode [ 92.695775][ T6191] openvswitch: netlink: VXLAN extension 1536 out of range max 1 [ 92.939514][ T6204] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.441828][ T6236] netlink: 'syz.2.121': attribute type 9 has an invalid length. [ 93.885729][ T6243] bond1 (unregistering): Released all slaves [ 93.960188][ T6261] IPVS: set_ctl: invalid protocol: 26 0.0.0.4:20000 [ 94.145443][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.220294][ T6234] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 94.327291][ T6278] netlink: 'syz.0.133': attribute type 12 has an invalid length. [ 94.344165][ T6278] netlink: 'syz.0.133': attribute type 29 has an invalid length. [ 94.355482][ T6278] __nla_validate_parse: 6 callbacks suppressed [ 94.355497][ T6278] netlink: 148 bytes leftover after parsing attributes in process `syz.0.133'. [ 94.389823][ T6278] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 94.422009][ T6278] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 94.439025][ T6278] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 94.459575][ T6278] netlink: 3 bytes leftover after parsing attributes in process `syz.0.133'. [ 94.522303][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.564325][ T6290] netlink: 'syz.4.137': attribute type 18 has an invalid length. [ 94.590465][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.617847][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.626900][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.648485][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.669449][ T6290] netlink: 'syz.4.137': attribute type 18 has an invalid length. [ 94.672483][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.708071][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 94.723406][ T3320] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.799725][ T6304] netlink: 'syz.2.140': attribute type 15 has an invalid length. [ 95.022797][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 95.249548][ T6332] policy can only be matched on NF_INET_PRE_ROUTING [ 95.249569][ T6332] unable to load match [ 95.502249][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.553650][ T6360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.156'. [ 95.779499][ T6371] netlink: 64 bytes leftover after parsing attributes in process `syz.3.158'. [ 95.807038][ T6373] netlink: 'syz.0.157': attribute type 13 has an invalid length. [ 95.950958][ T6375] can: request_module (can-proto-5) failed. [ 95.989221][ T6385] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 96.035706][ T6385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.044343][ T6388] netlink: 72 bytes leftover after parsing attributes in process `syz.2.161'. [ 96.047645][ T6366] syzkaller0: entered promiscuous mode [ 96.101478][ T6366] syzkaller0: entered allmulticast mode [ 96.129841][ T6385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.661318][ T6419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.379826][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.434736][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.732294][ T6487] xt_ecn: cannot match TCP bits for non-tcp packets [ 97.944954][ T6502] syzkaller0: entered promiscuous mode [ 97.958463][ T6502] syzkaller0: entered allmulticast mode [ 98.063148][ T6513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.065532][ T6508] syzkaller0: entered promiscuous mode [ 98.078364][ T6508] syzkaller0: entered allmulticast mode [ 98.930647][ T6558] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 99.623720][ T6584] __nla_validate_parse: 11 callbacks suppressed [ 99.623739][ T6584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.220'. [ 99.709672][ T6587] vlan2: entered promiscuous mode [ 99.733986][ T6587] geneve1: entered promiscuous mode [ 99.751638][ T6587] vlan2: entered allmulticast mode [ 99.781428][ T6587] geneve1: entered allmulticast mode [ 99.931753][ T6595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 100.219992][ T6609] validate_nla: 8 callbacks suppressed [ 100.220011][ T6609] netlink: 'syz.2.226': attribute type 5 has an invalid length. [ 100.406595][ T6618] bond0: (slave bond_slave_0): Releasing backup interface [ 100.613863][ T6628] netlink: 'syz.4.232': attribute type 17 has an invalid length. [ 100.632438][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 100.662993][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'. [ 100.728581][ T6628] gretap0: entered promiscuous mode [ 100.748006][ T6628] gretap0: left promiscuous mode [ 100.912518][ T6643] netlink: 'syz.2.236': attribute type 7 has an invalid length. [ 100.947280][ T6643] netlink: 'syz.2.236': attribute type 8 has an invalid length. [ 100.976727][ T6647] tipc: Started in network mode [ 100.993309][ T6647] tipc: Node identity e6b1682089d9, cluster identity 4711 [ 101.020670][ T6647] tipc: Enabled bearer , priority 11 [ 101.147628][ T6652] netlink: 84 bytes leftover after parsing attributes in process `syz.4.240'. [ 101.190752][ T6652] netlink: 88 bytes leftover after parsing attributes in process `syz.4.240'. [ 101.251002][ T6657] netlink: 'syz.3.242': attribute type 10 has an invalid length. [ 101.276100][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.331063][ T6657] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.436022][ T6663] h: entered promiscuous mode [ 101.666783][ T6682] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 101.676799][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.708634][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.746560][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.878445][ T6695] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 101.890976][ T6692] netlink: 144 bytes leftover after parsing attributes in process `syz.4.253'. [ 101.908028][ T6692] tipc: Started in network mode [ 101.919074][ T6692] tipc: Node identity b6f4f10296f1, cluster identity 4711 [ 101.940933][ T6692] tipc: Enabled bearer , priority 0 [ 101.966175][ T6698] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 102.013873][ T6691] tipc: Disabling bearer [ 102.044675][ T809] tipc: Node number set to 1869113376 [ 102.123101][ T6707] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 102.377527][ T6722] sctp: [Deprecated]: syz.4.262 (pid 6722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.377527][ T6722] Use struct sctp_sack_info instead [ 102.421998][ T6722] sctp: [Deprecated]: syz.4.262 (pid 6722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.421998][ T6722] Use struct sctp_sack_info instead [ 102.433298][ T6726] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 102.787466][ T6744] Bluetooth: MGMT ver 1.23 [ 103.109968][ T6769] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 103.139721][ T6769] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 103.336741][ T6788] sctp: [Deprecated]: syz.0.280 (pid 6788) Use of int in maxseg socket option. [ 103.336741][ T6788] Use struct sctp_assoc_value instead [ 103.395262][ T6787] sctp: [Deprecated]: syz.0.280 (pid 6787) Use of int in maxseg socket option. [ 103.395262][ T6787] Use struct sctp_assoc_value instead [ 103.462940][ T6795] netlink: 'syz.2.281': attribute type 3 has an invalid length. [ 103.498371][ T6796] netlink: 'syz.1.282': attribute type 13 has an invalid length. [ 103.742641][ T6792] syzkaller0: entered promiscuous mode [ 103.748664][ T6792] syzkaller0: entered allmulticast mode [ 104.183339][ T6827] SET target dimension over the limit! [ 104.386781][ T6838] macvtap1: entered allmulticast mode [ 104.427506][ T6838] macvtap2: entered allmulticast mode [ 104.487482][ T6838] bond2: (slave bridge1): making interface the new active one [ 104.501039][ T6838] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 104.795116][ T6873] ksmbd: Unknown IPC event: 1, ignore. [ 104.819764][ T6873] __nla_validate_parse: 10 callbacks suppressed [ 104.819781][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 104.839046][ T6879] tipc: Started in network mode [ 104.854342][ T6879] tipc: Node identity 3ab523a417e5, cluster identity 4711 [ 104.872953][ T6879] tipc: Enabled bearer , priority 0 [ 104.957041][ T6878] tipc: Disabling bearer [ 105.362961][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 105.385222][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 105.527424][ T6924] validate_nla: 3 callbacks suppressed [ 105.527440][ T6924] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 105.591290][ T6924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.313'. [ 105.603024][ T6930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.315'. [ 105.645080][ T6918] bridge0: port 3(dummy0) entered disabled state [ 105.651655][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.659332][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.781503][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.817588][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.087516][ T6955] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 106.148272][ T3320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.169556][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 106.186802][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.219223][ T6955] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 106.227745][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.284350][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.343083][ T6963] bridge3: entered promiscuous mode [ 106.349277][ T6963] bridge3: entered allmulticast mode [ 106.376675][ T6967] veth0_to_bond: entered allmulticast mode [ 106.536762][ T6978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.766060][ T7000] bond0: Device is already in use. [ 107.017544][ T7007] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 107.439183][ T7033] bond0: (slave bond_slave_1): Releasing backup interface [ 107.785798][ T7043] block nbd0: server does not support multiple connections per device. [ 107.867207][ T7043] block nbd0: shutting down sockets [ 107.915799][ T7054] netlink: 'syz.2.351': attribute type 83 has an invalid length. [ 107.971002][ T7054] syzkaller0: entered promiscuous mode [ 107.994583][ T7054] syzkaller0: entered allmulticast mode [ 108.006723][ T7057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.040969][ T7057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.072476][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 108.367227][ T7072] netlink: 830 bytes leftover after parsing attributes in process `syz.1.358'. [ 108.488608][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 108.531677][ T7079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.360'. [ 109.060438][ T7093] veth3: entered promiscuous mode [ 109.098813][ T7093] veth3: entered allmulticast mode [ 109.201841][ T7113] Cannot find add_set index 0 as target [ 109.236497][ T7093] veth5: entered promiscuous mode [ 109.251195][ T7093] veth5: entered allmulticast mode [ 109.313231][ T7093] veth7: entered promiscuous mode [ 109.318527][ T7093] veth7: entered allmulticast mode [ 109.362032][ T7093] veth9: entered promiscuous mode [ 109.372597][ T7093] veth9: entered allmulticast mode [ 109.436800][ T7093] veth11: entered promiscuous mode [ 109.445840][ T7093] veth11: entered allmulticast mode [ 109.457421][ T7114] syzkaller0: entered promiscuous mode [ 109.471760][ T7125] openvswitch: netlink: Message has 8 unknown bytes. [ 109.480196][ T7114] syzkaller0: entered allmulticast mode [ 109.509543][ T7093] veth13: entered promiscuous mode [ 109.516137][ T7093] veth13: entered allmulticast mode [ 109.522171][ T7116] syzkaller0: entered promiscuous mode [ 109.530685][ T7116] syzkaller0: entered allmulticast mode [ 109.582593][ T7093] veth15: entered promiscuous mode [ 109.594268][ T7093] veth15: entered allmulticast mode [ 110.178005][ T7161] __nla_validate_parse: 16 callbacks suppressed [ 110.178022][ T7161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.389'. [ 110.289540][ T7168] netlink: 'syz.2.391': attribute type 3 has an invalid length. [ 110.642478][ T7182] syz_tun: entered allmulticast mode [ 110.702321][ T7180] syz_tun: left allmulticast mode [ 110.706622][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 110.746423][ T7185] netlink: 'syz.1.397': attribute type 7 has an invalid length. [ 110.790071][ T7185] netlink: 'syz.1.397': attribute type 8 has an invalid length. [ 110.826134][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 110.860625][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 110.894518][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 111.017864][ T7196] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 111.034535][ T9] syzkaller1: tun_net_xmit 90 [ 111.059133][ T7196] syzkaller1: Linktype set failed because interface is up [ 111.087583][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 111.105466][ T7205] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.123016][ T7208] netlink: 'syz.0.404': attribute type 11 has an invalid length. [ 111.173532][ T7209] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 111.184970][ T9] syzkaller1: tun_net_xmit 90 [ 111.298139][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 111.377745][ T7217] netlink: 'syz.3.406': attribute type 7 has an invalid length. [ 111.386069][ T7220] openvswitch: netlink: Missing key (keys=40, expected=100) [ 111.436237][ T7220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.438279][ T1342] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.470773][ T7225] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 111.603495][ T7217] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 111.641104][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 111.673771][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 111.767934][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 112.496862][ T7283] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 112.879867][ T7303] syzkaller0: entered promiscuous mode [ 112.901151][ T7303] syzkaller0: entered allmulticast mode [ 113.492025][ T7342] dummy0: left allmulticast mode [ 113.507794][ T7344] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 113.529666][ T7342] dummy0: left promiscuous mode [ 113.552087][ T7342] bridge0: port 3(dummy0) entered disabled state [ 113.570076][ T7342] bridge_slave_1: left allmulticast mode [ 113.584071][ T7342] bridge_slave_1: left promiscuous mode [ 113.597150][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.618243][ T7342] bridge_slave_0: left allmulticast mode [ 113.624258][ T7342] bridge_slave_0: left promiscuous mode [ 113.630184][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.859049][ T7360] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 113.955567][ T7360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.044202][ T7364] bond4: (slave bridge2): making interface the new active one [ 114.053199][ T7364] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 114.090380][ T7372] syzkaller1: entered promiscuous mode [ 114.109531][ T7372] syzkaller1: entered allmulticast mode [ 114.178278][ T7381] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 114.290957][ T7391] bond0: (slave bond_slave_1): Releasing backup interface [ 114.414157][ T5742] IPVS: starting estimator thread 0... [ 114.414469][ T7378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.527236][ T7398] IPVS: using max 30 ests per chain, 72000 per kthread [ 114.537639][ T7402] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.759295][ T7413] syzkaller0: entered promiscuous mode [ 114.771110][ T7413] syzkaller0: entered allmulticast mode [ 115.296713][ T7453] __nla_validate_parse: 7 callbacks suppressed [ 115.296730][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.333092][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 115.406604][ T7461] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 115.418477][ T7457] ip6gre1: entered allmulticast mode [ 115.648138][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.482'. [ 115.766568][ T7479] syzkaller1: entered promiscuous mode [ 115.780646][ T7479] syzkaller1: entered allmulticast mode [ 115.863315][ T7483] tipc: Enabling of bearer rejected, failed to enable media [ 115.942346][ T7488] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 115.950209][ T7488] netlink: 232 bytes leftover after parsing attributes in process `syz.0.487'. [ 115.961698][ T7488] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 115.993934][ T7488] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.487'. [ 116.033033][ T7488] netlink: 830 bytes leftover after parsing attributes in process `syz.0.487'. [ 116.077954][ T7492] team0: left promiscuous mode [ 116.090980][ T7492] team_slave_0: left promiscuous mode [ 116.100750][ T7492] team_slave_1: left promiscuous mode [ 116.117986][ T7492] h: left promiscuous mode [ 116.123308][ T7492] bridge3: left promiscuous mode [ 116.129493][ T7492] bridge3: left allmulticast mode [ 116.141025][ T7492] ip6gre1: left allmulticast mode [ 116.174851][ T7497] bridge_slave_0: invalid flags given to default FDB implementation [ 116.776717][ T7531] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 116.961246][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 117.496187][ T7549] bond3: entered promiscuous mode [ 117.525009][ T7549] bond3: entered allmulticast mode [ 117.545757][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.630009][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 118.088873][ T7583] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 118.114522][ T5636] Bluetooth: hci4: command tx timeout [ 118.186903][ T7588] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 118.304909][ T7588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.308548][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 118.400445][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'. [ 118.658333][ T7613] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 119.038996][ T7632] bond3: entered promiscuous mode [ 119.066381][ T7632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.231312][ T7646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.259216][ T7646] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 119.308634][ T7646] bond3: (slave sit1): Error -95 calling set_mac_address [ 119.465954][ T7653] veth0_to_bond: mtu less than device minimum [ 119.513560][ T7656] pimreg3: entered allmulticast mode [ 119.735394][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.744730][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.753084][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.761640][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.769974][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.778301][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.786647][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.794972][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.803277][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.811596][ T7660] tc action pedit unable to extract header offset for header type (0x4) [ 119.819919][ T7660] 0: reclassify loop, rule prio 0, protocol 800 [ 120.352249][ T7693] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 120.580469][ T7704] __nla_validate_parse: 3 callbacks suppressed [ 120.580488][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 120.599455][ T7695] netlink: 'syz.4.547': attribute type 83 has an invalid length. [ 120.630085][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 120.689703][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 120.717687][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 120.795419][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.554'. [ 120.806856][ T7709] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 120.989367][ T7709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.048825][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 121.109364][ T7728] bond4: (slave ip6gretap1): making interface the new active one [ 121.127555][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 121.145564][ T7728] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 121.149492][ T7743] netlink: 'syz.3.558': attribute type 9 has an invalid length. [ 121.255377][ T7737] IPVS: ip_vs_edit_dest(): server weight less than zero [ 121.264168][ T5763] IPVS: starting estimator thread 0... [ 121.272900][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 121.283347][ T7750] netlink: 'syz.1.563': attribute type 3 has an invalid length. [ 121.291373][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 121.303604][ T7750] netlink: 'syz.1.563': attribute type 3 has an invalid length. [ 121.366712][ T7751] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.517379][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 121.630242][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.997334][ T7795] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 122.013750][ T7795] ip6gretap1: entered promiscuous mode [ 122.020709][ T7795] ip6gretap1: entered allmulticast mode [ 122.152012][ T7806] veth1_to_bond: entered allmulticast mode [ 122.183582][ T7806] veth1_to_bond: left allmulticast mode [ 122.312531][ T7814] syzkaller0: entered promiscuous mode [ 122.326715][ T7814] syzkaller0: entered allmulticast mode [ 122.676902][ T7836] gtp0: entered allmulticast mode [ 122.685600][ T7836] team0: Device gtp0 is of different type [ 122.711467][ T7841] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 122.746108][ T7841] netlink: 'syz.4.589': attribute type 2 has an invalid length. [ 122.947433][ T7848] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 122.966273][ T29] audit: type=1800 audit(1782985977.324:2): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.594" name="memory.events" dev="tmpfs" ino=601 res=0 errno=0 [ 123.304574][ T7862] veth0: Caught tx_queue_len zero misconfig [ 124.586789][ T7953] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 124.616132][ T7956] syz_tun: entered allmulticast mode [ 124.638810][ T7953] ip6tnl0: Caught tx_queue_len zero misconfig [ 124.657682][ T7954] syz_tun: left allmulticast mode [ 124.742966][ T7958] ip6erspan0: entered promiscuous mode [ 124.853568][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.090647][ T7979] xt_TCPMSS: Only works on TCP SYN packets [ 125.406829][ T7999] xt_hashlimit: size too large, truncated to 1048576 [ 125.490683][ T8003] 0XD: renamed from gretap0 (while UP) [ 125.601588][ T8003] 0XD: entered allmulticast mode [ 125.872314][ T8021] netlink: 'syz.4.648': attribute type 5 has an invalid length. [ 125.949736][ T8027] bond0: Device is already in use. [ 126.328951][ T8050] syzkaller0: entered promiscuous mode [ 126.351368][ T8050] syzkaller0: entered allmulticast mode [ 126.463859][ T8059] __nla_validate_parse: 12 callbacks suppressed [ 126.463875][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 126.569331][ T8058] syzkaller0: entered promiscuous mode [ 126.617024][ T8058] syzkaller0: entered allmulticast mode [ 126.741047][ T8070] Bluetooth: MGMT ver 1.23 [ 126.806871][ T8072] erspan0: entered promiscuous mode [ 126.842873][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 126.885945][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 126.993457][ T8089] x_tables: unsorted entry at hook 1 [ 127.083926][ T8095] netlink: 768 bytes leftover after parsing attributes in process `syz.1.666'. [ 127.245271][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 127.401459][ T8112] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 127.570994][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 127.583627][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 127.622418][ T8123] veth5: entered promiscuous mode [ 127.720043][ T5636] Bluetooth: hci4: link tx timeout [ 127.726654][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.808984][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 127.818075][ T8134] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 127.818075][ T8134] Please contact the netfilter-devel mailing list or update your nftables rules. [ 127.842510][ T5636] Bluetooth: hci4: link tx timeout [ 127.847716][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.866513][ T5636] Bluetooth: hci4: link tx timeout [ 127.873773][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.946819][ T5636] Bluetooth: hci4: link tx timeout [ 127.954549][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.189515][ T5636] Bluetooth: hci4: link tx timeout [ 128.195102][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.259564][ T8156] sit0: Caught tx_queue_len zero misconfig [ 128.417375][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.683'. [ 128.588888][ T8160] "syz.2.682" (8160) uses obsolete ecb(arc4) skcipher [ 128.740383][ T8188] netlink: 'syz.1.688': attribute type 12 has an invalid length. [ 128.815224][ T8192] netlink: 256 bytes leftover after parsing attributes in process `syz.0.689'. [ 128.832995][ T8195] IPVS: length: 253 != 8 [ 128.916170][ T8197] xt_hashlimit: size too large, truncated to 1048576 [ 128.917005][ T5636] Bluetooth: hci4: link tx timeout [ 128.929755][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.247377][ T5636] Bluetooth: hci4: link tx timeout [ 129.259591][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.297174][ T8219] hsr_slave_0: left promiscuous mode [ 129.341288][ T8219] hsr_slave_1: left promiscuous mode [ 129.388350][ T8222] netlink: 'syz.4.698': attribute type 3 has an invalid length. [ 129.560128][ T5636] Bluetooth: hci4: link tx timeout [ 129.565336][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.702287][ T8242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.797280][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 132.073737][ T8371] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 132.155526][ T8381] __nla_validate_parse: 9 callbacks suppressed [ 132.155544][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 132.307947][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 132.339797][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 132.381003][ T8398] netlink: 'syz.1.746': attribute type 4 has an invalid length. [ 132.421709][ T8398] netlink: 17 bytes leftover after parsing attributes in process `syz.1.746'. [ 132.678179][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743703][ T8416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768777][ T8412] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 132.893730][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 133.144995][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 133.170147][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 133.201993][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 133.223221][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 133.243444][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 133.271158][ T8436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.308295][ T8441] lo: Caught tx_queue_len zero misconfig [ 133.365355][ T8451] batadv_slave_0: entered promiscuous mode [ 133.400770][ T8451] batadv_slave_0: left promiscuous mode [ 133.583902][ T8464] tc_dump_action: action bad kind [ 133.598726][ T8464] netlink: 'syz.3.765': attribute type 9 has an invalid length. [ 133.854258][ T8475] lo: Caught tx_queue_len zero misconfig [ 133.990483][ T8489] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.310776][ T8500] IPVS: set_ctl: invalid protocol: 149 224.0.0.2:20003 [ 134.379427][ T8505] netlink: 'syz.4.775': attribute type 9 has an invalid length. [ 135.153204][ T8541] vlan0: entered promiscuous mode [ 135.681922][ T8578] netlink: 'syz.0.794': attribute type 13 has an invalid length. [ 135.726796][ T8578] gretap0: refused to change device tx_queue_len [ 135.745967][ T8578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.923917][ T8599] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 136.141812][ T8614] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 136.276170][ T8619] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.295990][ T8619] bond5 (unregistering): Released all slaves [ 136.445518][ T8631] netlink: 'syz.0.808': attribute type 11 has an invalid length. [ 136.464353][ T8631] netlink: 'syz.0.808': attribute type 11 has an invalid length. [ 137.457578][ T8690] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 137.503015][ T8690] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 137.616907][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.642276][ T8711] __nla_validate_parse: 10 callbacks suppressed [ 137.642294][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'. [ 137.678049][ T8690] bond5: entered promiscuous mode [ 137.687281][ T8690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 137.705462][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 137.733853][ T8703] dummy0: Caught tx_queue_len zero misconfig [ 137.773521][ T8705] ipvlan2: entered allmulticast mode [ 137.786991][ T8705] bond5: entered allmulticast mode [ 137.833854][ T8713] bond5: (slave bridge3): making interface the new active one [ 137.855491][ T8713] bridge3: entered promiscuous mode [ 137.861727][ T8713] bridge3: entered allmulticast mode [ 137.873084][ T8713] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 137.966414][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 137.981418][ T8723] netlink: 692 bytes leftover after parsing attributes in process `syz.0.832'. [ 138.148022][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 138.178002][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 138.392978][ T8751] netlink: 64 bytes leftover after parsing attributes in process `syz.1.841'. [ 138.413754][ T8744] netlink: 348 bytes leftover after parsing attributes in process `syz.4.839'. [ 138.425868][ T8745] netlink: 348 bytes leftover after parsing attributes in process `syz.4.839'. [ 138.426603][ T8755] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 138.616588][ T8763] syzkaller0: entered promiscuous mode [ 138.626724][ T8763] syzkaller0: entered allmulticast mode [ 138.635534][ T8767] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 138.906633][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 138.937353][ T8784] bond0: Device is already in use. [ 138.975076][ T8784] vlan3: entered allmulticast mode [ 138.980392][ T8784] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 139.014496][ T8790] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.022930][ T8790] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.128411][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.135696][ T8785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.143245][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.150540][ T8785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.165388][ T8785] bridge0: entered promiscuous mode [ 139.170785][ T8785] bridge0: entered allmulticast mode [ 139.550607][ T8821] netlink: zone id is out of range [ 139.573602][ T8821] netlink: zone id is out of range [ 139.594866][ T8821] netlink: get zone limit has 4 unknown bytes [ 139.640779][ T8828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.944434][ T8789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.253322][ T8870] syzkaller0: entered promiscuous mode [ 142.278130][ T8870] syzkaller0: entered allmulticast mode [ 142.461748][ T8889] xt_hashlimit: size too large, truncated to 1048576 [ 142.622748][ T8893] netlink: 'syz.2.874': attribute type 5 has an invalid length. [ 143.001920][ T29] audit: type=1804 audit(1782985997.364:3): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.881" name="/newroot/159/cgroup.controllers" dev="tmpfs" ino=823 res=1 errno=0 [ 143.067391][ T29] audit: type=1800 audit(1782985997.394:4): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.881" name="cgroup.controllers" dev="tmpfs" ino=823 res=0 errno=0 [ 143.402636][ T5734] IPVS: starting estimator thread 0... [ 143.508063][ T8933] IPVS: using max 33 ests per chain, 79200 per kthread [ 143.659572][ T8948] __nla_validate_parse: 6 callbacks suppressed [ 143.660675][ T8948] netlink: 56 bytes leftover after parsing attributes in process `syz.4.889'. [ 143.759190][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 143.788295][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 143.850183][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 143.884397][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 144.065370][ T8970] syz_tun: entered allmulticast mode [ 144.084619][ T8970] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 144.119551][ T8970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.134850][ T8973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.167777][ T8976] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 144.257694][ T8983] netlink: 'syz.1.897': attribute type 2 has an invalid length. [ 144.371246][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 144.440294][ T8990] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.461880][ T8990] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.472892][ T8990] gretap1: entered promiscuous mode [ 144.478220][ T8990] gretap1: entered allmulticast mode [ 144.627014][ T9001] netlink: 176 bytes leftover after parsing attributes in process `syz.3.902'. [ 144.652133][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.902'. [ 145.000155][ T9024] tipc: Failed to remove unknown binding: 66,0,0/0:3345048358/3345048359 [ 145.022775][ T9024] tipc: Failed to remove unknown binding: 66,0,0/0:3345048358/3345048359 [ 145.313474][ T9037] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 145.453737][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 145.476367][ T9042] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 145.492109][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 145.541989][ T9042] geneve2: entered promiscuous mode [ 145.556661][ T9042] geneve2: entered allmulticast mode [ 145.628697][ T9053] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 145.745695][ T9053] bond5: entered promiscuous mode [ 145.761211][ T9053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.808933][ T9059] nbd: device at index 0 is going down [ 145.822298][ T9055] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.835278][ T9055] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.847001][ T9055] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 145.910588][ T9056] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 145.941316][ T9056] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.021706][ T9064] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 146.231491][ T9087] Bluetooth: MGMT ver 1.23 [ 146.266710][ T9089] tipc: Enabling of bearer rejected, media not registered [ 146.276565][ T9087] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 146.416848][ T9097] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 146.525862][ T9108] FAULT_INJECTION: forcing a failure. [ 146.525862][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.573936][ T9103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.585147][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.4.927 Not tainted syzkaller #0 PREEMPT(full) [ 146.585172][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.585189][ T9108] Call Trace: [ 146.585197][ T9108] [ 146.585205][ T9108] dump_stack_lvl+0xe8/0x150 [ 146.585233][ T9108] should_fail_ex+0x40c/0x560 [ 146.585264][ T9108] _copy_from_iter+0x1d3/0x1660 [ 146.585288][ T9108] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 146.585317][ T9108] ? rcu_is_watching+0x15/0xb0 [ 146.585340][ T9108] ? trace_kmem_cache_alloc+0x29/0xe0 [ 146.585368][ T9108] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 146.585395][ T9108] ? __pfx__copy_from_iter+0x10/0x10 [ 146.585426][ T9108] ? __alloc_skb+0x276/0x7a0 [ 146.585441][ T9108] ? __alloc_skb+0x276/0x7a0 [ 146.585463][ T9108] ? netlink_sendmsg+0x650/0xb40 [ 146.585482][ T9108] ? skb_put+0x112/0x210 [ 146.585501][ T9108] netlink_sendmsg+0x6c0/0xb40 [ 146.585528][ T9108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.585552][ T9108] ? aa_sock_msg_perm+0xf1/0x1b0 [ 146.585580][ T9108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.585599][ T9108] sock_sendmsg_nosec+0x13a/0x180 [ 146.585624][ T9108] ____sys_sendmsg+0x54e/0x850 [ 146.585648][ T9108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.585676][ T9108] ? import_iovec+0x73/0xa0 [ 146.585707][ T9108] ___sys_sendmsg+0x2a5/0x360 [ 146.585725][ T9108] ? __lock_acquire+0x683/0x2cf0 [ 146.585748][ T9108] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.585799][ T9108] ? __fget_files+0x2a/0x420 [ 146.585818][ T9108] ? __fget_files+0x3a2/0x420 [ 146.585848][ T9108] __x64_sys_sendmsg+0x1b1/0x290 [ 146.585872][ T9108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.585909][ T9108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.585930][ T9108] do_syscall_64+0x174/0x580 [ 146.585948][ T9108] ? trace_irq_disable+0x3b/0x140 [ 146.585965][ T9108] ? clear_bhb_loop+0x40/0x90 [ 146.585987][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.586006][ T9108] RIP: 0033:0x7f78c199de59 [ 146.586031][ T9108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.586046][ T9108] RSP: 002b:00007f78c27ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.586069][ T9108] RAX: ffffffffffffffda RBX: 00007f78c1c26180 RCX: 00007f78c199de59 [ 146.586083][ T9108] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 146.586095][ T9108] RBP: 00007f78c27ed090 R08: 0000000000000000 R09: 0000000000000000 [ 146.586107][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.586118][ T9108] R13: 00007f78c1c26218 R14: 00007f78c1c26180 R15: 00007ffe40d13038 [ 146.586147][ T9108] [ 147.002152][ T9103] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 147.590359][ T9153] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 147.886536][ T9173] FAULT_INJECTION: forcing a failure. [ 147.886536][ T9173] name failslab, interval 1, probability 0, space 0, times 1 [ 147.913339][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.3.945 Not tainted syzkaller #0 PREEMPT(full) [ 147.913364][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.913373][ T9173] Call Trace: [ 147.913381][ T9173] [ 147.913388][ T9173] dump_stack_lvl+0xe8/0x150 [ 147.913418][ T9173] should_fail_ex+0x40c/0x560 [ 147.913448][ T9173] should_failslab+0xa8/0x100 [ 147.913470][ T9173] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 147.913498][ T9173] ? skb_clone+0x212/0x3a0 [ 147.913517][ T9173] ? skb_clone+0x212/0x3a0 [ 147.913541][ T9173] skb_clone+0x212/0x3a0 [ 147.913563][ T9173] __netlink_deliver_tap+0x413/0x860 [ 147.913603][ T9173] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.913624][ T9173] netlink_deliver_tap+0x19c/0x1b0 [ 147.913644][ T9173] netlink_unicast+0x77f/0x940 [ 147.913672][ T9173] netlink_sendmsg+0x813/0xb40 [ 147.913702][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.913728][ T9173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.913756][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.913776][ T9173] sock_sendmsg_nosec+0x13a/0x180 [ 147.913805][ T9173] ____sys_sendmsg+0x54e/0x850 [ 147.913831][ T9173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.913860][ T9173] ? import_iovec+0x73/0xa0 [ 147.913883][ T9173] ___sys_sendmsg+0x2a5/0x360 [ 147.913901][ T9173] ? __lock_acquire+0x683/0x2cf0 [ 147.913924][ T9173] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.913978][ T9173] ? __fget_files+0x2a/0x420 [ 147.913995][ T9173] ? __fget_files+0x3a2/0x420 [ 147.914020][ T9173] __x64_sys_sendmsg+0x1b1/0x290 [ 147.914042][ T9173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.914079][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.914098][ T9173] do_syscall_64+0x174/0x580 [ 147.914116][ T9173] ? trace_irq_disable+0x3b/0x140 [ 147.914134][ T9173] ? clear_bhb_loop+0x40/0x90 [ 147.914156][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.914172][ T9173] RIP: 0033:0x7fc73e99de59 [ 147.914187][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.914202][ T9173] RSP: 002b:00007fc73cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.914221][ T9173] RAX: ffffffffffffffda RBX: 00007fc73ec26180 RCX: 00007fc73e99de59 [ 147.914235][ T9173] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000006 [ 147.914247][ T9173] RBP: 00007fc73cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.914258][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.914268][ T9173] R13: 00007fc73ec26218 R14: 00007fc73ec26180 R15: 00007ffcf5dd5298 [ 147.914298][ T9173] [ 148.460384][ T9195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.601287][ T9205] netlink: 'syz.3.956': attribute type 24 has an invalid length. [ 148.635377][ T9209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.649354][ T9202] syzkaller0: entered promiscuous mode [ 148.667226][ T9202] syzkaller0: entered allmulticast mode [ 148.712566][ T9202] tipc: Enabled bearer , priority 0 [ 148.747902][ T9200] tipc: Resetting bearer [ 148.813137][ T9200] tipc: Disabling bearer [ 148.830932][ T9219] __nla_validate_parse: 15 callbacks suppressed [ 148.830957][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 148.875741][ T9218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.041722][ T9230] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 149.058210][ T9228] syzkaller0: entered promiscuous mode [ 149.073319][ T9228] syzkaller0: entered allmulticast mode [ 149.086518][ T9228] netlink: 'syz.1.964': attribute type 7 has an invalid length. [ 149.104839][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.964'. [ 149.116837][ T9230] team0: Port device dummy0 added [ 149.228968][ T9238] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 149.257361][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 149.311194][ T9243] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 149.331011][ T9238] team0: Port device dummy0 removed [ 149.417873][ T9238] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.703941][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.973'. [ 149.738649][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.973'. [ 149.805625][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 149.911153][ T9277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.967972][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 150.023990][ T9281] tc action pedit offset must be on 32 bit boundaries [ 150.723123][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 151.038507][ T9334] geneve2: entered promiscuous mode [ 151.102510][ T9334] geneve2: entered allmulticast mode [ 151.353899][ T9361] xfrm0: Caught tx_queue_len zero misconfig [ 151.723207][ T9384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1002'. [ 151.757236][ T9349] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 151.759886][ T9384] nbd: illegal input index 65508 [ 152.009553][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 152.361609][ T9403] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.451665][ T9408] erspan0: entered promiscuous mode [ 152.468563][ T9408] vlan3: entered promiscuous mode [ 152.624689][ T9413] netlink: 'syz.1.1011': attribute type 2 has an invalid length. [ 152.688005][ T9409] syzkaller0: entered promiscuous mode [ 152.693519][ T9409] syzkaller0: entered allmulticast mode [ 152.889284][ T9444] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 154.479992][ T9457] netlink: 'syz.3.1023': attribute type 61 has an invalid length. [ 154.511097][ T9457] netlink: 'syz.3.1023': attribute type 61 has an invalid length. [ 154.662015][ T9474] __nla_validate_parse: 1 callbacks suppressed [ 154.662032][ T9474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 154.833281][ T9484] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1027'. [ 154.861908][ T9484] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 154.958250][ T9487] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 155.161305][ T9507] dvmrp0: entered allmulticast mode [ 155.298057][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 155.400177][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.407375][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.415119][ T9521] bridge0: left promiscuous mode [ 155.420194][ T9521] bridge0: left allmulticast mode [ 155.488865][ T9521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.511330][ T9521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.539543][ T9521] vlan0: left promiscuous mode [ 155.564340][ T9518] nbd1: detected capacity change from 0 to 63 [ 155.577421][ T9521] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 155.630713][ T9521] veth3: left promiscuous mode [ 155.636695][ T9521] veth3: left allmulticast mode [ 155.642514][ T9521] veth5: left promiscuous mode [ 155.647374][ T9521] veth5: left allmulticast mode [ 155.653823][ T9521] veth7: left promiscuous mode [ 155.660697][ T9521] veth7: left allmulticast mode [ 155.667031][ T9521] veth9: left promiscuous mode [ 155.671802][ T9521] veth9: left allmulticast mode [ 155.677700][ T9521] veth11: left promiscuous mode [ 155.683239][ T9521] veth11: left allmulticast mode [ 155.689305][ T9521] veth13: left promiscuous mode [ 155.694223][ T9521] veth13: left allmulticast mode [ 155.700096][ T9521] veth15: left promiscuous mode [ 155.705230][ T9521] veth15: left allmulticast mode [ 155.711450][ T9521] bond3: left promiscuous mode [ 155.718485][ T9521] bond3: left allmulticast mode [ 155.726459][ T9521] ip6gretap1: left promiscuous mode [ 155.731691][ T9521] ip6gretap1: left allmulticast mode [ 155.737549][ T9521] gretap1: left promiscuous mode [ 155.742503][ T9521] gretap1: left allmulticast mode [ 155.749296][ T9521] bond5: left promiscuous mode [ 155.754981][ T9515] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1036'. [ 155.767121][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.777712][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.787707][ T9516] tipc: Enabling of bearer rejected, media not registered [ 155.877229][ T5636] block nbd1: Receive control failed (result -104) [ 155.884243][ T5637] block nbd1: Receive control failed (result -32) [ 155.932793][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.953252][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.963114][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.979709][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.997770][ T9532] team_slave_1: Caught tx_queue_len zero misconfig [ 156.026502][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.038777][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 156.066564][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.089889][ T9539] tipc: Enabled bearer , priority 10 [ 156.130044][ T9545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.185942][ T9548] ip6gre0: Caught tx_queue_len zero misconfig [ 156.207010][ T9548] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 156.247187][ T9551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1044'. [ 156.250443][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 156.363392][ T9556] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 156.395406][ T9558] netlink: 'syz.3.1046': attribute type 1 has an invalid length. [ 156.471104][ T9561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1046'. [ 156.668601][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 156.712521][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1054'. [ 156.736228][ T9558] bond5: (slave geneve2): making interface the new active one [ 156.760149][ T9558] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 156.782076][ T9590] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 156.798879][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.817286][ T9590] netlink: 'syz.4.1053': attribute type 2 has an invalid length. [ 156.827986][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.856223][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.890588][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 156.979359][ T9590] : entered promiscuous mode [ 157.214183][ T5763] tipc: Node number set to 760226724 [ 157.660098][ T9640] ip6tnl0: Caught tx_queue_len zero misconfig [ 157.769369][ T9639] syzkaller0: entered promiscuous mode [ 157.791660][ T9639] syzkaller0: entered allmulticast mode [ 158.250842][ T9663] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 158.291724][ T9663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.299068][ T9663] IPv6: NLM_F_CREATE should be set when creating new route [ 158.306443][ T9663] IPv6: NLM_F_CREATE should be set when creating new route [ 158.307334][ T9679] team0: No ports can be present during mode change [ 158.803029][ T9705] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 158.820799][ T9661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.835319][ T9661] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.004367][ T9661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.031341][ T9661] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 159.076894][ T9717] syz_tun: left allmulticast mode [ 159.110940][ T9661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.134271][ T9661] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 159.287321][ T9661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.296717][ T9723] netlink: 'syz.3.1091': attribute type 11 has an invalid length. [ 159.324577][ T9661] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 159.337836][ T9723] netlink: 'syz.3.1091': attribute type 11 has an invalid length. [ 159.818066][ T9731] syz.3.1091 (9731) used greatest stack depth: 18312 bytes left [ 159.977931][ T9755] __nla_validate_parse: 11 callbacks suppressed [ 159.977949][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1098'. [ 160.023161][ T9755] netlink: 'syz.2.1098': attribute type 32 has an invalid length. [ 160.038440][ T9755] netlink: 'syz.2.1098': attribute type 30 has an invalid length. [ 160.110024][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 160.276884][ T9775] syz.4.1103: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.344899][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.4.1103 Not tainted syzkaller #0 PREEMPT(full) [ 160.344926][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.344937][ T9775] Call Trace: [ 160.344945][ T9775] [ 160.344954][ T9775] dump_stack_lvl+0xe8/0x150 [ 160.344983][ T9775] warn_alloc+0x24c/0x270 [ 160.345017][ T9775] ? stack_depot_save_flags+0x3ec/0x800 [ 160.345047][ T9775] ? __pfx_warn_alloc+0x10/0x10 [ 160.345077][ T9775] ? kasan_save_track+0x3e/0x80 [ 160.345094][ T9775] ? __kasan_kmalloc+0x93/0xb0 [ 160.345114][ T9775] ? xsk_setsockopt+0x52a/0x960 [ 160.345139][ T9775] ? do_sock_setsockopt+0x17c/0x1b0 [ 160.345165][ T9775] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 160.345183][ T9775] ? do_syscall_64+0x174/0x580 [ 160.345200][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.345231][ T9775] __vmalloc_node_range_noprof+0x12c/0x1730 [ 160.345289][ T9775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.345322][ T9775] ? __kasan_kmalloc+0x93/0xb0 [ 160.345343][ T9775] ? __kmalloc_cache_noprof+0x32d/0x660 [ 160.345372][ T9775] ? __kmalloc_cache_noprof+0x150/0x660 [ 160.345404][ T9775] vmalloc_user_noprof+0xad/0xe0 [ 160.345433][ T9775] ? xskq_create+0xbf/0x170 [ 160.345461][ T9775] xskq_create+0xbf/0x170 [ 160.345495][ T9775] xsk_init_queue+0x8a/0xe0 [ 160.345524][ T9775] xsk_setsockopt+0x52a/0x960 [ 160.345549][ T9775] ? __fget_files+0x2a/0x420 [ 160.345570][ T9775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.345595][ T9775] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.345619][ T9775] ? aa_sock_opt_perm+0xff/0x1a0 [ 160.345641][ T9775] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.345663][ T9775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.345687][ T9775] do_sock_setsockopt+0x17c/0x1b0 [ 160.345709][ T9775] __x64_sys_setsockopt+0x13d/0x1b0 [ 160.345729][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.345747][ T9775] do_syscall_64+0x174/0x580 [ 160.345762][ T9775] ? trace_irq_disable+0x3b/0x140 [ 160.345779][ T9775] ? clear_bhb_loop+0x40/0x90 [ 160.345802][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.345819][ T9775] RIP: 0033:0x7f78c199de59 [ 160.345837][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.345853][ T9775] RSP: 002b:00007f78c282f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.345872][ T9775] RAX: ffffffffffffffda RBX: 00007f78c1c25fa0 RCX: 00007f78c199de59 [ 160.345886][ T9775] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 160.345897][ T9775] RBP: 00007f78c1a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 160.345909][ T9775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.345920][ T9775] R13: 00007f78c1c26038 R14: 00007f78c1c25fa0 R15: 00007ffe40d13038 [ 160.345947][ T9775] [ 160.349541][ T9775] Mem-Info: [ 160.664399][ T9775] active_anon:6069 inactive_anon:0 isolated_anon:0 [ 160.664399][ T9775] active_file:0 inactive_file:43006 isolated_file:0 [ 160.664399][ T9775] unevictable:768 dirty:130 writeback:0 [ 160.664399][ T9775] slab_reclaimable:10471 slab_unreclaimable:100487 [ 160.664399][ T9775] mapped:29361 shmem:1338 pagetables:1505 [ 160.664399][ T9775] sec_pagetables:0 bounce:0 [ 160.664399][ T9775] kernel_misc_reclaimable:0 [ 160.664399][ T9775] free:1322999 free_pcp:11754 free_cma:0 [ 160.711277][ T9785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1106'. [ 160.764680][ T9775] Node 0 active_anon:23884kB inactive_anon:0kB active_file:0kB inactive_file:171828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117500kB dirty:516kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:6044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.883607][ T9775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.974567][ T9775] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.034170][ T9775] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 161.054742][ T9775] Node 0 DMA32 free:1334372kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23484kB inactive_anon:0kB active_file:0kB inactive_file:171828kB unevictable:1536kB writepending:516kB zspages:0kB present:3129332kB managed:2551424kB mlocked:0kB bounce:0kB free_pcp:46056kB local_pcp:24756kB free_cma:0kB [ 161.199416][ T9809] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 161.228633][ T9775] lowmem_reserve[]: 0 0 0 0 0 [ 161.246063][ T9775] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.327098][ T9775] lowmem_reserve[]: 0 0 0 0 0 [ 161.364675][ T9775] Node 1 Normal free:3944176kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 161.434279][ T9775] lowmem_reserve[]: 0 0 0 0 0 [ 161.449268][ T9775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.502768][ T9824] xt_l2tp: v2 doesn't support IP mode [ 161.506635][ T9775] Node 0 DMA32: 424*4kB (UE) 306*8kB (UM) 129*16kB (UME) 99*32kB (UME) 88*64kB (UME) 50*128kB (UM) 37*256kB (UME) 18*512kB (UME) 4*1024kB (ME) 2*2048kB (M) 314*4096kB (UM) = 1334432kB [ 161.591822][ T9775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 161.642480][ T9775] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 4*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944176kB [ 161.709885][ T9775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.741122][ T9775] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.751362][ T9775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.761341][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 161.761493][ T9775] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.779987][ T9775] 44291 total pagecache pages [ 161.785671][ T9775] 0 pages in swap cache [ 161.789993][ T9775] Free swap = 124996kB [ 161.794536][ T9775] Total swap = 124996kB [ 161.798885][ T9775] 2097051 pages RAM [ 161.799358][ T9836] bond4 (unregistering): Released all slaves [ 161.802771][ T9775] 0 pages HighMem/MovableOnly [ 161.813615][ T9775] 427425 pages reserved [ 161.818228][ T9775] 0 pages cma reserved [ 161.835022][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1120'. [ 161.952755][ T9842] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1120'. [ 161.981369][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 162.068922][ T9857] xfrm1: entered promiscuous mode [ 162.084764][ T9857] xfrm1: entered allmulticast mode [ 162.310235][ T9867] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 162.343553][ T9867] bond7 (unregistering): Released all slaves [ 162.525370][ T9878] bond6: Unable to set up delay as MII monitoring is disabled [ 162.559536][ T9878] bond6 (unregistering): Released all slaves [ 162.833578][ T9892] netlink: zone id is out of range [ 162.852447][ T9892] netlink: zone id is out of range [ 162.864882][ T9892] netlink: zone id is out of range [ 162.876117][ T9892] netlink: zone id is out of range [ 162.885027][ T9895] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 162.893320][ T9892] netlink: zone id is out of range [ 162.899066][ T9892] netlink: zone id is out of range [ 162.916502][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 162.942953][ T9892] netlink: zone id is out of range [ 162.955678][ T9892] netlink: zone id is out of range [ 162.979170][ T9897] Unsupported ieee802154 address type: 0 [ 163.003111][ T9892] netlink: zone id is out of range [ 163.070515][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 163.757520][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 163.788745][ T9936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.088498][ T9955] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 164.378270][ T9972] tunl0: entered promiscuous mode [ 164.404918][ T9972] netlink: 'syz.4.1154': attribute type 3 has an invalid length. [ 164.432258][ T9981] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 164.448958][ T9973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.553139][ T9973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.948926][T10009] team0: Device ipvlan3 is already an upper device of the team interface [ 165.118987][T10024] __nla_validate_parse: 5 callbacks suppressed [ 165.119013][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 165.160675][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 165.194593][T10026] netlink: 'syz.0.1166': attribute type 10 has an invalid length. [ 165.232513][T10026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1166'. [ 165.325740][T10026] geneve3: entered promiscuous mode [ 165.336437][T10026] geneve3: entered allmulticast mode [ 165.558435][T10049] netlink: 'syz.1.1173': attribute type 21 has an invalid length. [ 165.575890][T10048] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 165.597950][T10049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1173'. [ 165.612256][T10048] netlink: 'syz.0.1172': attribute type 2 has an invalid length. [ 165.621794][T10048] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1172'. [ 166.053115][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 166.151800][T10076] veth0_macvtap: left promiscuous mode [ 166.554812][T10099] gre0: entered promiscuous mode [ 166.578888][T10099] gre0: entered allmulticast mode [ 166.879389][T10116] ip6t_srh: unknown srh invflags 4000 [ 166.899805][T10117] ip6t_srh: unknown srh invflags 4000 [ 166.989384][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 167.019685][T10126] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1192'. [ 167.252167][T10137] netlink: 'syz.4.1195': attribute type 2 has an invalid length. [ 167.351598][T10140] debugfs: '1^!' already exists in 'ieee80211' [ 167.400331][T10152] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1198'. [ 167.481219][T10137] syzkaller0: entered promiscuous mode [ 167.497194][T10137] syzkaller0: entered allmulticast mode [ 167.808719][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 168.232557][T10201] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 168.461321][T10209] ipt_REJECT: TCP_RESET invalid for non-tcp [ 168.684990][T10227] netlink: 'syz.1.1219': attribute type 8 has an invalid length. [ 168.792411][T10222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.807583][T10228] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 169.571351][T10278] net_ratelimit: 71 callbacks suppressed [ 169.571367][T10278] IPVS: lc: FWM 3 0x00000003 - no destination available [ 169.926092][T10299] bond5: entered promiscuous mode [ 169.933134][T10299] bond5: entered allmulticast mode [ 170.347689][T10322] netlink: 'syz.3.1239': attribute type 21 has an invalid length. [ 170.394996][T10326] __nla_validate_parse: 10 callbacks suppressed [ 170.395013][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 170.488185][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 170.503551][T10332] l2tp_ppp: sess 2/0: no socket in recv [ 170.761850][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 171.080317][T10359] tipc: Enabled bearer , priority 0 [ 171.123706][T10359] syzkaller0: entered promiscuous mode [ 171.139159][T10359] syzkaller0: entered allmulticast mode [ 171.172765][T10359] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1249'. [ 171.189020][T10359] tipc: Resetting bearer [ 171.211585][T10358] tipc: Resetting bearer [ 171.290591][T10358] tipc: Disabling bearer [ 171.551308][T10382] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 171.585176][T10383] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 171.611536][T10383] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1254'. [ 171.641047][T10382] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1254'. [ 171.689056][T10390] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1254'. [ 171.909622][T10401] xt_hashlimit: size too large, truncated to 1048576 [ 171.963217][T10402] netlink: 'syz.0.1259': attribute type 13 has an invalid length. [ 172.248449][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 172.447636][T10436] x_tables: duplicate underflow at hook 2 [ 172.490805][T10438] netlink: 'syz.3.1266': attribute type 4 has an invalid length. [ 172.506135][T10436] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 172.583497][T10436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.603175][T10436] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 172.634163][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1267'. [ 172.741939][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1270'. [ 172.798408][T10451] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 172.893588][T10460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.148223][T10475] openvswitch: netlink: Missing key (keys=40, expected=100) [ 173.433213][T10492] veth1_to_bond: entered allmulticast mode [ 173.437996][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.470838][T10492] veth1_to_bond (unregistering): left allmulticast mode [ 173.490313][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.563880][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.608103][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.877869][ T1342] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.898926][ T1342] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.916369][ T1342] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.935041][ T1342] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.021921][T10520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.105336][T10520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.226667][T10502] bond1: option lp_interval: invalid value (0) [ 174.235906][T10528] Driver unsupported XDP return value 0 on prog (id 288) dev N/A, expect packet loss! [ 174.251498][T10502] bond1: option lp_interval: allowed values 1 - 2147483647 [ 174.311998][T10502] bond1 (unregistering): Released all slaves [ 174.399778][T10538] veth0_to_team: Caught tx_queue_len zero misconfig [ 174.735768][T10552] debugfs: '1^!' already exists in 'ieee80211' [ 175.441990][T10588] tipc: Enabled bearer , priority 0 [ 175.461394][T10588] syzkaller0: entered promiscuous mode [ 175.471439][T10588] syzkaller0: entered allmulticast mode [ 175.502517][T10588] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 175.541733][T10593] __nla_validate_parse: 17 callbacks suppressed [ 175.541753][T10593] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1308'. [ 175.573203][T10596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.603962][T10588] tipc: Resetting bearer [ 175.632276][T10587] tipc: Resetting bearer [ 175.691204][T10587] tipc: Disabling bearer [ 175.715818][T10603] netlink: 'syz.1.1311': attribute type 18 has an invalid length. [ 175.841494][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 175.886591][T10614] netlink: 'syz.1.1314': attribute type 5 has an invalid length. [ 176.457613][T10643] Cannot find del_set index 3 as target [ 176.460969][T10636] netlink: 'syz.3.1321': attribute type 5 has an invalid length. [ 176.493058][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1322'. [ 176.516524][T10642] bond0: ARP target 8.4.0.0 is already present [ 176.533506][T10642] bond0: option arp_ip_target: invalid value (1032) [ 176.567693][T10642] netlink: 'syz.2.1322': attribute type 2 has an invalid length. [ 176.640113][T10642] : entered promiscuous mode [ 176.678327][T10650] syzkaller0: entered promiscuous mode [ 176.697062][T10650] syzkaller0: entered allmulticast mode [ 176.721628][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.786243][T10655] netlink: 'syz.0.1327': attribute type 17 has an invalid length. [ 176.916602][T10661] syzkaller0: entered promiscuous mode [ 176.924982][T10661] syzkaller0: entered allmulticast mode [ 177.048537][T10667] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 177.077049][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1332'. [ 177.173463][T10673] bond0: Caught tx_queue_len zero misconfig [ 177.237594][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1337'. [ 177.392971][T10676] syzkaller1: entered promiscuous mode [ 177.422123][T10676] syzkaller1: entered allmulticast mode [ 177.437995][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 177.575653][T10698] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 177.631032][T10703] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 177.656919][T10707] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1345'. [ 177.822542][T10712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.039071][T10732] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 178.130644][T10732] bond6: entered promiscuous mode [ 178.162656][T10732] bond6: entered allmulticast mode [ 178.168880][T10732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.293675][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 178.439498][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 178.465775][T10754] netlink: 'syz.4.1360': attribute type 3 has an invalid length. [ 178.502424][T10754] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1360'. [ 178.505034][T10752] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 178.534897][T10754] netlink: 'syz.4.1360': attribute type 3 has an invalid length. [ 178.632139][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.687860][T10761] IPVS: ip_vs_edit_dest(): server weight less than zero [ 178.697526][ T5742] IPVS: starting estimator thread 0... [ 178.760681][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.777126][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.802213][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.804709][T10768] IPVS: using max 38 ests per chain, 91200 per kthread [ 178.833682][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.575976][T10817] syzkaller0: entered promiscuous mode [ 179.591751][T10817] syzkaller0: entered allmulticast mode [ 180.308701][T10849] ip6t_srh: unknown srh match flags 4000 [ 180.733154][T10873] __nla_validate_parse: 17 callbacks suppressed [ 180.733184][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.753243][T10877] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 180.778264][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.825611][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1390'. [ 180.882370][T10882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.492273][T10894] gretap1: left allmulticast mode [ 181.636193][T10905] nbd: couldn't find a device at index 0 [ 181.660946][T10910] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.974499][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 182.029653][T10929] tipc: Enabling of bearer rejected, failed to enable media [ 182.218422][T10936] nbd: must specify a device to reconfigure [ 182.318917][T10943] nbd: must specify a device to reconfigure [ 182.456412][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 182.602115][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 182.781254][T10969] netlink: 'syz.4.1420': attribute type 11 has an invalid length. [ 182.791044][T10972] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 182.976484][T10981] sctp: [Deprecated]: syz.3.1423 (pid 10981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.976484][T10981] Use struct sctp_sack_info instead [ 183.512860][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1434'. [ 183.662728][T11019] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 183.698708][T11021] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 184.072019][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 184.303471][T11050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 184.314991][T11050] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1448'. [ 184.463890][T11050] veth7: entered promiscuous mode [ 184.492621][T11063] unsupported nlmsg_type 40 [ 184.528836][T11063] netlink: 'syz.1.1450': attribute type 7 has an invalid length. [ 185.032236][T11081] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.068482][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.773525][T11131] __nla_validate_parse: 8 callbacks suppressed [ 185.773544][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 185.801191][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 185.810871][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 185.818902][ T25] block nbd1: Dead connection, failed to find a fallback [ 185.827854][ T25] block nbd1: shutting down sockets [ 185.835432][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 185.847856][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 185.856105][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 185.865355][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 185.877121][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.886405][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.895696][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.906789][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.910581][ T1621] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 185.927541][ T1621] Buffer I/O error on dev nbd1, logical block 1, async page read [ 185.935701][ T1621] Buffer I/O error on dev nbd1, logical block 2, async page read [ 185.947583][ T1621] Buffer I/O error on dev nbd1, logical block 3, async page read [ 185.957232][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 185.967947][ T1621] Buffer I/O error on dev nbd1, logical block 0, async page read [ 185.976225][ T1621] Buffer I/O error on dev nbd1, logical block 1, async page read [ 185.986514][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 186.001582][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 186.011201][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 186.022568][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 186.035764][ T1621] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 186.046788][ T5640] ldm_validate_partition_table(): Disk read failed. [ 186.073086][ T5640] Dev nbd1: unable to read RDB block 0 [ 186.081843][ T5640] nbd1: unable to read partition table [ 186.106196][ T5640] ldm_validate_partition_table(): Disk read failed. [ 186.115906][ T5640] Dev nbd1: unable to read RDB block 0 [ 186.123721][ T5640] nbd1: unable to read partition table [ 186.260379][T11157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1477'. [ 186.403741][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 186.640549][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 186.666600][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 186.735126][T11170] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1481'. [ 187.008235][T11198] netlink: 'syz.4.1489': attribute type 11 has an invalid length. [ 187.017767][T11192] syz.3.1486 (11192) used obsolete PPPIOCDETACH ioctl [ 187.040118][T11192] netlink: 'syz.3.1486': attribute type 83 has an invalid length. [ 187.052991][T11196] syzkaller0: entered promiscuous mode [ 187.067851][T11196] syzkaller0: entered allmulticast mode [ 187.160568][T11199] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1489'. [ 187.655416][ T5288] veth1_vlan: left promiscuous mode [ 187.989216][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 188.007039][T11219] ipt_REJECT: TCP_RESET invalid for non-tcp [ 188.014278][T11222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1491'. [ 188.218091][T11238] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 188.239468][T11239] netlink: 'syz.2.1496': attribute type 4 has an invalid length. [ 188.289429][T11239] 8021q: VLANs not supported on dvmrp0 [ 188.406365][T11248] veth0: Caught tx_queue_len zero misconfig [ 188.418153][T11249] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 188.443759][T11248] sch_tbf: burst 23 is lower than device veth0 mtu (1514) ! [ 188.467809][T11246] sch_tbf: burst 23 is lower than device veth0 mtu (1514) ! [ 188.520402][T11249] bond8: entered promiscuous mode [ 188.526220][T11249] 8021q: adding VLAN 0 to HW filter on device bond8 [ 188.555044][T11258] netlink: 'syz.2.1500': attribute type 2 has an invalid length. [ 188.762690][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 189.061406][T11283] netlink: 'syz.4.1506': attribute type 12 has an invalid length. [ 189.107856][T11284] netlink: 'syz.3.1507': attribute type 29 has an invalid length. [ 189.288141][T11289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.689655][T11313] netlink: 'syz.4.1514': attribute type 22 has an invalid length. [ 189.838123][ T1342] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.870158][ T1342] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.915947][ T1342] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.969537][ T1342] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.370949][T11346] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 190.382872][T11337] xt_limit: Overflow, try lower: 271964/0 [ 190.521983][T11359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.131529][T11397] tipc: Can't bind to reserved service type 1 [ 191.531292][T11416] __nla_validate_parse: 7 callbacks suppressed [ 191.531308][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 191.547377][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 191.556564][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 191.805571][T11423] geneve2: entered promiscuous mode [ 191.818140][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 192.218143][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 192.417915][T11463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 192.798489][T11474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.826856][T11474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.840828][T11474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.025007][T11474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.037366][T11474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.050921][T11474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.095036][T11495] lo: Caught tx_queue_len zero misconfig [ 193.126891][T11495] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 193.150586][T11498] raw_sendmsg: syz.2.1566 forgot to set AF_INET. Fix it! [ 193.173652][T11474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.184733][T11474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.195710][T11474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.229621][T11495] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 193.400244][T11474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.424716][T11474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.436027][T11474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 193.689580][T11527] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1572'. [ 193.725742][T11515] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 193.759389][T11516] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 193.968500][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.996050][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.015728][ T35] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.096781][ T48] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.106491][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.118277][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.125977][ T48] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.141549][T11540] syzkaller0: entered promiscuous mode [ 194.159641][T11540] syzkaller0: entered allmulticast mode [ 194.217606][ T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.226287][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.245234][ T57] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.254879][T11551] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 194.293870][T11551] bond0: (slave dummy0): Releasing backup interface [ 194.309200][T11551] team0: Port device dummy0 added [ 194.317555][T11553] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 194.333375][ T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.343089][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 194.351882][ T57] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 194.367435][T11551] netlink: 684 bytes leftover after parsing attributes in process `syz.4.1579'. [ 194.420728][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 194.452877][T11544] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.483586][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 194.508004][T11544] bond5 (unregistering): Released all slaves [ 194.592856][T11553] team0: Port device dummy0 removed [ 194.641909][T11558] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 194.704254][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 194.803339][T11558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.143699][T11593] openvswitch: netlink: Missing key (keys=40, expected=100) [ 195.310421][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.364250][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.392497][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.419129][T11606] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 195.431293][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.590514][T11617] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 195.656595][T11624] xt_hl: Unknown Hop Limit match mode: 206 [ 196.367974][T11666] netlink: 'syz.0.1607': attribute type 7 has an invalid length. [ 196.437351][T11668] netlink: 'syz.0.1607': attribute type 7 has an invalid length. [ 196.557773][T11678] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 196.673098][T11686] x_tables: duplicate underflow at hook 4 [ 196.852713][T11694] __nla_validate_parse: 8 callbacks suppressed [ 196.852730][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1614'. [ 196.980851][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 197.407687][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1623'. [ 197.653699][T11740] netlink: 'syz.2.1627': attribute type 39 has an invalid length. [ 197.799836][T11732] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 197.837331][T11753] netlink: 'syz.0.1629': attribute type 9 has an invalid length. [ 197.856576][T11732] bond9 (unregistering): Released all slaves [ 197.880853][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 197.891258][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 198.025209][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 198.415943][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 198.425206][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 198.435547][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 198.445159][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 198.587209][T11790] gretap2: entered promiscuous mode [ 198.601220][T11790] batman_adv: batadv0: Adding interface: gretap2 [ 198.612722][T11790] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 198.634631][T11790] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 198.802409][T11792] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.387276][T11832] tc_dump_action: action bad kind [ 199.462091][T11832] syzkaller0: entered promiscuous mode [ 199.477898][T11832] syzkaller0: entered allmulticast mode [ 199.501629][T11832] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 199.920740][T11850] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 200.377739][T11871] nbd: nbd64 already in use [ 200.391590][T11863] nbd: nbd64 already in use [ 200.612427][ T5640] udevd[5640]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 200.876294][T11898] pim6reg: entered allmulticast mode [ 201.081493][ T5637] block nbd3: Receive control failed (result -107) [ 201.210983][T11919] xt_l2tp: missing protocol rule (udp|l2tpip) [ 201.573670][T11935] [ 201.576039][T11935] ====================================================== [ 201.583058][T11935] WARNING: possible circular locking dependency detected [ 201.590086][T11935] syzkaller #0 Not tainted [ 201.594502][T11935] ------------------------------------------------------ [ 201.601519][T11935] syz.0.1684/11935 is trying to acquire lock: [ 201.607586][T11935] ffffffff8ea5eb20 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 201.617185][T11935] [ 201.617185][T11935] but task is already holding lock: [ 201.624538][T11935] ffff888029694ca0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f10 [ 201.633751][T11935] [ 201.633751][T11935] which lock already depends on the new lock. [ 201.633751][T11935] [ 201.644137][T11935] [ 201.644137][T11935] the existing dependency chain (in reverse order) is: [ 201.653131][T11935] [ 201.653131][T11935] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 201.660851][T11935] lock_sock_nested+0x41/0x100 [ 201.666128][T11935] inet_shutdown+0x6a/0x390 [ 201.671143][T11935] nbd_mark_nsock_dead+0x2cb/0x550 [ 201.676763][T11935] recv_work+0x1cee/0x1e10 [ 201.681689][T11935] process_scheduled_works+0xa8e/0x14e0 [ 201.687748][T11935] worker_thread+0xa47/0xfb0 [ 201.692849][T11935] kthread+0x388/0x470 [ 201.697422][T11935] ret_from_fork+0x514/0xb70 [ 201.702528][T11935] ret_from_fork_asm+0x1a/0x30 [ 201.707800][T11935] [ 201.707800][T11935] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 201.715432][T11935] __mutex_lock+0x19d/0x1550 [ 201.720529][T11935] nbd_queue_rq+0x373/0x1150 [ 201.725627][T11935] blk_mq_dispatch_rq_list+0x499/0x1990 [ 201.731689][T11935] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 201.738522][T11935] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 201.745008][T11935] blk_mq_run_work_fn+0x16c/0x300 [ 201.750541][T11935] process_scheduled_works+0xa8e/0x14e0 [ 201.756596][T11935] worker_thread+0xa47/0xfb0 [ 201.761694][T11935] kthread+0x388/0x470 [ 201.766267][T11935] ret_from_fork+0x514/0xb70 [ 201.771365][T11935] ret_from_fork_asm+0x1a/0x30 [ 201.776641][T11935] [ 201.776641][T11935] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 201.783843][T11935] __mutex_lock+0x19d/0x1550 [ 201.788942][T11935] nbd_queue_rq+0xc1/0x1150 [ 201.793954][T11935] blk_mq_dispatch_rq_list+0x499/0x1990 [ 201.800012][T11935] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 201.806848][T11935] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 201.813332][T11935] blk_mq_run_work_fn+0x16c/0x300 [ 201.818864][T11935] process_scheduled_works+0xa8e/0x14e0 [ 201.824924][T11935] worker_thread+0xa47/0xfb0 [ 201.830027][T11935] kthread+0x388/0x470 [ 201.834601][T11935] ret_from_fork+0x514/0xb70 [ 201.839698][T11935] ret_from_fork_asm+0x1a/0x30 [ 201.844970][T11935] [ 201.844970][T11935] -> #4 (set->srcu){.+.+}-{0:0}: [ 201.852080][T11935] __synchronize_srcu+0xc9/0x2f0 [ 201.857523][T11935] elevator_switch+0x1e8/0x7b0 [ 201.862798][T11935] elevator_change+0x2fa/0x480 [ 201.868073][T11935] elevator_set_default+0x375/0x440 [ 201.873783][T11935] blk_register_queue+0x3f3/0x4e0 [ 201.879312][T11935] __add_disk+0x6cb/0xe30 [ 201.884152][T11935] add_disk_fwnode+0xfb/0x4b0 [ 201.889371][T11935] nbd_dev_add+0x733/0xb60 [ 201.894314][T11935] nbd_init+0x15f/0x1e0 [ 201.898993][T11935] do_one_initcall+0x250/0x870 [ 201.904270][T11935] do_initcall_level+0x10a/0x1a0 [ 201.909726][T11935] do_initcalls+0x59/0xa0 [ 201.914569][T11935] kernel_init_freeable+0x29d/0x3e0 [ 201.920276][T11935] kernel_init+0x1d/0x1d0 [ 201.925111][T11935] ret_from_fork+0x514/0xb70 [ 201.930208][T11935] ret_from_fork_asm+0x1a/0x30 [ 201.935488][T11935] [ 201.935488][T11935] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 201.943294][T11935] __mutex_lock+0x19d/0x1550 [ 201.948391][T11935] elevator_change+0x1af/0x480 [ 201.953670][T11935] elevator_set_none+0xb5/0x140 [ 201.959031][T11935] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 201.965347][T11935] nbd_start_device+0x189/0xb30 [ 201.970703][T11935] nbd_genl_connect+0x1597/0x1c10 [ 201.976236][T11935] genl_family_rcv_msg_doit+0x233/0x340 [ 201.982299][T11935] genl_rcv_msg+0x614/0x7a0 [ 201.987309][T11935] netlink_rcv_skb+0x226/0x4a0 [ 201.992577][T11935] genl_rcv+0x28/0x40 [ 201.997069][T11935] netlink_unicast+0x7bb/0x940 [ 202.002333][T11935] netlink_sendmsg+0x813/0xb40 [ 202.007751][T11935] sock_sendmsg_nosec+0x13a/0x180 [ 202.013283][T11935] ____sys_sendmsg+0x54e/0x850 [ 202.018565][T11935] ___sys_sendmsg+0x2a5/0x360 [ 202.023744][T11935] __x64_sys_sendmsg+0x1b1/0x290 [ 202.029196][T11935] do_syscall_64+0x174/0x580 [ 202.034298][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.040698][T11935] [ 202.040698][T11935] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 202.049292][T11935] blk_alloc_queue+0x544/0x690 [ 202.054571][T11935] __blk_mq_alloc_disk+0x194/0x390 [ 202.060186][T11935] nbd_dev_add+0x494/0xb60 [ 202.065112][T11935] nbd_init+0x15f/0x1e0 [ 202.069771][T11935] do_one_initcall+0x250/0x870 [ 202.075049][T11935] do_initcall_level+0x10a/0x1a0 [ 202.080499][T11935] do_initcalls+0x59/0xa0 [ 202.085340][T11935] kernel_init_freeable+0x29d/0x3e0 [ 202.091045][T11935] kernel_init+0x1d/0x1d0 [ 202.095879][T11935] ret_from_fork+0x514/0xb70 [ 202.100973][T11935] ret_from_fork_asm+0x1a/0x30 [ 202.106244][T11935] [ 202.106244][T11935] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 202.113441][T11935] fs_reclaim_acquire+0x71/0x100 [ 202.118883][T11935] prepare_alloc_pages+0x15b/0x650 [ 202.124495][T11935] __alloc_frozen_pages_noprof+0x12f/0x380 [ 202.130811][T11935] __alloc_pages_noprof+0x10/0x100 [ 202.136426][T11935] pcpu_populate_chunk+0x181/0xb30 [ 202.142048][T11935] pcpu_alloc_noprof+0xbca/0x1900 [ 202.147580][T11935] xt_percpu_counter_alloc+0x145/0x1e0 [ 202.153540][T11935] translate_table+0x1311/0x2040 [ 202.158983][T11935] ip6t_register_table+0x112/0x320 [ 202.164600][T11935] ip6table_mangle_table_init+0x41/0x70 [ 202.170659][T11935] xt_find_table_lock+0x311/0x400 [ 202.176199][T11935] xt_request_find_table_lock+0x26/0x100 [ 202.182344][T11935] do_ip6t_get_ctl+0x77b/0x12f0 [ 202.187704][T11935] nf_getsockopt+0x26e/0x290 [ 202.192805][T11935] ipv6_getsockopt+0x213/0x2c0 [ 202.198070][T11935] do_sock_getsockopt+0x51d/0x7e0 [ 202.203603][T11935] __x64_sys_getsockopt+0x1a4/0x240 [ 202.209302][T11935] do_syscall_64+0x174/0x580 [ 202.214396][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.220796][T11935] [ 202.220796][T11935] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 202.228520][T11935] __lock_acquire+0x1520/0x2cf0 [ 202.233881][T11935] lock_acquire+0x106/0x350 [ 202.238887][T11935] __mutex_lock+0x19d/0x1550 [ 202.243981][T11935] pcpu_alloc_noprof+0x231/0x1900 [ 202.249520][T11935] bpf_prog_alloc_no_stats+0x10b/0x4f0 [ 202.255486][T11935] bpf_prog_alloc+0x3c/0x1a0 [ 202.260581][T11935] __get_filter+0xf2/0x420 [ 202.265507][T11935] sk_attach_filter+0x24/0x140 [ 202.270782][T11935] sk_setsockopt+0x2635/0x2f10 [ 202.276070][T11935] do_sock_setsockopt+0x11b/0x1b0 [ 202.281599][T11935] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.287303][T11935] do_syscall_64+0x174/0x580 [ 202.292396][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.298793][T11935] [ 202.298793][T11935] other info that might help us debug this: [ 202.298793][T11935] [ 202.309000][T11935] Chain exists of: [ 202.309000][T11935] pcpu_alloc_mutex --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 202.309000][T11935] [ 202.322200][T11935] Possible unsafe locking scenario: [ 202.322200][T11935] [ 202.329719][T11935] CPU0 CPU1 [ 202.335063][T11935] ---- ---- [ 202.340407][T11935] lock(sk_lock-AF_INET6); [ 202.344894][T11935] lock(&nsock->tx_lock); [ 202.351810][T11935] lock(sk_lock-AF_INET6); [ 202.358816][T11935] lock(pcpu_alloc_mutex); [ 202.363301][T11935] [ 202.363301][T11935] *** DEADLOCK *** [ 202.363301][T11935] [ 202.371427][T11935] 1 lock held by syz.0.1684/11935: [ 202.376523][T11935] #0: ffff888029694ca0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe6c/0x2f10 [ 202.386181][T11935] [ 202.386181][T11935] stack backtrace: [ 202.392069][T11935] CPU: 0 UID: 0 PID: 11935 Comm: syz.0.1684 Not tainted syzkaller #0 PREEMPT(full) [ 202.392087][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.392100][T11935] Call Trace: [ 202.392110][T11935] [ 202.392117][T11935] dump_stack_lvl+0xe8/0x150 [ 202.392137][T11935] print_circular_bug+0x2e1/0x300 [ 202.392159][T11935] check_noncircular+0x12e/0x150 [ 202.392185][T11935] __lock_acquire+0x1520/0x2cf0 [ 202.392204][T11935] ? stack_trace_save+0xa9/0x100 [ 202.392226][T11935] ? __pfx_stack_trace_save+0x10/0x10 [ 202.392247][T11935] ? __lock_acquire+0x683/0x2cf0 [ 202.392263][T11935] ? pcpu_alloc_noprof+0x231/0x1900 [ 202.392284][T11935] lock_acquire+0x106/0x350 [ 202.392298][T11935] ? pcpu_alloc_noprof+0x231/0x1900 [ 202.392323][T11935] __mutex_lock+0x19d/0x1550 [ 202.392337][T11935] ? pcpu_alloc_noprof+0x231/0x1900 [ 202.392359][T11935] ? trylock_stock+0xac/0x280 [ 202.392380][T11935] ? lock_acquire+0x106/0x350 [ 202.392395][T11935] ? trylock_stock+0xac/0x280 [ 202.392414][T11935] ? pcpu_alloc_noprof+0x231/0x1900 [ 202.392434][T11935] ? __pfx___mutex_lock+0x10/0x10 [ 202.392451][T11935] ? unlock_stock+0x12e/0x250 [ 202.392472][T11935] ? obj_cgroup_charge+0x15e/0x210 [ 202.392493][T11935] pcpu_alloc_noprof+0x231/0x1900 [ 202.392515][T11935] ? __kmalloc_cache_noprof+0x150/0x660 [ 202.392538][T11935] ? bpf_prog_alloc_no_stats+0xd8/0x4f0 [ 202.392555][T11935] bpf_prog_alloc_no_stats+0x10b/0x4f0 [ 202.392570][T11935] ? bpf_prog_alloc+0x2a/0x1a0 [ 202.392584][T11935] bpf_prog_alloc+0x3c/0x1a0 [ 202.392599][T11935] __get_filter+0xf2/0x420 [ 202.392621][T11935] sk_attach_filter+0x24/0x140 [ 202.392640][T11935] sk_setsockopt+0x2635/0x2f10 [ 202.392657][T11935] ? __pfx_sk_setsockopt+0x10/0x10 [ 202.392672][T11935] ? aa_sk_perm+0x6d5/0x900 [ 202.392689][T11935] ? __fget_files+0x2a/0x420 [ 202.392707][T11935] ? __fget_files+0x2a/0x420 [ 202.392719][T11935] ? aa_sock_opt_perm+0xff/0x1a0 [ 202.392738][T11935] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 202.392758][T11935] do_sock_setsockopt+0x11b/0x1b0 [ 202.392776][T11935] __x64_sys_setsockopt+0x13d/0x1b0 [ 202.392791][T11935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.392807][T11935] do_syscall_64+0x174/0x580 [ 202.392820][T11935] ? trace_irq_disable+0x3b/0x140 [ 202.392835][T11935] ? clear_bhb_loop+0x40/0x90 [ 202.392851][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.392866][T11935] RIP: 0033:0x7fe8ccd9de59 [ 202.392881][T11935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.392894][T11935] RSP: 002b:00007fe8cdbe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.392909][T11935] RAX: ffffffffffffffda RBX: 00007fe8cd025fa0 RCX: 00007fe8ccd9de59 [ 202.392921][T11935] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 202.392935][T11935] RBP: 00007fe8cce33e6f R08: 0000000000000010 R09: 0000000000000000 [ 202.392945][T11935] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.392955][T11935] R13: 00007fe8cd026038 R14: 00007fe8cd025fa0 R15: 00007ffeccb6f7f8 [ 202.392972][T11935] [ 202.901252][T11946] Set syz1 is full, maxelem 6117 reached