last executing test programs: 3.095735297s ago: executing program 1 (id=2165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @generic={0x8, 0x0, 0x3, 0xfcfe, 0x981}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}], &(0x7f0000000180)='GPL\x00', 0xc, 0x4e, &(0x7f00000001c0)=""/78, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[r7, r6, r6, r7, r6], &(0x7f0000000300)=[{0x3, 0x5, 0x5}, {0x2, 0x4, 0x2, 0xa}, {0x0, 0x3, 0x7, 0xc}, {0x0, 0x2, 0x10, 0x4}, {0x5, 0x3, 0xf, 0x4}, {0x3, 0x4, 0xb, 0x7}, {0x5, 0x2, 0x2, 0x4}, {0x3, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0xb}, {0x3, 0x1, 0x10, 0xa}], 0x10, 0x1}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000000)=r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYRESDEC=r5, @ANYRESOCT=0x0], 0x38}}, 0x0) 2.438679249s ago: executing program 0 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x4, @mcast2, 0x2c03}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="759b0db7c5e267ce78524d1210b0363a13568e6f0cd4cfb8cba673597fa0db587892bef44c9f9b1f9fcd0a442432255c261debf7c68a67f4ffb732a6ed06fe90e26dc6c39f43793c8d9942708649d6631fd727092a586de351b1b80c0aa3bad7b8559654c6e3af5a9c9f2865d2988f6777544baf48651154ee5729f4fdbd847a9000b7589b5f4c1f3a21501432bd460b2a69258a93f595d95355b79c4d1c6b0c2b6af9eb0ea402703cc0aa6dff920d3c5b89a1fd39153945f1b4e609877f7e1e06c981e33201cc75f0bb56f7f898fa47082cbe2d8def8d4b255c068aa938f7f7cce643b2621b878fe8c3fd852c5bfa88857a5882", 0xf4}, {&(0x7f0000000240)="3e4d0f8a65032ce8843e00a72bd09d79e2e304e0e2c64f82eca8c7d6f174b1ce35945dc09f8fae8fc15eb851ace257753f357ba2365c394c8376f13bcb61d4", 0x3f}], 0x2, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x133}}, @hopopts={{0xc8, 0x29, 0x36, {0x2, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @generic={0x0, 0x51, "39d9787d38c58855677bab0e6fd27bebf942dc344e2cf78e3daec302778fa8dd2d693bf64de60082fa28fa391d2966fd5253ae13c1d6c5ec544f377b482fc643d9ffa6fb65d8f234f61b308efbc9488c1c"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x80, 0x2667, [0x5, 0x5, 0x82, 0x5, 0x67d2, 0x1]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x5, [0x5, 0x8]}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe3}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x8, 0x23, '\x00', [@generic={0xc, 0x72, "b61a39aa73f3a156300a548d22780cf18404432502a83ff190accb553bb4f06563f0dca2b3dc60b6ac9609231114fe0e8f6f01fc5bb5cc22317d96e1e4f368e2937f6307d200065aa58ea4db424c81e27ac7efcac759d83ca8d86ef6963c161bbad9d1279d5a93c43ecf0f83ac43f14cbb07"}, @calipso={0x7, 0x58, {0x2, 0x14, 0x3, 0x9, [0x4, 0x400000000000, 0x3ff, 0x7fff, 0x5, 0xca, 0x1, 0x1ffc00000, 0x1, 0x2]}}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x48, {0x3, 0x10, 0x14, 0xb, [0x4, 0x8, 0xf4000000000, 0x7ff, 0x9, 0x8, 0x3, 0x9]}}, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x230}}], 0x1, 0x40805) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xa, 0x10, 0x5, 0x3}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) 2.315186874s ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="02000000", @ANYRES16=r1, @ANYBLOB="010228bd7000fcdbdf25440000000c0099000100000004000000"], 0x20}, 0x1, 0x0, 0x0, 0x28000}, 0x40840) 2.306109323s ago: executing program 0 (id=2176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fa", 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r11, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="00000000002f00002c1612800b00010067726574617000001c00028006000e00020000000800070064010101060010004e22000008000a00", @ANYRES32=r3, @ANYRES8=r1], 0x54}}, 0x24000000) 2.180361162s ago: executing program 3 (id=2177): r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) (async) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0xfff, &(0x7f0000000100)=0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.114058609s ago: executing program 1 (id=2179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1b9502, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000002060104000000000004441321dfa502"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x16, 0x0, 0x290) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="34e2ff00", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf2521000000050020000100000009001f007068793000000000050020000000000005002000010000000a0001007770616e340000000c0005000200aaaaaaaaaaaa0500200000000000050020000100000005002000000000000c0005000201aaaaaaaaaaaa"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r13, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r13, 0x0) connect$bt_sco(r13, &(0x7f0000000000)={0x1f, @none}, 0x8) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r12, 0x1, 0x1, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x0) 1.839693226s ago: executing program 0 (id=2181): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdedad1b9ba1da7521011", 0x8e}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)}}, {{0x0, 0x0, &(0x7f0000003a40)=[{0x0}, {&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77e26464b8dc6ec581588f80c054c025f9", 0x20}], 0x2}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.838415521s ago: executing program 4 (id=2182): syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) 1.813308236s ago: executing program 2 (id=2183): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @remote, 'syz_tun\x00'}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x1) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.560630125s ago: executing program 2 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) unshare(0x20400) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 1.480854404s ago: executing program 0 (id=2185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r0, 0x34de5000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) unshare(0x20000400) r3 = socket(0x1d, 0x3, 0x1) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r4, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x85, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 1.480366024s ago: executing program 4 (id=2186): syz_emit_ethernet(0x7a, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/5, 0x1006000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x75d37000) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d00003400000000ddff8f78ac1e00016401010001441c19017f00000100000000ffffffff00000000ac1e000100d90000000000"], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) 1.456990333s ago: executing program 3 (id=2187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffe0, 0x4}, {0xd, 0x1}}}, 0x24}}, 0x4000050) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf7fb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x2, 0x2}, {0x6, 0x8}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 1.253370318s ago: executing program 4 (id=2188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}}, 0x815) 1.181024129s ago: executing program 2 (id=2189): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x44}}, 0x0) write(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x39}}) r11 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) r12 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r12, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.136295914s ago: executing program 3 (id=2190): socket$inet(0x2, 0xa, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@fastopen={0x22, 0x2}]}}}}}}, 0xfdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1.045575513s ago: executing program 4 (id=2191): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000dc0)={{r2, &(0x7f00000005c0)=',&-^}^\x00', 0xc000, &(0x7f0000000600)={@align=0x5cf, {0xbd, 0x3, 0x9, 0xfff}}, 0x5, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)}, 0x7, &(0x7f0000000cc0)=[{0x3, 0x81, &(0x7f00000006c0)='0000:00:10.0\x00', &(0x7f0000000700)="460d084777c8a01d07e931a4221424bed63e860d573c88cf8df9f394fcfd15a7958ceca2da31aa319060c1b0e0aa7b130cd1b4134ce83c0140c71396e902c4f38209d41fd5b42f4b09ed36b8ca72c58f2659131993c1f979f7185518d2015d7f420a6d75b22e926a053f065413ce52f7c075650238bbf2d90e7a144aed5b3f90e0edb80a8361a367d5642da0745332b4165ce4b955f65d3bed88de156045b7898c690295d922ec6335f2e970bcec436f115500715f0e424fa5a75126d9c71372f0bacf4b11401f9847e4047affd84ab838fe6324fb790482e0f7fc8b4a3c3acd", 0xe0, 0x8a1c1b2301ea423b}, {0x3, 0x5c0, &(0x7f0000000800)='source_mac_is_multicast\x00', &(0x7f0000000840)="8662912701f423c5e3cbc9dcdbc8eaee497c8f757c59d25e1fc1b871bc1c89a34d512a421265c33f903da67bfd0215f07c2d87621948266d0cecef181917cda7832bb367d2cf11aad1ec12929398d830057dea8bdde904e429bbed2726bc7defaf2063cb83f2e487018b1524559ace8598a62e7ac1ed3573b61a4d7d342909eea5b5e4d038f2dd8a1600afb40cb69e8c2f", 0x91, 0x8}, {0x2, 0xf18, &(0x7f0000000900)='%^@%.}\'/)%\'+,\xd9\\\xcb@\x00', &(0x7f0000000940)="7c4c514f08158688cb81f8939dd3ff5f21e92c12dceff016c3e29ed9f6cf3f", 0x1f, 0x3a}, {0x0, 0x7, &(0x7f0000000980)='(!*\\\'[!\x00', &(0x7f00000009c0)="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", 0xfb, 0x20}, {0x2, 0x14000000, &(0x7f0000000ac0)='pci\x00', &(0x7f0000000b00)="28b8bd7ced4f210b16e6abfc815cf0be3c84c92de828c0f442583de9a7dfb7033666880557ee155950bdd25146e2924fd078f5264441a147ed79cb245349838f059a218e1e60e4dafad8c74f0fd3b7ba4542a475aa4724a7545ef0d0685ff87ffb6f14bb3090b76a60ff406f8c21ab7c1a5b0df290f4cb49964f879294abb61bf770ca1ce2da2c36f58e86a5f42ee14770e901b9874e8db83ef4fdc766a770c930b7ae0d0aefc2", 0xa7, 0xc}, {0x3, 0x8, &(0x7f0000000bc0)='-[[:*!&\'\xae+\x00', &(0x7f0000000c00)="d3b56bf93a5fc5172c435f24a082ab692700612f5097903e9b3dddd1a396f1e9010d9c9d96e52fef13bfdb12c99294228f906f77a95cd850538e867171c595e1", 0x40, 0xa}, {0x1, 0x10, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="f470f79218cc1a18be8f5f0359c2c192f6f489", 0x13, 0xc}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xfffffffffffffd41}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @private}, &(0x7f0000000440)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000480)={0x5, 0x8209, 0x4, 0xd286, 0x0}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r6, &(0x7f0000000540)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) 928.416585ms ago: executing program 0 (id=2192): r0 = socket$rxrpc(0x21, 0x2, 0xa) unshare(0x40600) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r2 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7e9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x3, 0x5, 0x2}], 0x10, 0x3ff}, 0x94) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x891c, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x0, @void}, 0x10) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r11, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r10], 0x119) (async) r12 = accept$inet(r3, 0x0, &(0x7f0000001080)) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f00000010c0)={{0x2, 0x4e22, @empty}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0xa, {0x2, 0x4e23, @empty}, 'veth0\x00'}) tee(r0, r0, 0x66f, 0x0) 826.114863ms ago: executing program 1 (id=2193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 507.132143ms ago: executing program 2 (id=2194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000340)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r3, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000080)=""/128, &(0x7f0000000100)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) (async) socket(0x10, 0x803, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r2, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) connect$unix(r1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000340)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) (async) socket$inet(0x2, 0x2, 0x1) (async) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) (async) bind$inet(r3, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000080)=""/128, &(0x7f0000000100)=0x80) (async) 424.951869ms ago: executing program 3 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) (async) 424.050794ms ago: executing program 0 (id=2196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000240)="7d3ed2ea1f2f23edbb324820e73b5f4b111a03df64a4853ed1b3000073a97e5db2217218e80ed36ab4e7dcdad1195e7309000000", 0x34}], 0x2}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) clock_gettime(0x0, &(0x7f0000008500)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000082c0)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x5, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000000940)=""/24, 0x18}, {&(0x7f0000001a40)=""/91, 0x5b}, {&(0x7f0000001b00)=""/108, 0x6c}, {&(0x7f0000001b80)=""/253, 0xfd}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001d00), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/198, 0xc6}], 0x1, &(0x7f0000001ec0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001f00), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/232, 0xe8}, {&(0x7f0000002080)=""/44, 0x2c}, {&(0x7f00000020c0)=""/191, 0xbf}, {&(0x7f0000002180)=""/48, 0x30}, {&(0x7f00000021c0)=""/119, 0x77}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000002240)=""/209, 0xd1}, {&(0x7f0000002340)=""/101, 0x65}], 0x9, &(0x7f0000002480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002580)=""/169, 0xa9}], 0x1, &(0x7f0000002680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002740)}, {&(0x7f0000002780)=""/114, 0x72}, {&(0x7f0000002800)=""/124, 0x7c}, {&(0x7f0000002880)=""/21, 0x15}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/16, 0x10}], 0x6}}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000006a40)=""/194, 0xc2}, {&(0x7f0000002980)=""/12, 0xc}, {&(0x7f0000006b40)=""/4096, 0x1000}], 0x3, &(0x7f0000007b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000007bc0), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000007c40)=""/92, 0x5c}, {&(0x7f0000007cc0)=""/236, 0xec}, {&(0x7f0000007dc0)=""/121, 0x79}], 0x3, &(0x7f0000007ec0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000008000), 0x6e, &(0x7f0000008140)=[{&(0x7f0000008080)=""/173, 0xad}], 0x1, &(0x7f0000008180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x9, 0x120, &(0x7f0000008540)={r7, r8+10000000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xdb, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r9, 0x10001}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x3, 0x3, 0x9, 0x7f, 0x9, 0x71, 0x80000000, r10}, 0x20) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) 377.970489ms ago: executing program 2 (id=2197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x80}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x34, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x35, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 372.055227ms ago: executing program 1 (id=2198): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) r0 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000006, 0x12, r0, 0x0) r1 = socket(0x10, 0xa, 0x2) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$kcm(0x11, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c060}, 0x90) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r10 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r10, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) 236.364047ms ago: executing program 4 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtaction={0x58, 0x30, 0x2, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbmod={0x40, 0x1001, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x58}}, 0x8008080) 226.448975ms ago: executing program 1 (id=2200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r2, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) accept4$vsock_stream(r2, &(0x7f0000000140), 0x10, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 221.729202ms ago: executing program 3 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x44096}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x44096}, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) (async) 111.960834ms ago: executing program 2 (id=2202): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0xf944, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x8001, 0x3}, {0x83, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x9}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5}, 0x14) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r6 = socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3d, 0x4}}) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) getsockopt$MRT(r6, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffde0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x9000}, 0x1) close(0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) (async) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x41101420}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r13, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x448c4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 111.582472ms ago: executing program 4 (id=2203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2f}}}], 0x18}}], 0x1, 0x40000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, @sco, @nfc={0x27, r5, 0xffffffffffffffff, 0x4}, @isdn={0x22, 0x9, 0xf, 0x1b, 0x4}, 0xccf, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x5, 0x4}) syz_emit_ethernet(0xfd81, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xf0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @empty, @mcast1, [@routing={0x3c, 0x4, 0x1, 0x9, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @routing={0x32, 0xa, 0x2, 0x5, 0x0, [@local, @local, @mcast2, @remote, @private1]}, @hopopts={0xc}, @srh={0x2b, 0x6, 0x4, 0x3, 0x9, 0x0, 0x3ff, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0x5}}}, 0x24}}, 0x44804) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x50, r8, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) kernel console output (not intermixed with test programs): 113.013485][ T6543] sctp: [Deprecated]: syz.1.175 (pid 6543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.013485][ T6543] Use struct sctp_sack_info instead [ 113.338560][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 113.669999][ T6584] netlink: 176 bytes leftover after parsing attributes in process `syz.0.187'. [ 113.679798][ T6584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.187'. [ 113.756562][ T6585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'. [ 113.802899][ T6585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 113.824425][ T6589] netlink: 104 bytes leftover after parsing attributes in process `syz.1.190'. [ 113.841431][ T6591] netlink: 104 bytes leftover after parsing attributes in process `syz.1.190'. [ 114.243515][ T6611] netlink: 'syz.4.194': attribute type 11 has an invalid length. [ 114.293154][ T6615] sctp: [Deprecated]: syz.2.196 (pid 6615) Use of int in max_burst socket option deprecated. [ 114.293154][ T6615] Use struct sctp_assoc_value instead [ 114.956604][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.965103][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.218427][ T6644] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.365988][ T6670] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 115.399862][ T6670] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 115.450459][ T6670] netlink: 'syz.4.210': attribute type 8 has an invalid length. [ 115.568905][ T6676] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 115.615463][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.738670][ T6686] netlink: zone id is out of range [ 115.743885][ T6686] netlink: zone id is out of range [ 115.787544][ T6689] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 115.807342][ T6686] netlink: zone id is out of range [ 115.834453][ T6686] netlink: zone id is out of range [ 115.855205][ T6686] netlink: zone id is out of range [ 115.887674][ T6686] netlink: zone id is out of range [ 115.922796][ T6686] netlink: set zone limit has 4 unknown bytes [ 116.013659][ T6703] netlink: 'syz.1.219': attribute type 5 has an invalid length. [ 116.590852][ T6741] netlink: 'syz.2.229': attribute type 3 has an invalid length. [ 116.609126][ T6741] netlink: 'syz.2.229': attribute type 3 has an invalid length. [ 116.863038][ T6753] netlink: 'syz.0.233': attribute type 11 has an invalid length. [ 116.873987][ T6757] syz_tun: entered allmulticast mode [ 116.983284][ T6756] syzkaller0: entered promiscuous mode [ 116.993459][ T6756] 0: reclassify loop, rule prio 0, protocol 800 [ 117.100653][ T6766] geneve2: entered promiscuous mode [ 117.106027][ T6766] geneve2: entered allmulticast mode [ 117.132965][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 117.152074][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 117.191903][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 117.206618][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 117.221870][ T6770] tipc: Started in network mode [ 117.230613][ T6770] tipc: Node identity ac14140f, cluster identity 4711 [ 117.240387][ T6770] tipc: New replicast peer: 255.255.255.255 [ 117.249730][ T6770] tipc: Enabled bearer , priority 10 [ 117.455391][ T6785] lo: entered allmulticast mode [ 117.461164][ T6785] lo: left allmulticast mode [ 117.469494][ T6785] tipc: Can't bind to reserved service type 1 [ 118.115390][ T6811] __nla_validate_parse: 19 callbacks suppressed [ 118.115406][ T6811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.251'. [ 118.184158][ T6812] sctp: [Deprecated]: syz.3.251 (pid 6812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.184158][ T6812] Use struct sctp_sack_info instead [ 118.311791][ T6815] veth5: entered allmulticast mode [ 118.317716][ T6655] tipc: Node number set to 2886997007 [ 120.369663][ T6778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.605916][ T6829] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 120.625698][ T6829] netlink: 96 bytes leftover after parsing attributes in process `syz.2.253'. [ 120.636978][ T6829] netlink: 1 bytes leftover after parsing attributes in process `syz.2.253'. [ 120.646899][ T6829] netlink: 658 bytes leftover after parsing attributes in process `syz.2.253'. [ 120.662283][ T6827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.796435][ T6827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.892004][ T6827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.030734][ T6827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.180582][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 121.198662][ T6867] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.267'. [ 121.289288][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.330134][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.356218][ T1103] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.480064][ T1103] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.579418][ T6876] net_ratelimit: 3 callbacks suppressed [ 121.579438][ T6876] veth0_to_bridge: mtu less than device minimum [ 121.594279][ T6876] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.271'. [ 121.669419][ T6880] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 121.687922][ T6882] warning: `syz.1.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.714192][ T6883] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 121.723009][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 121.792983][ T6889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.850305][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 121.978162][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 122.283117][ T6907] bridge_slave_0: left allmulticast mode [ 122.328167][ T6907] bridge_slave_0: left promiscuous mode [ 122.337854][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.364400][ T6907] bridge_slave_1: left allmulticast mode [ 122.370502][ T6907] bridge_slave_1: left promiscuous mode [ 122.376409][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.413684][ T6907] bond0: (slave bond_slave_0): Releasing backup interface [ 122.433721][ T6907] bond0: (slave bond_slave_1): Releasing backup interface [ 122.461549][ T6907] team0: Port device team_slave_0 removed [ 122.500769][ T6907] team0: Port device team_slave_1 removed [ 122.508513][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.547441][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.582823][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.594210][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.654533][ T6907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.757450][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 122.964794][ T6938] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.975204][ T6938] xt_nat: multiple ranges no longer supported [ 123.042880][ T6938] hsr_slave_0 (unregistering): left promiscuous mode [ 123.171234][ T6955] bond2: (slave vlan0): Enslaving as a backup interface with an up link [ 123.286705][ T6962] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 123.303012][ T6962] bond3 (unregistering): Released all slaves [ 123.528612][ T6973] __nla_validate_parse: 3 callbacks suppressed [ 123.528633][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 123.591665][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 123.653340][ T6973] netlink: 'syz.1.293': attribute type 3 has an invalid length. [ 123.673584][ T6976] pimreg: entered allmulticast mode [ 123.842941][ T6983] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 123.851362][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 123.862812][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 124.226041][ T6999] tipc: Failed to obtain node identity [ 124.243466][ T6999] tipc: Enabling of bearer rejected, failed to enable media [ 124.295939][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 124.318015][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 124.359820][ T6999] team0: entered promiscuous mode [ 124.365043][ T6999] team_slave_0: entered promiscuous mode [ 124.392882][ T6999] team_slave_1: entered promiscuous mode [ 124.405787][ T6999] bond0: entered promiscuous mode [ 124.412150][ T6999] bond_slave_0: entered promiscuous mode [ 124.420097][ T6999] bond_slave_1: entered promiscuous mode [ 124.430576][ T6999] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.992343][ T7034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.310'. [ 125.278528][ T7042] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 125.317495][ T7042] netlink: 244 bytes leftover after parsing attributes in process `syz.1.312'. [ 125.502213][ T7047] netlink: 'syz.0.315': attribute type 64 has an invalid length. [ 126.010022][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 126.038582][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 126.426124][ T7080] sctp: [Deprecated]: syz.4.324 (pid 7080) Use of int in max_burst socket option deprecated. [ 126.426124][ T7080] Use struct sctp_assoc_value instead [ 126.630587][ T7086] netlink: 'syz.1.325': attribute type 29 has an invalid length. [ 126.742420][ T7093] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.832393][ T7096] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 126.934031][ T7098] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 127.030080][ T7099] veth7: entered promiscuous mode [ 127.369062][ T7103] netlink: 'syz.2.333': attribute type 2 has an invalid length. [ 127.379660][ T7103] netlink: 'syz.2.333': attribute type 5 has an invalid length. [ 127.592891][ T7113] gre2: entered promiscuous mode [ 127.600181][ T7113] gre2: entered allmulticast mode [ 127.791024][ T7122] xt_hashlimit: size too large, truncated to 1048576 [ 128.011932][ T7141] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 128.162378][ T7147] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 128.267452][ T7149] netlink: 'syz.4.347': attribute type 7 has an invalid length. [ 128.546575][ T7154] __nla_validate_parse: 10 callbacks suppressed [ 128.546598][ T7154] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.348'. [ 128.610979][ T7161] xt_cgroup: invalid path, errno=-2 [ 128.628120][ T7161] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20004 [ 128.735869][ T7166] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 129.069549][ T7178] veth1_macvtap: renamed from vlan1 [ 129.403555][ T7202] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 129.423325][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 129.640357][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 130.113088][ T7248] xt_cgroup: xt_cgroup: no path or classid specified [ 130.311429][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 130.794150][ T7281] netlink: 'syz.4.377': attribute type 83 has an invalid length. [ 131.693299][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 131.727931][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 131.784805][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 132.045841][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 132.068412][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.175403][ T7311] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 132.228479][ T7312] dvmrp0: entered allmulticast mode [ 132.392443][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 132.402987][ T7316] bond1: (slave gretap1): making interface the new active one [ 132.421635][ T7316] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.447563][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.455943][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.664539][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 132.921339][ T7357] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 133.082239][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090738][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.337581][ T7358] netem: change failed [ 134.499768][ T7382] netlink: 'syz.3.399': attribute type 4 has an invalid length. [ 134.527115][ T7382] __nla_validate_parse: 4 callbacks suppressed [ 134.527138][ T7382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.539110][ T7384] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.562081][ T7386] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.563137][ T7389] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 134.582599][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 134.603645][ T7389] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 134.619856][ T7393] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 134.653149][ T7382] .`: renamed from bond0 (while UP) [ 134.668460][ T7395] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 134.677824][ T7390] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 134.709653][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 134.787417][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.404'. [ 134.860693][ T7393] bond1: entered promiscuous mode [ 134.877367][ T7393] bond1: entered allmulticast mode [ 134.888449][ T7409] netlink: 'syz.3.405': attribute type 4 has an invalid length. [ 134.889077][ T7393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.949294][ T7395] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.955667][ T7390] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.984977][ T7396] macvlan2: entered promiscuous mode [ 135.007906][ T7396] macvlan2: entered allmulticast mode [ 135.178915][ T7417] can: request_module (can-proto-4) failed. [ 135.232285][ T7427] xt_hashlimit: size too large, truncated to 1048576 [ 135.865564][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.417'. [ 136.033093][ T7466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.040848][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 136.048329][ T7466] IPv6: NLM_F_CREATE should be set when creating new route [ 136.980953][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.083138][ T7462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.132259][ T7466] lo: entered allmulticast mode [ 137.158948][ T7466] tunl0: entered allmulticast mode [ 137.175103][ T7466] gre0: entered allmulticast mode [ 137.190496][ T7466] gretap0: entered allmulticast mode [ 137.202800][ T7466] erspan0: entered allmulticast mode [ 137.211732][ T6664] IPVS: starting estimator thread 0... [ 137.214631][ T7466] ip_vti0: entered allmulticast mode [ 137.226687][ T7466] ip6_vti0: entered allmulticast mode [ 137.235159][ T7466] sit0: entered allmulticast mode [ 137.250230][ T7466] ip6tnl0: entered allmulticast mode [ 137.260286][ T7466] ip6gre0: entered allmulticast mode [ 137.270095][ T7466] syz_tun: entered allmulticast mode [ 137.279992][ T7466] ip6gretap0: entered allmulticast mode [ 137.290996][ T7466] bridge0: entered allmulticast mode [ 137.300247][ T7466] vcan0: entered allmulticast mode [ 137.306718][ T7466] bond0: entered allmulticast mode [ 137.315860][ T7466] team0: entered allmulticast mode [ 137.321844][ T7477] IPVS: using max 31 ests per chain, 74400 per kthread [ 137.331877][ T7466] dummy0: entered allmulticast mode [ 137.341412][ T7466] nlmon0: entered allmulticast mode [ 137.349231][ T7466] caif0: entered allmulticast mode [ 137.354644][ T7466] batadv0: entered allmulticast mode [ 137.363283][ T7466] vxcan0: entered allmulticast mode [ 137.370057][ T7466] vxcan1: entered allmulticast mode [ 137.376203][ T7466] veth0: entered allmulticast mode [ 137.384620][ T7466] veth1: entered allmulticast mode [ 137.392954][ T7466] wg0: entered allmulticast mode [ 137.400808][ T7466] wg1: entered allmulticast mode [ 137.407815][ T7466] wg2: entered allmulticast mode [ 137.414068][ T7466] veth0_to_bridge: entered allmulticast mode [ 137.422430][ T7466] bridge_slave_0: entered allmulticast mode [ 137.430201][ T7466] veth1_to_bridge: entered allmulticast mode [ 137.438464][ T7466] bridge_slave_1: entered allmulticast mode [ 137.449391][ T7466] veth0_to_bond: entered allmulticast mode [ 137.458201][ T7466] bond_slave_0: entered allmulticast mode [ 137.464498][ T7466] veth1_to_bond: entered allmulticast mode [ 137.476103][ T7466] bond_slave_1: entered allmulticast mode [ 137.489602][ T7466] veth0_to_team: entered allmulticast mode [ 137.499085][ T7466] team_slave_0: entered allmulticast mode [ 137.505692][ T7466] veth1_to_team: entered allmulticast mode [ 137.514447][ T7466] team_slave_1: entered allmulticast mode [ 137.521002][ T7466] veth0_to_batadv: entered allmulticast mode [ 137.530811][ T7466] batadv_slave_0: entered allmulticast mode [ 137.539362][ T7466] veth1_to_batadv: entered allmulticast mode [ 137.548110][ T7466] batadv_slave_1: entered allmulticast mode [ 137.556976][ T7466] xfrm0: entered allmulticast mode [ 137.564202][ T7466] veth1_to_hsr: entered allmulticast mode [ 137.573461][ T7466] hsr_slave_1: entered allmulticast mode [ 137.581245][ T7466] hsr0: entered allmulticast mode [ 137.589977][ T7466] veth1_virt_wifi: entered allmulticast mode [ 137.598551][ T7466] veth0_virt_wifi: entered allmulticast mode [ 137.607711][ T7466] virt_wifi0: entered allmulticast mode [ 137.613809][ T7466] veth1_vlan: entered allmulticast mode [ 137.621889][ T7466] veth0_vlan: entered allmulticast mode [ 137.641245][ T7466] vlan0: entered allmulticast mode [ 137.647035][ T7466] macvlan0: entered allmulticast mode [ 137.659614][ T7466] macvlan1: entered allmulticast mode [ 137.668307][ T7466] ipvlan0: entered allmulticast mode [ 137.674175][ T7466] ipvlan1: entered allmulticast mode [ 137.680932][ T7466] veth1_macvtap: entered allmulticast mode [ 137.690398][ T7466] veth0_macvtap: entered allmulticast mode [ 137.700661][ T7466] macvtap0: entered allmulticast mode [ 137.706738][ T7466] macsec0: entered allmulticast mode [ 137.718523][ T7466] geneve0: entered allmulticast mode [ 137.730036][ T7466] geneve1: entered allmulticast mode [ 137.768782][ T7466] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 137.784515][ T7466] ip6tnl1: entered allmulticast mode [ 137.790306][ T7466] bridge1: entered allmulticast mode [ 137.795978][ T7466] netdevsim netdevsim4 eth0: entered allmulticast mode [ 137.803697][ T7466] netdevsim netdevsim4 eth1: entered allmulticast mode [ 137.811164][ T7466] netdevsim netdevsim4 eth2: entered allmulticast mode [ 137.819454][ T7466] netdevsim netdevsim4 eth3: entered allmulticast mode [ 137.826641][ T7466] ip6gre1: entered allmulticast mode [ 137.832340][ T7466] ip6tnl2: entered allmulticast mode [ 137.838995][ T7466] bond1: left promiscuous mode [ 137.844794][ T7466] macvlan2: left promiscuous mode [ 137.880829][ T58] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.914290][ T58] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.025635][ T7462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.062308][ T58] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.097618][ T58] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.279320][ T7462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.346774][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 138.416327][ T7462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.619260][ T7527] xt_hashlimit: overflow, try lower: 3/0 [ 139.459859][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 140.762434][ T1123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.912149][ T1123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.931450][ T1123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.060366][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.115474][ T7585] bond2: (slave bond_slave_1): Device is not bonding slave [ 141.123273][ T7585] bond2: option active_slave: invalid value (bond_slave_1) [ 141.137116][ T7585] bond2 (unregistering): Released all slaves [ 141.263122][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.307481][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.365261][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.417991][ T7598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.460387][ T7598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.505309][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.514126][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.522568][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.534036][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.544153][ T7598] hsr0 speed is unknown, defaulting to 1000 [ 141.755463][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 142.399884][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 142.451370][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 143.555871][ T7640] netlink: 88 bytes leftover after parsing attributes in process `syz.3.453'. [ 143.566071][ T7640] netem: invalid attributes len -24 [ 143.571878][ T7640] netem: change failed [ 143.582212][ T7656] team_slave_0: entered promiscuous mode [ 143.588158][ T7656] team_slave_1: entered promiscuous mode [ 143.595569][ T7656] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 143.604622][ T7656] team0: Device macvlan3 is already an upper device of the team interface [ 143.614347][ T7656] team_slave_0: left promiscuous mode [ 143.619793][ T7656] team_slave_1: left promiscuous mode [ 143.643739][ T7665] lo: entered promiscuous mode [ 143.650479][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.674506][ T7661] xfrm1: entered promiscuous mode [ 143.680153][ T7661] xfrm1: entered allmulticast mode [ 143.870022][ T7681] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.897075][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 143.911227][ T7681] netlink: 'syz.1.459': attribute type 6 has an invalid length. [ 143.939855][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'. [ 144.591734][ T7715] netlink: 'syz.1.469': attribute type 10 has an invalid length. [ 144.673330][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.680808][ T7715] bridge0: port 1(0¾x9ÿ) entered disabled state [ 144.735325][ T7720] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.768926][ T7720] Cannot find set identified by id 1 to match [ 144.811957][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.819208][ T7715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.827519][ T7715] bridge0: port 1(0¾x9ÿ) entered blocking state [ 144.834014][ T7715] bridge0: port 1(0¾x9ÿ) entered forwarding state [ 144.915094][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.471'. [ 144.941531][ T7715] bridge0: entered promiscuous mode [ 144.958080][ T7715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 145.272993][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.318871][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.343095][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.398280][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.444185][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.470839][ T7749] netlink: 'syz.1.481': attribute type 39 has an invalid length. [ 145.670033][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 145.680043][ T7766] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 145.697850][ T7766] netlink: 96 bytes leftover after parsing attributes in process `syz.3.486'. [ 145.754153][ T7766] netlink: 658 bytes leftover after parsing attributes in process `syz.3.486'. [ 146.583523][ T7813] bond2: option all_slaves_active: invalid value (222) [ 146.613116][ T7813] bond2 (unregistering): Released all slaves [ 146.755231][ T7826] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 146.790725][ T7826] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 147.102223][ T7855] __nla_validate_parse: 2 callbacks suppressed [ 147.102245][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 147.115871][ T7845] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 147.123470][ T7855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.508'. [ 147.156283][ T7845] bond2 (unregistering): Released all slaves [ 147.742162][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 147.984086][ T7898] nbd: couldn't find device at index 242 [ 148.107767][ T7909] netlink: 312 bytes leftover after parsing attributes in process `syz.0.520'. [ 148.222335][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.521'. [ 148.308902][ T7917] syzkaller1: entered promiscuous mode [ 148.347277][ T7917] syzkaller1: entered allmulticast mode [ 148.470295][ T7927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.525'. [ 148.508458][ T7925] hsr0 speed is unknown, defaulting to 1000 [ 149.498691][ T7984] netlink: 196 bytes leftover after parsing attributes in process `syz.2.542'. [ 149.508949][ T7984] netlink: 196 bytes leftover after parsing attributes in process `syz.2.542'. [ 149.519151][ T7984] netlink: 19 bytes leftover after parsing attributes in process `syz.2.542'. [ 149.822775][ T8003] netlink: 'syz.2.545': attribute type 21 has an invalid length. [ 150.193040][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 150.369541][ T8035] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 150.433223][ T8029] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.477436][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.485125][ T8035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.511464][ T8035] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.740678][ T8060] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 150.767892][ T8061] netlink: 'syz.3.561': attribute type 7 has an invalid length. [ 150.975468][ T8066] hsr0 speed is unknown, defaulting to 1000 [ 151.030098][ T8073] openvswitch: netlink: IP tunnel dst address not specified [ 151.771555][ T8110] netlink: 'syz.3.573': attribute type 4 has an invalid length. [ 152.287395][ T8135] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 152.347511][ T8135] netlink: 'syz.3.580': attribute type 4 has an invalid length. [ 152.347594][ T8138] netlink: 'syz.4.581': attribute type 21 has an invalid length. [ 152.386034][ T8138] netlink: 'syz.4.581': attribute type 22 has an invalid length. [ 152.430337][ T8138] netlink: 'syz.4.581': attribute type 23 has an invalid length. [ 152.475683][ T8138] netlink: 'syz.4.581': attribute type 25 has an invalid length. [ 152.523246][ T8138] __nla_validate_parse: 8 callbacks suppressed [ 152.523268][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 152.614374][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 152.788365][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 153.132528][ T8185] syz_tun: left allmulticast mode [ 153.346262][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 153.531077][ T8203] netlink: 14 bytes leftover after parsing attributes in process `syz.0.596'. [ 153.597413][ T8208] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 153.605236][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 153.624463][ T6653] IPVS: starting estimator thread 0... [ 153.717324][ T8210] IPVS: using max 27 ests per chain, 64800 per kthread [ 153.750538][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1d [ 153.874989][ T8222] hsr0 speed is unknown, defaulting to 1000 [ 153.889607][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.601'. [ 154.139674][ T8237] syzkaller0: entered promiscuous mode [ 154.148663][ T8237] syzkaller0: entered allmulticast mode [ 154.295819][ T8202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.328932][ T8240] bond0: entered promiscuous mode [ 154.334528][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.400655][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.421067][ T8240] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 154.440175][ T8240] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 154.453964][ T8240] bond0: (slave ip6gre1): making interface the new active one [ 154.463275][ T8240] ip6gre1: entered promiscuous mode [ 154.470879][ T8240] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 154.683528][ T8229] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 154.705766][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 154.780121][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 154.901198][ T8281] validate_nla: 2 callbacks suppressed [ 154.901219][ T8281] netlink: 'syz.1.607': attribute type 13 has an invalid length. [ 154.982717][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 155.224924][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.271563][ T8281] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 155.276503][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.317422][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.331828][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.366287][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.381476][ T8281] batadv0: entered promiscuous mode [ 155.396828][ T8281] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.408797][ T5832] udevd[5832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 155.489109][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.513257][ T8302] netlink: 'syz.4.614': attribute type 4 has an invalid length. [ 155.663887][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.729536][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.870939][ T8330] netlink: 'syz.1.618': attribute type 21 has an invalid length. [ 155.878270][ T5837] Bluetooth: hci0: command 0x0c20 tx timeout [ 155.907742][ T8338] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 155.951571][ T8338] netlink: 'syz.0.623': attribute type 2 has an invalid length. [ 156.241628][ T8353] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 156.288436][ T8351] xt_CONNSECMARK: invalid mode: 0 [ 157.186813][ T8406] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20002 [ 157.278104][ T8410] C: renamed from lo [ 157.323252][ T8410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.425056][ T8419] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 157.458165][ T8416] pimreg3: entered allmulticast mode [ 157.502633][ T8419] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 157.605460][ T8425] __nla_validate_parse: 4 callbacks suppressed [ 157.605482][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 157.621828][ T6655] hsr0 speed is unknown, defaulting to 1000 [ 157.648981][ T6655] syz1: Port: 1 Link DOWN [ 157.670123][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.643'. [ 157.741299][ T5837] block nbd1: Receive control failed (result -32) [ 158.018650][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 158.128080][ T8461] netlink: 256 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.230457][ T8457] netlink: 84 bytes leftover after parsing attributes in process `syz.4.651'. [ 158.845967][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 158.902777][ T8500] block nbd4: not configured, cannot reconfigure [ 158.916798][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 158.955926][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 159.044841][ T5837] block nbd2: Receive control failed (result -32) [ 159.180518][ T8506] syzkaller0: entered promiscuous mode [ 159.201639][ T8506] syzkaller0: entered allmulticast mode [ 159.276003][ T8510] ip6erspan1: entered allmulticast mode [ 159.754037][ T8552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.799421][ T8552] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 159.859164][ T8558] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 159.878530][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 159.905095][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 159.943807][ T8558] netlink: 'syz.0.676': attribute type 2 has an invalid length. [ 160.001476][ T8558] netlink: 'syz.0.676': attribute type 2 has an invalid length. [ 160.060397][ T8558] netlink: 'syz.0.676': attribute type 2 has an invalid length. [ 160.077082][ T8567] xt_CT: No such helper "snmp_trap" [ 161.683591][ T8604] syzkaller1: entered promiscuous mode [ 161.727312][ T8604] syzkaller1: entered allmulticast mode [ 162.748597][ T8648] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 162.756398][ T8648] __nla_validate_parse: 3 callbacks suppressed [ 162.756417][ T8648] netlink: 224 bytes leftover after parsing attributes in process `syz.4.695'. [ 163.520278][ T8672] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 164.128398][ T8705] sctp: [Deprecated]: syz.1.714 (pid 8705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.128398][ T8705] Use struct sctp_sack_info instead [ 164.197114][ T8709] netlink: 'syz.3.716': attribute type 3 has an invalid length. [ 164.511972][ T8719] netlink: 'syz.3.719': attribute type 11 has an invalid length. [ 164.537963][ T8719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.719'. [ 164.578983][ T8719] netlink: 14 bytes leftover after parsing attributes in process `syz.3.719'. [ 164.590958][ T8725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.720'. [ 164.634929][ T8719] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.673854][ T8719] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.701001][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 164.712901][ T8719] .` (unregistering): Released all slaves [ 164.831790][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 165.096355][ T8739] xt_TCPMSS: Only works on TCP SYN packets [ 165.212238][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 165.359853][ T8747] delete_channel: no stack [ 165.626452][ T8768] netlink: 'syz.2.732': attribute type 13 has an invalid length. [ 165.671564][ T8768] veth0_macvtap: left promiscuous mode [ 165.732240][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 165.756978][ T8768] macvtap0: entered allmulticast mode [ 165.782371][ T8768] macvtap0: refused to change device tx_queue_len [ 166.024618][ T8788] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 166.107998][ T8788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.218716][ T8783] vlan2: entered allmulticast mode [ 166.228046][ T8783] bond2: entered allmulticast mode [ 166.234565][ T8799] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 166.243380][ T8799] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.740'. [ 166.296496][ T8788] bond2: (slave gretap2): making interface the new active one [ 166.323980][ T8788] gretap2: entered allmulticast mode [ 166.343003][ T8788] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 166.434255][ T8801] wireguard0: entered promiscuous mode [ 166.446445][ T8801] wireguard0: entered allmulticast mode [ 166.475763][ T8801] team0: Port device wireguard0 added [ 166.484744][ T8810] netlink: 'syz.0.743': attribute type 11 has an invalid length. [ 166.704096][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 166.805951][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.825658][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.869084][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.904929][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.177074][ T8859] syz.4.755: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.203321][ T8859] CPU: 0 UID: 0 PID: 8859 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 167.203348][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.203360][ T8859] Call Trace: [ 167.203367][ T8859] [ 167.203376][ T8859] dump_stack_lvl+0xe8/0x150 [ 167.203408][ T8859] warn_alloc+0x249/0x340 [ 167.203433][ T8859] ? stack_trace_save+0xa9/0x100 [ 167.203456][ T8859] ? __pfx_warn_alloc+0x10/0x10 [ 167.203487][ T8859] ? kasan_save_track+0x4f/0x80 [ 167.203506][ T8859] ? kasan_save_track+0x3e/0x80 [ 167.203524][ T8859] ? __kasan_kmalloc+0x93/0xb0 [ 167.203545][ T8859] ? __kmalloc_cache_noprof+0x31c/0x660 [ 167.203565][ T8859] ? xskq_create+0x56/0x170 [ 167.203585][ T8859] ? xsk_setsockopt+0x54c/0x990 [ 167.203612][ T8859] ? do_sock_setsockopt+0x17c/0x1b0 [ 167.203633][ T8859] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 167.203653][ T8859] ? do_syscall_64+0x14d/0xf80 [ 167.203681][ T8859] __vmalloc_node_range_noprof+0x132/0x1730 [ 167.203747][ T8859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.203774][ T8859] ? __kasan_kmalloc+0x93/0xb0 [ 167.203801][ T8859] vmalloc_user_noprof+0xad/0xe0 [ 167.203823][ T8859] ? xskq_create+0xbf/0x170 [ 167.203844][ T8859] xskq_create+0xbf/0x170 [ 167.203867][ T8859] xsk_init_queue+0x8a/0xe0 [ 167.203890][ T8859] xsk_setsockopt+0x54c/0x990 [ 167.203923][ T8859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.203952][ T8859] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.203984][ T8859] ? aa_sock_opt_perm+0xff/0x1a0 [ 167.204017][ T8859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 167.204040][ T8859] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.204071][ T8859] do_sock_setsockopt+0x17c/0x1b0 [ 167.204099][ T8859] __x64_sys_setsockopt+0x13d/0x1b0 [ 167.204128][ T8859] do_syscall_64+0x14d/0xf80 [ 167.204150][ T8859] ? trace_irq_disable+0x3b/0x150 [ 167.204166][ T8859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.204184][ T8859] ? clear_bhb_loop+0x40/0x90 [ 167.204209][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.204227][ T8859] RIP: 0033:0x7f8ff9f9c819 [ 167.204246][ T8859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.204260][ T8859] RSP: 002b:00007f8ffad7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.204282][ T8859] RAX: ffffffffffffffda RBX: 00007f8ffa215fa0 RCX: 00007f8ff9f9c819 [ 167.204295][ T8859] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 167.204307][ T8859] RBP: 00007f8ffa032c91 R08: 0000000000000004 R09: 0000000000000000 [ 167.204318][ T8859] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.204330][ T8859] R13: 00007f8ffa216038 R14: 00007f8ffa215fa0 R15: 00007ffd96e55ea8 [ 167.204364][ T8859] [ 167.204594][ T8859] Mem-Info: [ 167.485249][ T8859] active_anon:5885 inactive_anon:0 isolated_anon:0 [ 167.485249][ T8859] active_file:2632 inactive_file:39959 isolated_file:0 [ 167.485249][ T8859] unevictable:768 dirty:70 writeback:0 [ 167.485249][ T8859] slab_reclaimable:10931 slab_unreclaimable:99287 [ 167.485249][ T8859] mapped:29115 shmem:1362 pagetables:1355 [ 167.485249][ T8859] sec_pagetables:0 bounce:0 [ 167.485249][ T8859] kernel_misc_reclaimable:0 [ 167.485249][ T8859] free:1327870 free_pcp:11541 free_cma:0 [ 167.533548][ T8859] Node 0 active_anon:23540kB inactive_anon:0kB active_file:10528kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116460kB dirty:280kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12416kB pagetables:5272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.572279][ T8859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.603355][ T8859] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.647913][ T8859] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 167.654098][ T8859] Node 0 DMA32 free:1357536kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23540kB inactive_anon:0kB active_file:10528kB inactive_file:159636kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2552660kB mlocked:0kB bounce:0kB free_pcp:45512kB local_pcp:25228kB free_cma:0kB [ 167.690724][ T8859] lowmem_reserve[]: 0 0 0 0 0 [ 167.695585][ T8859] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.756158][ T8859] lowmem_reserve[]: 0 0 0 0 0 [ 167.764594][ T8859] Node 1 Normal free:3939084kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.823996][ T8859] lowmem_reserve[]: 0 0 0 0 0 [ 167.829595][ T8859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.842887][ T8859] Node 0 DMA32: 1338*4kB (UME) 1627*8kB (UME) 689*16kB (UM) 203*32kB (UM) 101*64kB (UME) 143*128kB (UM) 129*256kB (UME) 104*512kB (UE) 74*1024kB (UME) 42*2048kB (UME) 250*4096kB (UM) = 1332720kB [ 167.869597][ T8859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.881883][ T8859] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 9*16kB (UM) 6*32kB (UM) 6*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939084kB [ 167.899550][ T8859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.910814][ T8859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.921311][ T8859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.931754][ T8859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.941890][ T8859] 43949 total pagecache pages [ 167.946750][ T8859] 0 pages in swap cache [ 167.952121][ T8859] Free swap = 124996kB [ 167.956326][ T8859] Total swap = 124996kB [ 167.960946][ T8859] 2097051 pages RAM [ 167.964943][ T8859] 0 pages HighMem/MovableOnly [ 167.970246][ T8859] 427051 pages reserved [ 167.974294][ T8879] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 167.974414][ T8859] 0 pages cma reserved [ 168.482398][ T8871] syz.3.758 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 168.494756][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.3.758 Not tainted syzkaller #0 PREEMPT(full) [ 168.494786][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.494797][ T8871] Call Trace: [ 168.494806][ T8871] [ 168.494815][ T8871] dump_stack_lvl+0xe8/0x150 [ 168.494850][ T8871] dump_header+0xd3/0x4c0 [ 168.494879][ T8871] oom_kill_process+0x3ab/0x970 [ 168.494907][ T8871] out_of_memory+0x106c/0x1410 [ 168.494928][ T8871] ? percpu_ref_put+0x19/0x180 [ 168.494955][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 168.494989][ T8871] ? __pfx_out_of_memory+0x10/0x10 [ 168.495006][ T8871] ? do_raw_spin_unlock+0xf5/0x210 [ 168.495040][ T8871] try_charge_memcg+0xc53/0x1560 [ 168.495068][ T8871] ? __lock_acquire+0x6b5/0x2cf0 [ 168.495110][ T8871] ? __pfx_try_charge_memcg+0x10/0x10 [ 168.495131][ T8871] ? xa_load+0x60/0x210 [ 168.495167][ T8871] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 168.495198][ T8871] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 168.495226][ T8871] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 168.495255][ T8871] __swap_cache_prepare_and_add+0x52a/0x700 [ 168.495305][ T8871] swap_cache_alloc_folio+0xf1/0x240 [ 168.495339][ T8871] swap_cluster_readahead+0x369/0x690 [ 168.495377][ T8871] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 168.495424][ T8871] ? get_vma_policy+0x27b/0x3c0 [ 168.495464][ T8871] swapin_readahead+0x196/0xc50 [ 168.495510][ T8871] ? __pfx_swapin_readahead+0x10/0x10 [ 168.495543][ T8871] ? swap_table_get+0x1e/0x260 [ 168.495571][ T8871] ? swap_table_get+0x1e/0x260 [ 168.495596][ T8871] ? swap_table_get+0x1e/0x260 [ 168.495625][ T8871] ? swap_table_get+0x216/0x260 [ 168.495655][ T8871] ? swap_cache_get_folio+0x513/0x520 [ 168.495692][ T8871] do_swap_page+0x56f/0x5a20 [ 168.495753][ T8871] ? do_swap_page+0x127/0x5a20 [ 168.495780][ T8871] ? __pfx_do_swap_page+0x10/0x10 [ 168.495805][ T8871] ? __pte_offset_map+0x1ae/0x240 [ 168.495829][ T8871] ? pte_offset_map_rw_nolock+0xea/0x160 [ 168.495853][ T8871] handle_mm_fault+0x12d2/0x3310 [ 168.495900][ T8871] ? handle_mm_fault+0xee/0x3310 [ 168.495940][ T8871] ? __pfx_handle_mm_fault+0x10/0x10 [ 168.495968][ T8871] ? lock_vma_under_rcu+0x45a/0x500 [ 168.496021][ T8871] do_user_addr_fault+0xa73/0x1340 [ 168.496058][ T8871] ? rcu_is_watching+0x15/0xb0 [ 168.496086][ T8871] ? trace_page_fault_user+0x84/0x210 [ 168.496116][ T8871] exc_page_fault+0x6a/0xc0 [ 168.496142][ T8871] asm_exc_page_fault+0x26/0x30 [ 168.496162][ T8871] RIP: 0033:0x7f517ad57954 [ 168.496183][ T8871] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d 6e 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 [ 168.496200][ T8871] RSP: 002b:00007ffd16f26c10 EFLAGS: 00010246 [ 168.496220][ T8871] RAX: 0000000000000000 RBX: 000055556d906500 RCX: 0000000000000000 [ 168.496233][ T8871] RDX: 00007ffd16f26c50 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.496245][ T8871] RBP: 00007f517b017da0 R08: 0000000000000000 R09: 0000000000000000 [ 168.496257][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000291e4 [ 168.496269][ T8871] R13: 00007f517b01618c R14: 0000000000029173 R15: 00007f517b016180 [ 168.496306][ T8871] [ 168.496379][ T8871] memory: usage 307200kB, limit 307200kB, failcnt 612 [ 168.897927][ T8871] memory+swap: usage 289968kB, limit 9007199254740988kB, failcnt 0 [ 168.905904][ T8871] kmem: usage 287892kB, limit 9007199254740988kB, failcnt 0 [ 168.947216][ T8871] Memory cgroup stats for /syz3: [ 168.947515][ T8871] cache 4096 [ 168.956413][ T8871] rss 0 [ 168.967185][ T8871] rss_huge 0 [ 168.970428][ T8871] shmem 0 [ 168.973382][ T8871] mapped_file 0 [ 168.976859][ T8871] dirty 0 [ 168.997382][ T8871] writeback 0 [ 169.000724][ T8871] workingset_refault_anon 13 [ 169.005563][ T8871] workingset_refault_file 1 [ 169.027195][ T8871] swap 192512 [ 169.030547][ T8871] swapcached 200704 [ 169.034385][ T8871] pgpgin 16944 [ 169.057249][ T8871] pgpgout 16941 [ 169.060846][ T8871] pgfault 26429 [ 169.064320][ T8871] pgmajfault 9 [ 169.075709][ T8871] inactive_anon 0 [ 169.079707][ T8871] active_anon 8192 [ 169.083553][ T8871] inactive_file 0 [ 169.097225][ T8871] active_file 4096 [ 169.101092][ T8871] unevictable 0 [ 169.104587][ T8871] hierarchical_memory_limit 314572800 [ 169.127195][ T8871] hierarchical_memsw_limit 9223372036854771712 [ 169.133420][ T8871] total_cache 4096 [ 169.147371][ T8871] total_rss 0 [ 169.150719][ T8871] total_rss_huge 0 [ 169.154474][ T8871] total_shmem 0 [ 169.177262][ T8871] total_mapped_file 0 [ 169.181377][ T8871] total_dirty 0 [ 169.184869][ T8871] total_writeback 0 [ 169.197227][ T8871] total_workingset_refault_anon 13 [ 169.202389][ T8871] total_workingset_refault_file 1 [ 169.217239][ T8871] total_swap 192512 [ 169.221102][ T8871] total_swapcached 200704 [ 169.225441][ T8871] total_pgpgin 16946 [ 169.237242][ T8871] total_pgpgout 16943 [ 169.241267][ T8871] total_pgfault 26433 [ 169.245296][ T8871] total_pgmajfault 9 [ 169.252427][ T8871] total_inactive_anon 0 [ 169.256629][ T8871] total_active_anon 8192 [ 169.261227][ T8871] total_inactive_file 0 [ 169.265419][ T8871] total_active_file 4096 [ 169.269767][ T8871] total_unevictable 0 [ 169.273775][ T8871] anon_cost 0 [ 169.277252][ T8871] file_cost 0 [ 169.280562][ T8871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.758,pid=8871,uid=0 [ 169.296695][ T8871] Memory cgroup out of memory: Killed process 8871 (syz.3.758) total-vm:102420kB, anon-rss:1244kB, file-rss:22916kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 169.887786][ T8840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.910910][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.015041][ T8892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.067097][ T8894] __nla_validate_parse: 8 callbacks suppressed [ 170.067117][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 170.139618][ T8897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.668065][ T8909] nbd3: detected capacity change from 0 to 63 [ 170.684578][ T8923] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 170.707315][ T8923] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 170.740127][ T5837] block nbd3: Receive control failed (result -104) [ 170.749558][ T5146] block nbd3: Receive control failed (result -32) [ 170.930576][ T8937] tipc: Started in network mode [ 170.943131][ T8937] tipc: Node identity ac14140f, cluster identity 4711 [ 170.967584][ T8937] tipc: New replicast peer: 255.255.255.255 [ 170.982407][ T8937] tipc: Enabled bearer , priority 10 [ 171.008540][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 171.053438][ T8939] hsr0 speed is unknown, defaulting to 1000 [ 171.142117][ T8949] netlink: 144 bytes leftover after parsing attributes in process `syz.0.779'. [ 171.506752][ T8963] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 171.540662][ T8971] sctp: [Deprecated]: syz.3.788 (pid 8971) Use of int in max_burst socket option. [ 171.540662][ T8971] Use struct sctp_assoc_value instead [ 171.581769][ T8969] netlink: 'syz.4.786': attribute type 58 has an invalid length. [ 171.638986][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 171.716151][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 171.737562][ T8976] xt_TCPMSS: Only works on TCP SYN packets [ 172.097765][ T886] tipc: Node number set to 2886997007 [ 172.109532][ T9009] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 172.260287][ T9009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.267650][ T9009] IPv6: NLM_F_CREATE should be set when creating new route [ 172.345277][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 172.888741][ T9036] netlink: 96 bytes leftover after parsing attributes in process `syz.3.804'. [ 172.927855][ T9036] 8021q: VLANs not supported on ip_vti0 [ 173.114923][ T9050] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.807'. [ 173.129317][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 173.476105][ T9070] netlink: 'syz.1.817': attribute type 83 has an invalid length. [ 173.516281][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 173.746037][ T9079] bond3: (slave gre0): Device is not bonding slave [ 173.753867][ T9079] bond3: option active_slave: invalid value (gre0) [ 173.762501][ T9079] bond3 (unregistering): Released all slaves [ 173.781050][ T9092] sock: sock_timestamping_bind_phc: sock not bind to device [ 173.992563][ T9096] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 174.174049][ T9096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.236371][ T9114] netlink: 'syz.0.827': attribute type 2 has an invalid length. [ 174.340994][ T9114] vþ: entered promiscuous mode [ 174.359149][ T1123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.380150][ T1123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.428433][ T1123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.467965][ T1123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.909622][ T9149] netlink: 'syz.3.841': attribute type 21 has an invalid length. [ 174.933666][ T9153] openvswitch: netlink: IP tunnel TTL not specified. [ 175.175091][ T9164] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 175.185109][ T9164] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 175.196555][ T9164] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 175.414294][ T9174] __nla_validate_parse: 13 callbacks suppressed [ 175.414318][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 175.679517][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 175.705110][ T9186] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 175.752211][ T9186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.854'. [ 175.872280][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 175.931345][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 175.947538][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 176.342227][ T9225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.861'. [ 176.361992][ T9208] syzkaller0: entered promiscuous mode [ 176.368044][ T9208] syzkaller0: entered allmulticast mode [ 176.423434][ T9202] syzkaller0: entered promiscuous mode [ 176.429167][ T9202] syzkaller0: entered allmulticast mode [ 179.407332][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.866'. [ 179.509613][ T9270] netlink: 64 bytes leftover after parsing attributes in process `syz.4.871'. [ 179.589280][ T9270] syzkaller0: entered promiscuous mode [ 179.594913][ T9270] syzkaller0: entered allmulticast mode [ 179.610650][ T9270] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.871'. [ 179.803935][ T9283] 8021q: VLANs not supported on ip6gre0 [ 179.842506][ T9283] 8021q: VLANs not supported on ip6gre0 [ 179.944274][ T9287] netlink: 'syz.0.876': attribute type 15 has an invalid length. [ 180.205929][ T9304] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 180.351922][ T9310] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.794936][ T9335] sctp: [Deprecated]: syz.0.893 (pid 9335) Use of int in maxseg socket option. [ 180.794936][ T9335] Use struct sctp_assoc_value instead [ 180.928269][ T9335] syzkaller1: entered promiscuous mode [ 180.933803][ T9335] syzkaller1: entered allmulticast mode [ 181.418327][ T9370] __nla_validate_parse: 8 callbacks suppressed [ 181.418348][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.903'. [ 181.672533][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 181.687278][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 181.794898][ T9392] delete_channel: no stack [ 181.884314][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 181.989195][ T9403] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 182.005038][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 182.028680][ T9405] veth0: entered promiscuous mode [ 182.032925][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.913'. [ 182.062226][ T9404] veth0: left promiscuous mode [ 182.284551][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 182.584056][ T9428] syzkaller1: entered promiscuous mode [ 182.604163][ T9428] syzkaller1: entered allmulticast mode [ 182.628829][ T9391] delete_channel: no stack [ 182.803398][ T9438] netlink: 'syz.1.924': attribute type 29 has an invalid length. [ 182.812631][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 182.861680][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 182.921645][ T9438] netlink: 'syz.1.924': attribute type 29 has an invalid length. [ 182.939940][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 183.371059][ T9464] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 183.634479][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.284800][ T9502] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 184.363745][ T9511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.484688][ T9516] netlink: 'syz.0.946': attribute type 7 has an invalid length. [ 184.515879][ T9516] netlink: 'syz.0.946': attribute type 8 has an invalid length. [ 184.656933][ T9524] ip6gre2: entered allmulticast mode [ 184.718917][ T9531] netlink: 'syz.2.950': attribute type 21 has an invalid length. [ 184.776330][ T9531] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 184.828406][ T9531] bond3 (unregistering): Released all slaves [ 185.051159][ T9538] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 185.123519][ T9538] bond2 (unregistering): Released all slaves [ 185.175181][ T9547] bridge_slave_1: left allmulticast mode [ 185.192199][ T9547] bridge_slave_1: left promiscuous mode [ 185.224646][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.264663][ T9547] ¾x9ÿ: left allmulticast mode [ 185.281990][ T9547] ¾x9ÿ: left promiscuous mode [ 185.296084][ T9547] bridge0: port 1(0¾x9ÿ) entered disabled state [ 185.375863][ T9547] bond0: (slave bridge0): Releasing backup interface [ 185.415851][ T9547] bridge0 (unregistering): left promiscuous mode [ 185.481035][ T9580] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 185.904060][ T9592] syzkaller0: entered promiscuous mode [ 185.937791][ T9592] syzkaller0: entered allmulticast mode [ 186.581929][ T9639] netlink: 'syz.0.975': attribute type 3 has an invalid length. [ 186.601758][ T9639] __nla_validate_parse: 11 callbacks suppressed [ 186.601779][ T9639] netlink: 766 bytes leftover after parsing attributes in process `syz.0.975'. [ 186.726262][ T9649] netlink: 'syz.2.978': attribute type 4 has an invalid length. [ 186.855025][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.982'. [ 186.892874][ T9655] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.072920][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'. [ 187.073091][ T9674] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 187.083004][ T9673] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 187.120507][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.987'. [ 187.199296][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 187.258375][ T9682] x_tables: duplicate underflow at hook 3 [ 187.289240][ T9682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.989'. [ 187.564076][ T9703] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 187.755102][ T9713] syzkaller0: entered promiscuous mode [ 187.765506][ T9713] syzkaller0: entered allmulticast mode [ 187.814103][ T9713] netlink: 211920 bytes leftover after parsing attributes in process `syz.2.1001'. [ 187.831894][ T9718] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 188.113391][ T9737] netlink: 'syz.4.1007': attribute type 29 has an invalid length. [ 188.129508][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 188.145701][ T9737] netlink: 'syz.4.1007': attribute type 29 has an invalid length. [ 188.154142][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 188.171038][ T9737] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 188.221656][ T9741] netlink: 'syz.3.1009': attribute type 83 has an invalid length. [ 188.225134][ T9690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.239860][ T9690] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 188.308492][ T9690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.323949][ T9690] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 188.374971][ T9690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.400344][ T9690] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.400884][ T9744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'. [ 188.453793][ T9690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.461821][ T9690] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.495810][ T9690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.513596][ T9690] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 188.631165][ T9758] bond0: entered promiscuous mode [ 188.636260][ T9758] bond_slave_0: entered promiscuous mode [ 188.660024][ T9758] bond_slave_1: entered promiscuous mode [ 188.673883][ T9758] bond0: left promiscuous mode [ 188.681227][ T9758] bond_slave_0: left promiscuous mode [ 188.686984][ T9758] bond_slave_1: left promiscuous mode [ 188.700554][ T9766] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 189.058808][ T9790] unsupported nlmsg_type 40 [ 189.219815][ T9796] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 189.291916][ T9805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.516864][ T9820] netlink: 'syz.4.1035': attribute type 2 has an invalid length. [ 189.573314][ T9820] 9: entered promiscuous mode [ 190.171789][ T9854] syzkaller0: entered promiscuous mode [ 190.177920][ T9854] syzkaller0: entered allmulticast mode [ 190.191334][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.223773][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab81c00: rx timeout, send abort [ 190.725319][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab81800: rx timeout, send abort [ 190.733670][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab81c00: abort rx timeout. Force session deactivation [ 191.233608][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab81800: abort rx timeout. Force session deactivation [ 191.951302][ T9887] bridge0: left allmulticast mode [ 191.959996][ T9887] bridge0: entered allmulticast mode [ 191.965561][ T9887] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.975730][ T9903] veth0_to_bridge: entered promiscuous mode [ 191.987860][ T9905] tipc: MTU too low for tipc bearer [ 192.008160][ T9902] veth0_to_bridge: left promiscuous mode [ 192.155943][ T9916] __nla_validate_parse: 6 callbacks suppressed [ 192.155967][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1061'. [ 192.166579][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1063'. [ 192.172680][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1061'. [ 192.218314][ T9920] openvswitch: netlink: EtherType 50a is less than min 600 [ 192.523498][ T9937] validate_nla: 2 callbacks suppressed [ 192.523518][ T9937] netlink: 'syz.4.1068': attribute type 1 has an invalid length. [ 192.557682][ T9937] netlink: 'syz.4.1068': attribute type 2 has an invalid length. [ 192.890280][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'. [ 192.906050][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.336803][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 193.416420][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 193.431146][T10002] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 193.574436][T10002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.906534][T10022] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1090'. [ 193.926370][T10022] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 194.155751][T10028] C: renamed from lo [ 194.174228][T10028] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.230296][T10037] netlink: 412 bytes leftover after parsing attributes in process `syz.4.1093'. [ 194.234051][T10033] dvmrp0: entered allmulticast mode [ 194.490798][T10047] netlink: 'syz.4.1099': attribute type 21 has an invalid length. [ 194.521853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.547608][T10047] netlink: 'syz.4.1099': attribute type 22 has an invalid length. [ 194.555568][T10047] netlink: 'syz.4.1099': attribute type 23 has an invalid length. [ 194.582058][T10050] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 194.600687][T10047] netlink: 'syz.4.1099': attribute type 25 has an invalid length. [ 194.618089][T10047] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1099'. [ 194.633413][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1099'. [ 194.682819][T10056] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 194.770686][T10064] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 194.992500][T10064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.105324][T10071] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 195.116388][T10071] bond2: entered allmulticast mode [ 195.790474][T10118] Unsupported ieee802154 address type: 0 [ 195.802366][T10121] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 195.841919][T10123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.391596][T10140] bridge0: entered promiscuous mode [ 196.398525][T10140] ip6gretap0: entered promiscuous mode [ 196.405152][T10140] debugfs: 'hsr1' already exists in 'hsr' [ 196.411135][T10140] Cannot create hsr debugfs directory [ 196.416756][T10140] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 196.446480][ T886] IPVS: starting estimator thread 0... [ 196.560683][T10149] IPVS: using max 24 ests per chain, 57600 per kthread [ 196.752383][T10160] tipc: Enabling of bearer rejected, failed to enable media [ 196.799232][T10161] tipc: Enabling of bearer rejected, failed to enable media [ 197.212458][T10180] "syz.3.1139" (10180) uses obsolete ecb(arc4) skcipher [ 197.221829][T10182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.306427][T10190] gtp0: entered promiscuous mode [ 197.329841][T10190] gtp0: entered allmulticast mode [ 197.347003][T10194] bond3: (slave veth0_to_bond): making interface the new active one [ 197.371316][T10194] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.433782][T10196] bond3: entered promiscuous mode [ 197.442364][T10196] veth0_to_bond: entered promiscuous mode [ 197.452526][T10196] bond3: entered allmulticast mode [ 197.463356][T10196] veth0_to_bond: entered allmulticast mode [ 197.517110][T10203] bond3: entered promiscuous mode [ 197.524051][T10203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.544342][T10204] bridge0: Device is already in use. [ 197.563271][T10207] bridge0: Device is already in use. [ 197.844360][T10223] __nla_validate_parse: 8 callbacks suppressed [ 197.844378][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 197.926485][T10223] : entered promiscuous mode [ 197.965392][T10224] syzkaller0: entered promiscuous mode [ 198.135286][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 198.492601][T10240] validate_nla: 7 callbacks suppressed [ 198.492624][T10240] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 198.530923][T10246] xt_hashlimit: size too large, truncated to 1048576 [ 198.560644][T10248] netlink: 'syz.3.1154': attribute type 39 has an invalid length. [ 198.781510][T10256] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 199.124920][T10269] nbd: socks must be embedded in a SOCK_ITEM attr [ 199.134367][T10266] Cannot find set identified by id 65534 to match [ 199.356571][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 199.412112][T10288] syzkaller1: entered promiscuous mode [ 199.418542][T10288] syzkaller1: entered allmulticast mode [ 199.521223][T10291] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.806209][T10302] bond3 (unregistering): Released all slaves [ 199.864151][T10318] netlink: 'syz.4.1172': attribute type 6 has an invalid length. [ 199.938326][T10307] syzkaller1: entered promiscuous mode [ 199.943858][T10307] syzkaller1: entered allmulticast mode [ 199.954841][T10322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.329873][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1178'. [ 200.344081][T10344] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1179'. [ 200.382579][T10344] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1179'. [ 200.410048][T10344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 200.872425][T10374] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1184'. [ 200.918828][ T5200] block nbd3: Connection timed out, retrying (0/2 alive) [ 200.929048][ T5200] block nbd3: Connection timed out, retrying (0/2 alive) [ 200.936223][ T5200] block nbd3: Connection timed out, retrying (0/2 alive) [ 200.945785][ T5200] block nbd3: Connection timed out, retrying (0/2 alive) [ 200.955420][ T5200] block nbd3: Dead connection, failed to find a fallback [ 200.963328][ T5200] block nbd3: shutting down sockets [ 200.970139][ T5200] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 200.982682][ T5200] Buffer I/O error on dev nbd3, logical block 3, async page read [ 200.990964][ T5200] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.001348][ T5200] Buffer I/O error on dev nbd3, logical block 2, async page read [ 201.009286][ T5200] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.019288][ T5200] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.027284][ T5200] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.038456][ T5200] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.049419][ T5832] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.060647][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.069070][ T5832] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.079088][ T5832] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.087033][ T5832] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.099364][ T5832] Buffer I/O error on dev nbd3, logical block 2, async page read [ 201.107907][ T5832] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.118367][ T5832] Buffer I/O error on dev nbd3, logical block 3, async page read [ 201.126424][ T5832] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.136305][ T5832] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.144285][ T5832] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.154557][ T5832] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.164413][ T5832] ldm_validate_partition_table(): Disk read failed. [ 201.172530][ T5832] Dev nbd3: unable to read RDB block 0 [ 201.173162][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 201.178790][ T5832] nbd3: unable to read partition table [ 201.196021][ T5832] ldm_validate_partition_table(): Disk read failed. [ 201.203723][ T5832] Dev nbd3: unable to read RDB block 0 [ 201.210341][ T5832] nbd3: unable to read partition table [ 201.300032][T10391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1189'. [ 201.344508][T10391] wireguard0: entered promiscuous mode [ 201.355868][T10391] wireguard0: entered allmulticast mode [ 201.373356][T10391] team0: Device wireguard0 is of different type [ 201.422795][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.440535][T10393] bond0: (slave rose0): Enslaving as an active interface with an up link [ 201.680858][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 201.933270][T10415] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 202.483538][T10450] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 202.806301][T10450] bond4: entered promiscuous mode [ 202.839262][T10450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.954932][T10454] macvtap0: entered allmulticast mode [ 202.980900][T10469] __nla_validate_parse: 3 callbacks suppressed [ 202.980921][T10469] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1207'. [ 203.071042][T10463] bond4: (slave bridge3): making interface the new active one [ 203.107388][T10463] bridge3: entered promiscuous mode [ 203.145651][T10463] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 203.220051][T10468] vlan4: entered allmulticast mode [ 203.258948][T10468] bond0: entered allmulticast mode [ 203.264219][T10468] bond_slave_0: entered allmulticast mode [ 203.316631][T10468] bond_slave_1: entered allmulticast mode [ 203.389847][T10481] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 203.398538][T10481] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1209'. [ 203.408170][T10481] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1209'. [ 203.427981][T10469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.451041][T10481] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 203.460004][T10481] netlink: 'syz.1.1209': attribute type 8 has an invalid length. [ 203.468347][T10469] bond_slave_0: left allmulticast mode [ 203.489721][T10481] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1209'. [ 203.500327][T10469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.509862][T10469] bond_slave_1: left allmulticast mode [ 203.519352][T10469] bond0 (unregistering): Released all slaves [ 203.621042][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1205'. [ 203.800760][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 203.866882][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1212'. [ 204.225834][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'. [ 204.301085][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1221'. [ 204.482166][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 204.581363][T10535] netlink: 'syz.1.1227': attribute type 12 has an invalid length. [ 204.629948][T10535] netlink: 'syz.1.1227': attribute type 11 has an invalid length. [ 204.647259][T10536] netlink: 'syz.1.1227': attribute type 12 has an invalid length. [ 204.789072][T10536] netlink: 'syz.1.1227': attribute type 11 has an invalid length. [ 204.873740][T10530] bond0: entered promiscuous mode [ 204.940107][T10550] openvswitch: netlink: Unknown nsh attribute 0 [ 204.987819][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.164714][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.218565][T10530] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 205.281248][T10530] bond0: (slave sit2): Error -95 calling set_mac_address [ 205.359844][T10559] bridge0: port 3(gretap0) entered blocking state [ 205.390999][T10559] bridge0: port 3(gretap0) entered disabled state [ 205.403760][T10559] gretap0: entered allmulticast mode [ 205.419298][T10559] gretap0: entered promiscuous mode [ 205.435079][T10568] sch_fq: defrate 0 ignored. [ 207.022426][T10630] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 207.142736][T10633] tipc: Started in network mode [ 207.159313][T10633] tipc: Node identity 0300000000000000c593be39, cluster identity 4711 [ 207.199544][T10631] syz.1.1249 (10631) used greatest stack depth: 17472 bytes left [ 207.262317][T10644] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 207.408521][T10644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.558873][T10670] syzkaller0: entered promiscuous mode [ 207.564499][T10670] syzkaller0: entered allmulticast mode [ 207.640949][T10679] : entered promiscuous mode [ 255.960389][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.836515][T10720] __nla_validate_parse: 11 callbacks suppressed [ 268.836536][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 269.200797][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1267'. [ 269.225680][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'. [ 269.280733][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 269.403719][T10737] vlan4: entered allmulticast mode [ 269.425759][T10737] bridge1: entered allmulticast mode [ 269.640819][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 269.654352][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 269.688057][T10759] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1277'. [ 269.697083][T10759] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1277'. [ 269.735446][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1279'. [ 270.055176][T10779] netlink: 'syz.2.1283': attribute type 11 has an invalid length. [ 270.125090][T10779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1283'. [ 270.188773][T10789] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 270.409819][T10805] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 270.566090][T10817] xt_l2tp: missing protocol rule (udp|l2tpip) [ 270.610338][T10805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.657308][T10814] bond3: (slave veth3): Enslaving as an active interface with a down link [ 271.008578][T10831] xt_hashlimit: size too large, truncated to 1048576 [ 271.459045][T10833] team0 (unregistering): Port device team_slave_0 removed [ 271.492257][T10833] team0 (unregistering): Port device team_slave_1 removed [ 271.561631][T10832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.861100][T10863] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 271.887744][T10863] netlink: 'syz.1.1303': attribute type 2 has an invalid length. [ 271.917844][T10863] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 272.091210][T10872] syzkaller0: entered promiscuous mode [ 272.096830][T10872] syzkaller0: entered allmulticast mode [ 272.142639][T10873] tipc: Enabled bearer , priority 0 [ 272.177094][T10872] tipc: Enabling of bearer rejected, already enabled [ 272.211300][T10879] netlink: 'syz.1.1309': attribute type 13 has an invalid length. [ 272.244970][T10879] gretap0: refused to change device tx_queue_len [ 272.257698][T10879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.297841][T10871] tipc: Resetting bearer [ 272.341375][T10871] tipc: Disabling bearer [ 272.478968][T10890] bond4: entered promiscuous mode [ 272.484487][T10890] bond4: entered allmulticast mode [ 272.492776][T10890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.539530][T10900] netlink: 'syz.3.1315': attribute type 5 has an invalid length. [ 272.812539][T10912] netlink: 'syz.4.1320': attribute type 5 has an invalid length. [ 273.054580][T10928] netlink: 'syz.2.1326': attribute type 10 has an invalid length. [ 273.075711][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.086247][T10928] bridge_slave_1: left allmulticast mode [ 273.108134][T10928] bridge_slave_1: left promiscuous mode [ 273.116414][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.165763][T10933] syzkaller0: entered promiscuous mode [ 273.185175][T10933] 0: reclassify loop, rule prio 0, protocol 800 [ 273.205909][T10933] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 273.243247][T10933] dummy0: entered promiscuous mode [ 273.267940][T10933] bridge0: port 4(dummy0) entered blocking state [ 273.279071][T10933] bridge0: port 4(dummy0) entered disabled state [ 273.289284][T10933] dummy0: entered allmulticast mode [ 273.305729][T10943] vxcan2: entered allmulticast mode [ 273.923243][T10970] __nla_validate_parse: 210 callbacks suppressed [ 273.923268][T10970] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1341'. [ 274.384389][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 274.495910][T11010] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1350'. [ 274.526580][T11012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1351'. [ 274.749781][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 275.142443][T11051] macvlan0: entered promiscuous mode [ 275.200577][T11051] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.254778][T11063] validate_nla: 2 callbacks suppressed [ 275.254798][T11063] netlink: 'syz.0.1365': attribute type 21 has an invalid length. [ 275.312132][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'. [ 275.405961][T11072] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1368'. [ 275.504249][T11074] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1367'. [ 275.570753][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 275.778119][T11087] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 275.806178][T11089] bond6: option lp_interval: invalid value (0) [ 275.813184][T11089] bond6: option lp_interval: allowed values 1 - 2147483647 [ 275.828892][T11089] bond6 (unregistering): Released all slaves [ 275.836528][T11087] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1371'. [ 275.943993][T11092] xt_CT: No such helper "snmp_trap" [ 277.883492][T11163] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 278.136765][T11131] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 278.303525][T11163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.806674][T11197] Bluetooth: MGMT ver 1.23 [ 279.049145][T11208] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 279.058531][T11208] bond0: (slave wlan1): Opening slave failed [ 279.229795][T11216] __nla_validate_parse: 4 callbacks suppressed [ 279.229819][T11216] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1403'. [ 279.528780][T11230] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1409'. [ 279.551009][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 280.129159][T11260] netlink: 'syz.3.1419': attribute type 39 has an invalid length. [ 281.633284][T11276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1424'. [ 281.671301][T11282] netlink: 'syz.1.1423': attribute type 10 has an invalid length. [ 281.674718][T11276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1424'. [ 281.725942][T11284] netlink: 'syz.4.1427': attribute type 3 has an invalid length. [ 281.727287][T11276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1424'. [ 281.740905][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1427'. [ 281.819928][T11291] netlink: 'syz.0.1429': attribute type 61 has an invalid length. [ 281.969014][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 282.071092][T11304] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 282.095400][T11304] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 282.345986][T11317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1436'. [ 282.383450][T11319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'. [ 282.571838][T11327] x_tables: duplicate underflow at hook 2 [ 284.035049][T11342] netlink: 'syz.3.1443': attribute type 9 has an invalid length. [ 284.091409][T11342] netlink: 'syz.3.1443': attribute type 9 has an invalid length. [ 284.301442][T11358] __nla_validate_parse: 3 callbacks suppressed [ 284.301463][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1449'. [ 284.626192][T11368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.649284][T11404] netlink: 'syz.0.1461': attribute type 9 has an invalid length. [ 286.657728][T11404] netlink: 'syz.0.1461': attribute type 11 has an invalid length. [ 286.665766][T11404] netlink: 'syz.0.1461': attribute type 12 has an invalid length. [ 286.674187][T11404] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1461'. [ 286.699032][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1460'. [ 286.704205][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 286.719624][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 286.729089][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 286.740867][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 286.753102][T11413] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 286.794920][T11408] netlink: 'syz.2.1462': attribute type 13 has an invalid length. [ 286.830901][T11408] macvtap0: refused to change device tx_queue_len [ 286.883173][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 286.893736][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 286.903264][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 288.027485][T11468] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 288.242905][T11493] openvswitch: netlink: IP tunnel dst address not specified [ 288.308677][T11493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 288.391604][T11493] team0: No ports can be present during mode change [ 288.437449][ T1092] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.446388][ T1092] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.491817][ T1092] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.620088][T11506] tipc: Enabling of bearer rejected, failed to enable media [ 288.688942][T11506] netlink: 'syz.1.1489': attribute type 29 has an invalid length. [ 288.718817][T11506] netlink: 'syz.1.1489': attribute type 29 has an invalid length. [ 288.741331][T11506] netlink: 'syz.1.1489': attribute type 1 has an invalid length. [ 288.814432][T11523] netlink: 'syz.0.1494': attribute type 3 has an invalid length. [ 288.883942][T11523] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 288.907791][T11523] NCSI netlink: No device for ifindex 813332851 [ 289.563179][T11561] __nla_validate_parse: 14 callbacks suppressed [ 289.563201][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 289.592737][T11561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1504'. [ 289.616840][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 291.146603][T11559] syzkaller1: entered promiscuous mode [ 291.153992][T11559] syzkaller1: entered allmulticast mode [ 291.331813][T11584] netlink: 'syz.0.1508': attribute type 10 has an invalid length. [ 291.339830][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.339858][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.340214][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.340232][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.348733][T11585] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 291.413846][T11581] 8021q: VLANs not supported on sit0 [ 291.439502][T11584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.449587][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 291.479251][T11584] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 291.508615][T11585] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1509'. [ 291.547522][T11590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 291.612875][T11590] nbd: socks must be embedded in a SOCK_ITEM attr [ 291.629587][T11594] nbd: device at index 64 is going down [ 291.882596][T10811] udevd[10811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 291.908922][T11605] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 291.950881][T10719] udevd[10719]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 292.280628][T11623] can: request_module (can-proto-0) failed. [ 292.385541][T11632] xt_socket: unknown flags 0x50 [ 292.660267][T11643] netlink: 'syz.1.1527': attribute type 13 has an invalid length. [ 292.670326][T11643] gretap0: refused to change device tx_queue_len [ 292.684503][T11643] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.714836][T11645] xt_hashlimit: max too large, truncated to 1048576 [ 292.730112][T11643] netlink: 'syz.1.1527': attribute type 1 has an invalid length. [ 293.267937][T11655] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.565961][T11655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.764719][T11655] macvlan0: left promiscuous mode [ 293.830982][T11655] macvtap0: left allmulticast mode [ 293.888862][T11655] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 294.075184][T11655] vlan2: left allmulticast mode [ 294.087305][T11655] bond2: left allmulticast mode [ 294.092292][T11655] gretap2: left allmulticast mode [ 294.148140][T11655] vlan4: left allmulticast mode [ 294.153065][T11655] bridge1: left allmulticast mode [ 294.174052][T11655] bond4: left promiscuous mode [ 294.180728][T11655] bond4: left allmulticast mode [ 294.228569][T11668] syzkaller0: entered promiscuous mode [ 294.234114][T11668] syzkaller0: entered allmulticast mode [ 294.302012][ T1123] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.328491][ T1123] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.349868][ T1123] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.377361][ T1123] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.460546][ T1123] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.471858][ T1123] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.496280][ T1123] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.572079][ T1123] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.641592][T11704] macvlan0: entered promiscuous mode [ 294.761667][T11715] IPv6: NLM_F_REPLACE set, but no existing node found! [ 294.761978][T11713] __nla_validate_parse: 12 callbacks suppressed [ 294.761994][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 294.808095][T11715] IPv6: NLM_F_REPLACE set, but no existing node found! [ 294.827870][T11713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.870782][T11713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.871973][T11724] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1544'. [ 295.062351][T11733] netlink: 'syz.2.1547': attribute type 13 has an invalid length. [ 295.113093][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 295.116640][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 295.147018][T11736] nbd: must specify a size in bytes for the device [ 295.154720][T11733] netlink: 'syz.2.1547': attribute type 13 has an invalid length. [ 295.164672][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 295.186399][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 295.296002][T11746] netlink: 'syz.2.1550': attribute type 2 has an invalid length. [ 295.312837][T11746] netlink: 'syz.2.1550': attribute type 11 has an invalid length. [ 295.333226][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1550'. [ 295.551197][T11758] tipc: Enabling of bearer rejected, failed to enable media [ 296.585130][T11805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1562'. [ 296.878469][T11822] netlink: 'syz.0.1564': attribute type 11 has an invalid length. [ 296.886533][T11822] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1564'. [ 296.921120][T11827] netlink: 736 bytes leftover after parsing attributes in process `syz.3.1566'. [ 296.945552][T11829] sctp: [Deprecated]: syz.4.1567 (pid 11829) Use of int in maxseg socket option. [ 296.945552][T11829] Use struct sctp_assoc_value instead [ 297.310579][T11874] netlink: 'syz.1.1573': attribute type 1 has an invalid length. [ 297.404317][T11874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.524723][T11884] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 297.785808][T11894] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20004 [ 297.872756][T11900] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 297.990187][T11910] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.017037][T11910] bond4: (slave C): Enslaving as an active interface with an up link [ 298.050707][T11910] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 298.087167][T11904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 298.095606][T11904] syzkaller0: entered promiscuous mode [ 298.139985][T11904] syzkaller0: entered allmulticast mode [ 298.738501][T11946] syzkaller0: entered promiscuous mode [ 298.744232][T11946] syzkaller0: entered allmulticast mode [ 298.806542][T11949] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 298.825221][T11949] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 298.927418][T11961] netlink: 'syz.4.1599': attribute type 2 has an invalid length. [ 298.936023][T11961] netlink: 'syz.4.1599': attribute type 2 has an invalid length. [ 299.805635][T12017] __nla_validate_parse: 10 callbacks suppressed [ 299.805659][T12017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'. [ 299.970009][T12021] team0 (unregistering): left promiscuous mode [ 299.976375][T12021] team_slave_0: left promiscuous mode [ 299.982368][T12021] team_slave_1: left promiscuous mode [ 300.018203][T12021] team0 (unregistering): Port device team_slave_0 removed [ 300.050213][T12021] team0 (unregistering): Port device team_slave_1 removed [ 300.298238][T12043] dvmrp0: left allmulticast mode [ 300.308663][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1623'. [ 300.462737][T12054] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 300.472215][T12054] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1627'. [ 301.605549][T12080] netlink: 'syz.3.1635': attribute type 4 has an invalid length. [ 302.317002][T12088] xt_hashlimit: size too large, truncated to 1048576 [ 302.401027][T12094] netlink: 'syz.4.1638': attribute type 32 has an invalid length. [ 302.457316][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 302.582320][T12094] bond5: Setting coupled_control to off (0) [ 302.710421][T12117] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 302.756871][T12115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1641'. [ 302.904511][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1643'. [ 305.154140][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 305.405253][T12205] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1667'. [ 305.755985][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 306.028652][T12240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1677'. [ 306.039407][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 306.107677][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 306.139521][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1683'. [ 306.165310][T12251] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1682'. [ 306.181440][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 306.327580][T12258] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 306.439191][T12269] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 306.646718][T12280] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.857831][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 306.930167][T12293] netlink: 'syz.4.1695': attribute type 3 has an invalid length. [ 307.055019][T12302] netlink: 'syz.0.1699': attribute type 30 has an invalid length. [ 307.130263][T12311] Cannot find del_set index 4 as target [ 307.354769][T12313] syzkaller0: entered promiscuous mode [ 307.382219][T12313] syzkaller0: entered allmulticast mode [ 309.340152][T12368] netlink: 'syz.3.1717': attribute type 142 has an invalid length. [ 309.376476][T12368] netlink: 'syz.3.1717': attribute type 21 has an invalid length. [ 309.397829][T12368] netlink: 'syz.3.1717': attribute type 22 has an invalid length. [ 309.406958][T12368] netlink: 'syz.3.1717': attribute type 23 has an invalid length. [ 309.441275][T12368] netlink: 'syz.3.1717': attribute type 25 has an invalid length. [ 309.442127][T12373] netlink: 'syz.2.1719': attribute type 15 has an invalid length. [ 309.451144][T12368] netlink: 'syz.3.1717': attribute type 26 has an invalid length. [ 310.276532][T12423] geneve2: entered promiscuous mode [ 310.282763][T12423] geneve2: entered allmulticast mode [ 310.293006][T11858] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.305249][T12423] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.347760][T11858] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.366369][T11858] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.390238][T11858] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.580163][T12446] __nla_validate_parse: 6 callbacks suppressed [ 310.580185][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 310.969238][T12468] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 311.440676][T12490] validate_nla: 1 callbacks suppressed [ 311.440697][T12490] netlink: 'syz.2.1753': attribute type 6 has an invalid length. [ 311.461455][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 311.518829][T12492] bond7: Invalid ad_actor_system MAC address. [ 311.525194][T12492] bond7: option ad_actor_system: invalid value (1) [ 311.543797][T12492] bond7 (unregistering): Released all slaves [ 311.581677][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1756'. [ 311.590942][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1756'. [ 311.601258][T12502] bridge_slave_0: left allmulticast mode [ 311.607057][T12502] bridge_slave_0: left promiscuous mode [ 311.613906][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.634122][T12502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.643491][T12502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.661157][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 311.671867][T12500] dvmrp0: left allmulticast mode [ 311.818483][T12506] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 311.854522][T12506] bond5 (unregistering): Released all slaves [ 311.895204][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 312.008128][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 312.041191][T12524] nbd: device at index 64 is going down [ 312.070742][T12530] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 312.144510][T12527] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1763'. [ 312.220063][T12530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.222161][T10719] udevd[10719]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 312.291043][T12547] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 312.347560][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1766'. [ 312.671381][ T29] IPVS: starting estimator thread 0... [ 312.767265][T12570] IPVS: using max 27 ests per chain, 64800 per kthread [ 312.795476][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 313.087000][T12590] lo: entered allmulticast mode [ 313.113190][T12593] syzkaller0: entered promiscuous mode [ 313.137290][T12593] syzkaller0: entered allmulticast mode [ 313.384281][T12586] lo: left allmulticast mode [ 313.634134][T12618] netlink: 'syz.3.1784': attribute type 11 has an invalid length. [ 313.890253][T12634] netlink: 'syz.2.1788': attribute type 2 has an invalid length. [ 314.021181][T12638] syzkaller0: entered promiscuous mode [ 314.026816][T12638] syzkaller0: entered allmulticast mode [ 314.049241][T12638] tc action pedit offset must be on 32 bit boundaries [ 314.154364][T12650] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 314.183617][T12650] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 314.306577][T12657] syzkaller1: entered promiscuous mode [ 314.322829][T12657] syzkaller1: entered allmulticast mode [ 314.583748][T12668] syzkaller0: entered promiscuous mode [ 314.593454][T12668] syzkaller0: entered allmulticast mode [ 316.443831][T12707] syzkaller1: entered promiscuous mode [ 316.465991][T12707] syzkaller1: entered allmulticast mode [ 316.473892][T12710] __nla_validate_parse: 8 callbacks suppressed [ 316.473913][T12710] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1813'. [ 316.500409][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 316.512694][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 316.654390][T12721] tipc: Enabling of bearer rejected, failed to enable media [ 316.779841][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'. [ 316.905946][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 317.402772][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.468616][T12769] openvswitch: netlink: Invalid VLAN frame [ 317.632233][T12777] xt_hashlimit: size too large, truncated to 1048576 [ 317.772740][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 317.803876][T12795] lo: left promiscuous mode [ 318.050792][T12795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.072091][T12795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.116646][T12795] bond0: left promiscuous mode [ 318.121641][T12795] ip6gre1: left promiscuous mode [ 318.134401][T12795] ip6gre2: left allmulticast mode [ 318.144575][T12795] bond2: left allmulticast mode [ 318.151638][T12795] bond3: left promiscuous mode [ 318.158710][T12795] bond4: left promiscuous mode [ 318.163503][T12795] bridge3: left promiscuous mode [ 318.170878][T12795] macvtap0: left allmulticast mode [ 318.191031][T11858] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.217264][T11858] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.225832][T11858] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.261548][T11858] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.298965][T11858] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.322527][T11858] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.336554][T12808] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 318.347292][T11858] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.355882][T11858] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.463924][T12808] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 318.804350][T12828] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 318.847679][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1844'. [ 319.222946][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 319.489953][T12867] netlink: 'syz.4.1854': attribute type 21 has an invalid length. [ 319.511138][T12867] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 319.979330][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 320.311827][T12912] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1866'. [ 320.671024][T12926] bond8: entered promiscuous mode [ 320.711768][T12926] bond8: entered allmulticast mode [ 320.723667][T12926] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.872598][T12940] bond0: entered promiscuous mode [ 320.892062][T12940] bond_slave_0: entered promiscuous mode [ 320.907573][T12940] bond_slave_1: entered promiscuous mode [ 320.927820][T12940] bridge0: entered promiscuous mode [ 320.938313][T12940] batadv0: entered promiscuous mode [ 320.964799][T12940] bond0: entered allmulticast mode [ 320.970815][T12940] bond_slave_0: entered allmulticast mode [ 320.991809][T12940] bond_slave_1: entered allmulticast mode [ 321.007893][T12940] bridge0: entered allmulticast mode [ 321.013336][T12940] batadv0: entered allmulticast mode [ 321.040111][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.449421][T12971] xfrm2: entered promiscuous mode [ 321.454895][T12971] xfrm2: entered allmulticast mode [ 321.610598][T12977] __nla_validate_parse: 6 callbacks suppressed [ 321.610621][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 321.647612][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 321.656791][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 321.686281][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1887'. [ 321.700239][T12979] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 321.720757][T12982] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1890'. [ 321.784461][T12987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1891'. [ 321.799574][T12987] bond0: option ad_select: unable to set because the bond device is up [ 322.026317][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1895'. [ 322.222081][T13010] netlink: 'syz.1.1900': attribute type 1 has an invalid length. [ 322.259414][T13010] netlink: 'syz.1.1900': attribute type 2 has an invalid length. [ 322.283703][T13012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.298211][T13016] rdma_op ffff88806978f9f0 conn xmit_rdma 0000000000000000 [ 322.334352][T13019] rdma_op ffff888055a279f0 conn xmit_rdma 0000000000000000 [ 322.806444][T13046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.988347][T13050] netlink: 'syz.1.1913': attribute type 20 has an invalid length. [ 323.005633][T13052] netlink: 'syz.4.1914': attribute type 3 has an invalid length. [ 323.006576][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 323.026767][T13052] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1914'. [ 323.041648][T13050] netlink: 'syz.1.1913': attribute type 20 has an invalid length. [ 323.057915][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'. [ 323.684169][T13092] vxcan2: entered allmulticast mode [ 323.871123][T13099] bridge3: port 1(veth5) entered blocking state [ 323.876234][T13101] xt_hashlimit: size too large, truncated to 1048576 [ 323.878661][T13099] bridge3: port 1(veth5) entered disabled state [ 323.917944][T13099] veth5: entered allmulticast mode [ 323.974349][T13099] veth5: entered promiscuous mode [ 324.132270][T13102] bridge3: port 2(veth7) entered blocking state [ 324.142515][T13102] bridge3: port 2(veth7) entered disabled state [ 324.161772][T13102] veth7: entered allmulticast mode [ 324.194039][T13102] veth7: entered promiscuous mode [ 324.470242][T13125] openvswitch: netlink: Flow key attr not present in new flow. [ 324.886433][T13152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.893869][T13152] IPv6: NLM_F_CREATE should be set when creating new route [ 324.901299][T13152] IPv6: NLM_F_CREATE should be set when creating new route [ 324.981104][T13156] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 325.128711][T13162] x_tables: duplicate underflow at hook 1 [ 325.294531][T13173] x_tables: duplicate underflow at hook 3 [ 325.512539][T13190] netlink: 'syz.2.1954': attribute type 2 has an invalid length. [ 325.539132][T13191] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 325.572738][T13190] vþ: entered promiscuous mode [ 325.996277][T13214] netlink: 'syz.4.1961': attribute type 10 has an invalid length. [ 326.161274][T13228] sctp: [Deprecated]: syz.4.1961 (pid 13228) Use of int in max_burst socket option deprecated. [ 326.161274][T13228] Use struct sctp_assoc_value instead [ 326.725939][T13214] team0 (unregistering): Port device wireguard0 removed [ 327.044440][T13249] __nla_validate_parse: 9 callbacks suppressed [ 327.044462][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 327.078884][T13249] netlink: 'syz.0.1971': attribute type 64 has an invalid length. [ 327.311589][T13260] wg2: entered allmulticast mode [ 327.391640][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 327.641423][T13286] netlink: 'syz.2.1981': attribute type 3 has an invalid length. [ 327.872812][T13296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.895284][T13296] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1983'. [ 328.082963][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 328.186799][T13314] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 328.364422][T13328] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1991'. [ 328.530071][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 328.540121][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 328.716165][T13348] netlink: 'syz.0.2001': attribute type 1 has an invalid length. [ 328.753197][T13348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.085742][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2008'. [ 329.213100][T13380] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 329.231340][T13380] bond7 (unregistering): Released all slaves [ 329.331068][ T5146] block nbd4: Receive control failed (result -1) [ 329.358479][T13388] nbd4: detected capacity change from 0 to 127 [ 329.383590][T10811] block nbd4: Dead connection, failed to find a fallback [ 329.410089][T10811] block nbd4: shutting down sockets [ 329.417280][T10811] blk_print_req_error: 138 callbacks suppressed [ 329.417299][T10811] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.437343][T10811] buffer_io_error: 138 callbacks suppressed [ 329.437363][T10811] Buffer I/O error on dev nbd4, logical block 0, async page read [ 329.459321][T10811] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.471175][T10811] Buffer I/O error on dev nbd4, logical block 1, async page read [ 329.479860][T10811] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.506237][T10811] Buffer I/O error on dev nbd4, logical block 2, async page read [ 329.514378][T13396] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.2014'. [ 329.527557][T13396] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2014'. [ 329.544491][T10811] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.564701][T10811] Buffer I/O error on dev nbd4, logical block 3, async page read [ 329.588767][T10811] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.622514][T10811] Buffer I/O error on dev nbd4, logical block 0, async page read [ 329.644088][T10811] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.664667][T10811] Buffer I/O error on dev nbd4, logical block 1, async page read [ 329.687279][T10811] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.718215][T10811] Buffer I/O error on dev nbd4, logical block 2, async page read [ 329.726318][T10811] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.784506][T10811] Buffer I/O error on dev nbd4, logical block 3, async page read [ 329.804278][T10811] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.846972][T10811] Buffer I/O error on dev nbd4, logical block 0, async page read [ 329.855521][T10811] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 329.887521][T10811] Buffer I/O error on dev nbd4, logical block 1, async page read [ 329.910212][T10811] ldm_validate_partition_table(): Disk read failed. [ 329.954023][T10811] Dev nbd4: unable to read RDB block 0 [ 329.997305][T10811] nbd4: unable to read partition table [ 330.054483][T10811] ldm_validate_partition_table(): Disk read failed. [ 330.087483][T10811] Dev nbd4: unable to read RDB block 0 [ 330.094065][T10811] nbd4: unable to read partition table [ 330.321384][T13440] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 330.335100][T13440] bond6 (unregistering): Released all slaves [ 330.371430][T13453] netlink: 'syz.3.2030': attribute type 30 has an invalid length. [ 330.507870][T13457] ipt_REJECT: TCP_RESET invalid for non-tcp [ 330.843603][T13475] bond6: Unable to set down delay as MII monitoring is disabled [ 330.913337][T13475] bond6 (unregistering): Released all slaves [ 331.046199][T13426] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 331.137618][T13497] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 332.405870][T13571] __nla_validate_parse: 7 callbacks suppressed [ 332.405894][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2061'. [ 332.660661][T13587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2066'. [ 332.783807][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 333.391073][T13614] gtp3: entered promiscuous mode [ 333.422446][T13614] gtp3: entered allmulticast mode [ 333.450417][T13628] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2077'. [ 333.875296][T13650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2083'. [ 334.062090][T13659] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 334.091597][T13659] tipc: Enabled bearer , priority 10 [ 334.126293][T13662] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2087'. [ 334.340846][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 334.354951][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 334.377366][T13674] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2089'. [ 334.386896][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 334.485249][T13683] syzkaller1: entered promiscuous mode [ 334.497712][T13683] syzkaller1: entered allmulticast mode [ 334.619634][T13683] bond8: Removing last arp target with arp_interval on [ 335.208002][T13704] syzkaller0: entered promiscuous mode [ 335.225124][T13704] syzkaller0: entered allmulticast mode [ 336.080499][T13778] netlink: 'syz.3.2117': attribute type 11 has an invalid length. [ 337.223147][T13778] netlink: 'syz.3.2117': attribute type 11 has an invalid length. [ 337.401422][T13784] netlink: 'syz.2.2122': attribute type 10 has an invalid length. [ 337.433004][T13788] __nla_validate_parse: 10 callbacks suppressed [ 337.433026][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2120'. [ 337.484202][T13796] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 337.493117][T13796] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 337.509422][T13800] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 337.518580][T13800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2124'. [ 337.653143][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 337.750345][T13818] tipc: Enabling of bearer rejected, already enabled [ 337.965280][T13830] netlink: 'syz.0.2133': attribute type 1 has an invalid length. [ 338.018895][T13830] bond6: (slave gretap1): making interface the new active one [ 338.027887][T13830] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 338.117024][T13843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2136'. [ 338.154864][T13850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2138'. [ 338.333642][T13861] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 338.335268][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 338.424544][T13861] bond6: entered promiscuous mode [ 338.443335][T13861] bond6: entered allmulticast mode [ 338.449873][T13861] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.468078][T13869] macvlan4: entered promiscuous mode [ 338.473425][T13869] macvlan4: entered allmulticast mode [ 338.485729][T13869] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 338.598948][T13868] xt_hashlimit: size too large, truncated to 1048576 [ 338.719073][T13877] netlink: 'syz.3.2142': attribute type 13 has an invalid length. [ 338.823167][T13883] netlink: zone id is out of range [ 338.836666][T13877] netlink: 'syz.3.2142': attribute type 58 has an invalid length. [ 338.846320][T13877] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2142'. [ 338.857440][T13883] netlink: del zone limit has 4 unknown bytes [ 339.113395][T13903] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2150'. [ 339.586216][T13916] syzkaller0: entered promiscuous mode [ 339.621413][T13916] syzkaller0: entered allmulticast mode [ 339.861918][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 339.881218][T13936] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 340.185264][T13939] syzkaller1: entered promiscuous mode [ 340.198426][T13939] syzkaller1: entered allmulticast mode [ 341.075182][T13996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.130692][T13996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.238881][T14007] validate_nla: 1 callbacks suppressed [ 341.238902][T14007] netlink: 'syz.0.2176': attribute type 1 has an invalid length. [ 341.892694][T14036] wg2: left allmulticast mode [ 341.937763][T14036] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 341.938164][T14041] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 342.419694][T14060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.147858][T14108] __nla_validate_parse: 7 callbacks suppressed [ 343.147880][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2201'. [ 343.183983][T14109] syzkaller0: entered promiscuous mode [ 343.190200][T14109] syzkaller0: entered allmulticast mode [ 343.227695][T14112] netlink: zone id is out of range [ 343.234144][T14112] netlink: zone id is out of range [ 343.247503][T14112] netlink: zone id is out of range [ 343.256454][T14112] netlink: zone id is out of range [ 343.263083][T14118] bridge0: port 1(syz_tun) entered blocking state [ 343.275071][T14118] bridge0: port 1(syz_tun) entered disabled state [ 343.281959][T14112] netlink: zone id is out of range [ 343.285419][T14118] [ 343.288681][T14112] netlink: zone id is out of range [ 343.289541][T14118] ====================================================== [ 343.289553][T14118] WARNING: possible circular locking dependency detected [ 343.294915][T14112] netlink: zone id is out of range [ 343.301963][T14118] syzkaller #0 Not tainted [ 343.301976][T14118] ------------------------------------------------------ [ 343.301985][T14118] syz.4.2203/14118 is trying to acquire lock: [ 343.301997][T14118] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540 [ 343.342920][T14118] [ 343.342920][T14118] but task is already holding lock: [ 343.350582][T14118] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 343.360221][T14118] [ 343.360221][T14118] which lock already depends on the new lock. [ 343.360221][T14118] [ 343.370905][T14118] [ 343.370905][T14118] the existing dependency chain (in reverse order) is: [ 343.379978][T14118] [ 343.379978][T14118] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 343.388078][T14118] down_write+0x96/0x200 [ 343.392891][T14118] kernfs_add_one+0x41/0x5c0 [ 343.398055][T14118] kernfs_create_dir_ns+0xde/0x130 [ 343.403817][T14118] internal_create_group+0x425/0x1180 [ 343.410023][T14118] cpuhp_invoke_callback+0x445/0x860 [ 343.415841][T14118] cpuhp_issue_call+0x430/0x7a0 [ 343.421217][T14118] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 343.427869][T14118] __cpuhp_setup_state+0x3f/0x60 [ 343.433329][T14118] do_one_initcall+0x250/0x8d0 [ 343.438617][T14118] do_initcall_level+0x104/0x190 [ 343.444345][T14118] do_initcalls+0x59/0xa0 [ 343.449278][T14118] kernel_init_freeable+0x2a6/0x3e0 [ 343.455009][T14118] kernel_init+0x1d/0x1d0 [ 343.459990][T14118] ret_from_fork+0x51e/0xb90 [ 343.465143][T14118] ret_from_fork_asm+0x1a/0x30 [ 343.470498][T14118] [ 343.470498][T14118] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 343.478315][T14118] [ 343.478315][T14118] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 343.486386][T14118] cpus_read_lock+0x42/0x160 [ 343.491500][T14118] static_key_disable+0x12/0x20 [ 343.496908][T14118] __inet_hash_connect+0x2430/0x2440 [ 343.502709][T14118] tcp_v4_connect+0xd5f/0x19b0 [ 343.507989][T14118] __inet_stream_connect+0x25a/0xdd0 [ 343.513786][T14118] inet_stream_connect+0x66/0xa0 [ 343.519236][T14118] __sys_connect+0x312/0x450 [ 343.524595][T14118] __x64_sys_connect+0x7a/0x90 [ 343.529871][T14118] do_syscall_64+0x14d/0xf80 [ 343.535166][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.541579][T14118] [ 343.541579][T14118] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 343.549219][T14118] lock_sock_nested+0x48/0x100 [ 343.554509][T14118] inet_shutdown+0x6a/0x390 [ 343.559613][T14118] nbd_mark_nsock_dead+0x2e9/0x560 [ 343.565239][T14118] recv_work+0x1c7f/0x1d90 [ 343.570188][T14118] process_scheduled_works+0xb6e/0x18c0 [ 343.576264][T14118] worker_thread+0xa53/0xfc0 [ 343.581393][T14118] kthread+0x388/0x470 [ 343.586165][T14118] ret_from_fork+0x51e/0xb90 [ 343.591361][T14118] ret_from_fork_asm+0x1a/0x30 [ 343.596657][T14118] [ 343.596657][T14118] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 343.604292][T14118] __mutex_lock+0x19f/0x1300 [ 343.609403][T14118] nbd_queue_rq+0x37b/0x1100 [ 343.614607][T14118] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 343.620689][T14118] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 343.627551][T14118] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 343.634057][T14118] blk_mq_run_hw_queue+0x348/0x4f0 [ 343.639686][T14118] blk_mq_dispatch_list+0xd16/0xe10 [ 343.645407][T14118] blk_mq_flush_plug_list+0x48d/0x570 [ 343.651295][T14118] __blk_flush_plug+0x3ed/0x4d0 [ 343.656667][T14118] __submit_bio+0x28d/0x580 [ 343.661773][T14118] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 343.667939][T14118] block_read_full_folio+0x599/0x830 [ 343.673964][T14118] filemap_read_folio+0x137/0x3b0 [ 343.679549][T14118] do_read_cache_folio+0x358/0x590 [ 343.685377][T14118] read_part_sector+0xb6/0x2b0 [ 343.690666][T14118] adfspart_check_ICS+0xa5/0xa40 [ 343.696295][T14118] bdev_disk_changed+0x7ba/0x1550 [ 343.701844][T14118] blkdev_get_whole+0x380/0x510 [ 343.707471][T14118] bdev_open+0x31e/0xd30 [ 343.712318][T14118] blkdev_open+0x470/0x610 [ 343.717262][T14118] do_dentry_open+0x785/0x14e0 [ 343.722559][T14118] vfs_open+0x3b/0x340 [ 343.727145][T14118] path_openat+0x2e08/0x3860 [ 343.732355][T14118] do_file_open+0x23e/0x4a0 [ 343.737449][T14118] do_sys_openat2+0x113/0x200 [ 343.742645][T14118] __x64_sys_openat+0x138/0x170 [ 343.748201][T14118] do_syscall_64+0x14d/0xf80 [ 343.753451][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.759895][T14118] [ 343.759895][T14118] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 343.767113][T14118] __mutex_lock+0x19f/0x1300 [ 343.772232][T14118] nbd_queue_rq+0xc6/0x1100 [ 343.777278][T14118] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 343.783362][T14118] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 343.790243][T14118] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 343.796744][T14118] blk_mq_run_hw_queue+0x348/0x4f0 [ 343.802485][T14118] blk_mq_dispatch_list+0xd16/0xe10 [ 343.808310][T14118] blk_mq_flush_plug_list+0x48d/0x570 [ 343.814321][T14118] __blk_flush_plug+0x3ed/0x4d0 [ 343.819719][T14118] __submit_bio+0x28d/0x580 [ 343.824739][T14118] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 343.830977][T14118] block_read_full_folio+0x599/0x830 [ 343.836880][T14118] filemap_read_folio+0x137/0x3b0 [ 343.842533][T14118] do_read_cache_folio+0x358/0x590 [ 343.848254][T14118] read_part_sector+0xb6/0x2b0 [ 343.853629][T14118] adfspart_check_ICS+0xa5/0xa40 [ 343.859083][T14118] bdev_disk_changed+0x7ba/0x1550 [ 343.864627][T14118] blkdev_get_whole+0x380/0x510 [ 343.870269][T14118] bdev_open+0x31e/0xd30 [ 343.875029][T14118] blkdev_open+0x470/0x610 [ 343.880139][T14118] do_dentry_open+0x785/0x14e0 [ 343.885605][T14118] vfs_open+0x3b/0x340 [ 343.890300][T14118] path_openat+0x2e08/0x3860 [ 343.895518][T14118] do_file_open+0x23e/0x4a0 [ 343.900717][T14118] do_sys_openat2+0x113/0x200 [ 343.906037][T14118] __x64_sys_openat+0x138/0x170 [ 343.911666][T14118] do_syscall_64+0x14d/0xf80 [ 343.916910][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.923338][T14118] [ 343.923338][T14118] -> #4 (set->srcu){.+.+}-{0:0}: [ 343.930642][T14118] __synchronize_srcu+0xca/0x300 [ 343.936196][T14118] elevator_switch+0x1e8/0x7a0 [ 343.941530][T14118] elevator_change+0x2cc/0x450 [ 343.946930][T14118] elevator_set_default+0x36c/0x430 [ 343.953008][T14118] blk_register_queue+0x366/0x430 [ 343.958687][T14118] __add_disk+0x677/0xd50 [ 343.963652][T14118] add_disk_fwnode+0xfb/0x480 [ 343.968934][T14118] nbd_dev_add+0x72c/0xb50 [ 343.973872][T14118] nbd_init+0x168/0x1f0 [ 343.978668][T14118] do_one_initcall+0x250/0x8d0 [ 343.984038][T14118] do_initcall_level+0x104/0x190 [ 343.989526][T14118] do_initcalls+0x59/0xa0 [ 343.994419][T14118] kernel_init_freeable+0x2a6/0x3e0 [ 344.000234][T14118] kernel_init+0x1d/0x1d0 [ 344.005264][T14118] ret_from_fork+0x51e/0xb90 [ 344.010391][T14118] ret_from_fork_asm+0x1a/0x30 [ 344.015779][T14118] [ 344.015779][T14118] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 344.024133][T14118] __mutex_lock+0x19f/0x1300 [ 344.029273][T14118] elevator_change+0x1b3/0x450 [ 344.034909][T14118] elevator_set_none+0xb5/0x140 [ 344.040383][T14118] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 344.046816][T14118] nbd_start_device+0x17f/0xb10 [ 344.052468][T14118] nbd_genl_connect+0x165b/0x1cf0 [ 344.058131][T14118] genl_family_rcv_msg_doit+0x22a/0x330 [ 344.064200][T14118] genl_rcv_msg+0x61c/0x7a0 [ 344.069394][T14118] netlink_rcv_skb+0x232/0x4b0 [ 344.074848][T14118] genl_rcv+0x28/0x40 [ 344.079621][T14118] netlink_unicast+0x80f/0x9b0 [ 344.085008][T14118] netlink_sendmsg+0x813/0xb40 [ 344.090462][T14118] ____sys_sendmsg+0x972/0x9f0 [ 344.095858][T14118] ___sys_sendmsg+0x2a5/0x360 [ 344.101182][T14118] __x64_sys_sendmsg+0x1bd/0x2a0 [ 344.106657][T14118] do_syscall_64+0x14d/0xf80 [ 344.111853][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.118462][T14118] [ 344.118462][T14118] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 344.127071][T14118] blk_alloc_queue+0x546/0x680 [ 344.132371][T14118] __blk_mq_alloc_disk+0x197/0x390 [ 344.138003][T14118] nbd_dev_add+0x499/0xb50 [ 344.142943][T14118] nbd_init+0x168/0x1f0 [ 344.147622][T14118] do_one_initcall+0x250/0x8d0 [ 344.153200][T14118] do_initcall_level+0x104/0x190 [ 344.158676][T14118] do_initcalls+0x59/0xa0 [ 344.163619][T14118] kernel_init_freeable+0x2a6/0x3e0 [ 344.169360][T14118] kernel_init+0x1d/0x1d0 [ 344.174467][T14118] ret_from_fork+0x51e/0xb90 [ 344.179757][T14118] ret_from_fork_asm+0x1a/0x30 [ 344.185157][T14118] [ 344.185157][T14118] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 344.192746][T14118] fs_reclaim_acquire+0x71/0x100 [ 344.198365][T14118] kmem_cache_alloc_noprof+0x40/0x650 [ 344.204261][T14118] __kernfs_iattrs+0xdf/0x340 [ 344.209457][T14118] kernfs_iop_setattr+0xea/0x3f0 [ 344.215013][T14118] notify_change+0xc1a/0xf40 [ 344.220401][T14118] do_truncate+0x1c2/0x250 [ 344.225350][T14118] path_openat+0x2f89/0x3860 [ 344.230484][T14118] do_file_open+0x23e/0x4a0 [ 344.235602][T14118] do_sys_openat2+0x113/0x200 [ 344.240897][T14118] __x64_sys_openat+0x138/0x170 [ 344.246362][T14118] do_syscall_64+0x14d/0xf80 [ 344.251747][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.258170][T14118] [ 344.258170][T14118] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 344.266679][T14118] __lock_acquire+0x15a5/0x2cf0 [ 344.272058][T14118] lock_acquire+0xf0/0x2e0 [ 344.277085][T14118] down_write+0x96/0x200 [ 344.281866][T14118] kernfs_link_sibling+0x46c/0x540 [ 344.287510][T14118] kernfs_add_one+0x1ca/0x5c0 [ 344.292828][T14118] kernfs_create_dir_ns+0xde/0x130 [ 344.298489][T14118] sysfs_create_dir_ns+0x12f/0x2a0 [ 344.304293][T14118] kobject_add_internal+0x62b/0xd00 [ 344.310098][T14118] kobject_init_and_add+0x12b/0x1a0 [ 344.315836][T14118] br_add_if+0x380/0xeb0 [ 344.320819][T14118] br_ioctl_stub+0x72a/0xd60 [ 344.326021][T14118] sock_ioctl+0x523/0x7f0 [ 344.330866][T14118] __se_sys_ioctl+0xfc/0x170 [ 344.336062][T14118] do_syscall_64+0x14d/0xf80 [ 344.341263][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.347670][T14118] [ 344.347670][T14118] other info that might help us debug this: [ 344.347670][T14118] [ 344.357995][T14118] Chain exists of: [ 344.357995][T14118] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 344.357995][T14118] [ 344.372464][T14118] Possible unsafe locking scenario: [ 344.372464][T14118] [ 344.379912][T14118] CPU0 CPU1 [ 344.385266][T14118] ---- ---- [ 344.390623][T14118] lock(&root->kernfs_rwsem); [ 344.395382][T14118] lock(cpuhp_state_mutex); [ 344.402830][T14118] lock(&root->kernfs_rwsem); [ 344.410195][T14118] lock(&root->kernfs_iattr_rwsem); [ 344.415474][T14118] [ 344.415474][T14118] *** DEADLOCK *** [ 344.415474][T14118] [ 344.423621][T14118] 3 locks held by syz.4.2203/14118: [ 344.428821][T14118] #0: ffffffff8fbb0668 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 344.438843][T14118] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 344.447920][T14118] #2: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 344.457975][T14118] [ 344.457975][T14118] stack backtrace: [ 344.463860][T14118] CPU: 0 UID: 0 PID: 14118 Comm: syz.4.2203 Not tainted syzkaller #0 PREEMPT(full) [ 344.463876][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.463884][T14118] Call Trace: [ 344.463892][T14118] [ 344.463899][T14118] dump_stack_lvl+0xe8/0x150 [ 344.463919][T14118] print_circular_bug+0x2e1/0x300 [ 344.463939][T14118] check_noncircular+0x12e/0x150 [ 344.463959][T14118] __lock_acquire+0x15a5/0x2cf0 [ 344.463977][T14118] ? __lock_acquire+0x6b5/0x2cf0 [ 344.464001][T14118] lock_acquire+0xf0/0x2e0 [ 344.464024][T14118] ? kernfs_link_sibling+0x46c/0x540 [ 344.464057][T14118] down_write+0x96/0x200 [ 344.464083][T14118] ? kernfs_link_sibling+0x46c/0x540 [ 344.464104][T14118] ? __pfx_down_write+0x10/0x10 [ 344.464120][T14118] ? kernfs_root+0x1c/0x230 [ 344.464137][T14118] ? kernfs_root+0x1c/0x230 [ 344.464153][T14118] ? kernfs_root+0x1ea/0x230 [ 344.464170][T14118] kernfs_link_sibling+0x46c/0x540 [ 344.464191][T14118] kernfs_add_one+0x1ca/0x5c0 [ 344.464210][T14118] kernfs_create_dir_ns+0xde/0x130 [ 344.464222][T14118] sysfs_create_dir_ns+0x12f/0x2a0 [ 344.464239][T14118] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 344.464258][T14118] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 344.464274][T14118] ? rcu_is_watching+0x15/0xb0 [ 344.464292][T14118] kobject_add_internal+0x62b/0xd00 [ 344.464311][T14118] kobject_init_and_add+0x12b/0x1a0 [ 344.464328][T14118] ? mutex_is_locked+0x17/0x50 [ 344.464345][T14118] ? __pfx_kobject_init_and_add+0x10/0x10 [ 344.464362][T14118] ? dev_set_allmulti+0x209/0x260 [ 344.464377][T14118] br_add_if+0x380/0xeb0 [ 344.464394][T14118] ? bpf_lsm_capable+0x9/0x20 [ 344.464411][T14118] ? security_capable+0x7e/0x2c0 [ 344.464429][T14118] br_ioctl_stub+0x72a/0xd60 [ 344.464454][T14118] ? do_vfs_ioctl+0x1166/0x1530 [ 344.464469][T14118] ? __pfx_br_ioctl_stub+0x10/0x10 [ 344.464486][T14118] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 344.464500][T14118] ? sock_ioctl+0x4fa/0x7f0 [ 344.464517][T14118] ? do_futex+0x333/0x420 [ 344.464536][T14118] ? __pfx_br_ioctl_stub+0x10/0x10 [ 344.464552][T14118] sock_ioctl+0x523/0x7f0 [ 344.464569][T14118] ? __pfx_sock_ioctl+0x10/0x10 [ 344.464584][T14118] ? __fget_files+0x2a/0x420 [ 344.464601][T14118] ? __fget_files+0x3a0/0x420 [ 344.464618][T14118] ? __fget_files+0x2a/0x420 [ 344.464635][T14118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.464650][T14118] ? __pfx_sock_ioctl+0x10/0x10 [ 344.464666][T14118] __se_sys_ioctl+0xfc/0x170 [ 344.464680][T14118] do_syscall_64+0x14d/0xf80 [ 344.464697][T14118] ? trace_irq_disable+0x3b/0x150 [ 344.464708][T14118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.464720][T14118] ? clear_bhb_loop+0x40/0x90 [ 344.464733][T14118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.464745][T14118] RIP: 0033:0x7f8ff9f9c819 [ 344.464758][T14118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.464770][T14118] RSP: 002b:00007f8ffad7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.464783][T14118] RAX: ffffffffffffffda RBX: 00007f8ffa215fa0 RCX: 00007f8ff9f9c819 [ 344.464793][T14118] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003 [ 344.464801][T14118] RBP: 00007f8ffa032c91 R08: 0000000000000000 R09: 0000000000000000 [ 344.464809][T14118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.464816][T14118] R13: 00007f8ffa216038 R14: 00007f8ffa215fa0 R15: 00007ffd96e55ea8 [ 344.464830][T14118] [ 344.878390][T14118] syz_tun: entered promiscuous mode