last executing test programs: 5.397322902s ago: executing program 4 (id=4223): r0 = socket(0x23, 0x5, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b", @ANYRES64=r0], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0xffffffff, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140d, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff5, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7, {0x6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000280)={0x3, @bcast}) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 4.113977261s ago: executing program 4 (id=4231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xfe4f, 0x104, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000bc0)=""/260, 0x2f00, 0x0, 0x103, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x50) 3.891420216s ago: executing program 4 (id=4234): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c020000000006000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}}, 0x4c050) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.623917029s ago: executing program 4 (id=4238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x3e, 0x0, 0x70bd26, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x133, 0x0, 0x0, @pid=r1}, @nested={0x1c, 0x14f, 0x0, 0x1, [@typed={0x4, 0x56}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x5, 0xc0, 0x0, 0x0, @str='\x00'}, @nested={0xf3, 0x9e, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @u32}, @generic="284960a402c8992c02ab8504507bc13d076b100db754b831be8474bce479d30de883d07452e53ab933c4ef2183c81d18cf57bc5b1ae5df4764d85f032334cd71f65dd22b15a3f4a6d4e7d96fdc3480bc547b3310f591dd759602969e8d3c04fe6aaf66efd7b3948c75fed561db5b3279b8db3b66ad5b79ae5a3e4c6534eed0f566a3ab375cfd593d2e5df9e683378d63c5a68fe10e9b84294fa6c624f77b1181b0de61d21b323a8aa777b0f17062fa13ead8a41efa27abd7b7bab0ef1e81143a054b0cc001bc1f02f5014907210ed672e73d8d7482fa1bfa668047f2f9f47ea7204f461f8f4158"]}, @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@multicast2}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r2 = gettid() ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000280)=@caif=@dgm, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000480)=""/78, 0x4e}], 0x4, &(0x7f0000000540)=""/32, 0x20}, 0x8}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/121, 0x79}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000000900)=""/79, 0x4f}, {&(0x7f0000000980)=""/3, 0x3}], 0x7, &(0x7f0000000a40)=""/62, 0x3e}}, {{&(0x7f0000000a80)=@caif=@rfm, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000c00)=""/171, 0xab}, {&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/189, 0xbd}, {&(0x7f0000000e40)=""/218, 0xda}], 0x5, &(0x7f0000000fc0)=""/34, 0x22}, 0x1000}, {{&(0x7f0000001000)=@rc={0x1f, @none}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/118, 0x76}, {&(0x7f0000001100)=""/126, 0x7e}], 0x2, &(0x7f00000011c0)=""/25, 0x19}, 0xdd}, {{&(0x7f0000001200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f0000001340)=""/147, 0x93}], 0x2, &(0x7f0000001440)=""/176, 0xb0}, 0x5}, {{&(0x7f0000001500)=@hci, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001580)=""/115, 0x73}, {&(0x7f0000001600)=""/22, 0x16}, {&(0x7f0000001640)=""/8, 0x8}, {&(0x7f0000001680)=""/46, 0x2e}], 0x4, &(0x7f0000001700)=""/86, 0x56}, 0x683bf67b}], 0x6, 0x40, &(0x7f0000001940)={r3, r4+60000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000019c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001a00)=r2, 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c40), r0) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0x100, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x62}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xd1, 0xa9, @random="cc5dbddb80ce4ad4d8d15cf9bee613c59cd69c2d07fa0ad5ff6d51ebc174fd49f711ac12b47d20ae4f2b4147bceae15af36e3101ddd9fac2b28dae4da8a15f66c344c865973b2554d51f2d3d65b5af1b8f1a18c45ed689e1d694b15bed40224903a908230be609ebb6d3e7b74efdd6ed907c16c7a7c73e971e757f3e4fe665641cd4a72f23ae83ccca40b5549aa8063dc006512172dd5e054b92bf32211d8ab9e164151dacc43c4baec03b096d09cbece52455e362f98aa3328b5fa75ab0e983bb7d1ff86588b79274eb4dcf1e"}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) nanosleep(&(0x7f0000001e00)={0x0, 0x989680}, &(0x7f0000001e40)) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f0000001f00)={'sit0\x00', &(0x7f0000001e80)={@private=0xa010102, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@empty}, {@dev}, {@private}]}}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0x94, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}, 0x94}}, 0x48800) ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f00000020c0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r12, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4060bac0}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r11) r14 = syz_open_procfs$namespace(r1, &(0x7f0000002280)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) r16 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x64, r13, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0xffffffcb, 0x7c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r16}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r11, 0x0, 0x487, &(0x7f0000002400), &(0x7f0000002440)=0x30) 3.372106253s ago: executing program 4 (id=4241): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa0, r3, 0x1, 0x4, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xfffffd81, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="9030540be43de47c90f49585df9d3fd439df70655739b3ce40993319e22ca9f5b43bfd229c270a05aa14492a6fe212654774b6cc2c5340d3d4d7077ab8d72b3528217d081d1af811ec8b9dde02f1f868c632f8a10a56ea70ed2a07d147ec66f759fadcda35495216087c9161f8e89d50668dc2a40ba80e7831707aac8bddf64f41b1e5b28e9cc28f1ef6a1fe2473bf2846"], 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x81, 0xfb, 0xfffff024}, {0x6, 0x8, 0x0, 0x2000002}]}, 0x10) sendmmsg(r11, &(0x7f0000001c00), 0x400000000000159, 0x40840) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r13, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRES16=r10], 0x2c}}, 0x0) 3.030467772s ago: executing program 2 (id=4242): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="e23ed445af169d4f2b53a8fce197f5a7b30b76c743254cc2337682d4b9aff17acc15e2aeb4157c13ffc690fc425c1ae61b8c5fcd765111dff3e43c3b865dbbb3b5a9ee3f64c7b63478f9e029b32c28230bff0d5f24c6c9ec48c5872a9c5b2714ecec0b8af0946deb33beb6d8b865d262d9ecbc0da1368f375a7fb8dc3bbb9af384208af2cd94c2ba802c82cbf9b42c00f92176bb6aa2fa40587263360366590d0a10cdaeb21b8523340f81f42f873a60df6cfd0055ad1dbf4ac90612056660ce7c396f94ddc7990cf85f0353245115c6872cc4c3d1126fde5b8ef617f80114fb8131de00f94c6335551c969e5bdadeb1010637", 0xf3}, {&(0x7f0000000740)="8edaa9c737f39de4d3b25c2e12a666bd16068eefc0d650fefc698409211818d64f8e73b3e184db8a8515970eade913c3aa3435072e1971c2aa84a9f99b120f9962edd9477acd1d3412f850d545fac34bf71842f25b032e97adb54bff0f22b0dfa5294c031b84c17ec2594a5cd422a2f510faf8b0c0a781d19dbfd59305e064b8c106", 0x82}], 0x2}, 0x894) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffff", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)="93c4a3c12f15cc59d67bcc894f50c36eeca523efb957f23e5d4b837971f84b44262f725d73b966de32f86932e8ec6283f07b6c2a99", 0x35}, {&(0x7f00000003c0)="c95020b2a5933d310f2136f5f5f9f0448163f65f95c0d6231b29372a8ff086343d3f7c9c12170592db153f6820e52c80dc353aec987b6897c691f5afdabe25d1b8ca1bfd0b9f387906a25579ff67ae467858af1503516792c5a1ef7412fe258cd405b3da8430fd6c0c2779dbcca30dae733226c190d3a3ab6e0feb923c4d134c4f4bcaf6caaf7dbe2d7408cd4eb417a834e6", 0x92}, {&(0x7f0000000640)="51032c911bbe6557f2b603e85e84678cb10dfdea", 0x14}], 0x3}}], 0x2, 0x2090) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.872625572s ago: executing program 2 (id=4243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) bind(r1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff565843ca6fc808060001080006040001007f0000000000000002aaaaaaaaaabbac1414", @ANYRES64], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001a00010000eefffffcfffff80a000000", @ANYRES32=0x0, @ANYBLOB="00001100140003000900000000000000000000000000000014000100ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.660234461s ago: executing program 2 (id=4244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10) (async) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) getsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="74010000170001000000000000000000fe8000000000000000000000000000410000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fe8000000000000000000000000000164e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000008000000000000000000000000000000000000000000000000100000000000000000a0080203a0000001b874f3353ac0e90b526d7840d1b7558a9173704ebc75bc588068f6c48bb23c2473fd5ab703d9fb8a213fdf457d634ee9ccb3671b7beb38f995d95865fa3f54a00ac0f2cdf4f8322de76c867303663bd51be8fd8b1c60bdd7006cbb2334745e179dc6d26b4753ee3daaf", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000044000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001000000000200ac0003000000010000000900000008001f0001000000"], 0x174}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@generic="58050a602d194653029cb905f929a681dc", @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}, @typed={0x4, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x480d1}, 0xc000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000200)="e7b8ff5777", 0x5) 2.456720533s ago: executing program 2 (id=4246): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001780)=""/175, 0xaf}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000001500)=""/65, 0x41}], 0xb}, 0x40032160) (async) r2 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) epoll_create(0x4) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000240)={0x1d, r10}, 0x10) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername$netlink(r11, 0x0, &(0x7f00000000c0)) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) accept4(r9, 0x0, 0x0, 0x80000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000005740)={{r9}, "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"}) (async) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r12, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000006740)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES64=r8, @ANYRES16=r5, @ANYRES32=r0, @ANYBLOB="01000072420f0491", @ANYRESHEX=r1, @ANYBLOB="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"], 0x38}}, 0x4040) 2.356919113s ago: executing program 3 (id=4247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x20, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x20}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={0x20, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x20}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) (async) 2.216312291s ago: executing program 1 (id=4248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @null, @remote, @default, @null, @netrom, @bcast, @rose]}, &(0x7f00000002c0)=0x48, 0x0) recvmsg(r1, &(0x7f0000002140)={&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000f80)=""/32, 0x20}, {&(0x7f0000000fc0)=""/49, 0x31}, {&(0x7f0000001000)=""/86, 0x56}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x4, &(0x7f00000020c0)=""/90, 0x5a}, 0x42) 2.180093017s ago: executing program 1 (id=4249): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/115, 0x73}, 0x10000006}], 0x1, 0x40002142, 0x0) 2.163660232s ago: executing program 2 (id=4250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff72, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) write(r0, &(0x7f0000000040), 0x0) 2.052310617s ago: executing program 3 (id=4251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000380)="b9fe030768045c8c989a14f088a8657988a8d510e921", 0x0, 0x9b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000404730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 2.011826848s ago: executing program 1 (id=4252): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x10000, 0x4, {{0x2c, 0x4, 0x3, 0x36, 0xb0, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@noop, @end, @timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0xf, [{@rand_addr=0x64010102, 0xb}, {@local, 0xfffffff7}, {@remote, 0xfff}, {@rand_addr=0x64010101, 0x47}, {@remote, 0x1}]}, @cipso={0x86, 0x1d, 0xa46e99f07135d535, [{0x7, 0xb, "73b03709d9205df107"}, {0x6, 0x2}, {0x2, 0xa, "7de18c5046c54da9"}]}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0xc, "849de03736bb7cbee6cb"}, {0x1, 0x12, "0d94de412c46a2b5774667ae7406be64"}, {0x2, 0xb, "159679778c4a4d9bd4"}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @rand_addr=0x64010102, @local, @loopback]}]}}}}}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x0, r1, 0x3b, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESOCT=r1], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000000010001a001811000000000000000064dffc6b3b30e0d696fd603d21d974b83c25caa251e5f45ef9aff5a844296aed69a3190aa3fec7b39d2ce81021c8c5f5450ed12801fbaae02ae3b0f5c6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x0, @mcast2, 0x41}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="089444a7caea62d37493d13989", 0xd}], 0x1, 0x0, 0x0, 0x900}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000005cfb00000000220000000a000100774a70616e31"], 0x20}}, 0x4000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000000)={0x10, 0x6, 0x5, 0xc, 0x80000, 0x8100}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r10, r11, 0x0, 0xffffffff004) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000380)={{0x2, 0x4e22, @remote}, {0x306, @link_local}, 0x20, {0x2, 0x4e23, @loopback}, 'veth1_to_bridge\x00'}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r4, &(0x7f0000000100)={0xc}) 1.989825343s ago: executing program 2 (id=4253): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2a020400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 1.73530289s ago: executing program 3 (id=4255): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000004019078ac1414bbfff00ff00c8676d0966f9a2b2407060000120090780000ffffa4a0fcf7135c7f5e26a5bed842499b00713bd2a1891d8d272160cb8430cd5b8271165795fc4f3da9ace9d4440d7d05073e8a00e1a3f291bbb2411268d37619e69a4a1558925304a3cdb5ab30c273ea6e5273dfa4ceb6fc71f580928727787fffffff45b169ee903b2e59c53f2cb7209537a41ac43f23f8e574000000762d29eea04a477ba827b89f1264efc9a8ce6ead49af41942c18f1df9eb22e5bbde1624b544d58fe4f37"], 0xff04) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt(r4, 0x28, 0x0, &(0x7f0000000040)=""/57, &(0x7f0000000000)=0x39) r5 = socket$tipc(0x1e, 0x2, 0x0) epoll_create1(0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10010, r6, 0xeda77000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.615781708s ago: executing program 0 (id=4256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="dd9bb1dc1b93f5e8eee4c71401ba081c0fe406c02deee0b7aa1792407ab26ad6c6e7dfeff4d32378ddae4fc46a5a790d07959020dd3758ca34b7812b57d82c63497f1df3b95d1d062669877eb6c7f3ff92e4ba5a0d37", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f68737200000000080003000300000014000380100003800c0001800800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 1.474122191s ago: executing program 0 (id=4257): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES16, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="030024000300000004000000050000000000000000000000673aaf45d73fbe25ed2b9aba42b829bbe81b4a3cded4bb3a138a01517e8cc5f3e7e2ef0de71cd1636b4c9b69b35b8f2ed6c086dc748016e04c918f79db0db9b749243ac10e0f1ebf394b6102ce2bad274f08eb2094d85119924194ae85ca347035fb3bfe29a5323d610b8dc00f9b5679aeaf380b61cb", @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c43b38c4d557951dab95269ab90b920e96b236776d7b59f5e1c0e93280a0264ffe4767bcd"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.154864011s ago: executing program 4 (id=4258): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet(0x2, 0xa, 0x23fcf3a2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r4, 0x18}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfff7, 0x7}}}]}, 0x38}}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4008010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0xc012) r9 = socket(0x10, 0x803, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)={0x1, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x7, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @multicast1}}]}, 0x410) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) 1.064201559s ago: executing program 3 (id=4259): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000007b2d00000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000200000900010073797a300000"], 0xe4}, 0x1, 0x0, 0x0, 0x4048801}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff7c, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r3, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x24}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) unshare(0x6a040000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.059187588s ago: executing program 0 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001500)=ANY=[], 0x24}}, 0x200448c4) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) (async) socket(0x1e, 0x4, 0x7ffffffe) (async) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000002c0)=0x2000041) (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000100)=0x401, 0x2) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) close(r6) r7 = socket(0x10, 0x809, 0x8) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x8, 0x0, 0x0}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 841.37695ms ago: executing program 0 (id=4261): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x22020400) r1 = socket$netlink(0x10, 0x3, 0x0) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) unshare(0x10000) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$nl_generic(r1, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10c}}, 0xc801) sendmmsg$inet(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000001980)='k', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)="0f", 0x1}], 0x7}}], 0x1, 0x4000040) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8946, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)=ANY=[@ANYBLOB="2000005e00210025bd7000000000002000000005002a000000000004001180"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xa6}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048880}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc6db99ca61551e89}, 0xc, &(0x7f0000000680)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f8030000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0x3f8}, 0x1, 0x0, 0x0, 0x20000090}, 0x24004080) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@broadcast, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) 826.257659ms ago: executing program 1 (id=4262): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/115, 0x73}, 0x10000006}], 0x1, 0x40002142, 0x0) 351.7843ms ago: executing program 3 (id=4263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) (async) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x2e}}, {{0x0, 0x0, &(0x7f0000000640), 0x1}}], 0x2, 0x20040000) (async) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 314.196813ms ago: executing program 1 (id=4264): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100290100000400ffdbdf250a0000000000000000000000080018004e"], 0x24}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0xbf5}}, 0x20) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff5cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x92}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={r9, 0x6f, "2cc94c244208644b29583c9f9723c6eb850809488f837a0ae1f3d3c0ef8f3808b6a501856d379b2aacf5ebde1a3aecc05258fad5ae2e15e76c79f2acf021eaa813e66df50e9cb38b93b38ebcc4521f96e9f7b21f0ff8ec72bd855342b09c70c42c495191260acde649945b457fbe43"}, &(0x7f0000000380)=0x77) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000680)={0x2, 0x6, 0xc3, &(0x7f0000000580)=""/195}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000900)={0x0, 0x7ff, 0xdf8, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000000d00)={r11, 0x1, 0x7fffffffffffffff, 0x1}) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 32) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000003c0)="d39d4fb833a5aa1a8ccd7a2893da9e898d6e7154768e901d466ac1faff42ad4981130660a93292219ba77c4a0f260346c42acab4bd2488c45465e64721ac62fbe30ae0196a49a3d6ae3574f4a6881fed1e8ffdbe53ebea748cbf291cd067528ef8b7245fceca175fe9ece44baa0a709016a05e93f7162b78ad58", 0x7a) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r14, 0x0, 0x0}, 0x10) (async) setsockopt$inet6_int(r12, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async, rerun: 64) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, 0x1c) 264.050415ms ago: executing program 0 (id=4265): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [], {0x95, 0x0, 0x102}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 74.386646ms ago: executing program 3 (id=4266): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x6e, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'netpci0\x00', 0x1}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @remote}], 0x20) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180400) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000100)=""/72, 0x48) syz_emit_ethernet(0x1c9, &(0x7f0000000180)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0xff801}, {0x9}, {0x6}], @ipv6=@udp={0x0, 0x6, "e68095", 0x183, 0x11, 0xff, @local, @local, {[@hopopts={0x33, 0x11, '\x00', [@ra={0x5, 0x2, 0xb36}, @pad1, @generic={0x40, 0x83, "8b0c967cbfd72e6f552b3200459b9245f29027b3053f4c063658dc1cc3132824cfde65b8c7c05c81f3fc329272895904dea317417e4c4405eeaeaf340a26461f61cbd7af2ccfe63017bcb45406508ccbe479aa211bcf68bf4b59e3f3da7d8876bd53d0f4afc51384da2f180d914bf205d21fe28f4793e30684214cbdfc33e927111af5"}, @pad1]}, @routing={0x29, 0xa, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x10}]}, @dstopts={0x33, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xf7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}], {0x4e20, 0x4e24, 0x3b, 0x0, @opaque="18013e9eae904e8cc83d06234fdf5caf3a10bb94e5ce06311be57b7a3b49e3cac9fd53f569309462593da10f3c779f202a09c6"}}}}}}}, &(0x7f0000000380)={0x1, 0x2, [0xe81, 0xaec, 0xabd, 0x39c]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r3, &(0x7f00000003c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @bcast]}, 0x80) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f0000000440), 0x10, &(0x7f0000000500)={&(0x7f0000000480)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x15, 0x2, 0x0, 0x0, "930c82132f8bb0e45d6e73eeeece72ea149888fcba7a3acc7de95802b5c4c92f4cd1c958c2c138c51b7c4e24c035ff8771bcb69dc1c81e74c760af01ddddd0c5"}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x40088c1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=0x40) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000680)={0x0, 0x6, 0x1, 0x7aa9}, 0x8) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000006c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e21, 0x2, @mcast1, 0xc}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x400080, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000780)=0xfffff800) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000800)={0x2a, 0x4, 0x7fff}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r1, &(0x7f0000000840)='&\\/%\x00', 0x80, &(0x7f0000000880)={@align=0x400, {0x97, 0xd6, 0xb5, 0x2}}, 0x0, &(0x7f00000008c0), &(0x7f0000000900)=0x3}, {[0x2, 0xc, 0x3ff, 0xfc]}, 0x2, 0x96, &(0x7f0000000940)=""/150}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000a80)={0x0, 0x9}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000b00)=@assoc_value={r7, 0x54be}, 0x8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000bc0)={r7, 0x4}, &(0x7f0000000c00)=0x8) bind$can_raw(r4, &(0x7f0000000c40), 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000d80)={r5, &(0x7f0000000c80)='&\\/%\x00', 0x200000, &(0x7f0000000cc0)={@align=0x7, {0xe227, 0x401, 0x3, 0x8}}, 0x4, &(0x7f0000000d00), &(0x7f0000000d40)=0x4}) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x4, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x20) 40.861333ms ago: executing program 1 (id=4267): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e22, 0x3, 'lblc\x00', 0x0, 0x80005, 0x2000006f}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2501cb8e2d7f185c7938bd"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24008800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000380)={0x51, 0x3, 0x1, 0x6, 0xd6, 0xde, 0x6, 0x6}, &(0x7f0000000440)={0x5, 0x7, 0xc, 0xb, 0x8, 0x6, 0x9, 0x3}, &(0x7f0000000480)={0x2, 0x5, 0x80, 0x7, 0x100, 0x5, 0x1, 0xca8}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000100010100000000170282f278bc8766000003000bffff00fc09008000060000005f86ac5b84bd469e242da65f5c8b66d08e0a23bf8dc503674fc387eeaa489e47026122d907f8df053449c95036875dffb93248ba613d16db18013200559f03bcf8953f6f92c80a9f0adef8eea1eb86e0b3976848c8f742be826f6c8b5b49f98e0ac7c74be2301cf370a05d2fc82c0406814f", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000002214ca2bf0004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000202000000000000000000000000000064010102000000000000000000000000000000003c0000000a000000000000000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000004030000000000000002000000000000ac1414bb000000000000000000000000000000002b000000000000000a010101000000000000000000000000043500000121010000000000bf0a00000000000100"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x20044445}, 0x4000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000003c0)={0x24, 0x3c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x3d, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r4}]}, 0x24}, {&(0x7f0000005dc0)=ANY=[@ANYBLOB="2c0000003a0000042d040000000000000007fb3f69d43491b20030000000000000b400000000000000000001"], 0x2c}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000008c0)={{r1}, "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"}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r2) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000640)={0x1c, r6, 0x506, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44810}, 0x4000) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x87d0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000005000), 0x0, 0x60, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001940)=ANY=[@ANYBLOB="85000000aa00000084000000000000009500000000cd803730dc2ac67d0174d5441272000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000001a00)={&(0x7f0000001980)=[{0x200, 0x3, 0x2}, {0x8, 0x5}, {0x1, 0x6, 0x1}, {0x9, 0x100}, {0x2580, 0xd7fe, 0x3}], 0x5, 0x10, 0x6, 0x4}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0x2, 0x4e23, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x7fffffff, 0x7, 0x0, 0xaf4b, 0x1, 0x1, 0x1, 0x7}, &(0x7f0000000180)={0x6, 0xf5, 0x5e4d, 0xff, 0xb694, 0xffffffff, 0x8, 0x3}, &(0x7f00000001c0)={0x7, 0x3, 0xffffffffffffffff, 0x7, 0x5, 0x7, 0x0, 0xff}, &(0x7f00000002c0)={r12, r13+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x7]}, 0x8}) 0s ago: executing program 0 (id=4268): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000100000bf852c8986626691b01b2d44e4ce28715f2c2828"], 0xe0}], 0x1}, 0x40040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d06b0ce2c4a4021321b3fcb687d14909352987cd2435fd0b3deb22908ba5628", "86e2fbacb638e8c2b3de52cd44e301a22e5510cacac37e5ff38924c5b4b760ab", "adf723f77527084fd082ee94d192eed6cce478b3ed4c97c9a50a3a60573cb395", "e0e968c55f581d6c664a54b8c05441e7b7801095d99d13caaf81b4f4e01ad34a", "43ff55f5b2c572321b195e2e656cc98a35aeadb35a775311d1d1c18a2b3c8119", "522c9c0d9742e1032a90d795", 0x0, 0x8, 0x951, 0xc6ff, 0x6}}) kernel console output (not intermixed with test programs): 402.092521][T17353] : option downdelay: allowed values 0 - 2147483647 [ 402.136114][T17353]  (unregistering): Released all slaves [ 402.688055][T17385] lo speed is unknown, defaulting to 1000 [ 402.844350][T17393] __nla_validate_parse: 4 callbacks suppressed [ 402.844369][T17393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2889'. [ 403.090812][T17405] xt_bpf: check failed: parse error [ 403.613466][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2900'. [ 403.902881][T17442] netlink: 'syz.4.2905': attribute type 10 has an invalid length. [ 403.962434][T17442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2905'. [ 404.079265][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2908'. [ 404.184216][T17454] lo speed is unknown, defaulting to 1000 [ 404.253281][T17462] netlink: 'syz.2.2909': attribute type 4 has an invalid length. [ 404.410952][T17472] netlink: 'syz.2.2909': attribute type 4 has an invalid length. [ 404.456354][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2913'. [ 405.422169][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 405.474780][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 405.519358][T17508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 405.553411][T17508] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 405.565888][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.580492][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.595938][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.609627][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.618273][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.668338][T17509] lo speed is unknown, defaulting to 1000 [ 405.881450][T17509] chnl_net:caif_netlink_parms(): no params data found [ 406.124799][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.148284][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.179737][T17509] bridge_slave_0: entered allmulticast mode [ 406.222278][T17509] bridge_slave_0: entered promiscuous mode [ 406.264731][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.288684][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.321321][T17509] bridge_slave_1: entered allmulticast mode [ 406.342225][T17509] bridge_slave_1: entered promiscuous mode [ 406.351181][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2928'. [ 406.362590][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 406.543328][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.559332][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.655755][T17509] team0: Port device team_slave_0 added [ 406.692687][T17509] team0: Port device team_slave_1 added [ 406.767855][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.778461][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.827226][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.856057][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.863068][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.935671][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.132701][T17509] hsr_slave_0: entered promiscuous mode [ 407.142420][T17509] hsr_slave_1: entered promiscuous mode [ 407.210653][T17568] lo speed is unknown, defaulting to 1000 [ 407.684191][ T50] Bluetooth: hci5: command tx timeout [ 407.989874][T17492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.085735][T17509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.168359][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.219288][T17509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.248079][T17592] __nla_validate_parse: 2 callbacks suppressed [ 408.248100][T17592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2944'. [ 408.277642][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.286558][T17509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.309629][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.321812][T17509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.355967][T17509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.422305][T17598] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.2943'. [ 408.446236][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2943'. [ 408.466168][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2943'. [ 408.529503][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 408.558415][T17610] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 408.577938][T17610] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2946'. [ 408.600773][T17610] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2946'. [ 408.622649][T17610] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2946'. [ 408.738329][T17509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.832994][T17509] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.848670][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.855915][ T9549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.887849][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.895110][ T9533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.152449][T17635] lo speed is unknown, defaulting to 1000 [ 409.185697][T17641] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 409.328744][T17641] bond7: entered promiscuous mode [ 409.336777][T17641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 409.643367][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.690606][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 409.754417][ T50] Bluetooth: hci5: command tx timeout [ 409.974976][T17680] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.2965'. [ 410.077490][T17509] veth0_vlan: entered promiscuous mode [ 410.106161][T17509] veth1_vlan: entered promiscuous mode [ 410.228693][T17684] lo speed is unknown, defaulting to 1000 [ 410.239172][T17509] veth0_macvtap: entered promiscuous mode [ 410.317850][T17509] veth1_macvtap: entered promiscuous mode [ 410.430358][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.459498][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.479964][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.500228][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.571272][T17694] can: request_module (can-proto-0) failed. [ 410.629548][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.638980][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.049400][ T9533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.086481][ T9533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.416777][T17720] bond8 (unregistering): Released all slaves [ 411.441537][T17726] netlink: 'syz.0.2979': attribute type 3 has an invalid length. [ 411.468404][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.479542][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.509342][T17726] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 411.526059][T17726] NCSI netlink: No device for ifindex 808464432 [ 411.786048][T17729] bond8: invalid ARP target 0.0.0.0 specified for addition [ 411.793450][T17729] bond8: option arp_ip_target: invalid value (0) [ 411.804405][T17729] bond8 (unregistering): Released all slaves [ 411.834709][ T50] Bluetooth: hci5: command tx timeout [ 411.877987][T17737] netlink: 'syz.1.2919': attribute type 12 has an invalid length. [ 411.978003][T17751] ip_vti0: entered promiscuous mode [ 411.994874][T17751] ip_vti0: entered allmulticast mode [ 412.055045][T17749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.302273][T17762] xt_hashlimit: size too large, truncated to 1048576 [ 412.320673][T17762] xt_hashlimit: max too large, truncated to 1048576 [ 412.534902][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.549719][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.559029][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.578553][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.587175][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.648995][T17765] lo speed is unknown, defaulting to 1000 [ 413.253054][T17765] chnl_net:caif_netlink_parms(): no params data found [ 413.562300][T17802] __nla_validate_parse: 13 callbacks suppressed [ 413.562323][T17802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 413.621907][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 413.664065][T17765] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.672396][T17765] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.683174][T17765] bridge_slave_0: entered allmulticast mode [ 413.691863][T17765] bridge_slave_0: entered promiscuous mode [ 413.752293][T17804] team0: Port device team_slave_0 removed [ 413.768117][T17765] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.776068][T17765] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.783464][T17765] bridge_slave_1: entered allmulticast mode [ 413.792493][T17765] bridge_slave_1: entered promiscuous mode [ 413.917367][ T50] Bluetooth: hci5: command tx timeout [ 413.919831][T17765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.000529][T17765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.029444][T17812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.190830][T17765] team0: Port device team_slave_0 added [ 414.260284][T17765] team0: Port device team_slave_1 added [ 414.402818][T17765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.422951][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.485698][T17765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.527290][T17765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.549875][T17765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.604338][T17765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.644500][ T50] Bluetooth: hci4: command tx timeout [ 414.758673][T17765] hsr_slave_0: entered promiscuous mode [ 414.767059][T17765] hsr_slave_1: entered promiscuous mode [ 414.774701][T17765] debugfs: 'hsr0' already exists in 'hsr' [ 414.780748][T17765] Cannot create hsr debugfs directory [ 414.831373][T17841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3009'. [ 414.989978][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 415.012022][T17847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3011'. [ 415.084887][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.138701][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.153402][T17848] syzkaller1: entered promiscuous mode [ 415.160790][T17848] syzkaller1: entered allmulticast mode [ 415.175256][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.310959][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.367661][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.402109][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.410932][T17851] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 415.622692][T17866] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3016'. [ 416.019779][T17880] bond8: (slave bond_slave_1): Device is not bonding slave [ 416.027475][T17880] bond8: option active_slave: invalid value (bond_slave_1) [ 416.040509][T17880] bond8 (unregistering): Released all slaves [ 416.478818][T17765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.526357][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.568674][T17765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.600762][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.626396][T17765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.698506][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.714211][ T50] Bluetooth: hci4: command tx timeout [ 416.736041][T17765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.768778][T17765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.065247][T17919] m1Ie5nè‹Ò: entered promiscuous mode [ 417.084611][T17765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.117415][T17765] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.144764][T17924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3031'. [ 417.147910][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.160989][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.228540][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.235793][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.470549][T17935] lo speed is unknown, defaulting to 1000 [ 417.969000][T17765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.226922][T17970] validate_nla: 58 callbacks suppressed [ 418.227054][T17970] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 418.273781][T17970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3038'. [ 418.290026][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 418.529490][T17980] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 418.692823][T17986] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3043'. [ 418.773281][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3045'. [ 418.785305][T17992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3045'. [ 418.794529][ T50] Bluetooth: hci4: command tx timeout [ 418.842315][T17994] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 418.923564][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3046'. [ 419.035172][T17765] veth0_vlan: entered promiscuous mode [ 419.102036][T18003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3048'. [ 419.137629][T17765] veth1_vlan: entered promiscuous mode [ 419.311430][T17765] veth0_macvtap: entered promiscuous mode [ 419.329826][T17765] veth1_macvtap: entered promiscuous mode [ 419.397795][T17765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.425451][T17765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.458479][ T9549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.484885][ T9549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.506050][T12764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.530747][T12764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.800670][ T9552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.829208][ T9552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.868099][T18024] netlink: 'syz.2.3052': attribute type 13 has an invalid length. [ 419.890610][T18023] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3055'. [ 419.929895][ T9552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.951588][ T9552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.397847][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3062'. [ 420.418697][T18048] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3060'. [ 420.455334][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'. [ 420.479197][T18049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3062'. [ 420.567911][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.579796][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.588793][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.608369][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.616160][T18048] macvtap1: entered promiscuous mode [ 420.621896][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.624870][T18048] macvtap1: entered allmulticast mode [ 420.684999][T18048] veth1_vlan: entered allmulticast mode [ 420.736022][T18051] macvtap2: entered promiscuous mode [ 420.748563][T18051] macvtap2: entered allmulticast mode [ 420.885880][ T50] Bluetooth: hci4: command tx timeout [ 420.898944][T18060] netlink: 'syz.0.3063': attribute type 2 has an invalid length. [ 420.919076][T18052] lo speed is unknown, defaulting to 1000 [ 420.925736][T18060] netlink: 'syz.0.3063': attribute type 9 has an invalid length. [ 421.491608][T18052] chnl_net:caif_netlink_parms(): no params data found [ 421.819646][T18052] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.827046][T18052] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.834721][T18052] bridge_slave_0: entered allmulticast mode [ 421.842777][T18052] bridge_slave_0: entered promiscuous mode [ 421.852447][T18052] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.860245][T18052] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.868475][T18052] bridge_slave_1: entered allmulticast mode [ 421.876762][T18052] bridge_slave_1: entered promiscuous mode [ 421.962093][T18052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.980382][T18052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.038785][T18052] team0: Port device team_slave_0 added [ 422.049230][T18052] team0: Port device team_slave_1 added [ 422.088943][T18052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.096782][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.124314][T18052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.137681][T18052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.145078][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.171497][T18052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.229379][T18052] hsr_slave_0: entered promiscuous mode [ 422.237625][T18052] hsr_slave_1: entered promiscuous mode [ 422.244283][T18052] debugfs: 'hsr0' already exists in 'hsr' [ 422.250183][T18052] Cannot create hsr debugfs directory [ 422.445811][T18052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.497853][T18109] bridge4: port 1(veth15) entered blocking state [ 422.505194][T18109] bridge4: port 1(veth15) entered disabled state [ 422.511815][T18109] veth15: entered allmulticast mode [ 422.520225][T18109] veth15: entered promiscuous mode [ 422.552999][T18052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.630991][T18052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.724325][ T50] Bluetooth: hci0: command tx timeout [ 422.779327][T18052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.844469][T18117] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 422.881478][T18117] bond8: entered promiscuous mode [ 422.889211][T18117] bond8: entered allmulticast mode [ 422.895976][T18117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.929756][T18117] bridge5: entered promiscuous mode [ 422.942101][T18117] bridge5: entered allmulticast mode [ 422.948330][T18117] bond8: (slave bridge5): Enslaving as a backup interface with an up link [ 423.005091][ T58] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 423.076693][T18121] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 423.134089][ T58] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 423.156725][T18123] 8021q: VLANs not supported on ip6_vti0 [ 423.775755][T18056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.808949][T18052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.854702][T18052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.892726][T18052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.956402][T18052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.970198][T18052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.022569][T18052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.041317][T18141] __nla_validate_parse: 7 callbacks suppressed [ 424.041336][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 424.057836][T18142] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002 [ 424.082764][T18052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.117976][T18052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.273352][T18158] netlink: 592 bytes leftover after parsing attributes in process `syz.3.3089'. [ 424.290755][T18158] netlink: 'syz.3.3089': attribute type 2 has an invalid length. [ 424.310310][T18158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3089'. [ 424.346142][T18162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3089'. [ 424.380117][T18158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3089'. [ 424.528003][T18052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.573188][T18164] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3091'. [ 424.595209][T18169] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3091'. [ 424.622962][T18169] syzkaller0: entered promiscuous mode [ 424.638269][T18169] syzkaller0: entered allmulticast mode [ 424.662483][T18164] tcf_pedit_act: 7 callbacks suppressed [ 424.663326][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.676723][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.683520][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.690365][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.697219][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.704050][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.708934][T18052] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.710850][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.724280][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.731070][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.737910][T18164] tc action pedit offset must be on 32 bit boundaries [ 424.744758][T18164] 0: reclassify loop, rule prio 0, protocol 800 [ 424.779587][T12764] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.786840][T12764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.795039][ T50] Bluetooth: hci0: command tx timeout [ 424.916289][T12764] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.923504][T12764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.715325][T18052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.857664][T18052] veth0_vlan: entered promiscuous mode [ 425.900776][T18052] veth1_vlan: entered promiscuous mode [ 426.001438][T18052] veth0_macvtap: entered promiscuous mode [ 426.031586][T18052] veth1_macvtap: entered promiscuous mode [ 426.107744][T18052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.145641][T18052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.184539][ T9549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.213223][ T9549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.224693][ T9549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.248303][ T9549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.250091][T18236] ieee802154 phy0 wpan0: encryption failed: -22 [ 426.327538][T18238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.491271][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 426.510933][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 426.607753][ T9533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.641960][ T9533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.698106][ T9533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.711136][ T9533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.874232][ T50] Bluetooth: hci0: command tx timeout [ 427.481058][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.500158][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.509432][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.522291][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.532705][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.654022][T18268] lo speed is unknown, defaulting to 1000 [ 428.017940][T18284] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3124'. [ 428.219201][T18268] chnl_net:caif_netlink_parms(): no params data found [ 428.518601][T18268] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.525993][T18268] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.533364][T18268] bridge_slave_0: entered allmulticast mode [ 428.541520][T18268] bridge_slave_0: entered promiscuous mode [ 428.551017][T18268] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.559321][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.566706][T18268] bridge_slave_1: entered allmulticast mode [ 428.575223][T18268] bridge_slave_1: entered promiscuous mode [ 428.671419][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.710669][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.860296][T18312] geneve2: entered promiscuous mode [ 428.905429][T18268] team0: Port device team_slave_0 added [ 428.941012][T18268] team0: Port device team_slave_1 added [ 428.954240][ T50] Bluetooth: hci0: command tx timeout [ 429.239210][T18317] netlink: 'syz.0.3132': attribute type 3 has an invalid length. [ 429.250942][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3133'. [ 429.291084][T18317] block nbd0: NBD_DISCONNECT [ 429.336470][T18268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.362198][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.428875][T18268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.472349][T18268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.482414][T18268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.533410][T18268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.573691][T18326] netlink: 'syz.4.3134': attribute type 13 has an invalid length. [ 429.582596][T18326] netlink: 'syz.4.3134': attribute type 12 has an invalid length. [ 429.594391][ T50] Bluetooth: hci2: command tx timeout [ 429.808318][T18268] hsr_slave_0: entered promiscuous mode [ 429.829394][T18268] hsr_slave_1: entered promiscuous mode [ 429.845163][T18268] debugfs: 'hsr0' already exists in 'hsr' [ 429.854472][T18268] Cannot create hsr debugfs directory [ 430.064406][T18354] ip6erspan0: entered allmulticast mode [ 430.164127][T18351] lo speed is unknown, defaulting to 1000 [ 430.449054][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 430.581998][T18366] bond8: option all_slaves_active: invalid value (5) [ 430.590414][T18366] bond8 (unregistering): Released all slaves [ 431.331649][T18389] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.3152'. [ 431.482111][T18398] netlink: 'syz.4.3154': attribute type 8 has an invalid length. [ 431.670428][T18268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.677927][ T50] Bluetooth: hci2: command tx timeout [ 431.700066][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.708919][T18268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.722562][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.731950][T18268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.748851][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.758164][T18268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.776247][T18268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.996946][T18424] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 432.061349][T18424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.092643][T18268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.129305][T18268] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.144629][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.151877][ T9530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.210399][ T9533] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.217675][ T9533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.292629][T18430] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 432.892601][T18268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.901977][T18459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3168'. [ 432.971122][T18463] tipc: Enabling of bearer rejected, failed to enable media [ 433.129241][T18268] veth0_vlan: entered promiscuous mode [ 433.152688][T18466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3170'. [ 433.167789][T18468] openvswitch: netlink: Flow key attr not present in new flow. [ 433.179879][T18464] lo speed is unknown, defaulting to 1000 [ 433.196122][T18468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3171'. [ 433.240639][T18268] veth1_vlan: entered promiscuous mode [ 433.379793][T18268] veth0_macvtap: entered promiscuous mode [ 433.451636][T18268] veth1_macvtap: entered promiscuous mode [ 433.754546][ T50] Bluetooth: hci2: command tx timeout [ 433.827688][T18484] netlink: 'syz.0.3175': attribute type 142 has an invalid length. [ 433.907315][T18482] netlink: 'syz.1.3176': attribute type 9 has an invalid length. [ 433.932789][T18486] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 434.082605][T18479] lo speed is unknown, defaulting to 1000 [ 434.104821][T18268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.273553][T18493] netlink: 'syz.1.3179': attribute type 10 has an invalid length. [ 434.291978][T18268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.333551][T18498] netlink: 'syz.4.3178': attribute type 10 has an invalid length. [ 434.389360][T18500] netlink: 'syz.4.3178': attribute type 10 has an invalid length. [ 434.438097][T18493] team0: Port device dummy0 added [ 434.506269][T18498] team0: Port device dummy0 added [ 434.587476][T18500] team0: Port device dummy0 removed [ 434.631388][T18500] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 434.685856][T18502] veth0: entered promiscuous mode [ 434.952610][T18508] bond0: entered promiscuous mode [ 434.974065][T18508] bond_slave_0: entered promiscuous mode [ 434.988506][T18508] bond_slave_1: entered promiscuous mode [ 435.012729][T12764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.107859][T12764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.136648][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.204385][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.212673][T18517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'. [ 435.285823][T18491] bond0: left promiscuous mode [ 435.304134][T18491] bond_slave_0: left promiscuous mode [ 435.317704][T18491] bond_slave_1: left promiscuous mode [ 435.343191][T18491] veth0: left promiscuous mode [ 435.525620][ T9533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.567262][ T9533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.671110][ T9552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.689351][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 435.691456][ T9552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.757326][T18526] netlink: zone id is out of range [ 435.784000][T18526] netlink: zone id is out of range [ 435.803994][T18526] netlink: zone id is out of range [ 435.828107][T18526] netlink: zone id is out of range [ 435.846202][ T50] Bluetooth: hci2: command tx timeout [ 435.866638][T18526] netlink: zone id is out of range [ 435.881916][T18526] netlink: zone id is out of range [ 435.925827][T18526] netlink: zone id is out of range [ 435.931687][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3188'. [ 435.971673][T18526] netlink: zone id is out of range [ 435.992810][T18529] netlink: 'syz.4.3188': attribute type 7 has an invalid length. [ 436.028994][T18526] netlink: zone id is out of range [ 436.061766][T18529] netlink: 'syz.4.3188': attribute type 8 has an invalid length. [ 436.099832][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 436.233737][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.252130][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.263582][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.270929][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 436.298373][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.308054][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.447789][ T30] audit: type=1800 audit(1776407669.081:8): pid=18542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3190" name="memory.events" dev="tmpfs" ino=125 res=0 errno=0 [ 436.603034][T18538] lo speed is unknown, defaulting to 1000 [ 436.723335][T18547] lo speed is unknown, defaulting to 1000 [ 437.396980][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 437.451855][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 437.540484][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 437.568828][T18591] netlink: 'syz.4.3203': attribute type 1 has an invalid length. [ 437.576921][T18591] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3203'. [ 437.578997][T18582] bridge0: entered promiscuous mode [ 437.614167][T18582] macvtap1: entered promiscuous mode [ 437.632514][T18582] macvtap1: entered allmulticast mode [ 437.656064][T18582] bridge0: entered allmulticast mode [ 437.690469][T18584] bridge0: left allmulticast mode [ 437.713433][T18584] bridge0: left promiscuous mode [ 437.981097][T18606] syzkaller0: entered promiscuous mode [ 437.990784][T18606] syzkaller0: entered allmulticast mode [ 438.193151][T18538] chnl_net:caif_netlink_parms(): no params data found [ 438.394402][ T50] Bluetooth: hci3: command tx timeout [ 438.758845][T18538] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.768900][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.781472][T18538] bridge_slave_0: entered allmulticast mode [ 438.803642][T18538] bridge_slave_0: entered promiscuous mode [ 438.866606][T18642] lo speed is unknown, defaulting to 1000 [ 438.872612][T18538] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.892184][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.908904][T18538] bridge_slave_1: entered allmulticast mode [ 438.919356][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'. [ 438.968918][T18538] bridge_slave_1: entered promiscuous mode [ 439.272520][T18662] Bluetooth: MGMT ver 1.23 [ 439.283381][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.329786][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.369412][T18669] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 439.629146][ T50] block nbd0: Receive control failed (result -1) [ 439.734840][T18538] team0: Port device team_slave_0 added [ 439.752383][T18538] team0: Port device team_slave_1 added [ 439.762838][T18680] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 439.832815][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.854950][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.898639][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.912666][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.923297][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.945288][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.996152][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.334876][T18538] hsr_slave_0: entered promiscuous mode [ 440.352927][T18538] hsr_slave_1: entered promiscuous mode [ 440.361085][T18538] debugfs: 'hsr0' already exists in 'hsr' [ 440.367549][T18538] Cannot create hsr debugfs directory [ 440.479333][ T50] Bluetooth: hci3: command tx timeout [ 440.857126][T18705] lo speed is unknown, defaulting to 1000 [ 441.046798][T18538] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.172632][T18722] netlink: 'syz.1.3230': attribute type 29 has an invalid length. [ 441.198423][T18729] netlink: 'syz.2.3231': attribute type 10 has an invalid length. [ 441.222231][T18722] __nla_validate_parse: 3 callbacks suppressed [ 441.222252][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 441.385256][T18729] team0: Port device dummy0 added [ 441.420927][T18538] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.528603][T18739] netlink: 'syz.1.3232': attribute type 1 has an invalid length. [ 441.553770][T18739] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3232'. [ 441.589612][T18733] veth0: entered promiscuous mode [ 441.623672][T18729] bond0: entered promiscuous mode [ 441.640776][T18729] bond_slave_0: entered promiscuous mode [ 441.647953][T18729] bond_slave_1: entered promiscuous mode [ 441.863717][T18538] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.986542][T18538] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.151489][T18728] bond0: left promiscuous mode [ 442.164211][T18728] bond_slave_0: left promiscuous mode [ 442.176417][T18728] bond_slave_1: left promiscuous mode [ 442.182836][T18728] veth0: left promiscuous mode [ 442.554076][ T50] Bluetooth: hci3: command tx timeout [ 442.580845][T18761] IPVS: Scheduler module ip_vs_ not found [ 442.653489][T18779] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 442.840166][T18783] veth1_macvtap: renamed from veth0_vlan [ 442.993794][T18538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.041560][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.062923][T18538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.097230][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.110579][T18538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.145142][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.168786][T18538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.196942][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.237199][T18804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 443.576756][T18538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.637598][T18538] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.688918][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.696164][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.756557][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.763868][ T9530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.972881][T13390] IPVS: starting estimator thread 0... [ 444.109554][T18826] lo speed is unknown, defaulting to 1000 [ 444.125195][T18831] IPVS: using max 31 ests per chain, 74400 per kthread [ 444.634279][ T50] Bluetooth: hci3: command tx timeout [ 444.698216][T18538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.953696][T18851] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3253'. [ 445.211579][T18538] veth0_vlan: entered promiscuous mode [ 445.261934][T18850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 445.280315][T18538] veth1_vlan: entered promiscuous mode [ 445.371634][T18866] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.3256'. [ 445.427286][T18866] netlink: 'syz.4.3256': attribute type 10 has an invalid length. [ 445.453319][T18866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3256'. [ 445.471254][T18869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 445.499282][T18866] dummy0: entered promiscuous mode [ 445.521013][T18866] bond0: (slave dummy0): Releasing backup interface [ 445.552059][T18866] bridge0: port 3(dummy0) entered blocking state [ 445.586249][T18866] bridge0: port 3(dummy0) entered disabled state [ 445.598664][T18866] dummy0: entered allmulticast mode [ 445.625519][ T5490] veth1_macvtap: left promiscuous mode [ 445.677891][ T5490] veth1_macvtap: entered promiscuous mode [ 445.693709][T18538] veth0_macvtap: entered promiscuous mode [ 445.776533][T18538] veth1_macvtap: entered promiscuous mode [ 445.873780][T18538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.901115][T18880] x_tables: duplicate underflow at hook 1 [ 445.907519][T18538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.931050][T18878] syzkaller0: entered promiscuous mode [ 445.936998][T18878] syzkaller0: entered allmulticast mode [ 445.958782][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.974766][ T1114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.990774][ T1114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.020550][ T1114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.327136][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.361935][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.387025][T18884] Bluetooth: MGMT ver 1.23 [ 446.505052][ T9549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.524749][ T9549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.560909][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3266'. [ 446.601342][T18892] net_ratelimit: 338 callbacks suppressed [ 446.601363][T18892] openvswitch: netlink: Flow key attr not present in new flow. [ 446.875157][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3269'. [ 447.228089][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'. [ 447.267554][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3273'. [ 447.289682][T18928] netlink: 2268 bytes leftover after parsing attributes in process `syz.0.3275'. [ 447.302353][T18924] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 447.313730][T18924] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 447.459309][T18934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3276'. [ 447.651333][T18941] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3279'. [ 447.667375][T18940] netlink: 'syz.1.3278': attribute type 1 has an invalid length. [ 447.682569][T18945] openvswitch: netlink: Key type 122 is out of range max 32 [ 447.738565][T18940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.819030][T18947] bond2: (slave gretap1): making interface the new active one [ 447.835282][T18947] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 447.898080][T18947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 448.235931][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 448.652157][T18972] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3287'. [ 448.689454][T18972] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 449.334853][T19011] netlink: 'syz.1.3297': attribute type 58 has an invalid length. [ 449.526489][T19018] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 449.591590][T19018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.665355][T19026] delete_channel: no stack [ 449.859744][T19038] tipc: Started in network mode [ 449.896251][T19038] tipc: Node identity ac14140f, cluster identity 4711 [ 449.942286][T19038] tipc: New replicast peer: 255.255.255.255 [ 449.967386][T19038] tipc: Enabled bearer , priority 10 [ 450.051109][T19046] IPv6: sit1: Disabled Multicast RS [ 450.471590][T19059] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.479172][T19059] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.595302][T19075] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 450.812250][T19073] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.885547][T19059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.910715][T19059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.986292][T19059] veth1_macvtap: left promiscuous mode [ 451.096245][T19059] macvtap1: left promiscuous mode [ 451.111490][T19059] macvtap1: left allmulticast mode [ 451.138947][T19059] veth1_vlan: left allmulticast mode [ 451.156292][T19059] macvtap2: left promiscuous mode [ 451.162698][T19059] macvtap2: left allmulticast mode [ 451.172096][T19059] geneve2: left promiscuous mode [ 451.203729][ T796] tipc: Node number set to 2886997007 [ 451.229455][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.267157][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.316746][ T9552] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.364118][ T9552] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.645656][T19112] __nla_validate_parse: 7 callbacks suppressed [ 451.645678][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 451.832065][T19117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3324'. [ 452.055353][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'. [ 452.067583][T19129] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3328'. [ 452.131296][T19140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.135392][T19138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.453286][T19157] No such timeout policy "syz0" [ 452.500629][T19157] netlink: 'syz.0.3331': attribute type 11 has an invalid length. [ 452.545774][T19155] lo speed is unknown, defaulting to 1000 [ 452.914720][ T50] block nbd35: Receive control failed (result -32) [ 452.923483][ T5837] block nbd36: Receive control failed (result -32) [ 452.962163][T19175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3335'. [ 453.149942][T19179] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 453.238700][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 453.278970][T19185] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 453.340354][T19192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 453.458980][T19190] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 453.602454][T19193] macvlan2: entered promiscuous mode [ 453.628324][T19193] macvlan2: entered allmulticast mode [ 453.647246][T19193] bond1: entered promiscuous mode [ 453.661717][T19193] bridge2: entered promiscuous mode [ 453.699058][T19193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.737391][T19193] bond1: left promiscuous mode [ 453.750563][T19193] bridge2: left promiscuous mode [ 453.949859][T19214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3343'. [ 453.952485][T19213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3343'. [ 453.976108][T19207] gretap1: entered promiscuous mode [ 454.026721][T19207] batman_adv: batadv0: Adding interface: gretap1 [ 454.087323][T19207] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 454.115825][T13411] IPVS: starting estimator thread 0... [ 454.146284][T19207] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 454.214913][T19224] IPVS: using max 22 ests per chain, 52800 per kthread [ 454.279901][T19221] netlink: 'syz.0.3344': attribute type 4 has an invalid length. [ 454.308900][T19231] openvswitch: netlink: Message has 8 unknown bytes. [ 454.343178][T19231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.480270][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3348'. [ 454.546644][T19235] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 454.685489][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3349'. [ 455.022378][T19259] bridge0: entered promiscuous mode [ 455.096646][T19257] netlink: 'syz.0.3353': attribute type 83 has an invalid length. [ 455.215223][T19265] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 455.249794][T19268] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 455.323471][T19273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.431673][T19265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.462469][T19268] netlink: 'syz.3.3357': attribute type 1 has an invalid length. [ 456.235607][T19287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.426397][T19287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.509258][T19301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.599691][T19287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.757294][T19287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.905179][T19314] netlink: 'syz.1.3369': attribute type 2 has an invalid length. [ 456.926453][T19309] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.939951][T19309] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.961523][T19318] netlink: 'syz.1.3369': attribute type 2 has an invalid length. [ 457.092268][T19314] : entered promiscuous mode [ 457.124506][ T5837] Bluetooth: hci3: command tx timeout [ 457.197726][T19325] netlink: 'syz.0.3370': attribute type 39 has an invalid length. [ 457.236423][T19311] syzkaller0: entered promiscuous mode [ 457.242116][T19311] syzkaller0: entered allmulticast mode [ 457.252959][T19318] : left promiscuous mode [ 459.907206][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.007731][T19341] __nla_validate_parse: 4 callbacks suppressed [ 460.007752][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 460.061119][ T9533] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.193421][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.208801][T19346] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3375'. [ 460.218959][T19343] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3374'. [ 460.271336][T19351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3376'. [ 460.291918][T19351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3376'. [ 460.309546][ T1114] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.418550][T19355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3377'. [ 460.429994][T19346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 460.851489][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 460.882547][T19379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3380'. [ 460.904313][T19379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3380'. [ 460.919322][T19379] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3380'. [ 461.229289][T19391] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.276780][T19391] bond2: (slave lo): Enslaving as an active interface with an up link [ 461.298737][T19391] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.442593][T19390] syzkaller0: entered promiscuous mode [ 461.448446][T19390] syzkaller0: entered allmulticast mode [ 463.571091][T19363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.788402][T19430] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 463.796797][T19430] netlink: 'syz.4.3387': attribute type 3 has an invalid length. [ 463.805783][T19430] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 464.766311][T19448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.799451][T19456] bridge1: entered promiscuous mode [ 464.814089][T19456] bridge1: entered allmulticast mode [ 464.837508][T19456] team0: Port device bridge1 added [ 464.853223][T19459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.918932][T19456] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 464.937972][T19459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.071897][T19461] bridge0: port 3(team0) entered blocking state [ 465.085659][T19466] __nla_validate_parse: 7 callbacks suppressed [ 465.085687][T19466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3397'. [ 465.101867][T19461] bridge0: port 3(team0) entered disabled state [ 465.109588][T19461] team0: entered allmulticast mode [ 465.120338][T19461] team_slave_0: entered allmulticast mode [ 465.126844][T19461] team_slave_1: entered allmulticast mode [ 465.133380][T19461] dummy0: entered allmulticast mode [ 465.150549][T19461] team0: entered promiscuous mode [ 465.156989][T19461] team_slave_0: entered promiscuous mode [ 465.163042][T19461] team_slave_1: entered promiscuous mode [ 465.173949][T19461] dummy0: entered promiscuous mode [ 465.183415][T19461] bridge0: port 3(team0) entered blocking state [ 465.190940][T19461] bridge0: port 3(team0) entered forwarding state [ 465.885849][T19503] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 465.905697][T19503] netlink: 'syz.4.3405': attribute type 2 has an invalid length. [ 465.925512][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 465.972731][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3403'. [ 466.179198][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 466.203519][T19517] syzkaller1: entered promiscuous mode [ 466.229562][T19517] syzkaller1: entered allmulticast mode [ 466.414336][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 466.691715][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3413'. [ 466.722596][T19543] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.009858][T19550] netlink: 'syz.2.3418': attribute type 10 has an invalid length. [ 467.215853][T19557] ipt_ECN: cannot use operation on non-tcp rule [ 467.416565][T19563] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 467.440266][T19566] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 467.450772][T19563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.476393][T19566] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.536829][T19569] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3424'. [ 467.718624][T19577] pimreg: entered allmulticast mode [ 467.807580][T19577] pimreg: left allmulticast mode [ 467.824630][T19550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 467.906773][T19584] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 467.940138][T19587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3428'. [ 468.017760][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 469.079103][T19614] netlink: 'syz.3.3435': attribute type 9 has an invalid length. [ 469.621190][T19638] openvswitch: netlink: EtherType 50e is less than min 600 [ 470.293565][T19670] netlink: 'syz.4.3453': attribute type 15 has an invalid length. [ 470.302268][T19669] netlink: 'syz.4.3453': attribute type 15 has an invalid length. [ 470.462336][T19673] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 470.557645][T19673] bond2: entered promiscuous mode [ 470.588374][T19673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.628737][T13389] IPVS: starting estimator thread 0... [ 470.670940][T19686] __nla_validate_parse: 4 callbacks suppressed [ 470.670963][T19686] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3457'. [ 470.720515][T19687] bond2: (slave bridge3): making interface the new active one [ 470.741798][T19687] bridge3: entered promiscuous mode [ 470.744156][T19685] IPVS: using max 26 ests per chain, 62400 per kthread [ 470.764156][T19687] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 470.805943][T19684] tipc: Enabled bearer , priority 10 [ 471.255659][T19681] lo speed is unknown, defaulting to 1000 [ 471.447030][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3459'. [ 471.712740][T19712] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 471.828048][T19712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.896579][T19714] bond3: (slave dummy0): making interface the new active one [ 471.940538][T19714] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 472.025078][T19717] bond3 (unregistering): (slave dummy0): Releasing active interface [ 472.052851][T19717] bond3 (unregistering): Released all slaves [ 472.290520][T19726] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3466'. [ 472.323325][T19726] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 472.976950][T19739] lo speed is unknown, defaulting to 1000 [ 473.037673][T19736] smc: net device wlan0 applied user defined pnetid SYZ0 [ 473.058457][T19757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3475'. [ 473.134850][T19756] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 473.156016][T19756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3475'. [ 473.168700][T19756] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 473.196154][T19756] netlink: 'syz.1.3475': attribute type 8 has an invalid length. [ 473.205940][T19756] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3475'. [ 473.219696][T19760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3476'. [ 473.239935][T19762] FAULT_INJECTION: forcing a failure. [ 473.239935][T19762] name failslab, interval 1, probability 0, space 0, times 0 [ 473.270141][T19762] CPU: 1 UID: 0 PID: 19762 Comm: syz.3.3477 Not tainted syzkaller #0 PREEMPT(full) [ 473.270171][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 473.270189][T19762] Call Trace: [ 473.270267][T19762] [ 473.270372][T19762] dump_stack_lvl+0xe8/0x150 [ 473.270510][T19762] should_fail_ex+0x412/0x560 [ 473.270630][T19762] should_failslab+0xa8/0x100 [ 473.270681][T19762] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 473.270726][T19762] ? __get_vm_area_node+0x13f/0x300 [ 473.270786][T19762] __get_vm_area_node+0x13f/0x300 [ 473.270822][T19762] __vmalloc_node_range_noprof+0x372/0x1730 [ 473.270855][T19762] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.270936][T19762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 473.270975][T19762] ? __lock_acquire+0x6b5/0x2cf0 [ 473.271025][T19762] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.271049][T19762] __vmalloc_noprof+0xd2/0x120 [ 473.271080][T19762] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.271107][T19762] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.271138][T19762] bpf_prog_alloc+0x3c/0x1a0 [ 473.271165][T19762] bpf_prog_load+0x7ba/0x1ae0 [ 473.271189][T19762] ? get_pid_task+0x20/0x1f0 [ 473.271237][T19762] ? __pfx_bpf_prog_load+0x10/0x10 [ 473.271260][T19762] ? __might_fault+0xaf/0x130 [ 473.271318][T19762] ? bpf_lsm_bpf+0x9/0x20 [ 473.271357][T19762] ? security_bpf+0x7e/0x2d0 [ 473.271476][T19762] __sys_bpf+0x618/0x950 [ 473.271503][T19762] ? __pfx___sys_bpf+0x10/0x10 [ 473.271542][T19762] ? ksys_write+0x242/0x270 [ 473.271590][T19762] ? __pfx_ksys_write+0x10/0x10 [ 473.271627][T19762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.271674][T19762] __x64_sys_bpf+0x7c/0x90 [ 473.271696][T19762] do_syscall_64+0x15f/0xf80 [ 473.271824][T19762] ? trace_irq_disable+0x3b/0x140 [ 473.271855][T19762] ? clear_bhb_loop+0x40/0x90 [ 473.271882][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.271909][T19762] RIP: 0033:0x7fade839c819 [ 473.271958][T19762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.272006][T19762] RSP: 002b:00007fade91f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.272059][T19762] RAX: ffffffffffffffda RBX: 00007fade8615fa0 RCX: 00007fade839c819 [ 473.272075][T19762] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 473.272089][T19762] RBP: 00007fade91f9090 R08: 0000000000000000 R09: 0000000000000000 [ 473.272102][T19762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.272115][T19762] R13: 00007fade8616038 R14: 00007fade8615fa0 R15: 00007ffe6e3f0d78 [ 473.272151][T19762] [ 473.425569][T19762] syz.3.3477: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 473.678092][T19762] CPU: 1 UID: 0 PID: 19762 Comm: syz.3.3477 Not tainted syzkaller #0 PREEMPT(full) [ 473.678124][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 473.678138][T19762] Call Trace: [ 473.678147][T19762] [ 473.678157][T19762] dump_stack_lvl+0xe8/0x150 [ 473.678195][T19762] warn_alloc+0x249/0x340 [ 473.678236][T19762] ? __pfx_warn_alloc+0x10/0x10 [ 473.678272][T19762] ? __get_vm_area_node+0x13f/0x300 [ 473.678310][T19762] ? __get_vm_area_node+0x2b5/0x300 [ 473.678347][T19762] __vmalloc_node_range_noprof+0x397/0x1730 [ 473.678415][T19762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 473.678454][T19762] ? __lock_acquire+0x6b5/0x2cf0 [ 473.678489][T19762] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.678512][T19762] __vmalloc_noprof+0xd2/0x120 [ 473.678543][T19762] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.678571][T19762] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 473.678601][T19762] bpf_prog_alloc+0x3c/0x1a0 [ 473.678629][T19762] bpf_prog_load+0x7ba/0x1ae0 [ 473.678653][T19762] ? get_pid_task+0x20/0x1f0 [ 473.678689][T19762] ? __pfx_bpf_prog_load+0x10/0x10 [ 473.678713][T19762] ? __might_fault+0xaf/0x130 [ 473.678764][T19762] ? bpf_lsm_bpf+0x9/0x20 [ 473.678792][T19762] ? security_bpf+0x7e/0x2d0 [ 473.678822][T19762] __sys_bpf+0x618/0x950 [ 473.678848][T19762] ? __pfx___sys_bpf+0x10/0x10 [ 473.678888][T19762] ? ksys_write+0x242/0x270 [ 473.678923][T19762] ? __pfx_ksys_write+0x10/0x10 [ 473.678960][T19762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.678983][T19762] __x64_sys_bpf+0x7c/0x90 [ 473.679006][T19762] do_syscall_64+0x15f/0xf80 [ 473.679032][T19762] ? trace_irq_disable+0x3b/0x140 [ 473.679056][T19762] ? clear_bhb_loop+0x40/0x90 [ 473.679082][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.679104][T19762] RIP: 0033:0x7fade839c819 [ 473.679125][T19762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.679144][T19762] RSP: 002b:00007fade91f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.679168][T19762] RAX: ffffffffffffffda RBX: 00007fade8615fa0 RCX: 00007fade839c819 [ 473.679184][T19762] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 473.679222][T19762] RBP: 00007fade91f9090 R08: 0000000000000000 R09: 0000000000000000 [ 473.679236][T19762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.679249][T19762] R13: 00007fade8616038 R14: 00007fade8615fa0 R15: 00007ffe6e3f0d78 [ 473.679284][T19762] [ 473.679303][T19762] Mem-Info: [ 473.984535][T19762] active_anon:16367 inactive_anon:0 isolated_anon:0 [ 473.984535][T19762] active_file:3359 inactive_file:40414 isolated_file:0 [ 473.984535][T19762] unevictable:768 dirty:236 writeback:0 [ 473.984535][T19762] slab_reclaimable:13475 slab_unreclaimable:187535 [ 473.984535][T19762] mapped:30990 shmem:3127 pagetables:1330 [ 473.984535][T19762] sec_pagetables:0 bounce:0 [ 473.984535][T19762] kernel_misc_reclaimable:0 [ 473.984535][T19762] free:1200170 free_pcp:15336 free_cma:0 [ 474.072061][T19762] Node 0 active_anon:65668kB inactive_anon:0kB active_file:13436kB inactive_file:161452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:58324kB dirty:940kB writeback:0kB shmem:11172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18324kB pagetables:5160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 474.117606][T19762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65536kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 474.194351][T19762] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 474.268852][T19762] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 474.283482][T19762] Node 0 DMA32 free:1027656kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52568kB inactive_anon:0kB active_file:13436kB inactive_file:161452kB unevictable:1536kB writepending:940kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:41356kB local_pcp:17152kB free_cma:0kB [ 474.333093][T19762] lowmem_reserve[]: 0 0 0 0 0 [ 474.343762][T19762] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 474.378788][T19762] lowmem_reserve[]: 0 0 0 0 0 [ 474.383666][T19762] Node 1 Normal free:3763168kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31156kB local_pcp:31156kB free_cma:0kB [ 474.448712][T19762] lowmem_reserve[]: 0 0 0 0 0 [ 474.469471][T19762] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 474.541976][T19762] Node 0 DMA32: 9450*4kB (UME) 5152*8kB (UM) 2431*16kB (UME) 62*32kB (UM) 23*64kB (UME) 521*128kB (UME) 702*256kB (U) 370*512kB (UM) 237*1024kB (UM) 113*2048kB (UME) 0*4096kB = 1031320kB [ 474.605843][T19762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 474.643546][T19762] Node 1 Normal: 3*4kB (U) 5*8kB (UM) 10*16kB (UM) 12*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 915*4096kB (M) = 3763220kB [ 474.730646][T19762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.777263][T19762] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 474.827756][T19762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.861954][T19762] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.907243][T19762] 45181 total pagecache pages [ 474.922890][T19762] 0 pages in swap cache [ 474.937233][T19762] Free swap = 124996kB [ 474.950444][T19762] Total swap = 124996kB [ 474.964422][T19762] 2097051 pages RAM [ 474.972930][T19762] 0 pages HighMem/MovableOnly [ 474.988877][T19762] 427401 pages reserved [ 475.000822][T19762] 0 pages cma reserved [ 475.191026][T19805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3487'. [ 475.214436][T19806] xt_l2tp: invalid flags combination: 0 [ 475.703185][T19815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.452455][T19833] syzkaller1: entered promiscuous mode [ 476.476301][T19833] syzkaller1: entered allmulticast mode [ 477.379512][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 477.420291][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 477.533615][T19859] lo speed is unknown, defaulting to 1000 [ 477.560702][T19863] netlink: 'syz.1.3509': attribute type 12 has an invalid length. [ 477.569906][T19863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3509'. [ 477.591855][T19863] netlink: 'syz.1.3509': attribute type 8 has an invalid length. [ 477.607044][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3506'. [ 477.819868][T19865] tipc: Started in network mode [ 477.847583][T19865] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 477.863363][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3510'. [ 477.879898][T19865] tipc: Enabling of bearer rejected, failed to enable media [ 477.893156][T19873] FAULT_INJECTION: forcing a failure. [ 477.893156][T19873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.912048][T19873] CPU: 0 UID: 0 PID: 19873 Comm: syz.1.3511 Not tainted syzkaller #0 PREEMPT(full) [ 477.912076][T19873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 477.912089][T19873] Call Trace: [ 477.912098][T19873] [ 477.912107][T19873] dump_stack_lvl+0xe8/0x150 [ 477.912152][T19873] should_fail_ex+0x412/0x560 [ 477.912188][T19873] _copy_to_user+0x31/0xb0 [ 477.912305][T19873] bpf_test_finish+0x1db/0x6b0 [ 477.912440][T19873] ? __pfx_bpf_test_finish+0x10/0x10 [ 477.912478][T19873] ? _copy_from_user+0x94/0xb0 [ 477.912500][T19873] ? bpf_test_init+0x113/0x150 [ 477.912531][T19873] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 477.912581][T19873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 477.912617][T19873] ? __fget_files+0x2a/0x420 [ 477.912658][T19873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 477.912690][T19873] bpf_prog_test_run+0x2c7/0x340 [ 477.912720][T19873] __sys_bpf+0x643/0x950 [ 477.912745][T19873] ? __pfx___sys_bpf+0x10/0x10 [ 477.912784][T19873] ? ksys_write+0x242/0x270 [ 477.912818][T19873] ? __pfx_ksys_write+0x10/0x10 [ 477.912854][T19873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.912878][T19873] __x64_sys_bpf+0x7c/0x90 [ 477.912898][T19873] do_syscall_64+0x15f/0xf80 [ 477.912924][T19873] ? trace_irq_disable+0x3b/0x140 [ 477.912947][T19873] ? clear_bhb_loop+0x40/0x90 [ 477.912973][T19873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.912994][T19873] RIP: 0033:0x7ff0bdb9c819 [ 477.913014][T19873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.913032][T19873] RSP: 002b:00007ff0beac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 477.913056][T19873] RAX: ffffffffffffffda RBX: 00007ff0bde15fa0 RCX: 00007ff0bdb9c819 [ 477.913071][T19873] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 477.913084][T19873] RBP: 00007ff0beac8090 R08: 0000000000000000 R09: 0000000000000000 [ 477.913096][T19873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.913108][T19873] R13: 00007ff0bde16038 R14: 00007ff0bde15fa0 R15: 00007ffd3f6928a8 [ 477.913151][T19873] [ 478.519973][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 478.591325][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'. [ 478.859033][T19895] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 478.885709][T19895] bond3 (unregistering): Released all slaves [ 478.940193][T19912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3521'. [ 478.975196][T19907] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3521'. [ 479.388387][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3523'. [ 479.619280][T19926] FAULT_INJECTION: forcing a failure. [ 479.619280][T19926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.661468][T19926] CPU: 1 UID: 0 PID: 19926 Comm: syz.2.3525 Not tainted syzkaller #0 PREEMPT(full) [ 479.661499][T19926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.661513][T19926] Call Trace: [ 479.661521][T19926] [ 479.661530][T19926] dump_stack_lvl+0xe8/0x150 [ 479.661569][T19926] should_fail_ex+0x412/0x560 [ 479.661606][T19926] _copy_to_user+0x31/0xb0 [ 479.661632][T19926] bpf_test_finish+0x22c/0x6b0 [ 479.661675][T19926] ? __pfx_bpf_test_finish+0x10/0x10 [ 479.661714][T19926] ? _copy_from_user+0x94/0xb0 [ 479.661733][T19926] ? bpf_test_init+0x113/0x150 [ 479.661775][T19926] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 479.661826][T19926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 479.661865][T19926] ? __fget_files+0x2a/0x420 [ 479.661899][T19926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 479.661932][T19926] bpf_prog_test_run+0x2c7/0x340 [ 479.661963][T19926] __sys_bpf+0x643/0x950 [ 479.661989][T19926] ? __pfx___sys_bpf+0x10/0x10 [ 479.662030][T19926] ? ksys_write+0x242/0x270 [ 479.662065][T19926] ? __pfx_ksys_write+0x10/0x10 [ 479.662102][T19926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.662127][T19926] __x64_sys_bpf+0x7c/0x90 [ 479.662148][T19926] do_syscall_64+0x15f/0xf80 [ 479.662175][T19926] ? trace_irq_disable+0x3b/0x140 [ 479.662199][T19926] ? clear_bhb_loop+0x40/0x90 [ 479.662236][T19926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.662258][T19926] RIP: 0033:0x7f142ef9c819 [ 479.662278][T19926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.662298][T19926] RSP: 002b:00007f142fe51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.662323][T19926] RAX: ffffffffffffffda RBX: 00007f142f215fa0 RCX: 00007f142ef9c819 [ 479.662339][T19926] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 479.662354][T19926] RBP: 00007f142fe51090 R08: 0000000000000000 R09: 0000000000000000 [ 479.662368][T19926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.662381][T19926] R13: 00007f142f216038 R14: 00007f142f215fa0 R15: 00007ffe8c51b678 [ 479.662417][T19926] [ 480.213591][T19946] syzkaller0: entered promiscuous mode [ 480.231746][T19946] syzkaller0: entered allmulticast mode [ 480.336477][ T30] audit: type=1107 audit(1776407712.971:9): pid=19938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 480.536561][T19958] sctp: [Deprecated]: syz.1.3536 (pid 19958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.536561][T19958] Use struct sctp_sack_info instead [ 480.869085][T19962] lo speed is unknown, defaulting to 1000 [ 481.081978][T19966] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 481.212492][T19964] lo speed is unknown, defaulting to 1000 [ 481.670620][T19979] dummy0: entered promiscuous mode [ 481.677883][T19979] dummy0: entered allmulticast mode [ 482.042069][T19999] bond3: Removing last ns target with arp_interval on [ 482.087416][T20006] netlink: 'syz.0.3549': attribute type 2 has an invalid length. [ 482.119257][T20006] sctp: [Deprecated]: syz.0.3549 (pid 20006) Use of int in max_burst socket option. [ 482.119257][T20006] Use struct sctp_assoc_value instead [ 482.221860][T20009] netlink: 'syz.1.3550': attribute type 39 has an invalid length. [ 482.525240][T20015] __nla_validate_parse: 3 callbacks suppressed [ 482.525261][T20015] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3552'. [ 482.586117][T20015] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3552'. [ 482.874712][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 483.069297][T20035] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3558'. [ 483.085220][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3558'. [ 483.132319][T20023] netlink: 'syz.3.3554': attribute type 1 has an invalid length. [ 483.180514][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3560'. [ 483.189961][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 483.204089][T20023] netlink: 'syz.3.3554': attribute type 1 has an invalid length. [ 483.277550][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'. [ 483.301288][T20043] bridge0: port 3(team0) entered disabled state [ 483.308974][T20043] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.316937][T20043] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.543536][T20061] IPVS: length: 35 != 24 [ 483.657749][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.678775][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.875567][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3564'. [ 483.901874][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 483.987872][ T9530] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.097336][ T9530] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.152338][ T9530] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.300035][ T9530] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.735243][T20079] lo speed is unknown, defaulting to 1000 [ 484.986026][T20086] lo speed is unknown, defaulting to 1000 [ 485.471225][T20095] syzkaller1: entered allmulticast mode [ 486.292344][T20118] netlink: 'syz.2.3580': attribute type 21 has an invalid length. [ 486.545030][T20140] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.842671][T20148] lo speed is unknown, defaulting to 1000 [ 487.063156][T20159] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 487.092589][T20159] syzkaller1: linktype set to 825 [ 487.462801][T20175] netlink: 'syz.3.3596': attribute type 64 has an invalid length. [ 487.752967][T20194] __nla_validate_parse: 7 callbacks suppressed [ 487.752989][T20194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3600'. [ 487.791869][T20182] lo speed is unknown, defaulting to 1000 [ 488.350536][T20219] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3603'. [ 488.963376][T20246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.995599][T20250] sctp: [Deprecated]: syz.3.3614 (pid 20250) Use of int in max_burst socket option. [ 488.995599][T20250] Use struct sctp_assoc_value instead [ 489.106695][T20251] netlink: 'syz.4.3615': attribute type 20 has an invalid length. [ 489.141197][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 489.339110][ T9552] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.375527][ T9552] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.397063][T20263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3618'. [ 489.495638][ T9552] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.534978][ T9552] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.562996][T20260] netlink: 'syz.2.3618': attribute type 13 has an invalid length. [ 489.587678][T20260] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.3618'. [ 489.681532][T20273] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3621'. [ 489.720551][T20273] tc_dump_action: action bad kind [ 489.766444][T20273] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3621'. [ 490.368410][T20314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3630'. [ 490.388000][T20310] syzkaller1: entered promiscuous mode [ 490.402774][T20310] syzkaller1: entered allmulticast mode [ 490.433456][T20310] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3629'. [ 490.745692][T20326] netlink: 'syz.4.3633': attribute type 1 has an invalid length. [ 490.747192][T20324] netlink: 'syz.4.3633': attribute type 1 has an invalid length. [ 490.775275][T20326] netlink: 'syz.4.3633': attribute type 4 has an invalid length. [ 490.801026][T20326] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3633'. [ 490.810703][T20324] netlink: 'syz.4.3633': attribute type 4 has an invalid length. [ 491.415010][T20367] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 491.820258][T20378] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 492.028905][T20391] Cannot find add_set index 2 as target [ 492.078406][T20392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.894838][T20381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.976804][T20395] team0 (unregistering): Port device team_slave_0 removed [ 494.009119][T20395] team0 (unregistering): Port device team_slave_1 removed [ 494.085673][T20389] lo speed is unknown, defaulting to 1000 [ 494.261199][T20406] bond4: option packets_per_slave: invalid value (1048582) [ 494.299093][T20406] bond4: option packets_per_slave: allowed values 0 - 65535 [ 494.326787][T20406] bond4 (unregistering): Released all slaves [ 494.771815][T20436] netlink: 'syz.3.3662': attribute type 4 has an invalid length. [ 494.899139][T20436] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.027654][T20446] __nla_validate_parse: 5 callbacks suppressed [ 495.027675][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3664'. [ 495.263276][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3668'. [ 495.290965][T20464] netlink: 261 bytes leftover after parsing attributes in process `syz.3.3668'. [ 495.495903][T20469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3669'. [ 495.542187][T20471] lo speed is unknown, defaulting to 1000 [ 495.566413][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 495.582041][T20474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3671'. [ 495.991460][T20495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.010333][T20497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.117989][T20499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3677'. [ 496.372780][T20510] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3679'. [ 496.399148][T20510] syzkaller0: entered promiscuous mode [ 496.408218][T20512] netlink: 'syz.3.3681': attribute type 19 has an invalid length. [ 496.423208][T20510] syzkaller0: entered allmulticast mode [ 496.431898][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'. [ 496.552110][ T9552] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.567905][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 496.601457][ T9552] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.620212][ T9552] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.650869][ T9552] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.164276][T20520] lo speed is unknown, defaulting to 1000 [ 498.286024][T20598] netlink: 'syz.4.3707': attribute type 1 has an invalid length. [ 498.511973][T20598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.614530][T20612] tipc: Started in network mode [ 498.619599][T20612] tipc: Node identity fe44536311ac, cluster identity 4711 [ 498.628227][T20612] tipc: Enabled bearer , priority 0 [ 498.636756][T20612] syzkaller0: entered promiscuous mode [ 498.642479][T20612] syzkaller0: entered allmulticast mode [ 498.781304][T20612] tipc: Resetting bearer [ 498.783309][T20615] netlink: 'syz.2.3711': attribute type 29 has an invalid length. [ 498.838561][T20611] tipc: Resetting bearer [ 498.948221][T20611] tipc: Disabling bearer [ 500.125710][T20700] __nla_validate_parse: 10 callbacks suppressed [ 500.125735][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 500.242154][T20707] tipc: Started in network mode [ 500.257496][T20707] tipc: Node identity ac1414aa, cluster identity 4711 [ 500.302263][T20707] tipc: Enabled bearer , priority 10 [ 500.325712][T20706] tipc: Enabling of bearer rejected, already enabled [ 500.631667][T20719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3736'. [ 500.675653][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 500.961932][T20730] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 500.977214][T20730] bond2 (unregistering): Released all slaves [ 500.978370][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 501.015611][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'. [ 501.186649][T20738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3741'. [ 501.383709][T20748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3744'. [ 501.414345][ T5910] tipc: Node number set to 2886997162 [ 501.811764][T20769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 502.013427][T20779] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.3752'. [ 502.108466][T20779] bridge5: entered promiscuous mode [ 519.148167][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3764'. [ 519.547817][T20841] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 519.822529][T20844] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3771'. [ 520.139754][T20864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3777'. [ 520.315642][T20873] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 520.363724][T20873] syz_tun: entered promiscuous mode [ 520.394723][T20877] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 520.406632][T20873] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 520.473295][T20877] bond4: entered promiscuous mode [ 520.480752][T20877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.645200][T20882] openvswitch: netlink: IP tunnel TTL not specified. [ 520.652546][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3785'. [ 520.662366][T20884] netlink: 'syz.4.3785': attribute type 23 has an invalid length. [ 520.696803][T20877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.714759][T20877] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 520.732416][T20877] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 520.747861][T20877] bond4: (slave ip6gre1): making interface the new active one [ 520.756397][T20877] ip6gre1: entered promiscuous mode [ 520.771604][T20877] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 520.819091][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3783'. [ 520.911928][T20895] netlink: 'syz.3.3787': attribute type 2 has an invalid length. [ 520.943206][T20895] netlink: 'syz.3.3787': attribute type 2 has an invalid length. [ 521.117706][T20900] lo speed is unknown, defaulting to 1000 [ 521.135372][T20897] lo speed is unknown, defaulting to 1000 [ 521.771295][T20933] x_tables: duplicate underflow at hook 3 [ 521.949811][T20942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3801'. [ 522.806772][T20982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3811'. [ 523.064266][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3811'. [ 523.069729][T20992] openvswitch: netlink: IP tunnel dst address not specified [ 523.432809][T20958] udevd[20958]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 523.482798][T20810] udevd[20810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 523.571581][T21003] vlan2: entered promiscuous mode [ 523.885476][T21025] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 524.117271][T21028] lo speed is unknown, defaulting to 1000 [ 524.188832][T21034] bridge_slave_0: left allmulticast mode [ 524.194965][T21034] bridge_slave_0: left promiscuous mode [ 524.201154][T21034] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.216526][T21035] netlink: 'syz.0.3823': attribute type 2 has an invalid length. [ 524.226078][T21034] bridge_slave_1: left allmulticast mode [ 524.231963][T21034] bridge_slave_1: left promiscuous mode [ 524.239294][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.251316][T21035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3823'. [ 524.267330][T21034] bond0: (slave bond_slave_0): Releasing backup interface [ 524.280963][T21034] bond0: (slave bond_slave_1): Releasing backup interface [ 524.296253][T21034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.310144][T21034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.321611][T21034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.331377][T21034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.342239][T21034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.398790][T21031] gtp1: entered promiscuous mode [ 524.405274][T21031] gtp1: entered allmulticast mode [ 524.469355][T21035] bond3: option primary_reselect: invalid value (133) [ 524.479422][T21035] bond3 (unregistering): Released all slaves [ 524.558308][T21038] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 524.618393][T21042] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3823'. [ 524.645687][T13414] syz1: Port: 1 Link DOWN [ 524.694273][T21044] netlink: 'syz.1.3825': attribute type 28 has an invalid length. [ 524.712841][T21035] openvswitch: netlink: Actions may not be safe on all matching packets [ 524.959934][T21053] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3828'. [ 524.973404][T21053] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3828'. [ 525.108430][T21064] netlink: 'syz.1.3831': attribute type 10 has an invalid length. [ 525.509986][T21076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3833'. [ 525.522768][T21068] veth0: entered promiscuous mode [ 525.545829][T21072] bond0: entered promiscuous mode [ 525.563068][T21072] bond_slave_0: entered promiscuous mode [ 525.586042][T21072] bond_slave_1: entered promiscuous mode [ 525.646256][T12764] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.670757][T12764] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.711556][T12764] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.735853][T12764] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.950488][T21086] tipc: Enabled bearer , priority 0 [ 526.118911][T21086] syzkaller0: entered promiscuous mode [ 526.134515][T21086] syzkaller0: entered allmulticast mode [ 526.142602][T21086] tipc: Resetting bearer [ 526.151157][T21063] bond0: left promiscuous mode [ 526.166736][T21100] netlink: 'syz.2.3841': attribute type 13 has an invalid length. [ 526.168492][T21063] bond_slave_0: left promiscuous mode [ 526.175952][T21100] netlink: 'syz.2.3841': attribute type 17 has an invalid length. [ 526.188835][T21063] bond_slave_1: left promiscuous mode [ 526.196643][T21063] veth0: left promiscuous mode [ 526.532718][T21100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.546824][T21100] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.607266][T21124] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3844'. [ 526.622912][T21100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.676145][T21085] tipc: Resetting bearer [ 526.935478][T21129] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3845'. [ 529.034475][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 529.207748][T21085] tipc: Disabling bearer [ 529.434230][T21119] ip_vti0: left promiscuous mode [ 529.439448][T21119] ip_vti0: left allmulticast mode [ 529.691276][T21119] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.699038][T21119] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.955403][T21119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.257516][T21119] ip6erspan0: left allmulticast mode [ 530.274757][T21119] bond4: left promiscuous mode [ 530.279628][T21119] ip6gre1: left promiscuous mode [ 530.299562][T12764] bridge0: port 3(team0) entered blocking state [ 530.306048][T12764] bridge0: port 3(team0) entered forwarding state [ 530.324739][T21129] vlan3: entered promiscuous mode [ 530.427265][T13414] tipc: Node number set to 4024980323 [ 530.452273][ T9552] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.482279][ T9552] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.527444][ T9552] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.658361][ T9552] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.719958][T21160] batadv_slave_0: entered promiscuous mode [ 530.759534][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3854'. [ 530.781468][T21162] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3855'. [ 530.815246][T21159] batadv_slave_0: left promiscuous mode [ 531.258192][T21186] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.303990][T21186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.311340][T21186] IPv6: NLM_F_CREATE should be set when creating new route [ 531.318670][T21186] IPv6: NLM_F_CREATE should be set when creating new route [ 531.325965][T21186] IPv6: NLM_F_CREATE should be set when creating new route [ 531.336451][T21191] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3862'. [ 531.574997][T21181] block nbd37: server does not support multiple connections per device. [ 531.704498][T21181] block nbd37: shutting down sockets [ 532.078645][T21215] bridge0: port 3(team0) entered disabled state [ 532.179310][T21215] macvtap1: left promiscuous mode [ 532.192720][T21215] macvtap1: left allmulticast mode [ 532.203550][T21215] gretap1: left promiscuous mode [ 532.235216][T13393] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 532.800454][T21239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3878'. [ 532.814149][T21240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3878'. [ 532.922120][T21245] netlink: 'syz.4.3879': attribute type 4 has an invalid length. [ 532.964204][T21245] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3879'. [ 533.046376][T21251] netlink: 'syz.0.3881': attribute type 9 has an invalid length. [ 533.083511][T21251] netlink: 'syz.0.3881': attribute type 6 has an invalid length. [ 533.209181][T21265] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3885'. [ 533.642494][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3893'. [ 533.695562][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'. [ 533.726083][T21296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3893'. [ 533.986730][T21288] bridge_slave_1: left allmulticast mode [ 534.003372][T21288] bridge_slave_1: left promiscuous mode [ 534.014350][T21288] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.040043][T21288] bridge_slave_0: left allmulticast mode [ 534.055915][T21288] bridge_slave_0: left promiscuous mode [ 534.068778][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.751936][T21325] netlink: 'syz.3.3895': attribute type 2 has an invalid length. [ 534.823326][T21325] !: entered promiscuous mode [ 534.988082][ T9530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.000109][ T9530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.349331][T21356] macsec1: entered promiscuous mode [ 535.367849][T21359] netlink: 'syz.2.3912': attribute type 16 has an invalid length. [ 535.406983][T21356] macsec1: entered allmulticast mode [ 535.486702][T13416] IPVS: starting estimator thread 0... [ 535.510030][T21368] netem: unknown loss type 11 [ 535.540431][T21368] netem: change failed [ 535.595489][T21369] IPVS: using max 31 ests per chain, 74400 per kthread [ 535.660124][T21374] netlink: 'syz.1.3916': attribute type 1 has an invalid length. [ 535.762992][T21378] syzkaller0: entered promiscuous mode [ 535.782832][T21378] syzkaller0: entered allmulticast mode [ 535.874809][T21378] tcf_pedit_act: 7 callbacks suppressed [ 535.874832][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.889259][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.896104][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.902912][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.909747][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.916588][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.923428][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.930293][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.937137][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.943966][T21378] tc action pedit offset must be on 32 bit boundaries [ 535.950779][T21378] 0: reclassify loop, rule prio 0, protocol 800 [ 536.029929][T21397] __nla_validate_parse: 7 callbacks suppressed [ 536.029950][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 536.221761][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 536.257689][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3920'. [ 536.274329][T21378] dummy0: left allmulticast mode [ 536.282616][T21378] dummy0: left promiscuous mode [ 536.290641][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 536.299182][T21378] bridge0: port 3(dummy0) entered disabled state [ 536.312050][T21403] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3922'. [ 536.321652][T21405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3921'. [ 536.323728][T21404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3921'. [ 536.333674][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 536.349550][T21378] bridge_slave_1: left allmulticast mode [ 536.349576][T21378] bridge_slave_1: left promiscuous mode [ 536.349848][T21378] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.386823][T21378] bridge_slave_0: left allmulticast mode [ 536.392921][T21378] bridge_slave_0: left promiscuous mode [ 536.403354][T21378] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.507743][T21405] : entered promiscuous mode [ 536.610207][T21414] bond4: entered allmulticast mode [ 536.787588][T21414] macvlan2: entered promiscuous mode [ 536.803893][T21414] macvlan2: entered allmulticast mode [ 536.824025][T21414] bond4: entered promiscuous mode [ 536.835715][T21414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 536.872144][T21414] bond4: left promiscuous mode [ 536.932599][T21428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3928'. [ 537.051855][T21433] lo speed is unknown, defaulting to 1000 [ 537.347380][T21454] netlink: 'syz.3.3934': attribute type 10 has an invalid length. [ 537.399698][T21454] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.441516][T21454] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.452145][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 539.280248][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 541.055096][T21520] x_tables: duplicate underflow at hook 1 [ 541.131784][T21522] __nla_validate_parse: 5 callbacks suppressed [ 541.131805][T21522] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3954'. [ 541.213471][T21526] tipc: Enabling of bearer rejected, failed to enable media [ 541.336629][T21534] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3958'. [ 541.460345][T21538] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 541.530298][T21541] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 541.547903][T21541] syzkaller1: linktype set to 768 [ 541.710705][T21546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.729087][T21558] ipt_REJECT: TCP_RESET invalid for non-tcp [ 541.766389][T21546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.803018][T21546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.857384][T21546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.974823][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 542.309686][T21577] xt_hashlimit: size too large, truncated to 1048576 [ 542.357758][T21580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3971'. [ 542.402244][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 542.414777][T21583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3973'. [ 542.424477][T21583] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3973'. [ 542.433566][T21583] netlink: 'syz.0.3973': attribute type 5 has an invalid length. [ 542.442196][T21583] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3973'. [ 542.582603][T21588] "syz.3.3974" (21588) uses obsolete ecb(arc4) skcipher [ 542.630141][T21590] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3975'. [ 542.645901][T21588] netlink: 'syz.3.3974': attribute type 1 has an invalid length. [ 542.683698][T21593] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 542.692306][T21593] netlink: 'syz.0.3976': attribute type 2 has an invalid length. [ 542.707272][T21594] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 542.716535][T21594] netlink: 'syz.0.3976': attribute type 2 has an invalid length. [ 543.307270][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 543.534904][T21630] netlink: 'syz.3.3986': attribute type 2 has an invalid length. [ 544.074942][T21654] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 544.353040][T21673] xt_hashlimit: size too large, truncated to 1048576 [ 544.677031][T21686] netlink: 'syz.1.3998': attribute type 1 has an invalid length. [ 544.957128][T21686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.113029][T21690] bond5: (slave geneve0): making interface the new active one [ 545.202786][T21690] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 545.283050][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 545.304372][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 545.593359][T21712] bond3 (unregistering): Released all slaves [ 545.683392][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 545.718060][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 545.889356][ T5837] block nbd37: Receive control failed (result -32) [ 545.905237][ T5837] block nbd37: Receive control failed (result -32) [ 545.909912][ T50] block nbd37: Receive control failed (result -32) [ 546.248231][T21744] __nla_validate_parse: 11 callbacks suppressed [ 546.248252][T21744] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4012'. [ 546.300065][T21745] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4012'. [ 546.620910][T21755] lo speed is unknown, defaulting to 1000 [ 546.671967][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 546.806520][T21779] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4020'. [ 546.898584][T21774] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.906103][T21774] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.175523][T21798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4023'. [ 547.412315][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 547.571508][ T9532] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.599914][ T9532] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.625723][ T9532] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.641417][ T9532] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.805352][ T9532] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.827850][ T9532] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.844015][ T9532] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.852547][ T9532] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.232506][T21839] lo speed is unknown, defaulting to 1000 [ 548.307016][T21850] tipc: Enabled bearer , priority 0 [ 548.434680][T21853] geneve2: entered promiscuous mode [ 548.476380][T21853] geneve2: entered allmulticast mode [ 548.513738][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 548.792429][T21874] netlink: 'syz.3.4045': attribute type 3 has an invalid length. [ 548.825084][T21874] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 548.861761][T21874] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4045'. [ 549.704713][T21918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4057'. [ 549.817606][T21920] netlink: 'syz.1.4060': attribute type 3 has an invalid length. [ 550.041707][T21925] lo speed is unknown, defaulting to 1000 [ 550.341162][T21944] Set syz1 is full, maxelem 2 reached [ 550.919892][ T50] block nbd38: Receive control failed (result -32) [ 550.930308][ T50] block nbd38: Receive control failed (result -32) [ 550.940237][ T5837] block nbd38: Receive control failed (result -32) [ 551.744698][T21997] sctp: [Deprecated]: syz.4.4077 (pid 21997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.744698][T21997] Use struct sctp_sack_info instead [ 551.814223][T22000] sctp: [Deprecated]: syz.4.4077 (pid 22000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.814223][T22000] Use struct sctp_sack_info instead [ 551.908798][T22005] netlink: 'syz.0.4078': attribute type 2 has an invalid length. [ 552.273722][T22016] lo speed is unknown, defaulting to 1000 [ 552.274820][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 552.322409][T22020] netlink: 'syz.0.4082': attribute type 30 has an invalid length. [ 552.413400][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'. [ 552.426046][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4085'. [ 552.444229][T22020] netlink: 'syz.0.4082': attribute type 30 has an invalid length. [ 552.466999][T16332] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.482931][T16332] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.514483][T21987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4074'. [ 552.569944][T16332] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.594273][T16332] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.766070][T22033] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4086'. [ 552.845002][T22041] TCP: TCP_TX_DELAY enabled [ 553.104920][T22054] netlink: 'syz.4.4091': attribute type 1 has an invalid length. [ 553.145372][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4090'. [ 553.324907][T22061] netlink: 'syz.0.4093': attribute type 5 has an invalid length. [ 553.428556][T22054] veth3: entered allmulticast mode [ 553.461940][T22054] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 553.492010][T22045] lo speed is unknown, defaulting to 1000 [ 553.590722][T22067] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 553.756782][T22079] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4097'. [ 553.819892][T22069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.059637][T22069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.195633][T22069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.349680][T22069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.635989][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 554.715893][ T9532] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.758668][ T9532] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.814440][ T48] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.904074][ T9528] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.132660][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4106'. [ 555.298544][T22119] lo speed is unknown, defaulting to 1000 [ 555.357648][T22123] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 555.369996][T22128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.379351][T22123] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 555.567515][T22143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.898265][T22158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.928223][T22160] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 555.955156][T22160] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4120'. [ 555.970132][T22160] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4120'. [ 556.181043][T22155] syzkaller1: entered promiscuous mode [ 556.214913][T22155] syzkaller1: entered allmulticast mode [ 556.298495][T22164] wg2: entered allmulticast mode [ 556.316315][T22168] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 557.183098][T22192] lo speed is unknown, defaulting to 1000 [ 557.340927][T22209] __nla_validate_parse: 5 callbacks suppressed [ 557.340951][T22209] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4134'. [ 557.523713][ T50] block nbd39: Receive control failed (result -32) [ 557.589439][T22217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4136'. [ 557.599191][T22217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4136'. [ 557.923382][T22222] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 558.104640][T22234] netlink: 280 bytes leftover after parsing attributes in process `syz.1.4141'. [ 558.148146][T22226] lo speed is unknown, defaulting to 1000 [ 558.645908][T22222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.887060][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 558.908231][T22256] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4147'. [ 559.033742][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4149'. [ 559.253716][T22279] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 559.373343][T22284] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4153'. [ 559.386872][T22284] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 559.537572][T22294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4153'. [ 559.560069][T22294] openvswitch: netlink: Flow key attr not present in new flow. [ 559.584248][T22279] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 560.158399][T22319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 560.340599][T22324] lo speed is unknown, defaulting to 1000 [ 560.440287][T22333] netlink: 'syz.2.4166': attribute type 3 has an invalid length. [ 561.057994][T22347] gre0: entered promiscuous mode [ 561.063745][T22347] gre0: entered allmulticast mode [ 561.751027][T22377] hsr0: entered promiscuous mode [ 561.863678][T22382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.950221][T22387] netlink: 'syz.4.4183': attribute type 10 has an invalid length. [ 562.447182][T22407] __nla_validate_parse: 3 callbacks suppressed [ 562.447201][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4188'. [ 562.490805][T22406] bond2: (slave lo): Releasing backup interface [ 562.510690][T22406] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 562.548400][T22406] bond0: (slave syz_tun): Releasing backup interface [ 562.562537][T22406] bond0: (slave team0): Releasing backup interface [ 562.574971][T22406] bridge_slave_0: left allmulticast mode [ 562.580759][T22406] bridge_slave_0: left promiscuous mode [ 562.586888][T22406] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.610229][T22406] bridge_slave_1: left allmulticast mode [ 562.618693][T22406] bridge_slave_1: left promiscuous mode [ 562.629041][T22406] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.651511][T22406] bond0: (slave bond_slave_0): Releasing backup interface [ 562.661808][T22406] bond0: (slave bond_slave_1): Releasing backup interface [ 562.678471][T22406] team0: Port device team_slave_0 removed [ 562.688413][T22406] team0: Port device team_slave_1 removed [ 562.706122][T22406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.726996][T22374] hsr0: left promiscuous mode [ 563.351596][ T5837] block nbd40: Receive control failed (result -32) [ 563.361407][T21959] block nbd40: Receive control failed (result -32) [ 563.375545][ T50] block nbd40: Receive control failed (result -32) [ 563.935968][T22474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4203'. [ 564.815072][T22518] netlink: 'syz.2.4216': attribute type 3 has an invalid length. [ 564.825094][T22520] FAULT_INJECTION: forcing a failure. [ 564.825094][T22520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.858386][T22520] CPU: 0 UID: 0 PID: 22520 Comm: syz.1.4217 Not tainted syzkaller #0 PREEMPT(full) [ 564.858417][T22520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.858432][T22520] Call Trace: [ 564.858441][T22520] [ 564.858452][T22520] dump_stack_lvl+0xe8/0x150 [ 564.858495][T22520] should_fail_ex+0x412/0x560 [ 564.858534][T22520] _copy_from_user+0x2d/0xb0 [ 564.858561][T22520] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 564.858743][T22520] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 564.858788][T22520] ? rcu_is_watching+0x15/0xb0 [ 564.858834][T22520] ? trace_kmalloc+0x2a/0xf0 [ 564.858871][T22520] ip_generic_getfrag+0x149/0x2d0 [ 564.858949][T22520] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 564.858975][T22520] ? __alloc_skb+0x4e5/0x7d0 [ 564.859028][T22520] ? skb_put+0x11b/0x210 [ 564.859063][T22520] __ip_append_data+0x31a5/0x3f30 [ 564.859108][T22520] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 564.859154][T22520] ? __pfx___ip_append_data+0x10/0x10 [ 564.859178][T22520] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.859206][T22520] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.859233][T22520] ip_append_data+0x10d/0x190 [ 564.859259][T22520] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 564.859285][T22520] udp_sendmsg+0x4d9/0x21a0 [ 564.859344][T22520] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 564.859426][T22520] ? __lock_acquire+0x6b5/0x2cf0 [ 564.859460][T22520] ? __pfx_udp_sendmsg+0x10/0x10 [ 564.859506][T22520] ? aa_sk_perm+0x6d5/0x900 [ 564.859542][T22520] ? __pfx_aa_sk_perm+0x10/0x10 [ 564.859568][T22520] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 564.859632][T22520] ? __fget_files+0x3a0/0x420 [ 564.859660][T22520] ? sock_rps_record_flow+0x19/0x350 [ 564.859706][T22520] ? __pfx_inet_sendmsg+0x10/0x10 [ 564.859729][T22520] ? inet_sendmsg+0x29c/0x370 [ 564.859751][T22520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.859785][T22520] ? __pfx_inet_sendmsg+0x10/0x10 [ 564.859808][T22520] __sys_sendto+0x5de/0x710 [ 564.859885][T22520] ? __pfx___sys_sendto+0x10/0x10 [ 564.859912][T22520] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 564.859995][T22520] ? __fget_files+0x3a0/0x420 [ 564.860034][T22520] ? ksys_write+0x242/0x270 [ 564.860087][T22520] ? __pfx_ksys_write+0x10/0x10 [ 564.860126][T22520] __x64_sys_sendto+0xde/0x100 [ 564.860158][T22520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.860184][T22520] do_syscall_64+0x15f/0xf80 [ 564.860210][T22520] ? trace_irq_disable+0x3b/0x140 [ 564.860235][T22520] ? clear_bhb_loop+0x40/0x90 [ 564.860262][T22520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.860284][T22520] RIP: 0033:0x7ff0bdb9c819 [ 564.860305][T22520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.860324][T22520] RSP: 002b:00007ff0beac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.860349][T22520] RAX: ffffffffffffffda RBX: 00007ff0bde15fa0 RCX: 00007ff0bdb9c819 [ 564.860365][T22520] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000004 [ 564.860386][T22520] RBP: 00007ff0beac8090 R08: 0000000000000000 R09: 0000000000000000 [ 564.860400][T22520] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.860414][T22520] R13: 00007ff0bde16038 R14: 00007ff0bde15fa0 R15: 00007ffd3f6928a8 [ 564.860451][T22520] [ 565.505053][T22526] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 565.987037][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 566.109325][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4223'. [ 566.200743][T22550] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4223'. [ 566.286226][T22545] bond8 (unregistering): Released all slaves [ 566.551354][T22573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4228'. [ 566.709060][T22544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 566.756415][T22578] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4227'. [ 566.772668][T22577] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4228'. [ 566.792473][T22578] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4227'. [ 566.833226][T22548] bond8 (unregistering): Released all slaves [ 567.219125][T22585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4230'. [ 567.879643][T22617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.144930][T22623] __nla_validate_parse: 1 callbacks suppressed [ 568.144953][T22623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4241'. [ 568.529028][T22622] lo speed is unknown, defaulting to 1000 [ 568.601132][T22616] netlink: zone id is out of range [ 568.616024][T22616] netlink: zone id is out of range [ 568.637887][T22616] netlink: zone id is out of range [ 568.669228][T22616] netlink: zone id is out of range [ 568.690242][T22616] netlink: zone id is out of range [ 568.711242][T22616] netlink: zone id is out of range [ 568.729712][T22616] netlink: zone id is out of range [ 568.748673][T22616] netlink: zone id is out of range [ 568.767467][T22616] netlink: zone id is out of range [ 569.201878][T22652] netlink: 'syz.2.4250': attribute type 3 has an invalid length. [ 569.630104][T22620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 570.032068][T22671] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4257'. [ 570.262170][T22676] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4259'. [ 570.311203][T22679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4260'. [ 570.457804][T22681] lo speed is unknown, defaulting to 1000 [ 571.412483][T22719] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4267'. [ 571.471163][T22719] [ 571.473557][T22719] ====================================================== [ 571.480673][T22719] WARNING: possible circular locking dependency detected [ 571.487825][T22719] syzkaller #0 Not tainted [ 571.492324][T22719] ------------------------------------------------------ [ 571.499437][T22719] syz.1.4267/22719 is trying to acquire lock: [ 571.505561][T22719] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 571.514969][T22719] [ 571.514969][T22719] but task is already holding lock: [ 571.522375][T22719] ffff8880355ba470 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 571.531756][T22719] [ 571.531756][T22719] which lock already depends on the new lock. [ 571.531756][T22719] [ 571.542187][T22719] [ 571.542187][T22719] the existing dependency chain (in reverse order) is: [ 571.551260][T22719] [ 571.551260][T22719] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 571.559428][T22719] _raw_spin_lock_bh+0x36/0x50 [ 571.564840][T22719] nr_rt_device_down+0x153/0x860 [ 571.570348][T22719] nr_device_event+0x137/0x150 [ 571.575690][T22719] notifier_call_chain+0x1ad/0x3d0 [ 571.581356][T22719] netif_close_many+0x2ae/0x420 [ 571.586846][T22719] netif_close+0x160/0x220 [ 571.591808][T22719] dev_close+0x10a/0x220 [ 571.596686][T22719] bpq_device_event+0x377/0x6a0 [ 571.602181][T22719] notifier_call_chain+0x1ad/0x3d0 [ 571.607828][T22719] __dev_notify_flags+0x16d/0x310 [ 571.613395][T22719] netif_change_flags+0xe8/0x1a0 [ 571.618877][T22719] dev_change_flags+0x130/0x260 [ 571.624270][T22719] dev_ioctl+0x7b4/0x1150 [ 571.629212][T22719] sock_do_ioctl+0x23e/0x320 [ 571.634372][T22719] sock_ioctl+0x5c6/0x7f0 [ 571.639244][T22719] __se_sys_ioctl+0xfc/0x170 [ 571.644371][T22719] do_syscall_64+0x15f/0xf80 [ 571.649507][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.655939][T22719] [ 571.655939][T22719] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 571.663780][T22719] _raw_spin_lock_bh+0x36/0x50 [ 571.669085][T22719] nr_rt_device_down+0xbe/0x860 [ 571.674481][T22719] nr_device_event+0x137/0x150 [ 571.679798][T22719] notifier_call_chain+0x1ad/0x3d0 [ 571.685448][T22719] netif_close_many+0x2ae/0x420 [ 571.690838][T22719] netif_close+0x160/0x220 [ 571.695797][T22719] dev_close+0x10a/0x220 [ 571.700613][T22719] bpq_device_event+0x377/0x6a0 [ 571.706029][T22719] notifier_call_chain+0x1ad/0x3d0 [ 571.711685][T22719] __dev_notify_flags+0x16d/0x310 [ 571.717266][T22719] netif_change_flags+0xe8/0x1a0 [ 571.722782][T22719] dev_change_flags+0x130/0x260 [ 571.728183][T22719] dev_ioctl+0x7b4/0x1150 [ 571.733059][T22719] sock_do_ioctl+0x23e/0x320 [ 571.738221][T22719] sock_ioctl+0x5c6/0x7f0 [ 571.743125][T22719] __se_sys_ioctl+0xfc/0x170 [ 571.748259][T22719] do_syscall_64+0x15f/0xf80 [ 571.753397][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.759836][T22719] [ 571.759836][T22719] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 571.767786][T22719] __lock_acquire+0x15a5/0x2cf0 [ 571.773219][T22719] lock_acquire+0x106/0x350 [ 571.778269][T22719] _raw_spin_lock_bh+0x36/0x50 [ 571.783581][T22719] nr_del_node+0x57d/0xbb0 [ 571.788548][T22719] nr_rt_ioctl+0xb34/0xf90 [ 571.793514][T22719] sock_do_ioctl+0x101/0x320 [ 571.798642][T22719] sock_ioctl+0x5c6/0x7f0 [ 571.803512][T22719] __se_sys_ioctl+0xfc/0x170 [ 571.808719][T22719] do_syscall_64+0x15f/0xf80 [ 571.813848][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.820283][T22719] [ 571.820283][T22719] other info that might help us debug this: [ 571.820283][T22719] [ 571.830542][T22719] Chain exists of: [ 571.830542][T22719] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 571.830542][T22719] [ 571.844393][T22719] Possible unsafe locking scenario: [ 571.844393][T22719] [ 571.851946][T22719] CPU0 CPU1 [ 571.857397][T22719] ---- ---- [ 571.862786][T22719] lock(&nr_node->node_lock); [ 571.867573][T22719] lock(nr_node_list_lock); [ 571.874707][T22719] lock(&nr_node->node_lock); [ 571.882013][T22719] lock(nr_neigh_list_lock); [ 571.886709][T22719] [ 571.886709][T22719] *** DEADLOCK *** [ 571.886709][T22719] [ 571.894895][T22719] 2 locks held by syz.1.4267/22719: [ 571.900115][T22719] #0: ffffffff8ff4be78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 571.909725][T22719] #1: ffff8880355ba470 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 571.919442][T22719] [ 571.919442][T22719] stack backtrace: [ 571.925367][T22719] CPU: 1 UID: 0 PID: 22719 Comm: syz.1.4267 Not tainted syzkaller #0 PREEMPT(full) [ 571.925391][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 571.925403][T22719] Call Trace: [ 571.925410][T22719] [ 571.925419][T22719] dump_stack_lvl+0xe8/0x150 [ 571.925455][T22719] print_circular_bug+0x2e1/0x300 [ 571.925486][T22719] check_noncircular+0x12e/0x150 [ 571.925517][T22719] __lock_acquire+0x15a5/0x2cf0 [ 571.925551][T22719] ? nr_del_node+0x57d/0xbb0 [ 571.925576][T22719] lock_acquire+0x106/0x350 [ 571.925597][T22719] ? nr_del_node+0x57d/0xbb0 [ 571.925637][T22719] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.925654][T22719] ? nr_del_node+0x247/0xbb0 [ 571.925680][T22719] ? nr_del_node+0x57d/0xbb0 [ 571.925704][T22719] _raw_spin_lock_bh+0x36/0x50 [ 571.925723][T22719] ? nr_del_node+0x57d/0xbb0 [ 571.925747][T22719] nr_del_node+0x57d/0xbb0 [ 571.925774][T22719] nr_rt_ioctl+0xb34/0xf90 [ 571.925806][T22719] ? kasan_quarantine_put+0xbb/0x1f0 [ 571.925833][T22719] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 571.925861][T22719] ? apparmor_capable+0x126/0x170 [ 571.925944][T22719] ? capable+0x88/0xe0 [ 571.925980][T22719] ? nr_ioctl+0x1b1/0x3b0 [ 571.926002][T22719] sock_do_ioctl+0x101/0x320 [ 571.926025][T22719] ? __pfx_sock_do_ioctl+0x10/0x10 [ 571.926043][T22719] ? do_futex+0x395/0x420 [ 571.926085][T22719] sock_ioctl+0x5c6/0x7f0 [ 571.926104][T22719] ? __pfx_sock_ioctl+0x10/0x10 [ 571.926122][T22719] ? __fget_files+0x2a/0x420 [ 571.926145][T22719] ? __fget_files+0x3a0/0x420 [ 571.926166][T22719] ? __fget_files+0x2a/0x420 [ 571.926189][T22719] ? bpf_lsm_file_ioctl+0x9/0x20 [ 571.926207][T22719] ? __pfx_sock_ioctl+0x10/0x10 [ 571.926225][T22719] __se_sys_ioctl+0xfc/0x170 [ 571.926240][T22719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.926258][T22719] do_syscall_64+0x15f/0xf80 [ 571.926280][T22719] ? trace_irq_disable+0x3b/0x140 [ 571.926297][T22719] ? clear_bhb_loop+0x40/0x90 [ 571.926318][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.926335][T22719] RIP: 0033:0x7ff0bdb9c819 [ 571.926353][T22719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.926368][T22719] RSP: 002b:00007ff0beaa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.926388][T22719] RAX: ffffffffffffffda RBX: 00007ff0bde16090 RCX: 00007ff0bdb9c819 [ 571.926402][T22719] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000008 [ 571.926414][T22719] RBP: 00007ff0bdc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 571.926425][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.926436][T22719] R13: 00007ff0bde16128 R14: 00007ff0bde16090 R15: 00007ffd3f6928a8 [ 571.926463][T22719]