last executing test programs: 12.243458217s ago: executing program 4 (id=3123): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) 12.091835889s ago: executing program 4 (id=3126): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 11.039174125s ago: executing program 4 (id=3132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x300, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB="a33bd50b50d404cdce140912ab2cf4c1c031f675f788e0684a4402419a6c9e2347e5740f13ecd5a118d95e298bf51b9cf352bdc3fccb87294fb9ef172076e3d02fa26fb364f374f2f9e4870dde60c91909df1b65bfe7cb7492a08227593f0c2bc9ae7c3e806b688a17179539d2f5d77ce9c937abfc69494bfea3d7e2a3a3c92675d8436a39ab905a2100b7458f0d592e0ee9da399a8d24c07973ba84fe976ad25cd580f0f0"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4000883) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x1002, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x39b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x24000804) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) 10.746574341s ago: executing program 4 (id=3137): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="000000850000004f0000008500005dff00000095137c39763903d866c53de2de5f8a9df38e3ce05ebac0152d16311d4144f7987a343ccb0c725f0b78ee5c51bc6e6d289112d77c04f8eb55b6ae66ce6bf48701160aa296"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x21, 0x0, 0x0, 0x1, 0x400, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r3, @ANYRES8=0x0], 0x44}, 0x1, 0x1000000}, 0x0) 5.648426655s ago: executing program 0 (id=3176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='wlan1\x00'}) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000011424203008f"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r3, @ANYBLOB="0600150008000000100016"], 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x49, &(0x7f0000000040), 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) 5.123040572s ago: executing program 0 (id=3180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x43, 0x0, 0x0, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x80, 0x2, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', r4, 0x2d, 0x5, 0x2b, 0x10, 0x51, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x7800, 0x80, 0x7fffffff, 0x8}}) r6 = socket$inet(0x2, 0x5, 0x0) sendfile(r6, r6, 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@local, @initdev, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xdfc1db3afdac698}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000ac0)=0x2, 0x12) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r16, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="9daf0e3310001fff0000000080b6af3d7f730000009800000081334303b3ebaf68eb0e36057203a025fb01b77493274042d68174c0671a2e55000641e67469", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800e0001006970366772657461700000001800028008000c0007000000060003003f0000000400120008000a00", @ANYRES32=r16, @ANYBLOB], 0x54}}, 0x0) r17 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r17) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r18, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 4.66944912s ago: executing program 0 (id=3185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) 4.478849618s ago: executing program 0 (id=3187): r0 = socket$isdn(0x22, 0x3, 0x1) accept4(r0, 0x0, &(0x7f0000000000), 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) 4.122342252s ago: executing program 0 (id=3189): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 3.914735287s ago: executing program 0 (id=3191): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r4, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000012c0)=0xe) accept4(r4, 0x0, 0x0, 0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r9 = socket(0x1, 0x3, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) recvmsg$can_raw(r9, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18027a0000000000000000003b000000950000000000000075318b0d409bca4087aa6d704dd3d58f3bc6a791fbc542e47e043874f3d356f94e2e2df5047db646ba3ace8f367a8ef1ad55b46851a4966c30779c4caf26f5acff"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10}, 0x94) 3.646912274s ago: executing program 2 (id=3193): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f27, 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x25}) 3.383725881s ago: executing program 2 (id=3197): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-\x8b-\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x10004014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x34f}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1760}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x9}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}}, 0x4004) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)={0x4, {{0x2, 0x4e24, @empty}}, 0x1, 0x4, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e24, @loopback}}]}, 0x290) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x40) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000bc0)='ns/mnt\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, r10, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x22}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff511, 0x6e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r13 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r13, &(0x7f0000000d00), &(0x7f0000000d40)=0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}}, 0x20014002) r16 = accept$nfc_llcp(r1, 0x0, &(0x7f0000000f40)) bind$nfc_llcp(r16, &(0x7f0000000f80)={0x27, r7, 0x0, 0x2, 0x4, 0x0, "e8e89cf10275799d5f473be4259240d219e195b6287fb927f29bd46c2a4cbbd3057a43634956cb637295512b032450cfe58be2c51f53f7fe92ee5137c5399c", 0xd}, 0x60) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r1) sendmsg$TIPC_NL_NODE_GET(r12, &(0x7f00000013c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2dc, r17, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xee}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4f2b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xe1, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10000, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x4bb}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7c88}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf0}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48f4ec27}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 3.051136293s ago: executing program 3 (id=3200): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/235, 0xeb}, 0x4}], 0x1, 0x10000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6b, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/235, 0xeb}, 0x4}], 0x1, 0x10000, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6b, r3}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) (async) 3.050434684s ago: executing program 2 (id=3201): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x0, @void}, 0x25) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.838209902s ago: executing program 1 (id=3202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r0, 0x0, 0x0) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="00000000000000000000000000000000000000006ec0279b03bc1b881e8c99ae163769f3890f8c5dc2b3131228c73bd46060417c1a9a0e89ab49deed53b0502405d0200b716ea09a762fea7207a11e0e5490460d08004213c9145c0fd97a50cd731b0fc0079b6e8a8d555ab63ab13f2d8f8f2c29b45dc073abae9627f0ecff5858793bd0c30e058b78351cdc9844c6105e75424fce00"/164, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x1, 0xf7, 0x3, @vifc_lcl_ifindex=r5, @broadcast}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.700083576s ago: executing program 3 (id=3203): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f00000001c0)="629ef49efe", 0x5}], 0x1}, 0x44006) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r3) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r0, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200018c4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xd8, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x280}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4b9f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x276}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xfec23dc3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8840}, 0x4000800) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000706ebe8000000000000d83f0a000004050001000700000003000000720a033cbafff565ca985e1942baac6d0d42170c87a5f92b5f658dc04c6454f8d92fcb2a69c9876f12d9807df520d492"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.551060224s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000040)=0xffd2) ppoll(&(0x7f0000000240)=[{r2, 0x309}], 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r6, &(0x7f0000000080), 0x0}, 0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x10004}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x28}}, 0x0) 2.436096292s ago: executing program 2 (id=3205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x6, 0xb0, 0x5, 0x200, 0x10, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x40, 0xfffffff8, 0x6}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3f, 0x3, "acd1e93ad0ea106ddb39225708bb69c808216067eee7c4a0", "561e1660983432c4630021d6bede7e392b9dffff8783050058d915b3071872e0"}}}}}}}, 0x6e) 2.416114801s ago: executing program 1 (id=3206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="29000300010003", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "080865be5a"}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x88}}, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000080)=0x8) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x2000c0c4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.799369868s ago: executing program 4 (id=3207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000000c0), 0x2, 0x0) 1.71958765s ago: executing program 1 (id=3208): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000000)=0x34e, 0xffe8) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000040)={'syzkaller0\x00'}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.627268507s ago: executing program 2 (id=3209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f090020000000003cdbfecc000001000000080009000000000008000a00"], 0x24}, 0x1, 0x620b}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x4305}}}}, 0x12) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x68, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x289d}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x10) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f090020000000003cdbfecc000001000000080009000000000008000a00"], 0x24}, 0x1, 0x620b}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f00000003c0)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x4305}}}}, 0x12) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x68, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x289d}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x10) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) (async) 1.53902759s ago: executing program 3 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000900000000000000090a010400000000000000020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000000014000108000af3b1ae82c7211031e4e7bf516d"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, 0xd, 0xa, 0x200, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x20008800) 1.177017271s ago: executing program 3 (id=3211): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x27, r1, 0x1, 0x3, 0x8, 0x5, "dd78cb51ea607953d7dba884261ee3e006673c668a55185a18f1fbc982ada7f86281e4bc125f1494b07b5d15bee0a9a2c675e73b44b04d50d33f63af0ffd26", 0x1f}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000040)="7343558a8d9352", 0x7}, {&(0x7f0000000180)="8413f7b05fc797f84444ff1fd8cd6df5085bd235899cf00a9f7a58a53d1efdbc572a614e62a02fbecfa2b56cbc0a5e32776ec7302ae85616f983bf4382ecafe6e2bb4f7a912d1869e45912cc0f31229c3ace8f5686ae5482d8ebb202a2cbdfb3e6acf7f0fa814241a8e380d545abc9a57d377aedbf362f5748236b80db10f09ae1bca7258ed4ba53093a1b0d3f9b59469371f3b707cc0e3dcddd70a1f37e3060163959b2f6a2998d04b8b7e812c6d878a65f76eba3f99c97486efb8fcaaf6342453661b7f588ef89c56b1b39363ac381a711378e249840ac0d07f202f75594dc2281f5c9efdda1872693d80ffb4faa63961e7e1bfba0365b986a87952b1f31", 0xff}, {&(0x7f0000000280)="f2cb1ecc34bf0a4094bf37c41d127e145296f451846c03d28613dcbb0c228d4e65a2cb69f43534f0fb2064c48d5918db15b50fc631566982baea288c6df7e674", 0x40}, {&(0x7f00000002c0)="7f829ef9b762e13fba3aad2891da4f8562770de78faea99eb922092a2b1a1dbb0ead99f47fa88b86f580426098b728a45a885163b2acbdc7fd0282413126076b260693b360f732505b40f1e084d8072bc50491ee4fee27d66639c69316eb41b936c7a6ce1b04d0f38ff85f1bf48f4aaa9e086cab48b683a6e54f1c6ec4e0fb0bdd87d6630f95bc43afd7127b9c9c68528afab40019ff151d38f67b8bd3f9c2", 0x9f}], 0x4, &(0x7f00000003c0)={0x18, 0x111, 0x0, "a2dd0a4b"}, 0x18, 0x10}, 0x1) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 881.572481ms ago: executing program 1 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fddbdf25300000000c0099008bea000037000000060036002d000000"], 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 599.359005ms ago: executing program 2 (id=3213): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000740)={0x4f, "727af17b7e4731f659c83cacd4e776acc2272a20e15dccd01c0dd4fcf0715c42625bf5b99405644ad8eed0d6b49ce23df44123850b10d4714009e66881c7cea1495d4657e8d8aa8d84b90ee51ebdf2abae5743adf08b7529ebc6307adaeac44212323493aa43c1e6378575a9c4ab48c622315d5f92af11eb2b0258cd9b4ba505"}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, 0x0, &(0x7f0000000100)=0xfffffffffffffdde) sendmsg$inet(r5, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000180)="48b0367d085fa8d9fefddb7b19d646cb985781322641dbca32a356b2dd8112323692f805cb30fa2139a2944476bf3b3f8c1bc745769142c24d26f3da3119bdba98d2acc8a8ba7218f118e12094efbdbf1cd88babbc8a6d927a7346c1b2330903aa7a5e91b57fb420bb98e07159fbce3a6f63418060867447752b143d4f2cb4c1937dc64af9f14a005c7b4e6b7361f6cf040afa4eb9603c8d76fa3a9167597769d15c13892dfdc3b4eff25ab7b83771bb38ff37e2aaba2e10a00494ee3f11bb8136f7ef0c6678d778f4bca4", 0xcb}, {&(0x7f0000000280)="030df0eb3897e96cacc5219bd2fc28934dda354619b12ecba4d77c7508f034db29e48cb170a63178932d27175ba8763f886587", 0x33}, {&(0x7f00000002c0)="443ab1f659d982", 0x7}, {&(0x7f0000000380)="465e7b1c94f861f1fb6834f58a093fa913ecd6a69be02d75fa22dc5d8da9ca9be66e61b75c58250aa9d8f50d1d7f1af292d1eea065389045ab0f1bfdae3e86fef2a2a9cb9329a801f195d937e8c424a06ffd29148cafc888eaa9ea47c9abb1a0a5bbf197115cb25e610497e85dd0242f31", 0x71}, {&(0x7f0000000300)="30eeaf7a82c61a44d51994bc3ed6fd0559f60f2290798451fa654d11b683ae7cc981b40bcc1f22d7d5a571f455b306fd59b4ab5d5e7d6b727e30d872", 0x3c}, {&(0x7f0000000400)="458847958389a87f712212c2e930051d6814c0c71ac52c9b80d5e1ee96", 0x1d}, {&(0x7f0000000440)="34d5d860d1facc399acfad6d1f30fb37e8cd3238e8182664695aad69613801a4deecbe", 0x23}, {&(0x7f0000000480)="701e36751123", 0x6}, {&(0x7f00000004c0)="3b01730e767f11cf020d43c66f6d018f45af4889ac021a1002ea4d19744df4d9c7ac9d0578355786e881276639766808245f32d1", 0x34}, {&(0x7f0000000500)="bf59f36cfd6cdb9c63210890378e128c8effcb173002ffca3a53df489c8950daf093b4b3029b6b6c0755aa47b3f0a4531d4c40f9a72cc4d3dc4dea9cdc8dac809ba62b2dd48f606ebe2d7781a67ff23dd0ed0d1e07335277d7a9aace01b1823a829165718e540ad0d25b3928850c229d4793689987d97af8002e648e0f33607e19164be4d72ba6ac2a1e5fc6e9ce0acafed493af723e76abc482e3b20db2111b21a8eaeb4942e466", 0xa8}], 0xa, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) 561.381587ms ago: executing program 1 (id=3214): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000980)={@multicast, @local, @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0xe873, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xcb8}, {0x7}, {0x6, 0x0, 0x1}], @generic="ad7cee9e5731d2357152addd86e0478a5490c7a7c4406f6519e93988706dddacb4c6f20705bfa3ff2e95fe5a5f7587b48bff8e27555f3f013f75474c9cb4ca7a4950e60245deca3acf6ca35f22672dfabb6cb620d54386070f7a721c4b4c9d01e40016a66a05ff3f"}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x9, 0x7, 0x1, 0xce81, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101, {[@timestamp={0x44, 0x18, 0xe8, 0x0, 0x9, [0xd56, 0x8, 0xffffffff, 0x0, 0xc4f3]}, @end, @cipso={0x86, 0xf, 0x3, [{0x5, 0x9, "b591d30cbfe65b"}]}, @lsrr={0x83, 0xb, 0x12, [@multicast2, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0x8a, 0x3, 0x6, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010101, 0xfc4f}, {@rand_addr=0x64010100, 0x25140000}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=@delneigh={0x84, 0x1d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, r4, 0x0, 0x2, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_VLAN={0x6}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x2}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_SRC_VNI={0x8, 0xb, 0x10}, @NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @NDA_LINK_NETNSID={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x4}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000}, 0x4010) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0xffe0, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@bridge_setlink={0x20, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, 0x0, 0x940, 0x27025}}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x0) 221.970556ms ago: executing program 3 (id=3215): bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x14, 0x4) (async) recvfrom(r0, &(0x7f0000000080)=""/36, 0x24, 0x2043, &(0x7f00000000c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x80) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), 0x4) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)=':+!$\x00', 0x20000, &(0x7f0000000280)={@_ha_fsid={[0x2, 0x1]}, {0x10, 0x8, 0x1, 0xe}}, 0x40, &(0x7f00000002c0), &(0x7f0000000300)=0x9}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x9, 0x735, 0x5, 0x0, r1, 0x80, '\x00', r2, r3, 0x0, 0x0, 0x2}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x20008001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r3) (async) r8 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000780)={'xfrm0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f00000007c0)={0x7, 0xfff, 0x2, 0x7cf, 0x0, [0x4, 0xb, 0x0, 0x4]}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) (async) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x1, 0x10, 0x101, 0x478}, 0x14) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000940), &(0x7f0000000980)=0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x3c}}, 0x34000000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r11, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 146.792242ms ago: executing program 4 (id=3216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x2, 0x12) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xfff) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="bfd2288585c22a9979f6867cc1a1dcdb7bccc4c4830ace3469bfb016d32d04ae6d1d0b6b953b39033ebb37d96aefce77ac8d89e0cf660c7d1b525d6ca0af2955e9ffe272d588e58e9d256e708740560fb90d3672c4994028541fbbdc416b66b81805f346ddbd8adf94bb3c06723d50477d01127128d5cc386458c0e332be398672665665a3fa0eefc6af12c65ae628e866ef6818426eba09faf56a65", 0x9c}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000400)="9792ade36ef0e08361f8e54a22bf33d1ff900b2285cc26576423d4cbe4c08b46cc1c5004af2af68b54ac5ef12f5da852f8188923335e9a4a86559266de95a57ef9ad524029de5b69ccd806292d821d11a5009f8df78c47a5fabb213efbe6229f382b84552b7bd53c75c7b6b4a232a780213493008db57a47105bf4167f2d920b9fd8f4a0fff7b30f2da22006961f47e8b2af97e28b222c5d2ae267c39188133b2b1ed716012c959058d60f2f654449d9b25156524feb500e7170365e5230a12b7862527b0e226eb0706cb1bca4e81ee1b4f590c4ab5c46bf4f0c924eff0f07bb2872fda0b6dd", 0xe6}, {&(0x7f0000000500)="7d8e0e3a4be3249206046ee4d7c05ea3d344208bcfc495408efbe5359e47afe14e297d02223686", 0x27}, {&(0x7f0000000540)="b45480e07e370fef253ad33eaabc4df3037ff9a2f5df71a26b70", 0x1a}, {&(0x7f0000000600)="1657303222720d1562e62990a325bbec925ecb1fb1b628f4219b8c8856365df847f295c1e8833d9d3065a466bbda82285d03bfea7775cc4671a58338500442298ba2610dd8e727383f2c8e9336", 0x4d}, {&(0x7f0000000680)="862d61c92b076d2763dd8ac60c10e8f77620faa349431cfe6b61518d27845f90adb4c251f94741e3947f033d762d92769b381f750e88040eb9ac2ae35e106d2adc33bbe818cae793838b5f27936c4c0d01054aeff34405cb696937e12aea4945c96035d9a0e8f65f050617101b9cef197024a61f7d171dfcb48cd5e3ee27e667a904a662b923260c497884640ae28910a57f7f9de2b01801de7218476d1ee36216", 0xa1}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000740)="3cfa00c7bab54ab6cafc95c758e80ec97dae4f89d24cf7c99ad6cef6cb4e0b4da4b162c6ba6d758115b3a81203d9ae5ab1c290eb6164a690b020f696a6b9054eb1c1026c7ac759ac962a9c4beeb9c5affd", 0x51}], 0x9, &(0x7f0000000880)=[@op={0x18}, @iv={0x80, 0x117, 0x2, 0x66, "a25711bd1f10ac022a70c53d5a44f4caadac5e64b8313c321967074f571b46a9bebc74fb52222744eab7fa0d3c97a7b9c9e6cc330907f4887ab7093436a3a3d3fe7190f3abc1361d6a1ef17d6346a3c91579df9f8f0f1c88f1b56a26aed32b34991779d845f6"}], 0x98, 0x2}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="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", 0xfa}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000000580)="2d338f7e828d9700b5abaf1aceddec26fe951407b883eea512aae6d54d670f3b332d9bf4d54c2934", 0x28}], 0x3, &(0x7f0000000a80)=[@iv={0x98, 0x117, 0x2, 0x82, "377d27aff053e2ae36353ce062939032d8dc2f85f46eb558dc790dcd33a72221033676a61512a67cebcf81b85f0cfd289dbaaeb87d59e5e0b0151e2e475f3c78cb7f3596688d64e01b1a70a77ed89e487990cb49d05569d374960e3badb14663b4015a496bbca869e420a1b1d5fc0c54211ddfd0279dac809ed4ccb371955ad1f4fe"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xf8, 0x80}], 0x2, 0x40080) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xb6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) accept$inet6(r1, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=3217): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) kernel console output (not intermixed with test programs): 21.459539][T11480] __vmalloc_node_range_noprof+0x132/0x1730 [ 221.459594][T11480] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.459623][T11480] ? __kasan_kmalloc+0x93/0xb0 [ 221.459652][T11480] vmalloc_user_noprof+0xad/0xe0 [ 221.459674][T11480] ? xskq_create+0xbf/0x170 [ 221.459704][T11480] xskq_create+0xbf/0x170 [ 221.459736][T11480] xsk_init_queue+0x8a/0xe0 [ 221.459767][T11480] xsk_setsockopt+0x54c/0x990 [ 221.459799][T11480] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.459828][T11480] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.459857][T11480] ? aa_sock_opt_perm+0xff/0x1a0 [ 221.459886][T11480] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 221.459908][T11480] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.459939][T11480] do_sock_setsockopt+0x17c/0x1b0 [ 221.459975][T11480] __x64_sys_setsockopt+0x13d/0x1b0 [ 221.460010][T11480] do_syscall_64+0x14d/0xf80 [ 221.460029][T11480] ? trace_irq_disable+0x3b/0x150 [ 221.460058][T11480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.460079][T11480] ? clear_bhb_loop+0x40/0x90 [ 221.460111][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.460131][T11480] RIP: 0033:0x7ff56419c799 [ 221.460168][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.460186][T11480] RSP: 002b:00007ff565110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.460208][T11480] RAX: ffffffffffffffda RBX: 00007ff564415fa0 RCX: 00007ff56419c799 [ 221.460222][T11480] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 221.460234][T11480] RBP: 00007ff564232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 221.460246][T11480] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.460259][T11480] R13: 00007ff564416038 R14: 00007ff564415fa0 R15: 00007fffb0ddfae8 [ 221.460291][T11480] [ 221.745140][T11480] Mem-Info: [ 221.748338][T11480] active_anon:5945 inactive_anon:0 isolated_anon:0 [ 221.748338][T11480] active_file:2695 inactive_file:39987 isolated_file:0 [ 221.748338][T11480] unevictable:768 dirty:59 writeback:0 [ 221.748338][T11480] slab_reclaimable:11166 slab_unreclaimable:100698 [ 221.748338][T11480] mapped:29381 shmem:1360 pagetables:1248 [ 221.748338][T11480] sec_pagetables:0 bounce:0 [ 221.748338][T11480] kernel_misc_reclaimable:0 [ 221.748338][T11480] free:1328624 free_pcp:8217 free_cma:0 [ 221.794917][T11480] Node 0 active_anon:23780kB inactive_anon:0kB active_file:10780kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117524kB dirty:236kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:4864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.826850][T11480] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.857849][T11480] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.888104][T11480] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 221.895329][T11480] Node 0 DMA32 free:1350720kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23780kB inactive_anon:0kB active_file:10780kB inactive_file:159748kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:32332kB local_pcp:14952kB free_cma:0kB [ 221.929543][T11480] lowmem_reserve[]: 0 0 0 0 0 [ 221.934450][T11480] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 221.945864][T11457] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 221.964257][T11480] lowmem_reserve[]: 0 0 0 0 0 [ 221.975109][T11480] Node 1 Normal free:3948416kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.978390][T11488] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 222.007329][T11480] lowmem_reserve[]: 0 0 0 0 0 [ 222.007390][T11480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.007551][T11480] Node 0 DMA32: 5310*4kB (UM) 2539*8kB (UME) 1181*16kB (UME) 93*32kB (M) 59*64kB (UME) 239*128kB (UM) 230*256kB (UM) 160*512kB (UME) 136*1024kB (UME) 57*2048kB (UME) 209*4096kB (UM) = 1350656kB [ 222.007754][T11480] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.007876][T11480] Node 1 Normal: 2*4kB (E) 13*8kB (UME) 21*16kB (UME) 12*32kB (UME) 11*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 961*4096kB (M) = 3948416kB [ 222.008076][T11480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.008094][T11480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.008112][T11480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.008130][T11480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.008147][T11480] 44038 total pagecache pages [ 222.008170][T11480] 0 pages in swap cache [ 222.008179][T11480] Free swap = 124996kB [ 222.008189][T11480] Total swap = 124996kB [ 222.008198][T11480] 2097051 pages RAM [ 222.008206][T11480] 0 pages HighMem/MovableOnly [ 222.008220][T11480] 427010 pages reserved [ 222.008228][T11480] 0 pages cma reserved [ 222.186768][T11491] __nla_validate_parse: 23 callbacks suppressed [ 222.186787][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 222.290601][T11491] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1510'. [ 222.557722][T11515] nbd: must specify at least one socket [ 222.866722][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 222.902780][T11531] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.929721][T11532] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 222.937806][T11532] netlink: 'syz.3.1523': attribute type 4 has an invalid length. [ 222.968544][T11532] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1523'. [ 222.981223][T11544] gtp0: entered promiscuous mode [ 223.008713][T11544] gtp0: entered allmulticast mode [ 223.108842][T11550] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1529'. [ 223.132180][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 223.146529][T11550] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1529'. [ 223.170579][T11550] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1529'. [ 223.186721][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1529'. [ 223.218570][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1530'. [ 242.448621][ T5144] Bluetooth: hci4: link tx timeout [ 242.453986][ T5144] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 243.668407][T11571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1533'. [ 243.836551][T11583] macvtap1: entered promiscuous mode [ 243.842771][T11583] macvtap1: entered allmulticast mode [ 243.864084][T11583] veth1_vlan: entered allmulticast mode [ 243.898172][T11594] tap0: tun_chr_ioctl cmd 2148553947 [ 243.909531][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1541'. [ 243.928540][T11586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1536'. [ 243.940847][T11586] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 243.979675][T11586] tap0: tun_chr_ioctl cmd 1074025681 [ 244.043022][T11597] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1542'. [ 244.133197][T11602] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 244.320508][T11608] bond12: Unable to set up delay as MII monitoring is disabled [ 244.340400][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 244.351580][T11608] bond12 (unregistering): Released all slaves [ 244.358656][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 244.383525][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 244.407535][T11613] syzkaller0: entered promiscuous mode [ 244.413974][T11613] syzkaller0: entered allmulticast mode [ 244.417070][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1549'. [ 244.484684][T11623] netlink: 'syz.4.1549': attribute type 30 has an invalid length. [ 244.493858][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 244.536098][T11622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1549'. [ 244.944184][T11622] bridge0: port 4(dummy0) entered blocking state [ 244.950823][T11622] bridge0: port 4(dummy0) entered forwarding state [ 244.977228][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1549'. [ 245.193079][T11659] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 245.285642][T11665] netlink: 'syz.2.1562': attribute type 1 has an invalid length. [ 245.356049][T11673] x_tables: unsorted entry at hook 3 [ 245.520582][T11665] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 245.521172][T11675] tipc: Enabled bearer , priority 0 [ 245.686730][T11679] syzkaller0: entered promiscuous mode [ 245.692700][T11679] syzkaller0: entered allmulticast mode [ 245.700078][T11679] tipc: Resetting bearer [ 245.775998][T11661] tipc: Resetting bearer [ 247.261933][T11661] tipc: Disabling bearer [ 247.488457][T11714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.291008][T11718] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 248.432441][T11776] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 248.591001][T11776] bond5: entered promiscuous mode [ 248.596943][T11776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.663520][T11783] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.703231][T11783] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 248.742613][T11783] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 248.820966][T11783] bond5: (slave xfrm1): making interface the new active one [ 248.859621][T11783] xfrm1: entered promiscuous mode [ 248.867199][T11783] bond5: (slave xfrm1): Enslaving as an active interface with an up link [ 249.080965][T11800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.098744][T11811] __nla_validate_parse: 3 callbacks suppressed [ 249.098766][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 249.237945][T11800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.314651][T11820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 249.364790][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 249.481491][T11821] syzkaller0: entered promiscuous mode [ 249.487169][T11821] syzkaller0: entered allmulticast mode [ 249.532213][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 249.557927][T11833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1597'. [ 249.583709][T11800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.594694][T11834] IPVS: ip_vs_add_dest(): server weight less than zero [ 249.787485][T11844] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1600'. [ 250.653681][T11870] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 251.402453][T11800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.643919][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 251.802284][T11890] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1608'. [ 251.824536][T11890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1608'. [ 251.859939][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.922600][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.949424][T11905] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1610'. [ 252.076181][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.092563][ T9240] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.543129][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 252.553395][T11928] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.578567][T11928] bond5: (slave lo): Enslaving as an active interface with an up link [ 252.630633][T11928] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 252.989559][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.989559][T11952] Use struct sctp_sack_info instead [ 253.051222][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.051222][T11952] Use struct sctp_sack_info instead [ 253.099652][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.099652][T11952] Use struct sctp_sack_info instead [ 253.118515][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.118515][T11952] Use struct sctp_sack_info instead [ 253.181327][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.181327][T11952] Use struct sctp_sack_info instead [ 253.200312][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.200312][T11952] Use struct sctp_sack_info instead [ 253.284442][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.284442][T11952] Use struct sctp_sack_info instead [ 253.377379][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.377379][T11952] Use struct sctp_sack_info instead [ 253.456498][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.456498][T11952] Use struct sctp_sack_info instead [ 253.596600][T11952] sctp: [Deprecated]: syz.2.1620 (pid 11952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.596600][T11952] Use struct sctp_sack_info instead [ 253.686352][T11972] bond6: option fail_over_mac: invalid value (16) [ 253.749133][T11972] bond6 (unregistering): Released all slaves [ 254.093494][T11999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.104983][T12001] __nla_validate_parse: 1 callbacks suppressed [ 254.105003][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 254.152741][T11999] sctp: [Deprecated]: syz.3.1629 (pid 11999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.152741][T11999] Use struct sctp_sack_info instead [ 254.169841][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 254.190131][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1630'. [ 254.211923][T12002] syzkaller0: entered promiscuous mode [ 254.217947][T12002] syzkaller0: entered allmulticast mode [ 254.236144][T12002] 0: reclassify loop, rule prio 0, protocol 800 [ 254.375241][T12015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.407541][T12020] caif0: entered promiscuous mode [ 254.414010][T12020] caif0: entered allmulticast mode [ 254.438453][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 254.726032][T12039] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 254.765314][T12039] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 254.916047][T12049] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 254.934128][T12048] tipc: Enabled bearer , priority 0 [ 254.963756][T12048] syzkaller0: entered promiscuous mode [ 254.980661][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 254.995733][T12048] syzkaller0: entered allmulticast mode [ 255.111063][T12057] syz_tun: entered promiscuous mode [ 255.140536][T12057] macvtap1: entered promiscuous mode [ 255.190565][T12057] syz_tun: left promiscuous mode [ 255.243250][T12052] tipc: Resetting bearer [ 255.261115][T12052] tipc: Disabling bearer [ 255.397204][T12067] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 255.475940][T12077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1649'. [ 255.484044][T12067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.558816][T12070] bond7: (slave ip6erspan1): making interface the new active one [ 255.599629][T12070] bond7: (slave ip6erspan1): Enslaving as an active interface with an up link [ 255.616231][T12088] netlink: 'syz.0.1650': attribute type 25 has an invalid length. [ 255.872653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879032][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051803][ T181] nci: nci_rx_work: unknown MT 0x7 [ 256.406308][T12124] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1659'. [ 256.773263][T12148] C: renamed from lo (while UP) [ 256.778793][T12101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.821343][T12148] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 257.036059][T12154] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1663'. [ 257.075154][T12154] sctp: [Deprecated]: syz.2.1663 (pid 12154) Use of int in maxseg socket option. [ 257.075154][T12154] Use struct sctp_assoc_value instead [ 257.129278][T12154] ipt_REJECT: TCP_RESET invalid for non-tcp [ 257.290436][T12164] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1668'. [ 257.374178][T12167] IPVS: length: 1803188595 != 1152 [ 257.386300][T12167] IPVS: length: 1803188595 != 1152 [ 257.400446][T12167] IPVS: length: 1803188595 != 1152 [ 257.409556][T12174] netlink: 'syz.0.1671': attribute type 5 has an invalid length. [ 257.418046][T12167] IPVS: length: 1803188595 != 1152 [ 257.433523][T12167] IPVS: length: 1803188595 != 1152 [ 257.458891][T12167] IPVS: length: 1803188595 != 1152 [ 257.486297][T12167] IPVS: length: 1803188595 != 1152 [ 257.491644][T12167] IPVS: length: 1803188595 != 1152 [ 257.534168][T12176] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1672'. [ 257.536579][T12167] IPVS: length: 1803188595 != 1152 [ 257.562559][T12167] IPVS: length: 1803188595 != 1152 [ 257.567792][T12167] IPVS: length: 1803188595 != 1152 [ 257.573570][T12167] IPVS: length: 1803188595 != 1152 [ 257.578750][T12167] IPVS: length: 1803188595 != 1152 [ 257.580007][T12176] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 257.585610][T12167] IPVS: length: 1803188595 != 1152 [ 257.630959][T12167] IPVS: length: 1803188595 != 1152 [ 257.638700][T12167] IPVS: length: 1803188595 != 1152 [ 257.645258][T12167] IPVS: length: 1803188595 != 1152 [ 257.650563][T12167] IPVS: length: 1803188595 != 1152 [ 257.656403][T12167] IPVS: length: 1803188595 != 1152 [ 257.661711][T12167] IPVS: length: 1803188595 != 1152 [ 257.670203][T12167] IPVS: length: 1803188595 != 1152 [ 257.680452][T12167] IPVS: length: 1803188595 != 1152 [ 257.686444][T12167] IPVS: length: 1803188595 != 1152 [ 257.691797][T12167] IPVS: length: 1803188595 != 1152 [ 257.706329][T12167] IPVS: length: 1803188595 != 1152 [ 257.720345][T12167] IPVS: length: 1803188595 != 1152 [ 257.727772][T12167] IPVS: length: 1803188595 != 1152 [ 257.753364][T12167] IPVS: length: 1803188595 != 1152 [ 257.758887][T12167] IPVS: length: 1803188595 != 1152 [ 257.768244][T12167] IPVS: length: 1803188595 != 1152 [ 257.781568][T12167] IPVS: length: 1803188595 != 1152 [ 257.787448][T12167] IPVS: length: 1803188595 != 1152 [ 257.794542][T12167] IPVS: length: 1803188595 != 1152 [ 257.822296][T12167] IPVS: length: 1803188595 != 1152 [ 257.835630][T12167] IPVS: length: 1803188595 != 1152 [ 257.855920][T12167] IPVS: length: 1803188595 != 1152 [ 257.866307][T12167] IPVS: length: 1803188595 != 1152 [ 257.884785][T12167] IPVS: length: 1803188595 != 1152 [ 257.892254][T12167] IPVS: length: 1803188595 != 1152 [ 257.905487][T12167] IPVS: length: 1803188595 != 1152 [ 257.916333][T12167] IPVS: length: 1803188595 != 1152 [ 257.927923][T12167] IPVS: length: 1803188595 != 1152 [ 257.956372][T12167] IPVS: length: 1803188595 != 1152 [ 257.968201][T12167] IPVS: length: 1803188595 != 1152 [ 257.982471][T12167] IPVS: length: 1803188595 != 1152 [ 258.004256][T12200] sctp: [Deprecated]: syz.0.1679 (pid 12200) Use of int in max_burst socket option deprecated. [ 258.004256][T12200] Use struct sctp_assoc_value instead [ 258.025132][T12167] IPVS: length: 1803188595 != 1152 [ 258.033764][T12167] IPVS: length: 1803188595 != 1152 [ 258.039151][T12167] IPVS: length: 1803188595 != 1152 [ 258.045492][T12167] IPVS: length: 1803188595 != 1152 [ 258.062312][T12167] IPVS: length: 1803188595 != 1152 [ 258.069161][T12167] IPVS: length: 1803188595 != 1152 [ 258.090357][T12167] IPVS: length: 1803188595 != 1152 [ 258.102664][T12167] IPVS: length: 1803188595 != 1152 [ 258.108008][T12167] IPVS: length: 1803188595 != 1152 [ 258.114727][T12167] IPVS: length: 1803188595 != 1152 [ 258.124285][T12167] IPVS: length: 1803188595 != 1152 [ 258.281404][T12211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.565142][T12228] ip6tnl0: Caught tx_queue_len zero misconfig [ 259.298955][T12280] __nla_validate_parse: 3 callbacks suppressed [ 259.298985][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 259.609738][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1708'. [ 260.215949][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 260.233017][T12297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 260.462691][T12335] netlink: 'syz.4.1718': attribute type 16 has an invalid length. [ 260.470576][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1718'. [ 260.570200][T12335] nftables ruleset with unbound set [ 260.806648][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 260.944014][T12359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.951360][T12359] IPv6: NLM_F_CREATE should be set when creating new route [ 260.958796][T12359] IPv6: NLM_F_CREATE should be set when creating new route [ 260.967173][T12359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.033043][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 261.230764][T12367] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1727'. [ 261.497896][T12385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1730'. [ 261.547323][T12385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1730'. [ 261.583756][T12385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1730'. [ 262.269537][T12421] xt_socket: unknown flags 0x50 [ 262.892328][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 262.989277][T12466] Cannot find set identified by id 65534 to match [ 263.105524][T12476] netlink: 'syz.0.1755': attribute type 3 has an invalid length. [ 263.414444][T12488] rdma_op ffff8880550771f0 conn xmit_rdma 0000000000000000 [ 263.489249][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.556038][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.615976][T12493] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 263.643339][T12493] bridge0: port 4(dummy0) entered disabled state [ 263.655029][T12493] bond0 (unregistering): Released all slaves [ 263.662369][T12507] netlink: 'syz.3.1763': attribute type 2 has an invalid length. [ 263.975296][T12522] netlink: 'syz.4.1768': attribute type 7 has an invalid length. [ 263.991583][T12522] netlink: 'syz.4.1768': attribute type 7 has an invalid length. [ 263.992840][ T181] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.038886][ T181] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.073258][ T181] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.092499][T12526] team0: Caught tx_queue_len zero misconfig [ 264.120630][ T181] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.133069][T12532] dummy0: left allmulticast mode [ 264.138324][T12532] bridge0: port 3(dummy0) entered disabled state [ 264.156163][T12534] netlink: 'syz.3.1771': attribute type 24 has an invalid length. [ 264.179495][T12532] bridge_slave_1: left allmulticast mode [ 264.206616][T12532] bridge_slave_1: left promiscuous mode [ 264.227989][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.253042][T12532] bridge_slave_0: left allmulticast mode [ 264.262690][T12532] bridge_slave_0: left promiscuous mode [ 264.268509][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.453064][T12541] syzkaller0: entered promiscuous mode [ 264.458619][T12541] syzkaller0: entered allmulticast mode [ 264.518861][T12553] __nla_validate_parse: 71 callbacks suppressed [ 264.518883][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'. [ 264.810502][T12569] netlink: 'syz.4.1781': attribute type 13 has an invalid length. [ 264.835579][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1782'. [ 264.854103][T12569] netlink: 'syz.4.1781': attribute type 58 has an invalid length. [ 264.878152][T12569] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1781'. [ 266.813623][T12615] syzkaller0: entered promiscuous mode [ 266.819365][T12615] syzkaller0: entered allmulticast mode [ 268.144670][T12587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.344309][T12628] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 268.371705][T12628] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 268.388810][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1796'. [ 268.537181][T12638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1800'. [ 268.537181][T12637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1800'. [ 268.744916][T12646] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 268.778959][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 268.805546][T12648] syzkaller0: create flow: hash 198584654 index 1 [ 268.864235][T12646] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 268.870213][T12646] syzkaller0: group set to 0 [ 268.930282][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 268.983263][T12656] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1805'. [ 269.012307][T12644] syzkaller0: delete flow: hash 198584654 index 1 [ 269.327871][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1808'. [ 270.521800][T12656] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 270.708696][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1811'. [ 270.766779][T12688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 270.923057][T12695] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1815'. [ 270.960843][T12700] netlink: 'syz.2.1817': attribute type 3 has an invalid length. [ 271.111407][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1820'. [ 271.156906][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 271.166600][T12712] netlink: 'syz.2.1822': attribute type 13 has an invalid length. [ 271.187136][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'. [ 271.198292][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1820'. [ 271.226143][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'. [ 271.235535][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 271.241537][T12706] bridge0: port 4(dummy0) entered blocking state [ 271.251049][T12706] bridge0: port 4(dummy0) entered forwarding state [ 271.548195][T12727] netlink: 'syz.4.1826': attribute type 3 has an invalid length. [ 271.580404][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1828'. [ 271.665403][T12738] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1829'. [ 271.700347][T12738] openvswitch: netlink: Flow key attr not present in new flow. [ 271.776478][T12746] syzkaller0: entered promiscuous mode [ 271.794706][T12746] syzkaller0: entered allmulticast mode [ 271.842963][T12740] 0: reclassify loop, rule prio 0, protocol 800 [ 272.055816][T12755] SET target dimension over the limit! [ 272.140895][T12760] netlink: 'syz.0.1836': attribute type 21 has an invalid length. [ 272.281853][T12772] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 272.314762][T12772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.353376][T12772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.360541][T12772] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.372588][T12772] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 272.443568][T12781] veth5: entered promiscuous mode [ 272.456984][T12781] bond7: (slave veth5): Enslaving as an active interface with a down link [ 272.481439][T12782] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 272.507939][T12787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.529064][T12787] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 272.539348][T12787] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 272.993310][T12806] syzkaller0: entered promiscuous mode [ 273.012265][T12806] syzkaller0: entered allmulticast mode [ 273.217341][T12813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.356328][T12837] netlink: 'syz.0.1852': attribute type 14 has an invalid length. [ 273.409515][T12837] netlink: 'syz.0.1852': attribute type 13 has an invalid length. [ 273.495442][T12845] openvswitch: netlink: Missing key (keys=40, expected=100) [ 273.513798][T12845] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.610121][T12851] Bluetooth: MGMT ver 1.23 [ 273.921040][T12870] syzkaller0: entered promiscuous mode [ 273.926996][T12870] syzkaller0: entered allmulticast mode [ 274.636707][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.757635][T12921] xt_NFQUEUE: number of total queues is 0 [ 274.776622][T12923] bridge0: port 3(gretap0) entered blocking state [ 274.784363][T12923] bridge0: port 3(gretap0) entered disabled state [ 274.791341][T12923] gretap0: entered allmulticast mode [ 274.799261][T12923] gretap0: entered promiscuous mode [ 274.806332][T12923] bridge0: port 3(gretap0) entered blocking state [ 274.812987][T12923] bridge0: port 3(gretap0) entered forwarding state [ 275.730338][T12979] tipc: Enabled bearer , priority 0 [ 275.854283][T12986] tipc: Started in network mode [ 275.859437][T12986] tipc: Node identity dee8e58e744d, cluster identity 4711 [ 275.869326][T12986] tipc: Enabled bearer , priority 0 [ 276.050802][T12986] syzkaller0: entered promiscuous mode [ 276.069709][T12986] syzkaller0: entered allmulticast mode [ 276.081624][T12986] tipc: Resetting bearer [ 276.121702][T13008] netlink: 'syz.2.1898': attribute type 21 has an invalid length. [ 276.130097][T13008] __nla_validate_parse: 15 callbacks suppressed [ 276.130118][T13008] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1898'. [ 276.151288][T12987] syzkaller0: MTU too low for tipc bearer [ 276.157761][T12987] tipc: Disabling bearer [ 276.174154][T13011] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 276.193439][T12986] tipc: Resetting bearer [ 277.436861][T12986] tipc: Disabling bearer [ 278.660492][ T5893] tipc: Node number set to 2862998926 [ 278.666665][T13019] veth0: Caught tx_queue_len zero misconfig [ 278.674479][T13019] netlink: 'syz.1.1899': attribute type 3 has an invalid length. [ 278.697538][T13020] vlan5: entered promiscuous mode [ 278.947957][T13031] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 278.977699][T13031] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1903'. [ 279.205654][T13044] block nbd3: not configured, cannot reconfigure [ 279.615544][T13071] tipc: Can't bind to reserved service type 2 [ 279.638996][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1914'. [ 279.723387][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1916'. [ 279.808556][T13087] netlink: 'syz.0.1917': attribute type 11 has an invalid length. [ 279.841209][T13087] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1917'. [ 280.166863][T13111] warn_alloc: 1 callbacks suppressed [ 280.166886][T13111] syz.3.1922: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.264539][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.3.1922 Not tainted syzkaller #0 PREEMPT(full) [ 280.264578][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.264592][T13111] Call Trace: [ 280.264600][T13111] [ 280.264610][T13111] dump_stack_lvl+0xe8/0x150 [ 280.264648][T13111] warn_alloc+0x249/0x340 [ 280.264674][T13111] ? stack_trace_save+0xa9/0x100 [ 280.264702][T13111] ? __pfx_warn_alloc+0x10/0x10 [ 280.264734][T13111] ? kasan_save_track+0x4f/0x80 [ 280.264756][T13111] ? kasan_save_track+0x3e/0x80 [ 280.264775][T13111] ? __kasan_kmalloc+0x93/0xb0 [ 280.264797][T13111] ? __kmalloc_cache_noprof+0x31c/0x660 [ 280.264819][T13111] ? xskq_create+0x56/0x170 [ 280.264848][T13111] ? xsk_setsockopt+0x54c/0x990 [ 280.264872][T13111] ? do_sock_setsockopt+0x17c/0x1b0 [ 280.264900][T13111] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 280.264929][T13111] ? do_syscall_64+0x14d/0xf80 [ 280.264954][T13111] __vmalloc_node_range_noprof+0x132/0x1730 [ 280.265012][T13111] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.265040][T13111] ? __kasan_kmalloc+0x93/0xb0 [ 280.265070][T13111] vmalloc_user_noprof+0xad/0xe0 [ 280.265092][T13111] ? xskq_create+0xbf/0x170 [ 280.265123][T13111] xskq_create+0xbf/0x170 [ 280.265156][T13111] xsk_init_queue+0x8a/0xe0 [ 280.265189][T13111] xsk_setsockopt+0x54c/0x990 [ 280.265220][T13111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.265250][T13111] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.265278][T13111] ? aa_sock_opt_perm+0xff/0x1a0 [ 280.265308][T13111] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 280.265341][T13111] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.265372][T13111] do_sock_setsockopt+0x17c/0x1b0 [ 280.265409][T13111] __x64_sys_setsockopt+0x13d/0x1b0 [ 280.265447][T13111] do_syscall_64+0x14d/0xf80 [ 280.265467][T13111] ? trace_irq_disable+0x3b/0x150 [ 280.265498][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.265521][T13111] ? clear_bhb_loop+0x40/0x90 [ 280.265548][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.265578][T13111] RIP: 0033:0x7f7e4ad9c799 [ 280.265600][T13111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.265620][T13111] RSP: 002b:00007f7e4bbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.265644][T13111] RAX: ffffffffffffffda RBX: 00007f7e4b015fa0 RCX: 00007f7e4ad9c799 [ 280.265661][T13111] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 280.265674][T13111] RBP: 00007f7e4ae32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 280.265688][T13111] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.265702][T13111] R13: 00007f7e4b016038 R14: 00007f7e4b015fa0 R15: 00007ffc847a7d88 [ 280.265738][T13111] [ 280.265747][T13111] Mem-Info: [ 280.569630][T13111] active_anon:5804 inactive_anon:0 isolated_anon:0 [ 280.569630][T13111] active_file:2695 inactive_file:40008 isolated_file:0 [ 280.569630][T13111] unevictable:768 dirty:25 writeback:0 [ 280.569630][T13111] slab_reclaimable:11292 slab_unreclaimable:101447 [ 280.569630][T13111] mapped:29368 shmem:1355 pagetables:1276 [ 280.569630][T13111] sec_pagetables:0 bounce:0 [ 280.569630][T13111] kernel_misc_reclaimable:0 [ 280.569630][T13111] free:1324593 free_pcp:10629 free_cma:0 [ 280.676685][T13117] bond0: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 280.708337][T13117] bond0: entered promiscuous mode [ 280.722659][T13111] Node 0 active_anon:23116kB inactive_anon:0kB active_file:10780kB inactive_file:159832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117272kB dirty:100kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:4776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.724015][T13117] bond0: entered allmulticast mode [ 280.761100][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.769193][T13122] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1927'. [ 280.779634][T13111] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.779700][T13111] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.829057][T13122] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1927'. [ 280.864229][T13128] syz.0.1928 (13128) used obsolete PPPIOCDETACH ioctl [ 280.882801][T13111] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 280.890624][T13111] Node 0 DMA32 free:1335092kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23116kB inactive_anon:0kB active_file:10780kB inactive_file:159832kB unevictable:1536kB writepending:100kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:42524kB local_pcp:19776kB free_cma:0kB [ 280.925844][T13111] lowmem_reserve[]: 0 0 0 0 0 [ 280.930791][T13111] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 280.970765][T13129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1929'. [ 280.984093][T13111] lowmem_reserve[]: 0 0 0 0 0 [ 280.989281][T13111] Node 1 Normal free:3948412kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.036993][T13111] lowmem_reserve[]: 0 0 0 0 0 [ 281.046126][T13111] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.084293][T13111] Node 0 DMA32: 5586*4kB (UM) 3033*8kB (UME) 1500*16kB (UM) 449*32kB (UM) 67*64kB (UME) 33*128kB (UM) 229*256kB (UME) 158*512kB (UM) 133*1024kB (UME) 54*2048kB (UME) 209*4096kB (UM) = 1335856kB [ 281.104392][T13111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 281.117487][T13111] Node 1 Normal: 3*4kB (UE) 12*8kB (UME) 21*16kB (UME) 12*32kB (UME) 11*64kB (UME) 7*128kB (UME) 8*256kB (UME) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 961*4096kB (M) = 3948412kB [ 281.203221][T13111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.232152][T13111] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.338652][T13111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.359704][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'. [ 281.369060][T13143] block nbd1: Unsupported socket: should be TCP or UNIX. [ 281.425116][T13111] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.452434][T13111] 44054 total pagecache pages [ 281.464046][T13111] 0 pages in swap cache [ 281.474168][T13111] Free swap = 124996kB [ 281.478383][T13111] Total swap = 124996kB [ 281.524194][T13111] 2097051 pages RAM [ 281.528079][T13111] 0 pages HighMem/MovableOnly [ 281.582068][T13111] 427010 pages reserved [ 281.593644][T13111] 0 pages cma reserved [ 281.895384][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 281.908501][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'. [ 282.149085][T13183] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1942'. [ 282.275751][T13190] netlink: 'syz.0.1943': attribute type 15 has an invalid length. [ 282.317550][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 282.339929][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 282.539105][T13206] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 282.567702][T13210] IPVS: set_ctl: invalid protocol: 51 172.20.20.11:20003 [ 282.573146][T13206] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 282.611274][T13213] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 282.618757][T13206] netlink: 'syz.3.1951': attribute type 10 has an invalid length. [ 283.151150][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 283.557652][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 283.647288][T13278] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 283.675773][T13278] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1967'. [ 283.739769][T13289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.027490][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 284.831037][T13353] Bluetooth: hci1: too big key_count value 32778 [ 284.875039][T13355] xt_ecn: cannot match TCP bits for non-tcp packets [ 284.891477][T13352] veth0_to_team: entered promiscuous mode [ 284.939416][T13352] veth0_to_team: left promiscuous mode [ 285.105465][T13365] 8021q: adding VLAN 0 to HW filter on device bond12 [ 285.392748][T13379] netlink: 'syz.2.1996': attribute type 6 has an invalid length. [ 285.793983][ T49] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 286.031138][T13412] wg1 speed is unknown, defaulting to 1000 [ 286.075879][T13414] netlink: 'syz.1.2005': attribute type 3 has an invalid length. [ 286.490359][T13390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.504961][T13422] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 286.547605][T13422] __nla_validate_parse: 5 callbacks suppressed [ 286.547626][T13422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2007'. [ 286.941293][T13440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2012'. [ 287.006842][T13448] tipc: Failed to remove unknown binding: 66,1,1/2862998926:3343762663/3343762665 [ 287.054261][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 287.331066][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 287.487565][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'. [ 287.670686][T13478] xt_l2tp: invalid flags combination: 0 [ 287.685234][T13480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.711740][T13481] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 287.725683][T13481] team0: Device vxcan1 is of different type [ 287.742926][T13484] netlink: 'syz.3.2027': attribute type 10 has an invalid length. [ 287.754412][T13484] team0: Device vxcan1 is of different type [ 287.819978][T13487] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2028'. [ 288.174874][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 288.184450][T13507] 8021q: VLANs not supported on caif0 [ 288.190832][T13507] syzkaller1: entered promiscuous mode [ 288.200485][T13507] syzkaller1: entered allmulticast mode [ 288.284142][T13515] sctp: [Deprecated]: syz.2.2038 (pid 13515) Use of int in max_burst socket option. [ 288.284142][T13515] Use struct sctp_assoc_value instead [ 288.348119][T13515] sctp: [Deprecated]: syz.2.2038 (pid 13515) Use of int in max_burst socket option. [ 288.348119][T13515] Use struct sctp_assoc_value instead [ 288.391458][T13515] sctp: [Deprecated]: syz.2.2038 (pid 13515) Use of int in max_burst socket option. [ 288.391458][T13515] Use struct sctp_assoc_value instead [ 288.609247][T13532] syzkaller0: entered promiscuous mode [ 288.657041][T13532] syzkaller0: entered allmulticast mode [ 289.228422][T13563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.559353][T13586] netlink: 'syz.2.2059': attribute type 1 has an invalid length. [ 289.603628][T13586] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2059'. [ 289.655119][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2061'. [ 289.736717][T13592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2061'. [ 289.786651][T13592] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2061'. [ 289.831902][T13598] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 289.871625][T13598] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 289.912962][T13605] pim6reg: entered allmulticast mode [ 289.955462][T13613] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 290.400520][T13628] netlink: 'syz.3.2074': attribute type 7 has an invalid length. [ 290.440497][T13628] netlink: 'syz.3.2074': attribute type 8 has an invalid length. [ 290.865071][T13608] syzkaller0: entered allmulticast mode [ 290.888968][T13660] syzkaller0: entered promiscuous mode [ 290.900828][T13660] syzkaller0: entered allmulticast mode [ 291.914355][T13714] sctp: [Deprecated]: syz.4.2096 (pid 13714) Use of int in maxseg socket option. [ 291.914355][T13714] Use struct sctp_assoc_value instead [ 292.020520][T13721] syzkaller0: entered promiscuous mode [ 292.033616][T13721] syzkaller0: entered allmulticast mode [ 292.068813][T13721] tipc: Enabled bearer , priority 0 [ 292.082557][T13718] tipc: Resetting bearer [ 292.108689][T13718] tipc: Disabling bearer [ 292.244795][T13732] __nla_validate_parse: 4 callbacks suppressed [ 292.244813][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 292.428244][T13739] siw: device registration error -23 [ 292.441632][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 292.491519][T13739] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 292.507047][T13748] IPVS: sh: FWM 3 0x00000003 - no destination available [ 292.523149][T13739] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 292.561520][T13739] gretap1: entered promiscuous mode [ 292.580185][T13739] gretap1: entered allmulticast mode [ 292.660919][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 292.680682][T13755] wg1 speed is unknown, defaulting to 1000 [ 293.174337][T13781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2113'. [ 293.558655][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 293.582333][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 293.616317][T13804] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 293.647746][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 293.959882][T13824] xt_CT: No such helper "syz1" [ 294.205165][T13844] netlink: 'syz.1.2131': attribute type 10 has an invalid length. [ 294.223239][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 294.293790][T13844] team0 (unregistering): Port device team_slave_0 removed [ 294.306540][T13849] can: request_module (can-proto-5) failed. [ 294.326882][T13844] team0 (unregistering): Port device team_slave_1 removed [ 294.365342][T13847] pim6reg1: entered promiscuous mode [ 294.375034][T13847] pim6reg1: entered allmulticast mode [ 294.763901][T13873] syzkaller0: entered promiscuous mode [ 294.769429][T13873] syzkaller0: entered allmulticast mode [ 294.782666][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 295.458587][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 295.483787][T13921] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 295.705535][T13930] syzkaller0: entered promiscuous mode [ 295.711214][T13930] syzkaller0: entered allmulticast mode [ 295.996207][T13906] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 296.794843][T13977] bridge0: port 3(gretap0) entered disabled state [ 297.084496][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.092425][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.559991][T13977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.592789][T13977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.020434][T13981] __nla_validate_parse: 6 callbacks suppressed [ 298.020462][T13981] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2170'. [ 298.201355][ T6252] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.226074][ T6252] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.314090][ T6252] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.357281][ T6252] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.434682][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2174'. [ 298.533323][T14008] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 298.852473][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2180'. [ 298.870008][T14023] tipc: New replicast peer: 255.255.255.255 [ 298.877726][T14022] netlink: 'syz.0.2180': attribute type 7 has an invalid length. [ 298.894317][T14023] tipc: Enabled bearer , priority 10 [ 298.896717][T14022] netlink: 'syz.0.2180': attribute type 8 has an invalid length. [ 298.921535][T14023] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2181'. [ 298.932180][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 298.956406][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 299.150329][T14031] netlink: 'syz.0.2184': attribute type 15 has an invalid length. [ 299.247892][T14039] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 299.403736][T14044] bpq0: entered allmulticast mode [ 299.571124][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2193'. [ 299.689988][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2196'. [ 299.717480][T14070] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 299.800707][T14070] bond7: entered promiscuous mode [ 299.806599][T14070] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.003217][T14089] openvswitch: netlink: IP tunnel dst address not specified [ 300.003663][ T5941] tipc: Node number set to 312472857 [ 300.161973][T14095] syzkaller1: entered promiscuous mode [ 300.170314][T14095] syzkaller1: entered allmulticast mode [ 300.621365][T14124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2214'. [ 301.200043][T14163] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.226887][T14163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2226'. [ 301.437500][T14176] netlink: 'syz.1.2229': attribute type 21 has an invalid length. [ 301.603577][T14189] ipt_REJECT: TCP_RESET invalid for non-tcp [ 301.629916][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.743922][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.053513][T14212] netlink: 'syz.3.2238': attribute type 3 has an invalid length. [ 302.073272][T14212] netlink: 'syz.3.2238': attribute type 61 has an invalid length. [ 302.275849][T14216] syzkaller0: entered promiscuous mode [ 302.281485][T14216] syzkaller0: entered allmulticast mode [ 303.857963][T14220] tipc: Enabled bearer , priority 0 [ 303.929933][T14224] syzkaller0: entered promiscuous mode [ 303.941847][T14224] syzkaller0: entered allmulticast mode [ 303.949540][T14224] tipc: Resetting bearer [ 303.991443][T14218] tipc: Resetting bearer [ 305.585249][T14218] tipc: Disabling bearer [ 305.620667][T14259] __nla_validate_parse: 8 callbacks suppressed [ 305.620687][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2248'. [ 305.643281][T14263] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2248'. [ 305.837733][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2256'. [ 306.083124][T14309] block nbd4: not configured, cannot reconfigure [ 306.216761][T14315] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 306.277612][T14315] bond8: entered promiscuous mode [ 306.283172][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 306.306925][T14315] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.328634][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 306.481568][T14315] bond8: (slave bridge7): making interface the new active one [ 306.489548][T14315] bridge7: entered promiscuous mode [ 306.498386][T14315] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 306.517167][T14335] x_tables: duplicate underflow at hook 3 [ 306.536516][T14335] x_tables: duplicate underflow at hook 3 [ 306.676803][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2271'. [ 306.856133][T14357] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 306.908889][T14357] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2273'. [ 306.945925][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 306.998500][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2277'. [ 307.002383][T14363] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 307.020518][T14360] wg1 speed is unknown, defaulting to 1000 [ 307.072117][T14363] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 307.090707][T14363] netlink: 'syz.0.2277': attribute type 2 has an invalid length. [ 307.113614][T14363] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2277'. [ 307.134956][T14369] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 307.972696][T14393] dvmrp6: entered allmulticast mode [ 308.415858][T14422] veth5: entered allmulticast mode [ 308.698158][T14441] netlink: 'syz.1.2305': attribute type 21 has an invalid length. [ 308.706234][T14441] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.763773][T14441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.771093][T14441] IPv6: NLM_F_CREATE should be set when creating new route [ 308.773525][T14447] A link change request failed with some changes committed already. Interface 9o+4 may have been left with an inconsistent configuration, please check. [ 308.778627][T14441] IPv6: NLM_F_CREATE should be set when creating new route [ 309.037248][T14457] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20004 [ 309.089908][T14462] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 309.228042][T14471] SET target dimension over the limit! [ 309.340617][T14480] netlink: 'syz.0.2315': attribute type 32 has an invalid length. [ 309.369685][T14480] nbd: socks must be embedded in a SOCK_ITEM attr [ 309.941387][T14517] netlink: 'syz.0.2325': attribute type 9 has an invalid length. [ 310.423570][T14538] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.673359][T14549] block nbd1: NBD_DISCONNECT [ 310.985800][T14566] __nla_validate_parse: 22 callbacks suppressed [ 310.985824][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 311.012142][T14566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 311.310789][T14574] wg1 speed is unknown, defaulting to 1000 [ 311.503940][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2347'. [ 311.563379][T14583] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 311.614128][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 311.739870][T14586] bond8: (slave gretap2): making interface the new active one [ 311.748474][T14586] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 311.768967][T14599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2350'. [ 311.823047][T14604] netlink: 'syz.3.2353': attribute type 21 has an invalid length. [ 311.845896][T14603] Cannot find add_set index 2 as target [ 311.944043][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 312.112684][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 312.193244][T14610] macsec0: entered promiscuous mode [ 312.198519][T14610] macsec0: entered allmulticast mode [ 312.213063][T14610] veth1_macvtap: entered allmulticast mode [ 312.219126][T14610] macsec0: left promiscuous mode [ 312.262545][T14610] macsec0: left allmulticast mode [ 312.267738][T14610] veth1_macvtap: left allmulticast mode [ 312.403396][T14621] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2359'. [ 312.676628][T14640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.721692][T14642] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 312.768544][T14645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.810264][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2366'. [ 313.695790][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 313.973280][T14710] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 314.243118][T14726] x_tables: duplicate underflow at hook 1 [ 314.851825][T14772] openvswitch: netlink: Duplicate or invalid key (type 0). [ 314.859609][T14772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.084290][T14775] blkio.reset_stats is deprecated [ 317.295944][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.465060][T14743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.695986][T14820] __nla_validate_parse: 5 callbacks suppressed [ 317.696007][T14820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'. [ 317.772448][T14820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'. [ 318.371004][T14848] bond13: entered promiscuous mode [ 318.902492][T14883] netlink: 'syz.2.2422': attribute type 21 has an invalid length. [ 318.908730][T14880] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 318.953807][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 319.008112][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2422'. [ 319.018531][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2422'. [ 319.032696][T14883] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 319.079651][T14883] bond14 (unregistering): Released all slaves [ 319.216913][T14900] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 319.236946][T14900] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 319.568650][T14920] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 319.585984][T14924] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 319.601436][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2433'. [ 319.606395][ T30] audit: type=1800 audit(1772379753.292:2): pid=14919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2434" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2377 res=0 errno=0 [ 319.800338][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 319.815030][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 319.940624][T14932] lo: Caught tx_queue_len zero misconfig [ 320.071343][T14947] netlink: 'syz.2.2440': attribute type 21 has an invalid length. [ 320.110474][T14947] netlink: 'syz.2.2440': attribute type 6 has an invalid length. [ 320.129455][T14947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2440'. [ 320.258446][T14954] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2444'. [ 322.440757][T14912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.642251][T14969] netlink: 'syz.4.2451': attribute type 4 has an invalid length. [ 322.650954][T14967] xt_l2tp: v2 doesn't support IP mode [ 322.673289][T14969] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 322.703693][T14969] __nla_validate_parse: 3 callbacks suppressed [ 322.703713][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 322.936208][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 322.987218][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 323.115025][T14999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2455'. [ 323.619840][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.649800][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.981434][T14965] veth1_vlan: left allmulticast mode [ 324.086135][T14970] geneve3: entered promiscuous mode [ 324.091643][T14970] geneve3: entered allmulticast mode [ 324.104377][T14969] macvlan0: left promiscuous mode [ 324.145812][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2451'. [ 324.208699][T15017] syzkaller0: entered promiscuous mode [ 324.214553][T15017] syzkaller0: entered allmulticast mode [ 324.240466][ T3476] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.268664][ T3476] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.328452][ T3476] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.349472][ T3476] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.363851][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.677572][T15053] gre3: entered promiscuous mode [ 324.685940][T15053] gre3: entered allmulticast mode [ 324.828265][T15063] siw: device registration error -23 [ 324.849957][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2468'. [ 324.914939][T15069] syzkaller0: entered promiscuous mode [ 324.920752][T15069] syzkaller0: entered allmulticast mode [ 325.197147][T15079] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2473'. [ 325.316354][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2475'. [ 325.329184][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 325.340167][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 325.632824][ T5942] wg1 speed is unknown, defaulting to 1000 [ 325.633409][ T9225] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.638934][ T5942] syz2: Port: 1 Link DOWN [ 325.690753][ T9225] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.810000][ T9225] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.839578][ T9225] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.864344][ T9225] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.883393][ T9225] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.903690][ T9225] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.921505][ T9225] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.096364][T15116] A link change request failed with some changes committed already. Interface 9o+4 may have been left with an inconsistent configuration, please check. [ 326.816452][T15104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.854886][T15180] __nla_validate_parse: 1 callbacks suppressed [ 327.854915][T15180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2502'. [ 327.925139][T15180] netlink: 'syz.4.2502': attribute type 64 has an invalid length. [ 327.933746][T15180] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2502'. [ 328.213641][T15195] syzkaller0: entered promiscuous mode [ 328.219191][T15195] syzkaller0: entered allmulticast mode [ 328.315236][T15200] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2509'. [ 328.533300][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 328.553584][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 328.566855][T15204] netlink: 'syz.4.2511': attribute type 25 has an invalid length. [ 328.758675][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.771183][T13988] wg1 speed is unknown, defaulting to 1000 [ 328.777431][T13988] syz2: Port: 1 Link ACTIVE [ 328.782704][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.813703][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2517'. [ 328.817576][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.835264][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.843379][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.843783][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 328.854419][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.866732][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.867447][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 328.880380][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.891465][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 328.900428][T15218] "syz.0.2516" (15218) uses obsolete ecb(arc4) skcipher [ 329.092944][T15232] syzkaller0: entered promiscuous mode [ 329.098674][T15232] syzkaller0: entered allmulticast mode [ 329.282589][T15237] netlink: 'syz.2.2522': attribute type 6 has an invalid length. [ 329.303763][T15237] syzkaller0: entered promiscuous mode [ 329.309311][T15237] syzkaller0: entered allmulticast mode [ 329.477961][T15252] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2525'. [ 329.545112][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'. [ 329.925381][T15276] tipc: Enabling of bearer rejected, failed to enable media [ 330.868665][T15331] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 330.898926][T15331] netlink: 'syz.0.2550': attribute type 2 has an invalid length. [ 331.380905][T15362] netlink: 'syz.4.2559': attribute type 25 has an invalid length. [ 332.123158][T15395] netlink: 'syz.0.2569': attribute type 5 has an invalid length. [ 332.255190][T15413] tipc: Enabling of bearer rejected, already enabled [ 332.605349][T15433] tipc: Enabling of bearer rejected, failed to enable media [ 333.065806][T15445] syzkaller0: entered promiscuous mode [ 333.089603][T15445] syzkaller0: entered allmulticast mode [ 333.301623][T15446] syzkaller0: entered promiscuous mode [ 333.373659][T15446] syzkaller0: entered allmulticast mode [ 333.642716][T15472] xt_socket: unknown flags 0xe4 [ 333.748292][T15475] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 333.755708][T15476] __nla_validate_parse: 10 callbacks suppressed [ 333.755765][T15476] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2595'. [ 334.760951][T15489] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 334.820237][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2598'. [ 335.115374][T15464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2590'. [ 335.125312][T15463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2590'. [ 335.140491][T15476] bridge0: port 4(dummy0) entered disabled state [ 335.153110][T15476] dummy0 (unregistering): left allmulticast mode [ 335.159789][T15476] bridge0: port 4(dummy0) entered disabled state [ 335.197645][T15489] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 335.395905][T15502] netlink: 'syz.2.2600': attribute type 12 has an invalid length. [ 335.579324][T15517] netlink: 'syz.4.2603': attribute type 5 has an invalid length. [ 335.592676][T15518] netlink: 'syz.3.2605': attribute type 4 has an invalid length. [ 335.703889][T15526] netlink: 'syz.1.2607': attribute type 21 has an invalid length. [ 335.712230][T15526] netlink: 'syz.1.2607': attribute type 22 has an invalid length. [ 335.738067][T15526] netlink: 'syz.1.2607': attribute type 23 has an invalid length. [ 335.752275][T15526] netlink: 'syz.1.2607': attribute type 25 has an invalid length. [ 335.783757][T15526] netlink: 'syz.1.2607': attribute type 26 has an invalid length. [ 335.811063][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'. [ 336.015275][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 336.043082][T15546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2612'. [ 336.053673][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2610'. [ 336.067224][T15547] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2613'. [ 336.105655][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 336.318878][T15566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 336.348742][T15566] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 336.371294][T15566] gretap3: entered promiscuous mode [ 336.403419][T15566] gretap3: entered allmulticast mode [ 336.663037][T15590] IPVS: sh: FWM 3 0x00000003 - no destination available [ 337.077716][T15614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.444566][T15622] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 337.864853][T15641] rdma_op ffff8880340449f0 conn xmit_rdma 0000000000000000 [ 338.105104][T15649] ipt_ECN: cannot use operation on non-tcp rule [ 338.115021][T15648] wg1 speed is unknown, defaulting to 1000 [ 338.405958][ T9225] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 338.439904][T15672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.451746][T15674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.939072][T15681] syzkaller1: entered promiscuous mode [ 338.948150][T15694] __nla_validate_parse: 11 callbacks suppressed [ 338.948239][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2651'. [ 338.972384][T15681] syzkaller1: entered allmulticast mode [ 339.053354][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'. [ 339.084852][T15705] validate_nla: 10 callbacks suppressed [ 339.084872][T15705] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 339.117316][T15705] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2651'. [ 339.148862][T15705] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2651'. [ 339.235301][T15705] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 339.272292][T15705] netlink: 'syz.4.2651': attribute type 8 has an invalid length. [ 339.297802][T15705] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2651'. [ 339.545213][T15732] netlink: 'syz.0.2658': attribute type 4 has an invalid length. [ 339.563607][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2658'. [ 340.460528][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 340.543322][T15771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2671'. [ 341.004862][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2682'. [ 341.038496][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2680'. [ 341.222934][T15813] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 341.230886][T15813] netlink: 'syz.2.2684': attribute type 2 has an invalid length. [ 341.626012][T15841] vlan2: left promiscuous mode [ 341.636570][T15841] geneve1: left promiscuous mode [ 341.641949][T15841] vlan2: left allmulticast mode [ 341.647531][T15841] geneve1: left allmulticast mode [ 341.654351][T15841] vlan3: left promiscuous mode [ 341.659479][T15841] vlan3: left allmulticast mode [ 341.664952][T15841] bridge0: left allmulticast mode [ 341.670573][T15841] vlan4: left promiscuous mode [ 341.675986][T15841] bridge0: left promiscuous mode [ 341.696103][T15841] bond7: left promiscuous mode [ 341.719471][T15841] veth5: left allmulticast mode [ 341.741761][T15841] gretap3: left promiscuous mode [ 341.759770][T15841] gretap3: left allmulticast mode [ 341.873480][T15846] netlink: 'syz.0.2693': attribute type 12 has an invalid length. [ 342.137596][T15867] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 342.162304][T15867] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 342.369417][T15882] gtp1: entered promiscuous mode [ 342.385150][T15882] gtp1: entered allmulticast mode [ 342.765858][T15911] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 342.774516][T15908] netlink: 'syz.2.2709': attribute type 3 has an invalid length. [ 343.496514][T15944] team0: entered promiscuous mode [ 343.517268][T15944] team0: entered allmulticast mode [ 344.201256][T15978] __nla_validate_parse: 19 callbacks suppressed [ 344.201277][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2735'. [ 344.280707][T15978] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2735'. [ 344.313609][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 344.331340][T15998] netlink: 'syz.0.2736': attribute type 13 has an invalid length. [ 344.366229][T15998] netlink: 'syz.0.2736': attribute type 17 has an invalid length. [ 344.417386][T15998] gre0: left promiscuous mode [ 344.445049][T15998] gre0: left allmulticast mode [ 344.591643][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.605196][T15998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.673632][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2742'. [ 344.887023][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2748'. [ 345.033675][T16039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2749'. [ 345.074442][T16042] syzkaller0: entered promiscuous mode [ 345.080247][T16042] syzkaller0: entered allmulticast mode [ 345.091307][T16042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2750'. [ 345.300642][T16049] erspan0: entered allmulticast mode [ 345.768370][T16081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2761'. [ 345.813138][T16081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2761'. [ 345.847654][T16085] netlink: 'syz.3.2763': attribute type 11 has an invalid length. [ 345.876529][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'. [ 345.945105][T16092] syzkaller0: entered promiscuous mode [ 345.950670][T16092] syzkaller0: entered allmulticast mode [ 346.092276][T16106] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 347.445266][T16097] wg1 speed is unknown, defaulting to 1000 [ 347.594716][T16114] netlink: 'syz.0.2769': attribute type 4 has an invalid length. [ 347.932483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.203875][T16147] netlink: 'syz.4.2782': attribute type 2 has an invalid length. [ 348.352919][T16157] bpq0: left allmulticast mode [ 348.483794][T16161] erspan1: entered allmulticast mode [ 349.129571][T16211] xt_bpf: check failed: parse error [ 349.268315][T16218] 8021q: VLANs not supported on lo [ 349.413270][T16227] __nla_validate_parse: 5 callbacks suppressed [ 349.413292][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2805'. [ 349.585501][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2808'. [ 349.658956][T16240] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.917665][T16258] netlink: 'syz.2.2816': attribute type 10 has an invalid length. [ 350.151935][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 350.190743][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 350.386445][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2824'. [ 350.534444][T16292] netlink: zone id is out of range [ 350.541444][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 350.551006][T16292] netlink: zone id is out of range [ 350.682540][T16307] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2829'. [ 350.730937][T16307] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2829'. [ 350.784997][T16307] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2829'. [ 350.852213][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'. [ 350.962634][T16328] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 351.320985][T16357] netlink: 'syz.4.2842': attribute type 1 has an invalid length. [ 351.376079][T16357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.441846][T16357] bond8: (slave veth11): Enslaving as an active interface with a down link [ 351.468869][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.476192][T16357] bond8: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 351.519166][T16366] netlink: 'syz.0.2843': attribute type 1 has an invalid length. [ 353.052412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.360916][T16362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.515376][T16415] __nla_validate_parse: 5 callbacks suppressed [ 354.515395][T16415] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2851'. [ 354.544250][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2851'. [ 354.642367][T16425] syzkaller0: entered promiscuous mode [ 354.651370][T16424] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2855'. [ 354.662638][T16425] syzkaller0: entered allmulticast mode [ 354.747240][T16427] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 354.773219][T16427] netlink: 'syz.3.2856': attribute type 33 has an invalid length. [ 354.819047][T16436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2859'. [ 354.844915][T16434] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2858'. [ 355.135162][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 355.233895][T16456] xt_cgroup: path and classid specified [ 355.331670][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.341298][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.353522][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.363290][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.370971][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.451407][T16460] wg1 speed is unknown, defaulting to 1000 [ 355.726545][T16476] delete_channel: no stack [ 355.785209][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 355.897554][T16460] chnl_net:caif_netlink_parms(): no params data found [ 356.159224][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2878'. [ 356.314784][T16460] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.322184][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.329807][T16460] bridge_slave_0: entered allmulticast mode [ 356.340332][T16460] bridge_slave_0: entered promiscuous mode [ 356.350549][T16460] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.360777][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.372680][T16460] bridge_slave_1: entered allmulticast mode [ 356.390341][T16460] bridge_slave_1: entered promiscuous mode [ 356.405918][T16518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.479046][T16518] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2885'. [ 356.495244][T16460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.630848][T16460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.700028][T16460] team0: Port device team_slave_0 added [ 356.709486][T16460] team0: Port device team_slave_1 added [ 356.719208][T16526] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2888'. [ 356.733525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.859883][T16460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.882755][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.938880][T16460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.965598][T16460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.974660][T16460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.015435][T16460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.158655][T16460] hsr_slave_0: entered promiscuous mode [ 357.170760][T16460] hsr_slave_1: entered promiscuous mode [ 357.177892][T16460] debugfs: 'hsr0' already exists in 'hsr' [ 357.184398][T16460] Cannot create hsr debugfs directory [ 357.237556][T16549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.452887][ T5144] Bluetooth: hci5: command tx timeout [ 357.706676][T16460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.774489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.935487][T16460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.063960][T16460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.109040][T16576] gre0: entered allmulticast mode [ 358.186161][T16460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.396741][T16593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.405926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.406724][T16588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.444818][T16593] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 358.444837][T16593] sctp: [Deprecated]: syz.0.2909 (pid 16593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.444837][T16593] Use struct sctp_sack_info instead [ 358.474316][T16589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.569327][T16596] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 358.647818][T16460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.679786][T16460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.710752][T16460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.740106][T16460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.812278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.928290][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.974702][T16460] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.000209][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.007487][ T9225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.047605][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.054860][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.219657][T16633] netlink: 'syz.1.2919': attribute type 8 has an invalid length. [ 359.258697][T16633] sch_fq: defrate 0 ignored. [ 359.532464][ T5144] Bluetooth: hci5: command tx timeout [ 359.663919][T16460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.806604][T16460] veth0_vlan: entered promiscuous mode [ 359.851897][T16460] veth1_vlan: entered promiscuous mode [ 359.933658][T16671] __nla_validate_parse: 8 callbacks suppressed [ 359.933679][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 359.955715][T16460] veth0_macvtap: entered promiscuous mode [ 360.016649][T16460] veth1_macvtap: entered promiscuous mode [ 360.068624][T16460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.120451][T16460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.149080][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.263289][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.313627][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.339246][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.589819][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 360.754536][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.790991][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.895984][ T9225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.906129][ T9225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.942503][T16713] ip6t_srh: unknown srh match flags 5F28 [ 360.989924][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 361.476720][ T9225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.485643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.564818][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2946'. [ 361.620399][ T5144] Bluetooth: hci5: command tx timeout [ 362.268433][T16769] siw: device registration error -23 [ 362.332533][T16779] netlink: 'syz.3.2954': attribute type 39 has an invalid length. [ 362.461652][T16787] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 362.469522][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 362.494622][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 362.551532][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 362.562351][T16792] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 362.607891][T16787] gretap4: entered promiscuous mode [ 362.617644][T16787] bond9: (slave gretap4): making interface the new active one [ 362.630010][T16787] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 362.669123][T16798] macvlan3: entered promiscuous mode [ 362.675427][T16798] macvlan3: entered allmulticast mode [ 362.684643][T16798] bond9: entered promiscuous mode [ 362.690791][T16798] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 362.699757][T16798] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 362.717134][T16798] bond9: left promiscuous mode [ 362.781073][T16805] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 362.880239][T16809] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 362.894438][T16809] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 362.906711][T16809] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 362.990426][T16818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 363.035355][T16805] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 363.078117][T16805] bond9: (slave vcan1): making interface the new active one [ 363.091546][T16805] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 363.197241][T16827] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2967'. [ 363.265580][T16831] wg1 speed is unknown, defaulting to 1000 [ 363.702618][ T5144] Bluetooth: hci5: command tx timeout [ 363.907961][T16861] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 364.100251][T16868] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2978'. [ 364.113936][T16868] gre0: entered promiscuous mode [ 364.124298][T16870] netlink: 'syz.1.2979': attribute type 25 has an invalid length. [ 364.133295][T16870] netlink: 'syz.1.2979': attribute type 25 has an invalid length. [ 364.331620][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.342581][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.350805][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.360905][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.372572][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.426384][T16872] wg1 speed is unknown, defaulting to 1000 [ 364.610826][T16872] chnl_net:caif_netlink_parms(): no params data found [ 364.699964][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.707319][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.714819][T16872] bridge_slave_0: entered allmulticast mode [ 364.723162][T16872] bridge_slave_0: entered promiscuous mode [ 364.731386][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.738883][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.746358][T16872] bridge_slave_1: entered allmulticast mode [ 364.754346][T16872] bridge_slave_1: entered promiscuous mode [ 364.789998][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.802535][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.839037][T16872] team0: Port device team_slave_0 added [ 364.847318][T16872] team0: Port device team_slave_1 added [ 364.876569][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.884064][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.910770][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.923635][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.931134][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.957288][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.005394][T16872] hsr_slave_0: entered promiscuous mode [ 365.011937][T16872] hsr_slave_1: entered promiscuous mode [ 365.018321][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 365.024623][T16872] Cannot create hsr debugfs directory [ 365.156952][T16872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.218347][T16872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.277394][T16872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.353660][T16872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.412440][ T5144] Bluetooth: hci4: command tx timeout [ 366.489978][T16845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.534019][T16872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.588055][T16872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.629032][T16872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.673355][T16872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.730631][T16889] __nla_validate_parse: 2 callbacks suppressed [ 366.730650][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2982'. [ 366.958797][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.999754][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.046391][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.053626][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.074773][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.082014][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.212881][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.222179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.496588][T16924] delete_channel: no stack [ 367.613493][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.683386][T16934] netlink: 'syz.3.2996': attribute type 23 has an invalid length. [ 367.759630][T16872] veth0_vlan: entered promiscuous mode [ 367.803814][T16872] veth1_vlan: entered promiscuous mode [ 367.889671][T16872] veth0_macvtap: entered promiscuous mode [ 367.913425][T16872] veth1_macvtap: entered promiscuous mode [ 367.976140][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.008478][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.050600][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.073365][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.119159][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.186598][T16955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3003'. [ 368.191263][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.208961][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'. [ 368.372352][T16965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3005'. [ 368.387622][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.401869][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.438234][T16965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3005'. [ 368.450093][T16965] tipc: Started in network mode [ 368.458980][T16965] tipc: Node identity 1, cluster identity 129 [ 368.467554][T16965] tipc: Node number set to 1 [ 368.475569][T16965] tipc: Cannot configure node identity twice [ 368.492301][ T5144] Bluetooth: hci4: command tx timeout [ 368.663821][T16979] netlink: 'syz.0.3008': attribute type 33 has an invalid length. [ 368.671700][T16979] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3008'. [ 368.728332][T16970] syzkaller0: entered promiscuous mode [ 368.734893][T16970] syzkaller0: entered allmulticast mode [ 368.784986][T16983] sctp: [Deprecated]: syz.0.3008 (pid 16983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.784986][T16983] Use struct sctp_sack_info instead [ 368.924977][T16988] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3008'. [ 370.174672][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.185106][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.416641][T16990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.576436][ T5144] Bluetooth: hci4: command tx timeout [ 370.738476][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 370.768998][T17014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3016'. [ 370.788601][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.798018][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.803800][T17014] openvswitch: netlink: Flow key attr not present in new flow. [ 370.809174][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.822736][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.831400][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.846864][T17018] netlink: 54 bytes leftover after parsing attributes in process `syz.0.3017'. [ 370.889743][T17015] wg1 speed is unknown, defaulting to 1000 [ 370.898573][T17018] tipc: Enabling of bearer rejected, failed to enable media [ 371.047850][T17023] netlink: 'syz.1.3019': attribute type 2 has an invalid length. [ 371.440801][T17015] chnl_net:caif_netlink_parms(): no params data found [ 371.756819][T17015] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.764183][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.771481][T17015] bridge_slave_0: entered allmulticast mode [ 371.780459][T17015] bridge_slave_0: entered promiscuous mode [ 371.789654][T17015] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.797293][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.805464][T17015] bridge_slave_1: entered allmulticast mode [ 371.814740][T17015] bridge_slave_1: entered promiscuous mode [ 371.859340][T17015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.873924][T17015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.886457][T17072] netlink: 'syz.3.3027': attribute type 64 has an invalid length. [ 371.920531][T17015] team0: Port device team_slave_0 added [ 371.975808][T17015] team0: Port device team_slave_1 added [ 372.082952][T17015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.089960][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.182022][T17015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.221212][T17015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.234416][T17086] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.243220][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.305950][T17015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.540618][T17091] wg1 speed is unknown, defaulting to 1000 [ 372.611549][T17015] hsr_slave_0: entered promiscuous mode [ 372.648219][T17015] hsr_slave_1: entered promiscuous mode [ 372.655202][ T5144] Bluetooth: hci4: command tx timeout [ 372.676285][T17015] debugfs: 'hsr0' already exists in 'hsr' [ 372.686544][T17015] Cannot create hsr debugfs directory [ 372.892674][ T5144] Bluetooth: hci0: command tx timeout [ 372.973671][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.982141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.369784][T17015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.559316][T17015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.762597][T17146] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.768773][T17015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.769972][T17146] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.810730][T17147] netlink: 'syz.0.3048': attribute type 2 has an invalid length. [ 373.837326][T17147] __nla_validate_parse: 4 callbacks suppressed [ 373.837346][T17147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3048'. [ 373.894069][T17015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.917716][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.925050][T17145] IPv6: NLM_F_CREATE should be set when creating new route [ 373.932371][T17145] IPv6: NLM_F_CREATE should be set when creating new route [ 373.955269][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.963196][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.976382][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.015878][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.040308][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.079796][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.100551][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.118704][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.143225][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.155793][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.173896][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.184494][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.192414][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.200231][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.209442][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.217208][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.228290][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.247820][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.261378][T17164] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3052'. [ 374.266545][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.279521][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.294950][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.302861][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.310734][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.321944][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.331316][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.385597][T17167] syzkaller0: entered promiscuous mode [ 374.391145][T17167] syzkaller0: entered allmulticast mode [ 374.398260][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.424599][T17015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.427607][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.448808][T17015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.464364][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.482458][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.500392][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.514737][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.532276][T17145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.800293][T17015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.891686][T17178] bond9: option all_slaves_active: invalid value (222) [ 374.906480][T17178] bond9 (unregistering): Released all slaves [ 374.945057][T17015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.976672][ T5144] Bluetooth: hci0: command tx timeout [ 375.171202][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.207850][T17015] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.228199][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.235452][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.264439][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.271661][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.617640][T17228] tc_dump_action: action bad kind [ 375.635512][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.644537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.788470][T17015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.130442][T17259] bond1: option miimon: invalid value (18446744073709551585) [ 376.139071][T17259] bond1: option miimon: allowed values 0 - 2147483647 [ 376.154114][T17259] bond1 (unregistering): Released all slaves [ 376.198683][T17258] 9o+4: renamed from lo (while UP) [ 376.259015][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 376.421547][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3074'. [ 376.451191][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 376.493895][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 376.745448][T17015] veth0_vlan: entered promiscuous mode [ 376.786871][T17015] veth1_vlan: entered promiscuous mode [ 376.924202][T17015] veth0_macvtap: entered promiscuous mode [ 376.949029][T17015] veth1_macvtap: entered promiscuous mode [ 376.991053][T17015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.052495][ T5144] Bluetooth: hci0: command tx timeout [ 377.065284][T17015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.104529][ T9225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.121541][T17309] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3085'. [ 377.141233][ T9225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.151710][ T9225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.219774][ T9225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.274136][T17312] syzkaller0: entered promiscuous mode [ 377.289772][T17312] syzkaller0: entered allmulticast mode [ 377.402218][ T9225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.431139][ T9225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.481822][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.506580][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.975467][T17337] netlink: 'syz.2.3094': attribute type 10 has an invalid length. [ 378.007067][T17337] team0: Device vxcan1 is of different type [ 378.174334][T17343] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 378.254520][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.265148][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.273392][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.284248][T17342] bond0: entered promiscuous mode [ 378.289344][T17342] bond_slave_0: entered promiscuous mode [ 378.296278][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.306676][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.316940][T17342] bond_slave_1: entered promiscuous mode [ 378.346595][T17346] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 378.454070][T17350] wg1 speed is unknown, defaulting to 1000 [ 378.545569][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 378.624636][ T5144] block nbd2: Receive control failed (result -1) [ 378.718540][T17365] netlink: get zone limit has 4 unknown bytes [ 378.737566][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.748611][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.757145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.945901][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3104'. [ 378.968212][T17379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.001931][T17379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.145496][ T5144] Bluetooth: hci0: command tx timeout [ 379.340028][T17350] chnl_net:caif_netlink_parms(): no params data found [ 379.830657][T17396] syzkaller1: entered promiscuous mode [ 379.842154][T17396] syzkaller1: entered allmulticast mode [ 379.986716][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.023331][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.030670][T17350] bridge_slave_0: entered allmulticast mode [ 380.067900][T17350] bridge_slave_0: entered promiscuous mode [ 380.147974][T17401] syzkaller0: entered promiscuous mode [ 380.183067][T17401] syzkaller0: entered allmulticast mode [ 380.212386][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.219781][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.228150][T17432] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3114'. [ 380.253297][T17350] bridge_slave_1: entered allmulticast mode [ 380.274790][T17350] bridge_slave_1: entered promiscuous mode [ 380.343052][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 380.382403][T17435] x_tables: duplicate underflow at hook 1 [ 380.414564][T17437] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 380.425109][ T5144] Bluetooth: hci1: command tx timeout [ 380.432090][T17437] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3115'. [ 380.644860][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 381.216721][ T5144] Bluetooth: hci0: command tx timeout [ 382.086038][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.097228][T17443] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 382.114009][ T58] gretap0: left allmulticast mode [ 382.141059][ T58] gretap0: left promiscuous mode [ 382.149315][ T58] bridge0: port 3(gretap0) entered disabled state [ 382.193343][ T58] bridge_slave_1: left allmulticast mode [ 382.209367][ T58] bridge_slave_1: left promiscuous mode [ 382.220074][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.259415][ T58] bridge_slave_0: left allmulticast mode [ 382.273022][ T58] bridge_slave_0: left promiscuous mode [ 382.279280][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.290000][T17462] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3119'. [ 382.493413][ T5144] Bluetooth: hci1: command tx timeout [ 382.526017][ T58] bond3 (unregistering): (slave gretap1): Releasing active interface [ 382.550340][ T58] bond8 (unregistering): (slave gretap2): Releasing active interface [ 382.586898][ T58] dvmrp6 (unregistering): left allmulticast mode [ 382.949881][ T58] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.959971][ T58] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.970014][ T58] .` (unregistering): Released all slaves [ 382.981459][ T58] bond1 (unregistering): Released all slaves [ 383.000517][ T58] bond0 (unregistering): Released all slaves [ 383.040168][ T58] bond2 (unregistering): (slave veth3): Releasing active interface [ 383.048575][ T58] veth0_to_bond: entered promiscuous mode [ 383.069945][ T58] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 383.080145][ T58] bond2 (unregistering): Released all slaves [ 383.096548][ T58] bond3 (unregistering): Released all slaves [ 383.119071][ T58] bond4 (unregistering): Released all slaves [ 383.137695][ T58] bond5 (unregistering): (slave C): Releasing backup interface [ 383.146239][ T58] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 383.158431][ T58] bond5 (unregistering): Released all slaves [ 383.181587][ T58] bond6 (unregistering): Released all slaves [ 383.201054][ T58] bond7 (unregistering): Released all slaves [ 383.222421][ T58] bond8 (unregistering): Released all slaves [ 383.247700][ T58] bond9 (unregistering): Released all slaves [ 383.268959][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.334483][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'. [ 383.457237][ T58] : left promiscuous mode [ 383.545321][T17350] team0: Port device team_slave_0 added [ 383.571134][T17350] team0: Port device team_slave_1 added [ 383.594079][T17484] pim6reg527: entered allmulticast mode [ 383.689202][ T58] tipc: Disabling bearer [ 383.709295][ T58] tipc: Left network mode [ 383.784206][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.791808][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.839497][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.965706][T17490] syzkaller0: entered promiscuous mode [ 383.976577][T17490] syzkaller0: entered allmulticast mode [ 383.989386][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.001208][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.029196][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.230237][T17512] netlink: 'syz.1.3130': attribute type 2 has an invalid length. [ 384.250094][T17512] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 384.264039][T17512] netlink: 'syz.1.3130': attribute type 2 has an invalid length. [ 384.411449][T17520] openvswitch: netlink: IP tunnel dst address not specified [ 384.493675][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.502365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.583242][ T5144] Bluetooth: hci1: command tx timeout [ 384.773815][T17350] hsr_slave_0: entered promiscuous mode [ 384.785716][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 384.786831][T17350] hsr_slave_1: entered promiscuous mode [ 384.827758][T17350] debugfs: 'hsr0' already exists in 'hsr' [ 384.841373][T17350] Cannot create hsr debugfs directory [ 384.873916][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3134'. [ 385.435615][ T58] hsr_slave_0: left promiscuous mode [ 385.442946][ T58] hsr_slave_1: left promiscuous mode [ 385.451534][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.469066][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.478585][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 385.739630][ T58] team0 (unregistering): Port device team_slave_1 removed [ 385.790235][ T58] team0 (unregistering): Port device team_slave_0 removed [ 385.969569][ T58] vcan0 (unregistering): left allmulticast mode [ 386.186468][T17576] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 386.265693][T17578] tipc: Enabling of bearer rejected, failed to enable media [ 386.652536][ T5144] Bluetooth: hci1: command tx timeout [ 386.938803][ T58] IPVS: stop unused estimator thread 0... [ 387.032686][T17617] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3153'. [ 387.079205][T17617] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.121773][T17622] wg1 speed is unknown, defaulting to 1000 [ 387.397117][T17350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.527127][T17350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.610291][T17350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.649311][T17350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.849923][T17653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.864361][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 388.003438][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.086496][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.115721][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.122980][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.161494][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.168801][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.179629][T17664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3163'. [ 388.218176][T17657] wg1 speed is unknown, defaulting to 1000 [ 388.652789][T15028] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 389.029014][T17691] netlink: 'syz.1.3169': attribute type 16 has an invalid length. [ 389.060055][T17691] netlink: 'syz.1.3169': attribute type 17 has an invalid length. [ 389.196399][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.204192][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.328954][T17701] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3172'. [ 389.365652][T17693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.600351][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.617640][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.637880][T17691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.666211][ T9231] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.702101][ T9231] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.758635][ T9225] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.800845][ T9225] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.928556][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.078911][T17720] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 390.194392][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3177'. [ 390.242433][T17731] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.256015][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.264409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.363952][T17723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.383151][T17723] bond2: (slave bond3): making interface the new active one [ 390.409219][T17723] bond2: (slave bond3): Enslaving as an active interface with an up link [ 390.424397][T17729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.490859][T17350] veth0_vlan: entered promiscuous mode [ 390.531635][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'. [ 390.592691][T17742] netlink: 'syz.0.3180': attribute type 1 has an invalid length. [ 390.656109][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3180'. [ 390.673093][T17350] veth1_vlan: entered promiscuous mode [ 390.784656][T17746] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.925706][T17350] veth0_macvtap: entered promiscuous mode [ 390.970701][T17350] veth1_macvtap: entered promiscuous mode [ 391.104744][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.167417][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.216399][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.253004][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.303583][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.314129][T17775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3187'. [ 391.362340][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.449560][T17778] crypto_arc4_init: 55 callbacks suppressed [ 391.449579][T17778] "syz.1.3188" (17778) uses obsolete ecb(arc4) skcipher [ 391.626703][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.646950][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.683048][T17790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3190'. [ 391.767435][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.793082][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.907564][T17794] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3192'. [ 391.923219][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 392.655354][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.664775][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.674303][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.684226][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.691919][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.846403][T17825] wg1 speed is unknown, defaulting to 1000 [ 393.359544][T17854] Bluetooth: MGMT ver 1.23 [ 393.757302][T17825] chnl_net:caif_netlink_parms(): no params data found [ 394.264016][T17825] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.278226][T17882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'. [ 394.302872][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.315019][T17882] netlink: 'syz.1.3208': attribute type 7 has an invalid length. [ 394.340904][T17825] bridge_slave_0: entered allmulticast mode [ 394.352360][T17882] netlink: 'syz.1.3208': attribute type 8 has an invalid length. [ 394.387149][T17825] bridge_slave_0: entered promiscuous mode [ 394.397648][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 394.421923][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.470949][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.501525][T17825] bridge_slave_1: entered allmulticast mode [ 394.525259][T17825] bridge_slave_1: entered promiscuous mode [ 394.732554][ T5144] Bluetooth: hci3: command tx timeout [ 394.848350][T15026] wg1 speed is unknown, defaulting to 1000 [ 394.864193][T15026] syz2: Port: 1 Link DOWN [ 394.940226][T17825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.999057][T17825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.785310][T17942] [ 395.787704][T17942] ====================================================== [ 395.794751][T17942] WARNING: possible circular locking dependency detected [ 395.801812][T17942] syzkaller #0 Not tainted [ 395.806262][T17942] ------------------------------------------------------ [ 395.813311][T17942] syz.3.3217/17942 is trying to acquire lock: [ 395.819401][T17942] ffffffff8fd48c18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 395.828588][T17942] [ 395.828588][T17942] but task is already holding lock: [ 395.835977][T17942] ffff888036ca3470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 395.845268][T17942] [ 395.845268][T17942] which lock already depends on the new lock. [ 395.845268][T17942] [ 395.855700][T17942] [ 395.855700][T17942] the existing dependency chain (in reverse order) is: [ 395.864746][T17942] [ 395.864746][T17942] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 395.872774][T17942] _raw_spin_lock_bh+0x36/0x50 [ 395.878094][T17942] nr_rt_ioctl+0x215/0xf90 [ 395.883047][T17942] sock_do_ioctl+0x101/0x320 [ 395.888187][T17942] sock_ioctl+0x5c6/0x7f0 [ 395.893062][T17942] __se_sys_ioctl+0xfc/0x170 [ 395.898208][T17942] do_syscall_64+0x14d/0xf80 [ 395.903350][T17942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.909798][T17942] [ 395.909798][T17942] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 395.917671][T17942] _raw_spin_lock_bh+0x36/0x50 [ 395.922997][T17942] nr_rt_device_down+0xbe/0x860 [ 395.928397][T17942] nr_device_event+0x137/0x150 [ 395.933713][T17942] notifier_call_chain+0x1be/0x400 [ 395.939387][T17942] __dev_notify_flags+0x16d/0x310 [ 395.944959][T17942] netif_change_flags+0xe8/0x1a0 [ 395.950455][T17942] dev_change_flags+0x130/0x260 [ 395.955854][T17942] dev_ioctl+0x7b4/0x1150 [ 395.960737][T17942] sock_do_ioctl+0x23e/0x320 [ 395.965876][T17942] sock_ioctl+0x5c6/0x7f0 [ 395.970760][T17942] __se_sys_ioctl+0xfc/0x170 [ 395.975896][T17942] do_syscall_64+0x14d/0xf80 [ 395.981029][T17942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.987466][T17942] [ 395.987466][T17942] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 395.995400][T17942] __lock_acquire+0x15a5/0x2cf0 [ 396.000793][T17942] lock_acquire+0xf0/0x2e0 [ 396.005752][T17942] _raw_spin_lock_bh+0x36/0x50 [ 396.011067][T17942] nr_rt_ioctl+0x40c/0xf90 [ 396.016023][T17942] sock_do_ioctl+0x101/0x320 [ 396.021156][T17942] sock_ioctl+0x5c6/0x7f0 [ 396.026018][T17942] __se_sys_ioctl+0xfc/0x170 [ 396.031143][T17942] do_syscall_64+0x14d/0xf80 [ 396.036279][T17942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.042713][T17942] [ 396.042713][T17942] other info that might help us debug this: [ 396.042713][T17942] [ 396.052962][T17942] Chain exists of: [ 396.052962][T17942] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 396.052962][T17942] [ 396.066812][T17942] Possible unsafe locking scenario: [ 396.066812][T17942] [ 396.074280][T17942] CPU0 CPU1 [ 396.079663][T17942] ---- ---- [ 396.085040][T17942] lock(&nr_node->node_lock); [ 396.089905][T17942] lock(nr_node_list_lock); [ 396.097040][T17942] lock(&nr_node->node_lock); [ 396.104351][T17942] lock(nr_neigh_list_lock); [ 396.109055][T17942] [ 396.109055][T17942] *** DEADLOCK *** [ 396.109055][T17942] [ 396.117211][T17942] 2 locks held by syz.3.3217/17942: [ 396.122417][T17942] #0: ffffffff8fd48c78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 396.131930][T17942] #1: ffff888036ca3470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 396.141617][T17942] [ 396.141617][T17942] stack backtrace: [ 396.147538][T17942] CPU: 1 UID: 0 PID: 17942 Comm: syz.3.3217 Not tainted syzkaller #0 PREEMPT(full) [ 396.147560][T17942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.147578][T17942] Call Trace: [ 396.147586][T17942] [ 396.147596][T17942] dump_stack_lvl+0xe8/0x150 [ 396.147623][T17942] print_circular_bug+0x2e1/0x300 [ 396.147653][T17942] check_noncircular+0x12e/0x150 [ 396.147682][T17942] __lock_acquire+0x15a5/0x2cf0 [ 396.147706][T17942] ? kasan_save_track+0x4f/0x80 [ 396.147737][T17942] lock_acquire+0xf0/0x2e0 [ 396.147757][T17942] ? nr_rt_ioctl+0x40c/0xf90 [ 396.147776][T17942] ? nr_rt_ioctl+0x40c/0xf90 [ 396.147791][T17942] _raw_spin_lock_bh+0x36/0x50 [ 396.147816][T17942] ? nr_rt_ioctl+0x40c/0xf90 [ 396.147831][T17942] nr_rt_ioctl+0x40c/0xf90 [ 396.147852][T17942] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 396.147872][T17942] ? apparmor_capable+0x126/0x170 [ 396.147901][T17942] ? capable+0x88/0xe0 [ 396.147924][T17942] ? nr_ioctl+0x1b1/0x3b0 [ 396.147948][T17942] sock_do_ioctl+0x101/0x320 [ 396.147969][T17942] ? __pfx_sock_do_ioctl+0x10/0x10 [ 396.147986][T17942] ? do_futex+0x333/0x420 [ 396.148014][T17942] sock_ioctl+0x5c6/0x7f0 [ 396.148032][T17942] ? __pfx_sock_ioctl+0x10/0x10 [ 396.148049][T17942] ? __fget_files+0x2a/0x420 [ 396.148073][T17942] ? __fget_files+0x3a0/0x420 [ 396.148096][T17942] ? __fget_files+0x2a/0x420 [ 396.148121][T17942] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.148142][T17942] ? __pfx_sock_ioctl+0x10/0x10 [ 396.148158][T17942] __se_sys_ioctl+0xfc/0x170 [ 396.148178][T17942] do_syscall_64+0x14d/0xf80 [ 396.148193][T17942] ? trace_irq_disable+0x3b/0x150 [ 396.148219][T17942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.148236][T17942] ? clear_bhb_loop+0x40/0x90 [ 396.148255][T17942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.148276][T17942] RIP: 0033:0x7f72b279c799 [ 396.148294][T17942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.148311][T17942] RSP: 002b:00007f72b3617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.148330][T17942] RAX: ffffffffffffffda RBX: 00007f72b2a15fa0 RCX: 00007f72b279c799 [ 396.148344][T17942] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 396.148355][T17942] RBP: 00007f72b2832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 396.148366][T17942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.148377][T17942] R13: 00007f72b2a16038 R14: 00007f72b2a15fa0 R15: 00007ffffe5e4aa8 [ 396.148399][T17942] [ 396.258256][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 396.428031][ T3476] dvmrp6 (unregistering): left allmulticast mode [ 396.448388][ T3476] dvmrp1 (unregistering): left allmulticast mode [ 396.812260][ T5144] Bluetooth: hci3: command tx timeout [ 396.895760][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.905953][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.916275][ T3476] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 396.926996][ T3476] bond0 (unregistering): Released all slaves [ 396.937646][ T3476] bond1 (unregistering): Released all slaves [ 396.955881][ T3476] bond2 (unregistering): Released all slaves [ 396.967507][ T3476] bond3 (unregistering): Released all slaves [ 396.988083][ T3476] bond4 (unregistering): Released all slaves [ 397.010401][ T3476] bond5 (unregistering): Released all slaves [ 397.022557][ T3476] bond6 (unregistering): Released all slaves [ 397.035266][ T3476] bond7 (unregistering): (slave veth5): Releasing active interface [ 397.051779][ T3476] bond7 (unregistering): Released all slaves [ 397.064229][ T3476] bond8 (unregistering): Released all slaves [ 397.077516][ T3476] bond9 (unregistering): Released all slaves [ 397.198038][T17825] team0: Port device team_slave_0 added [ 397.215380][T17825] team0: Port device team_slave_1 added [ 397.227367][ T3476] tipc: Left network mode [ 397.294329][T17825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.307702][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.361646][T17825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.403472][T17825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.419086][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.447757][T17825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.538040][T17825] hsr_slave_0: entered promiscuous mode [ 397.544666][T17825] hsr_slave_1: entered promiscuous mode [ 397.550906][T17825] debugfs: 'hsr0' already exists in 'hsr' [ 397.564101][T17825] Cannot create hsr debugfs directory [ 397.630410][ T3476] hsr_slave_0: left promiscuous mode [ 397.637638][ T3476] hsr_slave_1: left promiscuous mode [ 398.299877][ T3476] IPVS: stop unused estimator thread 0... [ 398.355747][T17825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.388098][T17825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.409182][T17825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.445176][T17825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.568158][T17825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.599743][T17825] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.612013][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.619165][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.649457][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.656630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.865288][T17825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.894408][ T5144] Bluetooth: hci3: command tx timeout [ 398.914619][T17825] veth0_vlan: entered promiscuous mode [ 398.926397][T17825] veth1_vlan: entered promiscuous mode [ 398.951464][T17825] veth0_macvtap: entered promiscuous mode [ 398.960896][T17825] veth1_macvtap: entered promiscuous mode [ 398.984970][T17825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.008417][T17825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.030977][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.044567][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.066139][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.083280][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.104306][T17825] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 399.137989][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.146427][T17825] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 399.163052][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.191283][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.199453][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.982260][ T5144] Bluetooth: hci3: command tx timeout