last executing test programs: 6.377889746s ago: executing program 3 (id=4500): socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) socket$alg(0x26, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.21170957s ago: executing program 3 (id=4503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0xc0000000, {{}, {0x0}, 0x0, 0x0, 0x1000000000000}}], 0x48}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x23}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.092471069s ago: executing program 3 (id=4505): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) (fail_nth: 12) 5.634748487s ago: executing program 3 (id=4510): socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r7) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) (async) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) r13 = accept4(r1, 0x0, 0x0, 0x81800) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 2.705244262s ago: executing program 2 (id=4524): ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0x5, 0x7f}) (async, rerun: 32) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xfffffffff384a48d, 0x3, 0x1}) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x9, 0x0, 0x81}, 0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/149, 0x1b, 0x95, 0x1, 0xffffffff}, 0x28) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001340)={{r3, 0x10, 0x1004, 0x3, 0x8001, 0x5, 0x7, 0x4, 0x7, 0x3, 0xcfd, 0xc4, 0xf4, 0x2, 0x1}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r4 = accept4$alg(r1, 0x0, 0x0, 0x80000) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x8, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000001440)=""/77, 0x29, 0x4d, 0x1, 0x4}, 0x28) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001500)='pimreg0\x00', 0x10) (async) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000001540)) write$cgroup_subtree(r1, &(0x7f0000001580)={[{0x0, 'net_prio'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2d, 'rlimit'}, {0x2d, 'cpuacct'}, {0x2d, 'freezer'}, {0x2d, 'cpuset'}, {0x2b, 'io'}]}, 0x4f) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r1) (async) epoll_wait(r1, &(0x7f0000001640)=[{}, {}, {}, {}], 0x4, 0xfff) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000001680)=0x7, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockname$inet(r1, &(0x7f00000016c0)={0x2, 0x0, @remote}, &(0x7f0000001700)=0x10) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001840)={'erspan0\x00', &(0x7f0000001780)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x1, 0x4, {{0x24, 0x4, 0x1, 0x2e, 0x90, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast2, {[@generic={0x7, 0xf, "edd150f6c916ac8608fa1d92d1"}, @rr={0x7, 0x17, 0xa6, [@local, @rand_addr=0x64010102, @remote, @broadcast, @private=0xa010102]}, @timestamp={0x44, 0x1c, 0x6c, 0x0, 0x8, [0xb, 0x7, 0x7c33, 0x5, 0x3, 0x9b]}, @end, @cipso={0x86, 0x37, 0x0, [{0x1, 0x6, "2be9fcb4"}, {0x5, 0x7, "5310a85aed"}, {0x7, 0x8, "1565f43fe49e"}, {0x6, 0x11, "ba35537a80d281c14e4c8bd942598c"}, {0x2, 0xb, "fc569a0880d7ee1f57"}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001880)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000018c0)={0x0, @empty, @dev}, &(0x7f0000001900)=0xc) (async, rerun: 32) getpeername$packet(r1, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'erspan0\x00', &(0x7f00000019c0)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x8, 0xe, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x64, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x13, 0xf4, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @end, @ssrr={0x89, 0x13, 0x21, [@private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, @lsrr={0x83, 0x1b, 0x58, [@empty, @empty, @multicast1, @broadcast, @empty, @loopback]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0x2}, {0x7, 0xe, "8efbad805650ee9e32d15f04"}, {0x7, 0x5, "c96694"}, {0x2, 0x4, "421d"}, {0x0, 0x6, "fea9e3be"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000001c00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd29, 0x25dfdbff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@ip4=@loopback, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x1, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x3, 0x0, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x3, {@ip4=@local, 0x800}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001c40)='hybla', 0x5) (rerun: 64) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xd9, 0xc, "30e896d55be382555ec27bb4920abf9ed6b1d5b462969fd740ddd8e59ff83732ee05a13fada59cd1531d5a5307210462d52737ec0df31ca77fd695b29b163b9dc5facc92dbd30b02f72567ad32a0b6cc3f0e37a67f1bcc223581ad2490d782b05fbcda88cab17bfe4c74864c998fd8397761b9a2b43c05bca60078310bca3130acf7ea31acaf4df1bac395e4b30ca4f55e50d5ec14a580435f0e55c4d27e525f2db58228d52f7e033b782f8b11638d49608388a302de7d6f91637ed9381c9b355b412a400a6246a8a2cb791c8ba922b27d94a7c017"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x134}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) (async, rerun: 64) sendmmsg$sock(r1, &(0x7f00000022c0)=[{{&(0x7f0000001f00)=@ethernet={0x300, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f80)="4a28d4c6d19353a4c43501849713f27ea4775cbaa22be5fcf1f54ae11a1522b8f1088cf2cd993d68c8913d36bd03a2b6fe60df59eda74f2ce2d6da80ecd3299ae5cd1e5bb1f8588a9967304722122fdef8dfb039ace6d899f5e0c6fae241dd388f9194276317a1b8bd8d52c287aac037eb2372708459fd554364941f76306e5a481d8b5b9d62104b8e6a3788b3bcef32195481d3d1df3a0ff41edc275250e6338f9ce1d739d69a8a290e88f9a2969cc72dc1b3da6c0797434168ed68298159678d9888a659910c961f8f6f03af1ac683e0b26f96480eaa368d208b5c1e16882a", 0xe0}, {&(0x7f0000002080)="6f981330ba81e97ca49957ef05d2f7d462b4d8268cfa690ed70a4665be501cab2eee86cde547aca20bb1189631ea3b21616ba351a9b7657692f766761d494f219a688b138833094c2331b1652dffb9bfbcdb646e984b4be69bf839b835c1befeb60bc25bb2c382ad1a5ec5b8c8931cff0d6052370530353984657c663700fd428560e3d3e68c128845d077f3784fcb2e5a2230aa7c8cc88f49e8ef57f3d8a1efb27ebb007d701086caa02355ff32cbcdeb1878eadafc096884fd390989c2f18df8348b81ef4cf9da8327cb82f1fdc1cd8ecf2408473a77ff42bc377b50d4d1b7112b42f4abe8c2ab4d777f452ce5", 0xee}, {&(0x7f0000002180)="5bdbb9e2c69e93ab7cdfa6d8e76dfcd01ad0b2ad140b8f1dc09cf0c147da8149b1c3533b1cc7921f6f12747aaff4aa51f75b993d47f3b0efe8fcd0a7f9203ca8799ce2bc0e6fec6476a6ae58178973ce286bc2dde15bcc4aeea20617c88e2f5da2799b30dacf288bdd03830edc3c3c45eaf0a4ab44ef3b5b3566976647c8b20c24b91eac2cc49bb1626ea503f167e2d1a0b3f7fc3a31bad09858fb0aae5cb8e5b046dfc4dcd6f3a25bf32fe481dbbdfcf35f98730dca", 0xb6}], 0x3, &(0x7f0000002280)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x1, 0x24044004) (rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000002300)={0x3, 'wlan1\x00', {0x401}, 0x3}) 2.648701221s ago: executing program 1 (id=4525): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="e8700e444d5092781e58fcb44eb865225dee7f530d078ca2a6fa0578c7e39d22db0ec4d9daf1728788e8e77bff56899ee3a300a7f3e7368d0a89bf84f6359b51b9931273bed588363fcef45e7b91c2cc5fe1e617c147af084eda244e00"/104, 0x68}], 0x1}], 0x1, 0x40800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00040800"], 0x10c2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x10, 0x4000010, 0xffffffffffffffff, 0x2e1b6000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x30, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x12207000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800005, 0x810, r0, 0x9e8c000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.645601921s ago: executing program 3 (id=4527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8008}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8058}, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) ioctl$int_in(r1, 0x5452, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x5) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x0) 2.544512373s ago: executing program 2 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xba885893231a8a9f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7111}) close(r0) 2.333163914s ago: executing program 1 (id=4531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x11, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd85, 0x0, 0x0, 0xff87}, 0x23) 2.164725826s ago: executing program 2 (id=4532): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) (fail_nth: 14) 2.156984068s ago: executing program 1 (id=4533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x120, &(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x80) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x80000025a5, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) splice(r5, 0x0, r6, 0x0, 0x2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) 2.093462491s ago: executing program 0 (id=4534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd2b, 0x3, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048880) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="8dffffff0600"}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4) sendfile(r4, r5, 0x0, 0x800020000000005) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x168, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x634c}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8ee1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x78, 0x3, "3b6f12c4718c2c3f0733c2e2347361bc6956d351ebd56022902fec92d10f28d2bc24afce56b4398e41c12f3b42bb638b15872bc40f2d0edd209d0e2b97d2621a64952f9b9fb0f9580389ad8c7bfdbe7538751fcf3c0cda80d4229e3dcbadd398f47f4263b126bf3f346e467ad29ca5fd4155ba2f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x168}}, 0x200000c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4}, 0x2f) 1.600656227s ago: executing program 2 (id=4535): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @netrom, @rose, @bcast, @netrom, @netrom, @bcast, @bcast]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @null, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @null, 0xe8f, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="6d61202d694f202b68202b63707592296affb8b6046574202b716500660000000000000000070055d71517c270212ddb8ca7f752113d9466731e8bf6dce9b65db465d86f949052b733feacddbb02ff34f566543147b34f5e3c"], 0x27) sendmmsg$inet(r2, &(0x7f0000004480)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="0ec25e1e8332d0d4668ca78f7967dc623aa4005f3d957ca21f084f9211da1afbb7ce4e388afe2ddb2942c52769e7e5c191ab7be6b17e62b6296be030f7a5484e17b3368eb5765c1ce4a3890a67", 0x4d}], 0x1}}], 0x2, 0x2400c0a2) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0xbd}, @TCA_FLOWER_KEY_UDP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(r2, 0x0, 0xff97, 0x20000880, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000380)=0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r8, 0xd}, 0x8) sendto$rxrpc(r7, &(0x7f0000000440)="edf0d8d813fd6639d3ba0e079608114170eaa2becc9b2d7482f6b485440044156a9d77cdfbcd015731259efdc3ad0dbbe7a5e152914e65137ada9b5e4cea77790e7da4ef4a03860b76650264f2a525610db0383bc07c9b24ea12778b575b93d52a4bd72a9297c02b8e2f25755aed509678c6299fc6225be3a7791c195b2dbbe30d47d5b55dd3e38257b309b1c1da328919e3326f4431a12f4c5f381cab359f86ebe72eaf7473f7c8cd29ad9f4ee73b4ebdd389a9715adc564db30d512b88303ddd9e83c24d6ae1fd6a66eabfbd7990eaa0981444fd0754b8a9dd0689c8a2c723dc34dc00d00779ea5c19b48bdc0d81cd", 0xf0, 0x4840, &(0x7f0000000280)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000000) 1.599693506s ago: executing program 4 (id=4536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x28}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bind$ax25(r3, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x21, 0x4, 0xb, 0xbe0e, 0x45470, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xc11, 0x1, 0x10, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xd}, 0x50) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f00000004c0)="eb221e1bcf0c", &(0x7f0000000500)=@tcp6=r5, 0x1}, 0x20) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000580)="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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000700)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x98, &(0x7f0000000740)=[@in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e20, 0x3, @remote, 0x8001}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x40766254}]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000880)={r9, 0x0, 0x30}, &(0x7f00000008c0)=0xc) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000ec0)={&(0x7f0000000900)=0x2, 0x7, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e80)}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa8, r10, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xa8}}, 0x4014) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f00000010c0)) connect$llc(0xffffffffffffffff, &(0x7f0000001100)={0x1a, 0x338, 0xb1, 0x7, 0x80, 0x3, @local}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000001140)=0x9, 0x4) pread64(r5, &(0x7f0000001180)=""/193, 0xc1, 0x5) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x809}, 0x4000005) 1.576750932s ago: executing program 2 (id=4537): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xc}, [@RTA_UID={0x8, 0x19, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r11 = getgid() sendmmsg$unix(r6, &(0x7f0000001940)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000480)="448794403e4b66aea467e527f574bff5f869bb9bd4fa3696b9d41d7c6ab0ab4f39f25f8d9eb226890ee308c586e99d6e24b14827d8eb7a1fc70e9c098a25d213784683d258b7aad656d6ccd89e275f0e7257c312b44e68038ba92d75bbb6b90bc39a828ae3b8d210b22961db5e3d78814fd43146a35a3f7e69eec59983156c6a78d090ec101932acd02721d7aed652181703ff3982da6e61aa96da3ea3da1f017ea4737d9d894382f9ea18b8f073d02f8f79a5cc41a355b57f509afb07893b", 0xbf}, {&(0x7f0000000540)="38fcce66cbc115a527c2d1641307d26e646ce5acea0eb13bb4f4f30de052b9ba0fca5e733a693994ca07e4817bf054efc27d61336032d2da4228c08d054f5f9de57c8b6377180fedacfefeb1694ba099a0ebdcf8b2f2864b999210467271591d93962eb3bc14fd5a535be6ba4b1592e187f5de97870641b6a256cd572daee5795106bcc37579ea51808d8b01640e8a85301e22663b", 0x95}, {&(0x7f0000000600)="e2850b728c9c93acb8b7faa9730c84c3738e8ce707b04182174f379f5762186073913f080bd28e8150a724a7a5639b3886840c31d409463012b0a85c9e8f25334622c595abf433748520e420c811b3fc27886f59ec07632441cec1510958889db8138e7069caa17b0b7a7dff0e58d0cb3cbdb2dc62d09a0f60641174ff9104e6b61605736540ba8f56016dfd3b88596da901b5488b607b75cd87", 0x9a}, {&(0x7f0000000740)="0d201cc22b99d890513f8197ef74363696300a538826aadd711f9d6e6beb396164f05dc907ae40ca760f1775d110cf44c5cda4c8e3a28be6ce712f69ca5001710080652267b71a1b83b7da1c4f05d9b28d41a2eafe8592912c86c850922f68c0871fb2b0d72b03c1a8961fc56e6a8815dfdbe5c2d8f9cb6785054f488db130402ce0a240dd3e373641a2a010b5015e2866462125f97adc763084d6a928939fc66c71384110a9df444c50c9026a685333f466f20ce44924a41e4bf7873a6e4c2453bbe172e33e2865afa1e6ae25879462bc81e978175106f2b99ed2c1afd4bc7d78479564c0d31f46daa02bfc707e4421cfb825be64ed588b7d44b9c9d8dbdb5ee61f34ac4cdbd4490905eef26a10e3a676f738d4b29e69071fcae44ed992caecb6e7ca055a11615b2b0657993dd1b7fb770918209b6cc2489ce573835a7efbddf5018199bcf182dd9f8981fac83e8a6aab954a6d06e9320b6f7279587e82660b846883caaa8b8ae2f1ca6c44dcf6a681cf74cbb1af89954f6141370aa2671c7b9b2b7477d21e6b3dc1a299e576406d443d8734fd26988a4cc9232995ee4d8864691ce877f251a88b5ca9d5dd65ec0819b1bef2c5cd120deecfd181e825d1a4c7338f49771857d6c138cb04ae81e3e258a9172f6ffeca46d8a632b835e6c4def77b1cf47bb7205cd8813bee7ae6567a1f19b0cd1971f1a7288c0ab2dba5cd1dd44703ff4783fa994cbff2c9daadf8a3ed12e246bd1ba6c7dcad2d46bdb4bc1a3b2e13b04b63230833a99bd65eccd8a123bc812388b8367331f63b67bcabb1d148ff5ebf2e250ed203022c3b74f158b9833763aa834f047de35815570899ecbb988ac8577506de79844af10a68cdb4b8fd3c8fbb0bf05569fc018e39d72f15580a712d3ed260f0530c5e78b7081b71ace24840f3581a5d053aaef10c643577b26dc5a3a99cb541b30d04a33f789bc8ff15a50b07e7fd85e2d51224fa680dcead8f38646ecaf1d0d3b584ef97f052ade783a318512271e3bf5bc787139160b1240f394b580dae3500877b46426e3645ec453d9c42eef694968d5d57e4160d861de69152f2dec25135f478560d1d44f800123b3910e391a89fb798b6790348fa1df7a9f45429fc430b777d93dc6b44481ed6bc188bc79d6915c1d17b5d853389561a6a51e6e45cd77c4ed22137d73aefd3a101251c241b7d9a4f47bcf6144fccb69fa26b0ff75f244d86e84707c2187d92318fc39d0a1470e6994f2f40e3fb97a16ee40695161d52b19402582876a9e711d0148a4ed93e2238f0f2d1fc1286164fa1e3cadab04a9d3ba5c42febd4a2c0e25d030f10b085e84c23807efbbdfb01d4847e29d6b2728867d39f7e68d65fb44f7d0403161d53872034f7bcf939576e2883ae18902440dd2080fd606c8ad2cdf661976d487fa53882caaaa4dc31bbbea956612614353f9e1ff33732354a03169fcea58418bff1cf3f05c5f93e32efe8bf33a184b1283b6769d7839c65fae72b53c60fd86352f3421cb1aa36c8c330233f9af3b09443e7f94296fcc0f643dcada970cb386b58d50400095984fddca557c31aa5006d9f1fb4ca5a411196a40df3bac981e9282a9d2700fbb42f04bb7e33b8c145400f002d1ca49034268e0cbc9dba5df0088f4d4d9184a7cf6915d3287b30112ed4b873e810253b1d2e46ee6a3f9a86058d4d29b4c78193ba1b3785c15d586c265a85178eff6c97148be7c872b3ff10143934c607db856962d85598ecb7bfc0ab42d6760ea7937eadaec515ab045071c3a271ab824617ce7109c4a201843bbc054009fdc05846876dea1d78fabbd44f61690d12ba22733217319b4218b1a6d733134e0990c485c4f45de991e0d66b634cf3a6220bfac3305e962dc5ac0b3a8c1167e51288f4ca97f8eda4fe081d687d36359e8ad77e869feee0d703caf9943ac2bd162ea90bf8795f66a242d4a669fe53b5e4ff47be6c6210ba15df9f2aea64bdd512246ea99e7e8e919b49049d0974dad107ac6943dd760b91acc19512b725afd6edeb25cadf56c907414fc2fb1c31364af8d4f1825f6df8144296ba21df3df11485ad4d024e6adac1dd5002538fe82fc3659a877599bcc6556fe3601322e417a9505219b86f87c28a4eff7ffd87d34af91b159946988650aac14b2cfaa6333c9d52bb48bdebdbfd5dde6662e3e23ecb15f18fe50c7bc70569a8187ace3f5278381b809b22f612b08007faf6672eaadb4931a291b0f97c80ee9641ff095a1a7bdc17e7ff2c7ac190ca200093a36dd1f959e78b4b0abe753cd51f5fbdb273caa44b6ade29f771bdd2242ada1a69c73abeda7c07fde810be729e98922a94d90b8304de1f67b195effe76b4fd0af2f0fa3c212806668a5b49b45654cb6c4437fc256f14efa6acd9d93601d5886f3f83825d1a2ec2ef25d338dbc7e3e7a68615c232a4e91889bcdca17e8eb84f8975ea6026193f22d44dfd0299df7d5c83bb15d4283fc392b62b05cde254612b801b7112eca6f79de39e603ff1d75d767aaf0fb6a7036d0425be82b6b496982b8bc680abc18ac70783ca51a5f735e29fc4ba500899512c7f8f52a49052ec321bcc79de548cadfe225b208c58ea0518f4b2b628d9edb1c03f4a252ea72a45044246507a1dbcec88992d17faecca556c2285ce5f72120357a7e391912c5f5a4d191b9202d533b15d25009c2989ef6d66428bc041fb4e0de40dcc82ad051b5c2f796896f726fe2a26e91a2ae1f4862c3b6109457e02612233b0fa3122533759555de9d4c26e32c4f9eb6e2c4cc8ba0d059f81047945407449d7cee79e339e7d09b88d1085687717a331d7f51eed5b946e577974d9a836393eadcc73cb8c93352882fa8d2ff0a62feb2dd594a2115f8f16f73e384020e8d9911c67c2f42a463326207196e14600a0d85f86852c7acaf62d534c6b0472bf4637140ad1342b67d586e5f353a380cbfeebb4f5280e6ae5c2cf932eee5df5fedcff18dbcba84ee2390598f23a8973d309c75986e2ab7f51eb91303cec84b7bb0fa8d15618f3f849a9bccf06670d2a8803923cb45f5997960873c7e85be57b0d4e31f948f6afd909f7685da9ba6b1c447faf75bdc6ff2df3b29e2f82c2b172031611261595eb72bfa72ccf047617785c49ad7ebbb9a65f2956b913105c9f66b99da222e2e0ea1fece4e81f09493f3820bd7c47c0dfa611d2370f344c671b086d55370ae26ce51d631091784a6a6e16c95e3fa53827bc80e2e80194c6328a555fba1f91d9af6ed81335178636c1bb9e3b169c80423bfacff1291acda6875813eaeab9611b6226ab098346b6c837cb2b8cfe690b6108d3ce0be5310aa00928cbbf8e91a2dffbf6f1bf47ed50aea0004a9cf57ae2b63b0a992540b07f4801f03176400dec1809985f15ea171df7bd97464182172b9ba7beea2e2c49808a5670a67cb483218f58efac84c8233f41c6af71290c718d19d44f9adf22eb1a13d29458ce04bff99bec6d2973f7f4e47ffde06e5f8baf3f3d1081b6c72bc9b19d63e92a7bb3f091104de605b9766fd4a51232d21817c2a3bf0b69da8c532774e04a448d4504ca48ca6de4c16e02b078cb448d1a32943f5135c4616b499f719abec86dd038fd0e3ad65b7bf3d93846ea6988a0bc1a59a68ebe257728e619d4988bb007fb1284ee6a68e16f994dfbe2a7de2bf0d02b8e1b90563950823f77dbc02ba2df0264caac367f2d94670433672b97cffacffbaabc6736820d5580d53f2c88eec1e9242d12e1a5aa6650cd4c6021152947f1d24e9f937244836356433d6488fb2f568d799721fccfd325bfb4113cd42dd73ca56768794a9dc2d56e545c522e9fbcad4e28244d58c12332d3e4badd559d456761955e46dc466bbf15042831d003b49c7d075c06583109cb6083fbd019ab8e712e0ef0a5f06ae47c0d2d3e582f8a8e3f214a100b9a6ee473d1f5b0d12e4b67880df57a870ec99bd8730d31323b7cb7903044ba55e620362012766e7611d540c919e67bcaf47cbaa44a924b574708ee5a59bd7b896ea944640dce39dde1cae927b88ecbaf4a0ef242d15d2f2f0ff9345d266299fefd3c57b493d0f0252a99b8a960a46fe45e3cae775005c82d5e212559891a3b9516a55a218a985c76ee438cfc00c0ae551da07a577ae71a06a96e3d31db8bafbaf699ef8de69df9069b5427bc55f684f92ad09edf0af1bfb146fcf896cb36094875408f811c5ca40af22fe958a3c80bdb89635b4872836302de45cebba76e82764f75a681a92c211fee674af51f9533f7ae161b37f8a90485268a510a26b12f7ffde0166845316c801fdefcb74b93d72adfe909c495bc10c4a3c2a3358dccef15737bf20ed068f1b1301ceb161cdf84f86668d7fe4cdc280cd9fb00bc7c0a788c17da82741bba67f16979db06721b603b94d783d1b73542192825572e2c82d7951c2ed0604481d6fb739c1367f166b4cec25ea7a053056baeed9769f1a66fdf453fd92f87b096f032b5fedd3fb330a9fabb8ece413a5f30e726f53f9f81ef2b17368d39c8525d8ff832993f68bff71c06f4461c2e04c15d25a87b568b86012d0426bf37a212711d568140cbf341879d40ca829610575c892cf9b3180d86b6aab086efb42895d2a5792c2537a10a4702f5bad3d8fdc4e690aa1b1ebed76eb6b730c7823cdbec09e6d8b3fdc6f6718f2b7a1dc0b685bca1839b1fdb8c4adf70e030ec021cdda850996562e82905cbec13cb5bde3b0812f899c2b5e4b8691e78e6dd296f34378247ac41b7676c2eca6daf68f6fb5790a15912967bf8b8fc518327fbaa794a54c7680671658fae6424a60ae55eb707446d75b412782a2d43acacbb9beff97eba17c27b7d842e6183d82239d3c2f97e7a1afced373aa45937fc2eb917a300f2db0f733d12b2101df72d4d9e762628cf0a26828c9ef267f665ca59f519424bfaaffff4e688be6125b72ff6e68b40d43687a8da9e7b78a79a550e7c1cb4e625a321a8b3d2777085b019ce350bc75000462e10afd94ee76957122cba02f88eaa60be9abeed2cfe42da13cef3afe100666146cdabbb2cd5ab94912d7bd7a0baac42d3e160ac75ca08342f12eb4b6993484b8e610b5278ab31a4d1734e626341025fe4353418882affdad7fe527095f345a72ce086cdd3cc097193e0faecad490d649dc10dd9317578af049028ad06e5b33de011d72daa3309c53c3113bb7e6151c5d7ac5f26e42e6341492331a52203c6f8ca963fce547884ebdd8d50ae50ae446e993481ed57b116abcb535d6a4eef27d2aa10528d65380a3e497a04e2baa4f689138cfc7eff3a06cee8cb7f27b877eaec4eb46ba2d41f2852cc260e3b2565705ce71e980c547a55e64d85b777d842b467de80d99bf96caf253108fa4c41558ac9998c9fa80ce727d1170a48c1f63faad96580f7e395a854ce6015fbf7d6a1380874b8eb023d6ca09fd518cabca22350bd9a2f6a8da529e216bbe6bc9cd1584770e06107857f9de2d2af1975431d3619ff24cbc5df33a6e8d6498eb582371730219335c65f80d092ffe3220b74096dff92203f44a9f90d01c28f7470589a090190e630ab3d8f935d0e902844df175c9c5ad8cf4622dcc9e7cc5fc20a0ecf9138fd7a12428186bce5b2b54a3db9a54c06d40ff34617694f6913fc4e7a5814c7397b991217c3f3f4e76e63ef85ea4172ac3af789410ef62a684a7b94871a16b2f6a404102fe8260381ab2aef60e2fd1fe3ea76e30cd047f9d38de37c3fcf1ad9358f7751bdeb4e0989a7527ea670726a2595ef1c183d9a73de8c9c", 0x1000}, {&(0x7f00000003c0)="0442395ad959667fa2f6cd0bfe56fb8638aad7c0b14f56667ae406f6ad52357ea2c8c671654e01e2fe2ad9fce5f0f184edd29f7681903a556de8f5f5ff691b6ed1c797d89ae2b8f2dd7680fca43c3d97829d7976ee3ff1f2342b65232d5ff9ac2fb6", 0x62}], 0x5, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0x40, 0x24000000}}], 0x1, 0x4004050) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x10, 0x0, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f0000000440)=[&(0x7f00000000c0)='\x00', &(0x7f00000001c0)='+\\.\\\x00', &(0x7f0000000240)='./cgroup.cpu/syz0\x00', &(0x7f0000000280)='/\x00', 0x0], 0x0, 0x4}}, 0x30) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) 1.545665125s ago: executing program 4 (id=4538): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000200000000060000218510000003000000180007000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x10d, &(0x7f0000000300)=""/269, 0x41000}, 0x94) 1.480072057s ago: executing program 0 (id=4539): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0400001a0000fffffffffffffffd000000b7a9089356ab5c7d5a139644c47070ecfe4c2f33e560c9e88f1bf2cc270c0aea62d57b282791fe2b51", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000000)=':*(^\x00', 0x10040, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x1]}, {0x1, 0x6, 0x0, 0x3ff}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x4}, 0x5, &(0x7f00000006c0)=[{0x1, 0x7, &(0x7f0000000240)='\x00', &(0x7f0000000280)="28d156bf937182d74c9db15bee335f5999a50fbd9897f38adbe485177bfa89e2e9efaee36d7c85fc6b936d59512cd8725d1050a5a85ede3e4255f771723847859b704a6d4f7e9698d0ce650e86df0302ec5fb1f47e8bf2f8af9c7460c26f8f480dd69b55f4a0f12b5ab7701ad44a0c31aee1c656653cdc6f9e138bb437f9a4aa772b15813347839e981e72650769d08c77bad8fbd2b92cd03a0425b7b7aa641f6ff9608349ef78976023681e03a914498627c7a06ec1f3ae28db9b498ae8c3dcb572aba3c664ce0d47a13f9c6e889234914deaec16ef2ea9114b6d61bed78666b9c31db2fe62ea366e75bc", 0xeb, 0x8}, {0x1, 0xf1e, &(0x7f0000000380)='--&:\\.\x00', &(0x7f0000000440)="a38036c5821a1db9df8f7b2d337c06fa0de34572de095ee4a91205a81b239cf1aacfbf95f58486e4ace09356c904594f24ff928a829d2fa85fd6a10adae7df113bfe33212321d3499c5b2f217aa8f1617a294cf60015f8bfe8da7d61529fc147259aaff221f1dd1458175f9f88e5ce1c71d77393e18c55f15194fb292b492bb5d5a77a9b9b275e3e79989544aa84476aacb192239e6ca17b04c65a4730341936a92e93186e5ff09fdbd5adb1a89f328345fb81583873986d56326318f7c1153b9433e1579a3453ac29fe4403ba5c224b153e5f1c0aca6ea6f4", 0xd9, 0x28}, {0x1, 0x2, &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)="f7ac635b50db8747face151438a66547966bce", 0x13, 0x8}, {0x2, 0x5, &(0x7f00000005c0)='\x00', &(0x7f0000000600), 0x0, 0x20}, {0x1, 0x5, &(0x7f0000000640)='/\'{\xfe[\x00', &(0x7f0000000680)="e38d", 0x2, 0x20}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.380530355s ago: executing program 4 (id=4540): syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x76, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000b00)={0x1f4, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x526}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x717d}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xebe}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfafa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20008810}, 0x48040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7961fd4ca8be1960ab31fd2d00000000520e0fa5eb753c94e7d5f3c6159c22f1e9bd06f7090946913ebf4e27bcf6c899df0ad29f48807fde98fdbc977f066b17aef8beef158519c3f5a3d9a02124a424c9bc269b91ef92c74e42fdaecbff802dc516e49765c94066f766ba5f840680e7330317781b93ea631b64434396553f7ea78383bd77eadae314193da2e8455945b674a3d54bec557ce442d5879b2737b422861c4ec012a280e230dfcb87da65cd8109f5739063a7c1d98f819a12d349e88ee26f660aca411e3a06"], 0x20}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7961fd4ca8be1960ab31fd2d00000000520e0fa5eb753c94e7d5f3c6159c22f1e9bd06f7090946913ebf4e27bcf6c899df0ad29f48807fde98fdbc977f066b17aef8beef158519c3f5a3d9a02124a424c9bc269b91ef92c74e42fdaecbff802dc516e49765c94066f766ba5f840680e7330317781b93ea631b64434396553f7ea78383bd77eadae314193da2e8455945b674a3d54bec557ce442d5879b2737b422861c4ec012a280e230dfcb87da65cd8109f5739063a7c1d98f819a12d349e88ee26f660aca411e3a06"], 0x20}}, 0x4000054) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=r1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=r1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075797b4f08cc9003c95c1c5ebbc976e5369d15bfd174dd7863ee287553c590b08babf61c1f3bbde748f9063875c56249e85be5d52095865d724a9c27f41fea0ddc91e9bff5c79e69ca86fbdaaee99ec0d780355a326c5a35d7399f77fefe071db1c2f27290acde12a8bfc535cf3db52da1e6a7da36fdba235033c0b4484c19e7a28b5e235aea67220fce6d923d137ee70317badb15fe616367adc148a1679c78f9a13b35254b34e88d7916260de7de09fa5e3b1f7a82a4fc32ff93d298524ec29fa1693f26de9b8921495ca7b5c33d54d7f8affd42f23290f004ae5025b89037c1b899ddfcf1b7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1.344895723s ago: executing program 0 (id=4541): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) (async, rerun: 64) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 1.256554224s ago: executing program 4 (id=4542): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000012c0)={0x0, 0x7, 0x47a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}}, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200000800040001000000", 0x24) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.179476368s ago: executing program 1 (id=4543): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x7, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002c4d7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005"], 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) (async) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x7, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002c4d7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) (async) 1.124185026s ago: executing program 0 (id=4544): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, 0x0}, 0x4) 1.038290545s ago: executing program 4 (id=4545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) close(r3) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="83a98ff926c87bd30c475a4bbfe7dd31eb6611d8bd839f1badad982b7a7d9c8cf7a019139fa8c060e97238f9c4d219936f966b444acc0bd66e085f5aea1c2f7072811861bd16a1a8b89735f5494e2dd18b29bf1149ed", 0x56}, {&(0x7f0000000700)="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", 0x1000}], 0x2}, 0xc854) (async) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendfile(r4, r5, 0x0, 0xffffffff000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r5, &(0x7f0000000380)="a1692fc1a13b567812d2b3e3dd68c22abd5ebb61bb8829769e1d8ebe41aa177565cdd6db51fbb5000551b3a877706a812c377d6ed9c1cf069d3e92a0d3cda7a0bc3b495b0d10fc209cf9447752923cfdad77dd16faef6bb485d421b0fddd4dd70ae55f530a504b79048b68e9bd3f6e2d8b8b696ba4138bdee8cec319d6badbe2109e017d99162cc963cb38d8e6ea4cae8a7891e41d1d13d5b2ea6ce4638d6a9f47544c7d0fa9539ce235ae8e25add6c48c", 0xb1, 0x4000810, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.033314292s ago: executing program 3 (id=4546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 888.119073ms ago: executing program 4 (id=4547): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x98}, 0x94) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@typed={0x4, 0x15b}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="09042bbd7000ffdbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="08000500000000000a0004007770616e340000000c0017000203aaaaaaaaaaaa080005e202000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xffffffffffffff6d, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r6, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x404a000) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xffffffffffffff6d, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r6, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x404a000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000000c0)) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r13 = socket(0x80000000000000a, 0x2, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x0, &(0x7f0000000240)}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000100", @ANYRES16=r14, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r13, 0x11, 0x65, 0x0, &(0x7f0000000040)) accept(r12, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r0, @ANYBLOB="0800c754c3b8d19d06623e01f89bf424430300030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r0, @ANYBLOB="0800c754c3b8d19d06623e01f89bf424430300030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 887.758622ms ago: executing program 1 (id=4548): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) listen(r0, 0x800) r3 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000080)={{0x8, 0x2, 0x9, 0x2, 0x5}, [{0x7ff, 0x400, 0x7f, 0x4f}, {0xa, 0x100000001, 0x3d, 0x9}]}) r4 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 610.077103ms ago: executing program 1 (id=4549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f8ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 543.344802ms ago: executing program 0 (id=4550): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x81, 0xffff1bb1, 0x9, 0x1000, 0x4}, &(0x7f0000000080)=0x98) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0xa9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f00000003c0), 0x0}, 0x20) 312.018404ms ago: executing program 2 (id=4551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20048800}, 0xc000) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2, 0x12, 0xff, 0x3, 0x2e, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x2, @remote, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf5, 0x0, 0xaa, 0x1, 0x40000000}, @sadb_address={0x3, 0x7, 0x50, 0xa0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_key={0x20, 0x9, 0x7b0, 0x0, "29c7330f1569ec46968fb2044126a6684a83fd75e61ac68c83757a12f1022aed00d2583158c4044df9c06801cd228708776adc9cabde8d1e6e727cb8e24059adb5fb4be037102f75e4a67f869e6e77843238b06411fa7d779dc9bf7f6c9d42dd1256f946b85c3e7c8613ac90af7362d9ab4907339d6d3b4d0608fe9998c55e59de5bcda9437ba0cb0e8a8f6746eed28072fbbb412a261628afec46e45904426b78a476290e987d895871cbe6f9c1f61508a2692ab33e393dee399139fde1266f25a4cf5b739987be095b33742cea51a17a38cf20612312160c6a048ff57c361f76462cc15b5c7b6725626e946a263702d6d44679c285"}]}, 0x170}}, 0x4040000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x40, r4, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x40}}, 0x4000040) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netpci0\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x8, 0x0, 0x996, 0x10, 0x2, 0x28, 0x7825}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r9, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x4b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dvmrp1\x00'}) 0s ago: executing program 0 (id=4552): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1}) syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1], 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 531.401103][T17414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.506913][T17532] sctp: [Deprecated]: syz.3.3059 (pid 17532) Use of int in maxseg socket option. [ 531.506913][T17532] Use struct sctp_assoc_value instead [ 531.601105][T17414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.618280][T17524] lo speed is unknown, defaulting to 1000 [ 531.626902][T17524] wlan1 speed is unknown, defaulting to 1000 [ 531.784880][T17534] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 531.816366][T17414] team0: Port device team_slave_0 added [ 531.925535][T17414] team0: Port device team_slave_1 added [ 532.023738][T17414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.030805][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.061621][T17414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.102246][T17414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.112700][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.145304][T17414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.263149][ T6938] IPVS: stop unused estimator thread 0... [ 532.304621][T17414] hsr_slave_0: entered promiscuous mode [ 532.311204][T17414] hsr_slave_1: entered promiscuous mode [ 532.337500][T17414] debugfs: 'hsr0' already exists in 'hsr' [ 532.343924][T17414] Cannot create hsr debugfs directory [ 532.399524][T17553] bond4: option downdelay: invalid value (18446744073709551615) [ 532.407552][T17553] bond4: option downdelay: allowed values 0 - 2147483647 [ 532.417520][T17553] bond4 (unregistering): Released all slaves [ 532.449042][T17559] vlan2: entered allmulticast mode [ 532.454362][T17559] veth1_to_team: entered allmulticast mode [ 532.869708][T17573] __nla_validate_parse: 6 callbacks suppressed [ 532.869739][T17573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 532.968530][T17573] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 533.225793][T17583] delete_channel: no stack [ 533.291881][T17594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3080'. [ 533.312929][ T5830] Bluetooth: hci2: command tx timeout [ 533.554848][T17605] netlink: 'syz.2.3083': attribute type 29 has an invalid length. [ 533.573411][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 533.622926][T17605] netlink: 'syz.2.3083': attribute type 29 has an invalid length. [ 533.631560][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 533.784808][T17414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.830174][T17414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.885793][T17414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.904309][T17620] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3087'. [ 533.937873][T17414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.050332][T17637] netlink: 'syz.3.3088': attribute type 2 has an invalid length. [ 534.155964][T17414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.204449][T17414] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.229163][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.236434][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.280409][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.287647][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.318330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.327211][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.470771][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 534.591797][T17663] bond14 (unregistering): Released all slaves [ 534.628945][T17414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.685253][T17414] veth0_vlan: entered promiscuous mode [ 534.709768][T17414] veth1_vlan: entered promiscuous mode [ 534.759996][T17414] veth0_macvtap: entered promiscuous mode [ 534.778784][T17414] veth1_macvtap: entered promiscuous mode [ 534.808294][T17414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.839400][T17667] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3100'. [ 534.858441][T17414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.929499][ T6939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.950408][ T6939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.005214][ T6939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.036518][ T6939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.143325][T17689] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3106'. [ 535.166762][T17689] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3106'. [ 535.330655][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 535.393541][ T5830] Bluetooth: hci2: command tx timeout [ 535.489479][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.523523][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.593986][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.611633][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.644059][T17708] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 535.749308][T17715] netlink: 'syz.2.3113': attribute type 1 has an invalid length. [ 536.362898][T16844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.374371][T16844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.383146][T16844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.402190][T16844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.424220][T16844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.531098][T17740] lo speed is unknown, defaulting to 1000 [ 536.540501][T17749] sock: sock_timestamping_bind_phc: sock not bind to device [ 536.564673][T17740] wlan1 speed is unknown, defaulting to 1000 [ 536.831577][T17765] syzkaller1: entered promiscuous mode [ 536.866391][T17765] syzkaller1: entered allmulticast mode [ 536.955031][T17763] lo speed is unknown, defaulting to 1000 [ 536.974872][T17763] wlan1 speed is unknown, defaulting to 1000 [ 537.127516][T17770] pim6reg1: entered promiscuous mode [ 537.133559][T17770] pim6reg1: entered allmulticast mode [ 537.177446][T17779] bridge0: entered allmulticast mode [ 537.193725][T17779] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 537.210722][T17740] chnl_net:caif_netlink_parms(): no params data found [ 537.695611][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.712624][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.724428][T17801] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 537.745199][T17740] bridge_slave_0: entered allmulticast mode [ 537.752969][T17801] netlink: 'syz.4.3133': attribute type 2 has an invalid length. [ 537.770149][T17740] bridge_slave_0: entered promiscuous mode [ 537.801591][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.842592][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.849900][T17740] bridge_slave_1: entered allmulticast mode [ 537.881340][T17740] bridge_slave_1: entered promiscuous mode [ 537.962169][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.977599][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.044713][T17740] team0: Port device team_slave_0 added [ 538.095247][T17740] team0: Port device team_slave_1 added [ 538.143969][T17814] __nla_validate_parse: 11 callbacks suppressed [ 538.143990][T17814] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3137'. [ 538.248064][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.277240][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.329143][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.377146][T17817] lo speed is unknown, defaulting to 1000 [ 538.380877][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.398321][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.454295][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.468529][T17817] wlan1 speed is unknown, defaulting to 1000 [ 538.512721][T16844] Bluetooth: hci0: command tx timeout [ 538.638366][T17740] hsr_slave_0: entered promiscuous mode [ 538.694173][T17740] hsr_slave_1: entered promiscuous mode [ 538.700758][T17740] debugfs: 'hsr0' already exists in 'hsr' [ 538.712496][T17740] Cannot create hsr debugfs directory [ 538.728765][T17850] x_tables: duplicate underflow at hook 2 [ 538.768999][T17843] lo speed is unknown, defaulting to 1000 [ 538.840278][T17843] wlan1 speed is unknown, defaulting to 1000 [ 538.942090][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 538.952965][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 538.977095][T17854] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 538.994940][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.003887][T17854] bond4 (unregistering): Released all slaves [ 539.039705][T17863] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3148'. [ 539.113452][T17854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3146'. [ 539.258070][T17854] bridge11: entered promiscuous mode [ 539.264189][T17854] bridge11: entered allmulticast mode [ 539.659197][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3155'. [ 539.883762][T17905] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 540.035938][ T8149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.036781][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 540.077959][T17910] nbd: socks must be embedded in a SOCK_ITEM attr [ 540.110434][T17913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3161'. [ 540.162735][T17913] nbd: socks must be embedded in a SOCK_ITEM attr [ 540.294028][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.349716][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3162'. [ 540.398797][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3162'. [ 540.594444][T16844] Bluetooth: hci0: command tx timeout [ 540.652534][T17740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.665832][T17740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.678405][T17740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.687784][T17938] netlink: 'syz.2.3169': attribute type 3 has an invalid length. [ 540.743154][T17740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.934934][T17940] syzkaller1: entered promiscuous mode [ 540.940469][T17940] syzkaller1: entered allmulticast mode [ 541.071987][T17740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.079302][ T8149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.114989][T17740] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.136061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.143345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.204019][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.211241][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.777522][T17740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.986952][T17740] veth0_vlan: entered promiscuous mode [ 542.006613][T17740] veth1_vlan: entered promiscuous mode [ 542.044005][T17740] veth0_macvtap: entered promiscuous mode [ 542.078382][T17740] veth1_macvtap: entered promiscuous mode [ 542.115944][ T8149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.144820][T17740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.169302][T17740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.198264][ T6267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.217103][ T6267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.257890][ T6267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.283467][ T6267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.419586][T18013] netlink: 'syz.3.3189': attribute type 6 has an invalid length. [ 542.463483][ T6939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.482011][ T6939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.591532][ T6267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.601066][ T6267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.674467][T16844] Bluetooth: hci0: command tx timeout [ 542.804320][T18032] sock: sock_set_timeout: `syz.2.3195' (pid 18032) tries to set negative timeout [ 542.856922][T18035] xt_hashlimit: size too large, truncated to 1048576 [ 543.050523][T18041] SET target dimension over the limit! [ 543.153046][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.194985][T18047] __nla_validate_parse: 7 callbacks suppressed [ 543.195010][T18047] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3199'. [ 543.312963][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.371968][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 543.384024][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.411438][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.425986][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.455079][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.556961][T18062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3202'. [ 543.583331][T18063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3203'. [ 543.624972][T18063] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 543.632239][T18063] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 543.719622][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3202'. [ 543.745873][T18050] lo speed is unknown, defaulting to 1000 [ 543.776957][T18065] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.784774][T18065] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.796400][T18065] bridge0: entered allmulticast mode [ 543.808104][T18050] wlan1 speed is unknown, defaulting to 1000 [ 543.924228][T18080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3207'. [ 544.121489][T18050] chnl_net:caif_netlink_parms(): no params data found [ 544.151317][T18088] netlink: 'syz.0.3208': attribute type 20 has an invalid length. [ 544.180388][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 544.192885][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.214664][T18088] netlink: 'syz.0.3208': attribute type 20 has an invalid length. [ 544.243253][ T6267] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.252895][ T6267] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.264846][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 544.275361][ T6267] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.305288][ T6267] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.434503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.442861][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.452022][ T1688] block nbd0: Possible stuck request ffff888052b48000: control (read@0,1024B). Runtime 210 seconds [ 544.464039][ T1688] block nbd0: Possible stuck request ffff888052b48200: control (read@1024,1024B). Runtime 210 seconds [ 544.475509][ T1688] block nbd0: Possible stuck request ffff888052b48400: control (read@2048,1024B). Runtime 210 seconds [ 544.503535][T18050] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.510919][T18050] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.518666][T18050] bridge_slave_0: entered allmulticast mode [ 544.527172][T18050] bridge_slave_0: entered promiscuous mode [ 544.537480][T18050] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.546796][T18050] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.555626][T18050] bridge_slave_1: entered allmulticast mode [ 544.564823][T18050] bridge_slave_1: entered promiscuous mode [ 544.611268][T18050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.626190][T18050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.689423][T18050] team0: Port device team_slave_0 added [ 544.717905][T18050] team0: Port device team_slave_1 added [ 544.754050][T16844] Bluetooth: hci0: command tx timeout [ 544.881452][T18050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.900589][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.041450][T18050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.088842][T18050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.103363][T18050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.195759][T18050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.233644][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.422755][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'. [ 545.483994][T18050] hsr_slave_0: entered promiscuous mode [ 545.491072][T18050] hsr_slave_1: entered promiscuous mode [ 545.522571][T18050] debugfs: 'hsr0' already exists in 'hsr' [ 545.530046][T18050] Cannot create hsr debugfs directory [ 545.554491][T16844] Bluetooth: hci3: command tx timeout [ 545.840207][T18155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3227'. [ 546.039467][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'. [ 546.293219][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.374228][ T7078] lec:lec_start_xmit: lec0:No lecd attached [ 546.478624][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.486428][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.754082][ T5193] udevd[5193]: worker [12623] /devices/virtual/block/nbd0 timeout; kill it [ 546.781310][ T5193] udevd[5193]: seq 18579 '/devices/virtual/block/nbd0' killed [ 547.006441][T18159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.060526][T18159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.318065][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.476070][ T8164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.538232][T18155] hsr_slave_0: left promiscuous mode [ 547.545532][T18155] hsr_slave_1: left promiscuous mode [ 547.575276][ T3534] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.599923][ T3534] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.617051][ T3534] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.634881][T16844] Bluetooth: hci3: command tx timeout [ 547.657468][ T3534] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.926502][T18192] xt_hashlimit: overflow, rate too high: 0 [ 548.029906][T18200] syzkaller0: entered promiscuous mode [ 548.036091][T18200] syzkaller0: entered allmulticast mode [ 548.103530][T18204] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 548.120664][T18204] netlink: 'syz.0.3240': attribute type 3 has an invalid length. [ 548.215972][T18050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 548.227145][T18050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 548.237131][T18050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.249521][T18050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.352727][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.376748][T18050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.401040][T18050] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.413896][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.421084][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.442026][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.449193][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.640596][T18050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.688574][T18050] veth0_vlan: entered promiscuous mode [ 548.699770][T18050] veth1_vlan: entered promiscuous mode [ 548.730340][T18050] veth0_macvtap: entered promiscuous mode [ 548.740062][T18050] veth1_macvtap: entered promiscuous mode [ 548.768145][T18050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.789160][T18050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.828382][ T6939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.838989][ T6939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.844881][T18220] __nla_validate_parse: 69 callbacks suppressed [ 548.844902][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 548.867575][ T6939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.907694][ T6939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.961334][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 549.113114][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.120983][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.224645][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.234017][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.287930][T18231] lo speed is unknown, defaulting to 1000 [ 549.325898][T18231] wlan1 speed is unknown, defaulting to 1000 [ 549.393759][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.536483][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3196'. [ 549.722725][T16844] Bluetooth: hci3: command tx timeout [ 549.857437][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 549.886625][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3254'. [ 550.439097][ T8154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.512817][ T8164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.833142][T18301] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3267'. [ 550.873392][T18301] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3267'. [ 551.098141][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3271'. [ 551.130285][T18309] netlink: 'syz.2.3271': attribute type 7 has an invalid length. [ 551.145162][T18309] netlink: 'syz.2.3271': attribute type 8 has an invalid length. [ 551.155593][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 551.201437][T18307] lo speed is unknown, defaulting to 1000 [ 551.206728][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 551.218276][T18318] netlink: 'syz.0.3273': attribute type 5 has an invalid length. [ 551.227913][T18307] wlan1 speed is unknown, defaulting to 1000 [ 551.272795][T18318] geneve2: entered promiscuous mode [ 551.278280][T18318] geneve2: entered allmulticast mode [ 551.316614][ T35] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 551.358387][T18325] netlink: 'syz.0.3276': attribute type 1 has an invalid length. [ 551.390142][T18325] netlink: 'syz.0.3276': attribute type 8 has an invalid length. [ 551.405988][ T35] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 551.415368][ T35] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 551.425998][ T6938] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 551.440810][T18327] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 551.449139][T18327] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 551.473958][ T8151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.689059][ T8151] IPVS: starting estimator thread 0... [ 551.783701][T18348] IPVS: using max 29 ests per chain, 69600 per kthread [ 551.792492][T16844] Bluetooth: hci3: command tx timeout [ 551.911387][T18360] openvswitch: netlink: Multiple metadata blocks provided [ 551.922791][T18361] openvswitch: netlink: Multiple metadata blocks provided [ 551.952810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 551.960895][ C1] lec:lec_tx_timeout: lec0 [ 552.060589][T18368] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 552.512590][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.525410][T18389] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 552.551419][T18389] team0 (unregistering): Port device team_slave_0 removed [ 552.580916][T18389] team0 (unregistering): Failed to send options change via netlink (err -105) [ 552.590915][T18389] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 552.608926][T18389] team0 (unregistering): Port device team_slave_1 removed [ 552.731432][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.745043][T18408] x_tables: unsorted underflow at hook 4 [ 552.796240][T18413] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.804217][T18413] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.813550][T18413] bridge0: entered allmulticast mode [ 553.120659][T18427] netlink: 'syz.0.3303': attribute type 5 has an invalid length. [ 553.424339][T18440] FAULT_INJECTION: forcing a failure. [ 553.424339][T18440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.462606][ C0] net_ratelimit: 44 callbacks suppressed [ 553.462627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.469950][T18437] lo speed is unknown, defaulting to 1000 [ 553.477457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.477657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.491762][T18440] CPU: 0 UID: 0 PID: 18440 Comm: syz.1.3309 Not tainted syzkaller #0 PREEMPT(full) [ 553.491789][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.491800][T18440] Call Trace: [ 553.491808][T18440] [ 553.491815][T18440] dump_stack_lvl+0xe8/0x150 [ 553.491848][T18440] should_fail_ex+0x412/0x560 [ 553.491877][T18440] _copy_from_user+0x2d/0xb0 [ 553.491906][T18440] ___sys_sendmsg+0x1c6/0x360 [ 553.491931][T18440] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.491985][T18440] ? __fget_files+0x2a/0x420 [ 553.492010][T18440] ? __fget_files+0x3a0/0x420 [ 553.492046][T18440] __x64_sys_sendmsg+0x1bd/0x2a0 [ 553.492067][T18440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.492096][T18440] ? __pfx_ksys_write+0x10/0x10 [ 553.492126][T18440] do_syscall_64+0x14d/0xf80 [ 553.492151][T18440] ? trace_irq_disable+0x3b/0x150 [ 553.492177][T18440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.492196][T18440] ? clear_bhb_loop+0x40/0x90 [ 553.492218][T18440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.492236][T18440] RIP: 0033:0x7f1d1d19c799 [ 553.492253][T18440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.492275][T18440] RSP: 002b:00007f1d1e06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.492295][T18440] RAX: ffffffffffffffda RBX: 00007f1d1d415fa0 RCX: 00007f1d1d19c799 [ 553.492308][T18440] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 553.492320][T18440] RBP: 00007f1d1e06c090 R08: 0000000000000000 R09: 0000000000000000 [ 553.492331][T18440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.492342][T18440] R13: 00007f1d1d416038 R14: 00007f1d1d415fa0 R15: 00007ffe628fabd8 [ 553.492372][T18440] [ 553.622977][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.694290][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.703203][T18437] wlan1 speed is unknown, defaulting to 1000 [ 553.715995][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.870857][T18450] lo speed is unknown, defaulting to 1000 [ 553.880219][T18450] wlan1 speed is unknown, defaulting to 1000 [ 553.985682][T18459] IPv6: NLM_F_REPLACE set, but no existing node found! [ 553.995442][T18451] bond1: option packets_per_slave: invalid value (1048582) [ 553.997569][T18459] __nla_validate_parse: 14 callbacks suppressed [ 553.997586][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3313'. [ 554.003902][T18451] bond1: option packets_per_slave: allowed values 0 - 65535 [ 554.028042][T18451] bond1 (unregistering): Released all slaves [ 554.037883][ T8164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.055479][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3313'. [ 554.065362][T18461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3313'. [ 554.339248][T18473] bridge_slave_1: left allmulticast mode [ 554.345254][T18473] bridge_slave_1: left promiscuous mode [ 554.351169][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.407993][T18473] bridge_slave_0: left allmulticast mode [ 554.422494][T18473] bridge_slave_0: left promiscuous mode [ 554.442112][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.718026][T18491] FAULT_INJECTION: forcing a failure. [ 554.718026][T18491] name failslab, interval 1, probability 0, space 0, times 0 [ 554.731046][T18491] CPU: 1 UID: 0 PID: 18491 Comm: syz.0.3321 Not tainted syzkaller #0 PREEMPT(full) [ 554.731075][T18491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.731086][T18491] Call Trace: [ 554.731095][T18491] [ 554.731103][T18491] dump_stack_lvl+0xe8/0x150 [ 554.731138][T18491] should_fail_ex+0x412/0x560 [ 554.731169][T18491] should_failslab+0xa8/0x100 [ 554.731196][T18491] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 554.731217][T18491] ? __alloc_skb+0x186/0x7d0 [ 554.731243][T18491] ? __alloc_skb+0x1d0/0x7d0 [ 554.731266][T18491] ? __local_bh_enable_ip+0xd0/0x130 [ 554.731295][T18491] __alloc_skb+0x1d0/0x7d0 [ 554.731329][T18491] netlink_sendmsg+0x5d4/0xb40 [ 554.731367][T18491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.731399][T18491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 554.731428][T18491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.731453][T18491] ____sys_sendmsg+0x972/0x9f0 [ 554.731484][T18491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.731525][T18491] ? import_iovec+0x73/0xa0 [ 554.731560][T18491] ___sys_sendmsg+0x2a5/0x360 [ 554.731587][T18491] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.731646][T18491] ? __fget_files+0x2a/0x420 [ 554.731673][T18491] ? __fget_files+0x3a0/0x420 [ 554.731714][T18491] __x64_sys_sendmsg+0x1bd/0x2a0 [ 554.731738][T18491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.731767][T18491] ? __pfx_ksys_write+0x10/0x10 [ 554.731803][T18491] do_syscall_64+0x14d/0xf80 [ 554.731832][T18491] ? trace_irq_disable+0x3b/0x150 [ 554.731860][T18491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.731881][T18491] ? clear_bhb_loop+0x40/0x90 [ 554.731906][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.731926][T18491] RIP: 0033:0x7fb4d5f9c799 [ 554.731946][T18491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.731962][T18491] RSP: 002b:00007fb4d6f39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.731984][T18491] RAX: ffffffffffffffda RBX: 00007fb4d6215fa0 RCX: 00007fb4d5f9c799 [ 554.731999][T18491] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 554.732012][T18491] RBP: 00007fb4d6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 554.732024][T18491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.732037][T18491] R13: 00007fb4d6216038 R14: 00007fb4d6215fa0 R15: 00007ffcd3968b08 [ 554.732071][T18491] [ 554.746389][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.993573][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.996220][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 555.017246][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3324'. [ 555.071171][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3322'. [ 555.154751][T18514] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 555.172743][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3324'. [ 555.188008][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 555.303475][T18518] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 555.363632][T18522] netlink: 'syz.3.3329': attribute type 1 has an invalid length. [ 555.364408][T18524] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 555.380379][T18522] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3329'. [ 555.399210][T18522] netlink: 'syz.3.3329': attribute type 1 has an invalid length. [ 555.401876][T18523] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 555.417360][T18522] netlink: 638 bytes leftover after parsing attributes in process `syz.3.3329'. [ 555.642585][T18534] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 555.802900][T18540] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 555.811980][T18541] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 556.018927][T18550] tipc: Started in network mode [ 556.026412][T18550] tipc: Node identity 4e0142ff6733, cluster identity 4711 [ 556.039396][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.056995][T18550] tipc: Enabled bearer , priority 0 [ 556.084190][T18556] syzkaller0: entered promiscuous mode [ 556.089801][T18556] syzkaller0: entered allmulticast mode [ 556.741067][T18544] tipc: Resetting bearer [ 556.805579][T18544] tipc: Disabling bearer [ 557.021320][T18613] xt_hashlimit: size too large, truncated to 1048576 [ 557.077321][T18608] syzkaller1: entered promiscuous mode [ 557.084386][T18608] syzkaller1: entered allmulticast mode [ 557.125336][T18616] x9: renamed from bridge_slave_0 (while UP) [ 557.154044][T18616] xt_hashlimit: size too large, truncated to 1048576 [ 557.508876][T18635] macsec1: entered promiscuous mode [ 557.515639][T18635] erspan0: entered promiscuous mode [ 557.522641][T18635] macsec1: entered allmulticast mode [ 557.529608][T18635] erspan0: entered allmulticast mode [ 557.547535][T18635] erspan0: left allmulticast mode [ 557.572954][T18635] erspan0: left promiscuous mode [ 557.996548][T18665] syzkaller0: entered promiscuous mode [ 558.002228][T18665] syzkaller0: entered allmulticast mode [ 558.791811][T18703] syzkaller1: entered promiscuous mode [ 558.810285][T18703] syzkaller1: entered allmulticast mode [ 559.166333][ T8158] net_ratelimit: 4 callbacks suppressed [ 559.166356][ T8158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.186629][T18710] block nbd2: Unsupported socket: should be TCP or UNIX. [ 559.558146][T18720] __nla_validate_parse: 18 callbacks suppressed [ 559.558167][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3384'. [ 559.581525][T18722] tipc: Started in network mode [ 559.587957][T18722] tipc: Node identity 0685694b3484, cluster identity 4711 [ 559.595838][T18722] tipc: Enabled bearer , priority 0 [ 559.645103][T18729] syzkaller0: entered promiscuous mode [ 559.666022][T18729] syzkaller0: entered allmulticast mode [ 559.695024][T18732] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3391'. [ 559.746777][T18722] tipc: Resetting bearer [ 559.783007][T18721] tipc: Resetting bearer [ 559.879980][T18721] tipc: Disabling bearer [ 560.064464][T18752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3397'. [ 560.953115][T18778] netlink: 'syz.1.3403': attribute type 1 has an invalid length. [ 561.015687][T18778] bond1: entered promiscuous mode [ 561.020813][T18778] bond1: entered allmulticast mode [ 561.026611][T18778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.146761][T18778] erspan1: entered allmulticast mode [ 561.175801][T18792] xt_hashlimit: size too large, truncated to 1048576 [ 561.184773][T18778] bond1: (slave erspan1): making interface the new active one [ 561.268488][T18778] erspan1: entered promiscuous mode [ 561.286466][T18778] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 561.345208][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 561.939475][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3410'. [ 562.181649][T18813] vlan2: entered promiscuous mode [ 562.187227][T18813] bridge0: entered promiscuous mode [ 562.209918][T18818] lo speed is unknown, defaulting to 1000 [ 562.218011][T18818] wlan1 speed is unknown, defaulting to 1000 [ 562.394186][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3413'. [ 562.499583][T18826] netlink: 'syz.2.3414': attribute type 39 has an invalid length. [ 562.636518][T18830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3416'. [ 563.008077][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 563.199079][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3421'. [ 563.201970][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 563.534685][T18875] netlink: 'syz.4.3428': attribute type 21 has an invalid length. [ 563.588991][T18875] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3428'. [ 564.238174][T18910] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 564.402037][T18919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 564.558876][T18926] batadv0: entered promiscuous mode [ 564.566201][T18926] dummy0: entered promiscuous mode [ 564.572999][T18926] debugfs: 'hsr1' already exists in 'hsr' [ 564.578802][T18926] Cannot create hsr debugfs directory [ 564.717055][T18929] __nla_validate_parse: 6 callbacks suppressed [ 564.717077][T18929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3445'. [ 564.770180][T18929] IPVS: length: 81 != 8 [ 564.776204][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 564.786035][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 565.256427][T18959] IPv6: NLM_F_REPLACE set, but no existing node found! [ 565.352130][T18961] syzkaller1: entered promiscuous mode [ 565.422651][T18961] syzkaller1: entered allmulticast mode [ 565.500964][T18961] team_slave_0: entered promiscuous mode [ 565.506757][T18961] team_slave_1: entered promiscuous mode [ 565.566826][T18961] macsec1: entered promiscuous mode [ 565.605661][T18961] team0: entered promiscuous mode [ 565.630156][T18961] team0: Device macsec1 is already an upper device of the team interface [ 565.654731][T18961] team0: left promiscuous mode [ 565.660300][T18961] team_slave_0: left promiscuous mode [ 565.665796][T18961] team_slave_1: left promiscuous mode [ 565.778253][T18974] lo speed is unknown, defaulting to 1000 [ 565.817372][T18974] wlan1 speed is unknown, defaulting to 1000 [ 566.208192][T19012] netlink: 'syz.3.3467': attribute type 7 has an invalid length. [ 566.216519][T19012] netlink: 'syz.3.3467': attribute type 8 has an invalid length. [ 566.228597][T19012] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.3467'. [ 567.030362][T19028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.172151][T19030] lo speed is unknown, defaulting to 1000 [ 567.180733][T19030] wlan1 speed is unknown, defaulting to 1000 [ 567.188800][T19034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3472'. [ 567.282562][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'. [ 567.423891][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 567.456210][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 567.468736][T19047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3477'. [ 567.495630][T19044] bridge0: port 3(syz_tun) entered blocking state [ 567.502861][T19044] bridge0: port 3(syz_tun) entered disabled state [ 567.509649][T19044] syz_tun: entered allmulticast mode [ 567.519028][T19044] syz_tun: entered promiscuous mode [ 567.591392][T19053] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3481'. [ 567.673311][T19056] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 567.718349][T19053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.832879][T19058] sctp: [Deprecated]: syz.2.3478 (pid 19058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.832879][T19058] Use struct sctp_sack_info instead [ 568.022328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.030464][ C1] lec:lec_tx_timeout: lec0 [ 568.076415][T19053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.091186][T19084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.136132][T19053] bond0 (unregistering): Released all slaves [ 568.373712][T19092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.782225][T19103] pim6reg: entered allmulticast mode [ 568.822815][T19103] pim6reg: left allmulticast mode [ 568.856203][T19096] xt_CT: No such helper "netbios-ns" [ 569.087287][T19119] sock: sock_timestamping_bind_phc: sock not bind to device [ 569.967455][T19179] __nla_validate_parse: 5 callbacks suppressed [ 569.967476][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'. [ 570.091797][T19179] bridge_slave_0 (unregistering): left allmulticast mode [ 570.122809][T19179] bridge_slave_0 (unregistering): left promiscuous mode [ 570.129890][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.321616][T19203] bond_slave_0: entered promiscuous mode [ 570.327762][T19203] bond_slave_1: entered promiscuous mode [ 570.393453][T19203] macvlan4: entered promiscuous mode [ 570.414305][T19203] bond0: entered promiscuous mode [ 570.421591][T19203] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 570.431616][T19203] bond0: left promiscuous mode [ 570.447126][T19203] bond_slave_0: left promiscuous mode [ 570.452671][T19203] bond_slave_1: left promiscuous mode [ 570.490714][T16844] block nbd0: Receive control failed (result -107) [ 570.504534][T19210] block nbd0: reconnected socket [ 570.520878][T16844] block nbd0: Receive control failed (result -32) [ 570.534151][T19211] block nbd0: reconnected socket [ 570.643237][ T6938] bridge_slave_1: left allmulticast mode [ 570.669840][ T6938] bridge_slave_1: left promiscuous mode [ 570.699815][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.165158][ T6938] batman_adv: batadv0: Removing interface: gretap1 [ 571.583456][ T6938] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 571.591984][ T6938] bridge6 (unregistering): left promiscuous mode [ 571.680710][ T6938] bond8 (unregistering): (slave bridge8): Releasing active interface [ 571.751463][ T6938] bond1 (unregistering): Released all slaves [ 571.773012][ T6938] bond2 (unregistering): Released all slaves [ 571.797156][ T6938] bond3 (unregistering): (slave veth3): Releasing active interface [ 571.810865][ T6938] bond3 (unregistering): Released all slaves [ 571.837247][ T6938] bond4 (unregistering): (slave lo): Releasing backup interface [ 571.846164][ T6938] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 571.862250][ T6938] bond4 (unregistering): Released all slaves [ 571.912494][ T6938] bond0 (unregistering): Released all slaves [ 571.937131][ T6938] bond5 (unregistering): Released all slaves [ 571.973389][ T6938] bond6 (unregistering): Released all slaves [ 571.996646][ T6938] bond7 (unregistering): Released all slaves [ 572.025036][ T6938] bond8 (unregistering): Released all slaves [ 572.060738][T19215] lo speed is unknown, defaulting to 1000 [ 572.149096][T19215] wlan1 speed is unknown, defaulting to 1000 [ 572.291768][ T6938] 9: left promiscuous mode [ 572.452510][ T6938] : left promiscuous mode [ 572.569288][ T6938] tipc: Left network mode [ 572.625597][T19258] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 572.680840][T19258] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3521'. [ 572.900624][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 572.938469][T19270] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 572.947385][T19270] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 572.985855][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 573.138365][T19280] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 573.366351][T19286] syzkaller0: entered promiscuous mode [ 573.401534][T19286] syzkaller0: entered allmulticast mode [ 573.428998][T19283] tipc: Started in network mode [ 573.446553][T19283] tipc: Node identity da536a18cc4c, cluster identity 4711 [ 573.454479][T19283] tipc: Enabled bearer , priority 0 [ 573.462964][T19280] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.515056][T19277] tipc: Resetting bearer [ 573.548029][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3530'. [ 573.606509][T19274] tipc: Resetting bearer [ 573.646694][T19274] tipc: Disabling bearer [ 573.923114][T19309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3535'. [ 573.963774][T19313] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3533'. [ 573.993085][T19313] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3533'. [ 574.103400][T19316] bridge0: entered promiscuous mode [ 574.112510][T19316] bridge0: entered allmulticast mode [ 574.121977][T19317] netlink: 'syz.1.3537': attribute type 58 has an invalid length. [ 574.473020][T19322] lo speed is unknown, defaulting to 1000 [ 574.515040][ T1688] block nbd0: Possible stuck request ffff888052b48000: control (read@0,1024B). Runtime 240 seconds [ 574.528187][ T1688] block nbd0: Possible stuck request ffff888052b48200: control (read@1024,1024B). Runtime 240 seconds [ 574.540543][ T1688] block nbd0: Possible stuck request ffff888052b48400: control (read@2048,1024B). Runtime 240 seconds [ 574.551940][ T1688] block nbd0: Dead connection, failed to find a fallback [ 574.560330][ T1688] block nbd0: shutting down sockets [ 574.566034][ T1688] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.575909][ T1688] Buffer I/O error on dev nbd0, logical block 2, async page read [ 574.584579][ T1688] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.594920][ T1688] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.603094][ T1688] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.612730][ T1688] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.622652][T12623] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.645146][T12623] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.657676][T12623] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.684899][T12623] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.693705][T12623] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.703327][T12623] Buffer I/O error on dev nbd0, logical block 2, async page read [ 574.712393][T12623] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.721897][T12623] Buffer I/O error on dev nbd0, logical block 3, async page read [ 574.731198][T12623] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.741655][T12623] Buffer I/O error on dev nbd0, logical block 0, async page read [ 574.752977][T12623] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.762890][T12623] Buffer I/O error on dev nbd0, logical block 1, async page read [ 574.770712][T12623] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 574.780302][T12623] Buffer I/O error on dev nbd0, logical block 2, async page read [ 574.789281][T12623] ldm_validate_partition_table(): Disk read failed. [ 574.797555][T12623] Dev nbd0: unable to read RDB block 0 [ 574.809057][T12623] nbd0: unable to read partition table [ 574.839729][ T5193] udevd[5193]: worker [12623] terminated by signal 9 (Killed) [ 574.863645][ T5193] udevd[5193]: worker [12623] failed while handling '/devices/virtual/block/nbd0' [ 575.054823][ T6938] hsr_slave_0: left promiscuous mode [ 575.072810][ T6938] hsr_slave_1: left promiscuous mode [ 575.084947][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.154434][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.693289][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 575.744351][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 575.801715][T19367] netlink: 'syz.2.3545': attribute type 1 has an invalid length. [ 575.820057][T19367] netlink: 'syz.2.3545': attribute type 1 has an invalid length. [ 575.893120][T19345] macvtap0: entered promiscuous mode [ 575.902895][T19345] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 575.938365][T19345] macvtap0: entered allmulticast mode [ 575.944747][T19345] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 576.028961][T19350] mac80211_hwsim hwsim1 wlan1: left allmulticast mode [ 576.052493][T19350] mac80211_hwsim hwsim1 wlan1: left promiscuous mode [ 576.059738][T19350] macvtap0: left promiscuous mode [ 576.066695][T19350] macvtap0: left allmulticast mode [ 576.195983][T19374] bond0: entered allmulticast mode [ 576.210390][T19367] lo speed is unknown, defaulting to 1000 [ 576.739195][T19383] lo speed is unknown, defaulting to 1000 [ 577.167878][T19404] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3553'. [ 577.214198][T19404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3553'. [ 578.406457][T19445] netlink: 'syz.1.3562': attribute type 3 has an invalid length. [ 578.540182][T19443] lo speed is unknown, defaulting to 1000 [ 579.381893][T19483] Bluetooth: MGMT ver 1.23 [ 579.566346][T19480] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 579.783687][T19487] lo speed is unknown, defaulting to 1000 [ 579.870056][T19499] IPv6: NLM_F_CREATE should be specified when creating new route [ 579.921572][T19499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3572'. [ 580.383278][T19517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3577'. [ 580.533234][T19521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 580.619905][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3582'. [ 580.733659][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 580.751388][T19516] lo speed is unknown, defaulting to 1000 [ 580.941277][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'. [ 580.972848][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 580.981391][T19533] vlan2: entered allmulticast mode [ 580.988336][T19552] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3585'. [ 581.008816][T19533] bridge1: entered allmulticast mode [ 581.046134][T19546] bridge1: port 1(erspan0) entered blocking state [ 581.067435][T19546] bridge1: port 1(erspan0) entered disabled state [ 581.076229][T19546] erspan0: entered allmulticast mode [ 581.084312][T19546] erspan0: entered promiscuous mode [ 581.091288][T19546] bridge1: port 1(erspan0) entered blocking state [ 581.097918][T19546] bridge1: port 1(erspan0) entered forwarding state [ 581.176264][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'. [ 581.224204][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 581.771122][T19564] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 581.968948][T19577] netlink: 'syz.0.3591': attribute type 1 has an invalid length. [ 582.160759][T19577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 582.255011][T19590] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 582.282115][T19590] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 582.468461][T19597] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3596'. [ 583.151713][T19617] lo speed is unknown, defaulting to 1000 [ 583.225781][T19613] lo speed is unknown, defaulting to 1000 [ 583.771074][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 583.800490][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3610'. [ 583.833073][T19640] chnl_net:caif_netlink_parms(): no params data found [ 583.886811][T19643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3611'. [ 583.934857][T19641] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 585.178986][T19678] lo speed is unknown, defaulting to 1000 [ 585.544833][T19684] lo speed is unknown, defaulting to 1000 [ 585.690523][T19692] block nbd2: server does not support multiple connections per device. [ 585.699759][T19692] block nbd2: shutting down sockets [ 586.268517][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 586.548139][T19719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.781744][T19737] lo speed is unknown, defaulting to 1000 [ 586.987806][T19746] netlink: zone id is out of range [ 586.993235][T19746] netlink: zone id is out of range [ 586.998454][T19746] netlink: zone id is out of range [ 587.004211][T19746] netlink: zone id is out of range [ 587.009376][T19746] netlink: zone id is out of range [ 587.046058][T19746] netlink: zone id is out of range [ 587.051370][T19746] netlink: zone id is out of range [ 587.063704][T19746] netlink: zone id is out of range [ 587.068959][T19746] netlink: zone id is out of range [ 587.076854][T19746] netlink: zone id is out of range [ 587.367894][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 587.701681][T19773] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3647'. [ 587.889971][T19774] lo speed is unknown, defaulting to 1000 [ 588.025742][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 588.411730][T19812] netlink: 'syz.3.3652': attribute type 21 has an invalid length. [ 588.431197][T19812] netlink: 'syz.3.3652': attribute type 22 has an invalid length. [ 588.450355][T19812] netlink: 'syz.3.3652': attribute type 23 has an invalid length. [ 588.468622][T19812] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3652'. [ 588.856889][T19826] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 588.905981][T19826] IPVS: set_ctl: invalid protocol: 193 172.30.1.4:20002 [ 589.076717][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3660'. [ 589.094871][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3660'. [ 589.107000][T19832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3658'. [ 589.117814][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 589.259263][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'. [ 589.764715][T19862] hsr_slave_0 (unregistering): left promiscuous mode [ 591.548967][T19936] __nla_validate_parse: 11 callbacks suppressed [ 591.548991][T19936] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3688'. [ 591.629384][T19937] x_tables: duplicate underflow at hook 1 [ 591.857422][T19946] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3689'. [ 591.899321][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 591.917371][T19946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3689'. [ 591.943197][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 591.953856][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'. [ 591.980957][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'. [ 592.006836][T19946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3689'. [ 592.225310][T19961] syzkaller1: entered promiscuous mode [ 592.252414][T19961] syzkaller1: entered allmulticast mode [ 592.327086][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'. [ 592.769039][T19990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3700'. [ 592.913872][T19997] ip6erspan1: entered allmulticast mode [ 592.949726][T20004] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 592.961656][T20002] IPVS: stopping backup sync thread 20004 ... [ 593.163083][T20017] netlink: 'syz.4.3712': attribute type 2 has an invalid length. [ 593.178049][T20020] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 593.217782][T20023] x_tables: duplicate underflow at hook 2 [ 593.727852][T20032] lo speed is unknown, defaulting to 1000 [ 594.300494][T20064] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 594.317257][T20064] bond2 (unregistering): Released all slaves [ 594.836097][T20093] netlink: 'syz.2.3730': attribute type 4 has an invalid length. [ 594.909600][T20097] netlink: 'syz.2.3730': attribute type 4 has an invalid length. [ 595.119571][T20105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.182463][ T5895] IPVS: starting estimator thread 0... [ 595.275404][T20116] IPVS: using max 28 ests per chain, 67200 per kthread [ 595.337396][T20122] xt_CONNSECMARK: invalid mode: 254 [ 595.800479][T20137] lo speed is unknown, defaulting to 1000 [ 595.980168][T20150] tipc: Cannot configure node identity twice [ 596.344188][T20163] : renamed from dummy0 (while UP) [ 596.736040][T20159] netlink: 'syz.1.3746': attribute type 39 has an invalid length. [ 596.867427][T20159] syz_tun (unregistering): left allmulticast mode [ 596.891093][T20159] syz_tun (unregistering): left promiscuous mode [ 596.901662][T20159] bridge0: port 3(syz_tun) entered disabled state [ 596.919860][T20196] __nla_validate_parse: 8 callbacks suppressed [ 596.919884][T20196] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3759'. [ 596.965510][T20180] bridge_slave_0: left allmulticast mode [ 596.971311][T20180] bridge_slave_0: left promiscuous mode [ 597.003202][T20180] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.019655][T20180] bridge_slave_1: left allmulticast mode [ 597.041880][T20180] bridge_slave_1: left promiscuous mode [ 597.048566][T20180] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.078001][T20180] team0: Port device team_slave_0 removed [ 597.086056][T20180] team0: Port device team_slave_1 removed [ 597.092815][T20180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.101317][T20180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.116398][T20180] bond1: (slave erspan1): Releasing active interface [ 597.124728][T20206] netlink: 'syz.4.3760': attribute type 1 has an invalid length. [ 597.136513][T20180] erspan1: left promiscuous mode [ 597.506200][T20215] lo speed is unknown, defaulting to 1000 [ 597.663958][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3765'. [ 597.684999][T20226] x_tables: unsorted underflow at hook 3 [ 598.136477][T20235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.207446][T20240] lo speed is unknown, defaulting to 1000 [ 598.393023][T20253] net_ratelimit: 343 callbacks suppressed [ 598.393050][T20253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.490362][T20253] nbd: must specify a device to reconfigure [ 598.606309][T20264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3775'. [ 598.617505][T20266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.654731][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 598.789088][T20269] sctp: [Deprecated]: syz.2.3778 (pid 20269) Use of int in max_burst socket option. [ 598.789088][T20269] Use struct sctp_assoc_value instead [ 598.871560][T20276] tipc: Enabled bearer , priority 0 [ 598.883656][T20276] syzkaller0: entered promiscuous mode [ 598.898395][T20276] syzkaller0: entered allmulticast mode [ 598.962486][T20282] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 598.985490][T20276] tipc: Resetting bearer [ 599.037541][T20273] tipc: Resetting bearer [ 599.106673][T20273] tipc: Disabling bearer [ 599.187476][T20290] lo speed is unknown, defaulting to 1000 [ 600.536178][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 600.602639][T20356] netlink: 'syz.2.3799': attribute type 11 has an invalid length. [ 600.627754][T20351] lo speed is unknown, defaulting to 1000 [ 600.669047][T20356] lo: entered allmulticast mode [ 600.674670][T20356] lo: left allmulticast mode [ 600.841134][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 600.865011][T20349] lo speed is unknown, defaulting to 1000 [ 601.074043][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3805'. [ 601.091534][T20379] ip6gre1: entered promiscuous mode [ 601.097298][T20379] ip6gre1: entered allmulticast mode [ 601.210858][T20388] netlink: 'syz.0.3807': attribute type 15 has an invalid length. [ 601.224248][T20390] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 601.243533][T20390] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 601.265165][T20388] netlink: 'syz.0.3807': attribute type 1 has an invalid length. [ 601.514849][T20404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3812'. [ 601.526149][T20397] vlan3: entered promiscuous mode [ 601.666707][T20410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3815'. [ 602.091521][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 602.119681][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 602.519341][T20441] lo speed is unknown, defaulting to 1000 [ 602.679936][T20459] nbd: must specify at least one socket [ 602.764375][T20464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3832'. [ 602.773850][T20464] openvswitch: netlink: Flow key attr not present in new flow. [ 602.796157][T20459] lo speed is unknown, defaulting to 1000 [ 602.881174][T20474] syzkaller0: entered promiscuous mode [ 602.887398][T20474] syzkaller0: entered allmulticast mode [ 603.021045][T20480] lo speed is unknown, defaulting to 1000 [ 603.227413][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3836'. [ 603.501666][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 603.612191][T20505] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002 [ 603.675580][T20494] bond2: entered promiscuous mode [ 603.680933][T20494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.889900][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3842'. [ 604.060403][T20519] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3845'. [ 604.082486][T20519] netlink: 245 bytes leftover after parsing attributes in process `syz.4.3845'. [ 604.308320][T20519] syzkaller0: entered promiscuous mode [ 604.333849][T20519] syzkaller0: entered allmulticast mode [ 604.839323][T20549] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3850'. [ 606.373393][T20540] lo speed is unknown, defaulting to 1000 [ 606.657966][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 606.757993][T20566] lo speed is unknown, defaulting to 1000 [ 607.551357][T20611] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3866'. [ 607.857880][T20620] tipc: Started in network mode [ 607.863879][T20620] tipc: Node identity 080211000001, cluster identity 4711 [ 607.892578][T20620] tipc: Enabled bearer , priority 0 [ 607.910862][T20621] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 607.922218][T20621] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 608.033820][T20620] tipc: Resetting bearer [ 608.123879][T20624] lo speed is unknown, defaulting to 1000 [ 608.252844][T20630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3872'. [ 608.399039][T20630] team0 (unregistering): Port device team_slave_0 removed [ 608.423123][T20630] team0 (unregistering): Port device team_slave_1 removed [ 608.649040][T20652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3881'. [ 608.683997][T20658] netlink: 'syz.0.3880': attribute type 1 has an invalid length. [ 608.785368][T20658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.860430][T20671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3883'. [ 608.921548][T20666] bond4: (slave veth5): Enslaving as an active interface with a down link [ 608.958908][T20658] bond4: (slave dummy0): making interface the new active one [ 608.983582][T20658] dummy0: entered promiscuous mode [ 608.995829][T20658] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 609.009234][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3885'. [ 609.019961][ T5941] tipc: Node number set to 134418688 [ 609.113320][T20681] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3885'. [ 609.266542][T20689] netlink: 'syz.1.3888': attribute type 1 has an invalid length. [ 609.395164][T20689] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 609.408217][T20700] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3890'. [ 609.417512][T20689] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 609.494511][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3888'. [ 609.566361][T20690] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 609.585696][T20706] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3893'. [ 609.633609][T20706] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3893'. [ 609.790617][T20709] lo speed is unknown, defaulting to 1000 [ 609.977961][T20725] bond1: left promiscuous mode [ 609.983003][T20725] bond1: left allmulticast mode [ 609.990062][T20725] erspan1: left allmulticast mode [ 610.012700][T20725] bond0: left allmulticast mode [ 610.018248][T20725] ip6erspan1: left allmulticast mode [ 610.333796][T20741] bond4: Invalid ad_actor_system MAC address. [ 610.339954][T20741] bond4: option ad_actor_system: invalid value (7) [ 610.350707][T20741] bond4 (unregistering): Released all slaves [ 610.616817][T20757] netlink: 'syz.0.3908': attribute type 1 has an invalid length. [ 610.630286][T20757] netlink: 'syz.0.3908': attribute type 3 has an invalid length. [ 610.677508][T20754] lo speed is unknown, defaulting to 1000 [ 610.997074][T20775] syzkaller0: entered promiscuous mode [ 611.006673][T20775] syzkaller0: entered allmulticast mode [ 611.219414][T20784] lo speed is unknown, defaulting to 1000 [ 611.370125][ T7078] lec:lec_start_xmit: lec0:No lecd attached [ 611.404161][T20796] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 611.413239][T20798] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 611.627459][T20782] netlink: 'syz.0.3915': attribute type 3 has an invalid length. [ 612.056963][T20825] netlink: 'syz.1.3928': attribute type 1 has an invalid length. [ 612.065644][T20825] netlink: 'syz.1.3928': attribute type 2 has an invalid length. [ 612.073985][T20826] 7: renamed from veth0_to_bridge (while UP) [ 612.136024][T20830] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 612.262858][T20841] netlink: 'syz.2.3933': attribute type 1 has an invalid length. [ 612.271396][T20841] netlink: 'syz.2.3933': attribute type 2 has an invalid length. [ 612.638036][T20864] lo speed is unknown, defaulting to 1000 [ 612.808926][T20871] bridge1: port 1(erspan0) entered disabled state [ 612.918184][T20871] batman_adv: batadv0: Interface deactivated: dummy0 [ 612.997432][T20881] __nla_validate_parse: 11 callbacks suppressed [ 612.997456][T20881] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3945'. [ 613.079165][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.095426][T20871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.169008][T20871] bridge0: left allmulticast mode [ 613.176854][T20871] vlan2: left allmulticast mode [ 613.181894][T20871] bridge1: left allmulticast mode [ 613.202049][T20874] xfrm0: entered promiscuous mode [ 613.208856][T20874] xfrm0: entered allmulticast mode [ 613.238074][ T6938] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.271836][ T6938] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.368149][ T6938] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.399327][ T6938] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.623256][T20909] xt_NFQUEUE: number of total queues is 0 [ 613.745245][T20915] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 613.745762][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3953'. [ 613.784327][T20917] validate_nla: 3 callbacks suppressed [ 613.784346][T20917] netlink: 'syz.3.3955': attribute type 1 has an invalid length. [ 613.864132][T20911] lo speed is unknown, defaulting to 1000 [ 613.889429][T20917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3955'. [ 613.994946][T20920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3955'. [ 614.319682][T20934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.340552][T20935] lo speed is unknown, defaulting to 1000 [ 614.600969][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3968'. [ 614.647514][T20954] IPVS: set_ctl: invalid protocol: 86 100.1.1.0:20001 [ 614.671988][T20959] veth1_virt_wifi: mtu less than device minimum [ 614.984423][T20971] netlink: 'syz.2.3974': attribute type 21 has an invalid length. [ 614.993674][T20971] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3974'. [ 615.003286][T20971] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3974'. [ 615.014036][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3974'. [ 615.107682][T20979] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3977'. [ 615.210194][T20982] tipc: Enabling of bearer rejected, already enabled [ 615.258732][T20984] lo speed is unknown, defaulting to 1000 [ 615.284213][T20989] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 615.503180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f51000: rx timeout, send abort [ 615.544880][T21004] netlink: 'syz.3.3984': attribute type 1 has an invalid length. [ 615.588273][T21004] bond2: entered promiscuous mode [ 615.594133][T21004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.643642][T21004] ipvlan2: entered allmulticast mode [ 615.649641][T21004] bond2: entered allmulticast mode [ 615.676513][T21004] bond2: (slave bridge3): making interface the new active one [ 615.684663][T21004] bridge3: entered promiscuous mode [ 615.690198][T21004] bridge3: entered allmulticast mode [ 615.697188][T21004] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 616.004332][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f53c00: rx timeout, send abort [ 616.012974][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f51000: abort rx timeout. Force session deactivation [ 616.358862][T21046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3994'. [ 616.512660][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079f53c00: abort rx timeout. Force session deactivation [ 616.909443][T21061] batadv_slave_1: entered promiscuous mode [ 616.918077][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 616.926258][ C1] lec:lec_tx_timeout: lec0 [ 617.065969][T21059] batadv_slave_1: left promiscuous mode [ 617.616611][T21092] lo speed is unknown, defaulting to 1000 [ 617.965684][T21113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.176427][T21037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.395444][T21142] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 619.439453][ T5830] Bluetooth: hci3: link tx timeout [ 619.446236][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 619.816989][T21160] lo speed is unknown, defaulting to 1000 [ 619.857272][ T29] audit: type=1107 audit(1773575382.121:6): pid=21164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 620.128050][T21182] SET target dimension over the limit! [ 620.165588][ T6939] dummy0: left promiscuous mode [ 620.310965][T21193] batadv_slave_1: entered promiscuous mode [ 620.351123][T21192] batadv_slave_1: left promiscuous mode [ 620.389219][T21185] __nla_validate_parse: 5 callbacks suppressed [ 620.389244][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 620.437592][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.454142][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.512781][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.525069][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.808056][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.833603][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 620.895878][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4035'. [ 620.925214][T21221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4035'. [ 621.403958][T21147] Bluetooth: hci5: command 0x0406 tx timeout [ 621.433161][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 621.474894][T16844] Bluetooth: hci3: command 0x0406 tx timeout [ 621.995104][T21247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.034865][T21247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.339691][T21256] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 622.349264][T21256] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 622.476927][ T5830] block nbd2: Receive control failed (result -1) [ 622.731464][ T6267] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.751659][ T6267] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.781993][ T6267] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.802617][ T6267] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.811745][ T6267] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.910428][ T6267] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.921284][ T6267] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.930868][ T6267] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.059095][T21276] openvswitch: netlink: Missing key (keys=40, expected=100) [ 623.279279][T21285] netlink: 'syz.3.4048': attribute type 1 has an invalid length. [ 623.860376][T21312] bond4 (unregistering): Released all slaves [ 624.224813][T21328] netlink: 'syz.2.4066': attribute type 11 has an invalid length. [ 624.428082][T21330] netlink: 'syz.0.4067': attribute type 4 has an invalid length. [ 624.448027][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 624.731734][T21338] netlink: 'syz.2.4070': attribute type 9 has an invalid length. [ 624.751312][T21337] m1Ie5: entered promiscuous mode [ 624.896131][T21349] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.903947][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.932734][T21349] bridge0: entered allmulticast mode [ 624.989744][T21346] tipc: Enabled bearer , priority 0 [ 625.019542][T21350] bridge0: port 1(macvlan3) entered blocking state [ 625.044925][T21350] bridge0: port 1(macvlan3) entered disabled state [ 625.051827][T21350] macvlan3: entered allmulticast mode [ 625.082824][T21350] bridge0: entered allmulticast mode [ 625.104177][T21350] macvlan3: left allmulticast mode [ 625.109362][T21350] bridge0: left allmulticast mode [ 625.166503][T21351] syzkaller0: entered promiscuous mode [ 625.175353][T21351] syzkaller0: entered allmulticast mode [ 625.222852][T21359] tipc: Resetting bearer [ 625.232755][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 625.239096][T21345] tipc: Resetting bearer [ 625.293822][T21345] tipc: Disabling bearer [ 625.336860][T21368] bridge_slave_0: entered promiscuous mode [ 625.346696][T21368] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 625.781227][T21395] __nla_validate_parse: 92 callbacks suppressed [ 625.781252][T21395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4088'. [ 625.918124][T21400] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 625.926795][T21400] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4090'. [ 626.066865][T21406] netlink: 'syz.2.4093': attribute type 3 has an invalid length. [ 626.075162][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4093'. [ 626.142772][T21416] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4094'. [ 626.709176][T21439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 627.129544][T21458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4104'. [ 627.207638][T21461] x_tables: duplicate underflow at hook 1 [ 627.576173][T21464] IPv6: sit2: Disabled Multicast RS [ 627.621090][T21471] netlink: 'syz.4.4108': attribute type 62 has an invalid length. [ 628.091750][T21485] lo speed is unknown, defaulting to 1000 [ 628.388951][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4113'. [ 629.121682][T21538] xt_cgroup: xt_cgroup: no path or classid specified [ 629.278478][T21542] openvswitch: netlink: Missing valid actions attribute. [ 629.291001][T21542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.357484][T21550] netlink: 'syz.1.4118': attribute type 12 has an invalid length. [ 629.523619][T21557] batadv1: entered promiscuous mode [ 629.528987][T21557] batadv1: entered allmulticast mode [ 629.665397][T21564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4126'. [ 629.704456][T21564] netlink: 'syz.4.4126': attribute type 4 has an invalid length. [ 629.834730][T21568] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 629.946386][T21568] bond4: entered promiscuous mode [ 629.952980][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.961107][ C1] lec:lec_tx_timeout: lec0 [ 629.981142][T21568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 630.092207][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4130'. [ 630.140755][T21570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 630.200020][T21570] bond4: (slave bond5): making interface the new active one [ 630.219490][T21578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4130'. [ 630.242444][T21570] bond5: entered promiscuous mode [ 630.269668][T21570] bond4: (slave bond5): Enslaving as an active interface with an up link [ 630.652382][T21596] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 630.813575][T21596] bond6: entered promiscuous mode [ 630.819164][T21596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 630.843314][T21602] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 630.875366][T21598] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 630.913513][T21603] __nla_validate_parse: 1 callbacks suppressed [ 630.913538][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4136'. [ 630.992940][T21600] syzkaller0: entered promiscuous mode [ 631.013962][T21600] syzkaller0: entered allmulticast mode [ 631.444277][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4141'. [ 631.458330][T21634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4143'. [ 631.545001][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4144'. [ 631.615329][T21634] bond3: entered promiscuous mode [ 631.621866][T21634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 631.666678][T21634] bond3 (unregistering): Released all slaves [ 631.678938][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 631.762912][T21631] lo speed is unknown, defaulting to 1000 [ 631.845419][T21635] bond6: entered promiscuous mode [ 631.850942][T21635] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.895663][T21641] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.913167][T21641] bond6: (slave sit3): The slave device specified does not support setting the MAC address [ 631.917849][T21654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4146'. [ 631.936047][T21641] bond6: (slave sit3): Error -95 calling set_mac_address [ 631.991406][T21657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4146'. [ 632.050478][T21630] lo speed is unknown, defaulting to 1000 [ 632.249111][T21664] netlink: 'syz.3.4148': attribute type 1 has an invalid length. [ 632.257320][T21664] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4148'. [ 632.550318][T21672] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 632.572216][T21674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4152'. [ 632.583213][T21676] netlink: 'syz.1.4150': attribute type 1 has an invalid length. [ 632.663612][T21672] bond4: entered promiscuous mode [ 632.671528][T21672] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.692662][T21679] : renamed from team_slave_1 (while UP) [ 633.064177][T21704] netlink: 'syz.4.4159': attribute type 8 has an invalid length. [ 633.072478][T21704] sch_fq: defrate 0 ignored. [ 633.094016][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 633.300363][T21711] bond5: entered promiscuous mode [ 633.341914][T21716] vcan1: entered promiscuous mode [ 633.356604][T21716] vcan1: entered allmulticast mode [ 633.382753][T21716] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 633.438744][T21716] bond5: (slave vcan1): Error -95 calling set_mac_address [ 633.749482][T21738] lo: entered allmulticast mode [ 633.755330][T21736] netlink: 'syz.0.4171': attribute type 11 has an invalid length. [ 633.764198][T21736] netlink: 'syz.0.4171': attribute type 23 has an invalid length. [ 633.779979][T21738] tipc: Enabled bearer , priority 0 [ 633.787742][T21738] syzkaller0: entered promiscuous mode [ 633.796171][T21738] syzkaller0: entered allmulticast mode [ 633.806546][T21737] lo: left allmulticast mode [ 633.816411][T21737] tipc: Resetting bearer [ 633.881271][T21737] tipc: Disabling bearer [ 634.291551][T21776] netlink: 'syz.4.4182': attribute type 10 has an invalid length. [ 634.302702][T21776] bridge0: left allmulticast mode [ 634.314101][T21776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 634.564167][T21793] syzkaller1: entered promiscuous mode [ 634.589374][T21793] syzkaller1: entered allmulticast mode [ 634.760685][T21793] bond7: entered promiscuous mode [ 634.851599][T21793] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.980120][T21793] bond7 (unregistering): Released all slaves [ 635.193385][T21821] macsec1: entered allmulticast mode [ 635.211328][T21821] veth1: entered allmulticast mode [ 635.398152][T21821] veth1: left allmulticast mode [ 635.491354][T21830] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 635.513480][T21830] bond3 (unregistering): Released all slaves [ 635.608309][T21827] lo speed is unknown, defaulting to 1000 [ 635.859776][T21845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.873215][T21845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.900180][T21845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 635.949587][T21860] Bluetooth: MGMT ver 1.23 [ 635.986644][T21855] netlink: 'syz.2.4198': attribute type 4 has an invalid length. [ 636.034477][T21855] __nla_validate_parse: 9 callbacks suppressed [ 636.034500][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4198'. [ 636.108534][T21857] x_tables: duplicate underflow at hook 3 [ 636.172204][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4199'. [ 636.185909][T21862] netlink: 'syz.1.4199': attribute type 2 has an invalid length. [ 636.228558][T21845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.236880][T21863] netlink: 'syz.1.4199': attribute type 2 has an invalid length. [ 636.256151][T21845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.282208][T21845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 636.436345][T21845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.447543][T21845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.473295][T21845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 636.516890][T21862] !9: entered promiscuous mode [ 636.546339][T21863] !9: left promiscuous mode [ 636.705253][T21879] netlink: 'syz.2.4203': attribute type 13 has an invalid length. [ 636.798451][T21881] netlink: 'syz.2.4203': attribute type 14 has an invalid length. [ 636.823212][T21845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.851860][T21845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.865105][T21845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 636.904387][T21879] netlink: 'syz.2.4203': attribute type 14 has an invalid length. [ 636.937608][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.957370][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.000888][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.014734][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.121370][T21891] netlink: 3576 bytes leftover after parsing attributes in process `syz.4.4205'. [ 637.248539][ T6938] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.270608][ T6938] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 637.285549][T21904] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4208'. [ 637.305023][ T6938] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 637.335612][T21907] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4209'. [ 637.372650][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4209'. [ 637.396192][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.416011][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 637.431574][ T35] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 637.559985][ T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.568547][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 637.590557][ T35] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 637.662653][ T6939] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.682454][ T6939] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 637.699065][ T6939] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 637.739592][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 637.778991][T21924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4212'. [ 638.193210][T21947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'. [ 638.247305][T21948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.529521][ T29] audit: type=1800 audit(1773575400.791:7): pid=21943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4217" name="memory.events" dev="tmpfs" ino=1028 res=0 errno=0 [ 638.718818][T21953] lo speed is unknown, defaulting to 1000 [ 639.085360][T21961] netlink: 'syz.1.4223': attribute type 1 has an invalid length. [ 639.177799][T21961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.245379][T21965] vlan2: entered promiscuous mode [ 639.291269][T21965] bond6: entered promiscuous mode [ 639.322936][T21965] vlan2: entered allmulticast mode [ 639.328123][T21965] bond6: entered allmulticast mode [ 639.417933][T21961] bond6: (slave bridge3): making interface the new active one [ 639.462413][T21961] bridge3: entered promiscuous mode [ 639.467982][T21961] bridge3: entered allmulticast mode [ 639.488096][T21961] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 639.998859][T21977] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4225'. [ 640.762055][T21998] lo speed is unknown, defaulting to 1000 [ 641.337125][T22007] lo speed is unknown, defaulting to 1000 [ 641.436936][T22016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4234'. [ 641.534495][T22022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4235'. [ 641.563575][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4235'. [ 641.573515][T22022] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4235'. [ 641.582663][T22022] netlink: 'syz.3.4235': attribute type 3 has an invalid length. [ 641.590786][T22022] netlink: 'syz.3.4235': attribute type 2 has an invalid length. [ 641.599072][T22022] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4235'. [ 641.651729][T22027] syzkaller0: entered promiscuous mode [ 641.664384][T22027] syzkaller0: entered allmulticast mode [ 641.665992][T22024] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 641.717743][T22024] bond7: entered promiscuous mode [ 641.723536][T22024] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.766419][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4236'. [ 641.775731][T22024] bond7: entered allmulticast mode [ 641.796966][T22024] bond7: (slave bridge4): making interface the new active one [ 641.805770][T22024] bridge4: entered promiscuous mode [ 641.811297][T22024] bridge4: entered allmulticast mode [ 641.826433][T22024] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 641.840137][T22031] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 641.861145][T22034] lo speed is unknown, defaulting to 1000 [ 641.872681][T16844] Bluetooth: hci1: command 0x0406 tx timeout [ 642.225299][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 642.448238][T22058] nbd: must specify at least one socket [ 642.602724][T22063] pimreg: tun_chr_ioctl cmd 1074025677 [ 642.608680][T22063] pimreg: linktype set to 1 [ 642.705233][T22070] syzkaller1: entered promiscuous mode [ 642.724684][T22070] syzkaller1: entered allmulticast mode [ 643.274125][T22103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4260'. [ 643.391991][T22109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4262'. [ 643.402600][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4259'. [ 643.624873][T22117] lo speed is unknown, defaulting to 1000 [ 644.518316][T22153] netlink: 'syz.1.4273': attribute type 1 has an invalid length. [ 644.540865][T22153] netlink: 'syz.1.4273': attribute type 2 has an invalid length. [ 644.664278][T22153] bond8: entered promiscuous mode [ 644.687185][T22153] 8021q: adding VLAN 0 to HW filter on device bond8 [ 644.893326][T22170] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 644.925564][T22181] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 645.051081][T22189] netlink: 'syz.3.4284': attribute type 6 has an invalid length. [ 645.073624][T22189] tipc: Enabling of bearer rejected, already enabled [ 645.241697][ T3534] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.262218][ T3534] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.284592][ T3534] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.298979][ T6939] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.762457][T22228] macvlan0: entered promiscuous mode [ 645.767968][T22228] macvlan0: entered allmulticast mode [ 645.774756][T22228] veth1_to_batadv: entered allmulticast mode [ 646.460213][T22261] netlink: 'syz.0.4301': attribute type 1 has an invalid length. [ 646.719585][T22275] __nla_validate_parse: 13 callbacks suppressed [ 646.719610][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 646.802226][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 646.809401][T22275] team0: entered promiscuous mode [ 646.835228][T22275] team0: entered allmulticast mode [ 646.853035][T22275] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.868217][T22289] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 646.903256][T22292] netlink: 'syz.1.4308': attribute type 8 has an invalid length. [ 646.928979][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'. [ 646.950165][T22289] team1: entered promiscuous mode [ 646.956011][T22289] team1: entered allmulticast mode [ 646.961740][T22289] 8021q: adding VLAN 0 to HW filter on device team1 [ 646.969710][T22295] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4307'. [ 646.985513][T22296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4307'. [ 647.011187][T22292] bond0: entered promiscuous mode [ 647.045197][T22292] gretap0: entered promiscuous mode [ 647.051985][T22292] debugfs: 'hsr0' already exists in 'hsr' [ 647.086921][T22292] Cannot create hsr debugfs directory [ 647.105131][T22292] hsr0: entered promiscuous mode [ 647.434252][T22321] lo speed is unknown, defaulting to 1000 [ 647.552442][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 647.648743][T22326] lo speed is unknown, defaulting to 1000 [ 647.784366][T22347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4318'. [ 648.010743][T22358] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4322'. [ 648.110028][T22359] netlink: 644 bytes leftover after parsing attributes in process `syz.1.4322'. [ 648.239207][T22364] lo speed is unknown, defaulting to 1000 [ 648.440514][T22377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4325'. [ 648.478822][T22377] bond0: ARP target 170.170.170.170 is already present [ 648.500642][T22377] bond0: option arp_ip_target: invalid value (2863311530) [ 649.065323][T22412] bridge_slave_0: left promiscuous mode [ 649.251468][T22412] bond4: left promiscuous mode [ 649.360186][T22412] vlan2: left promiscuous mode [ 649.372026][T22412] bond6: left promiscuous mode [ 649.385612][T22412] bridge3: left promiscuous mode [ 649.398757][T22412] vlan2: left allmulticast mode [ 649.422396][T22412] bond6: left allmulticast mode [ 649.427320][T22412] bridge3: left allmulticast mode [ 649.460107][T22410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4329'. [ 649.480037][T22412] bond7: left promiscuous mode [ 649.492339][T22412] bridge4: left promiscuous mode [ 649.497617][T22412] bond7: left allmulticast mode [ 649.514568][T22412] bridge4: left allmulticast mode [ 649.571850][T22412] bond8: left promiscuous mode [ 649.584420][T22412] hsr0: left promiscuous mode [ 649.625355][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.635929][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.738700][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.768393][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.830203][T22436] netlink: 'syz.4.4341': attribute type 21 has an invalid length. [ 650.026558][T22443] tc_dump_action: action bad kind [ 650.038659][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.058929][T22443] netlink: 'syz.0.4343': attribute type 3 has an invalid length. [ 650.074325][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.120705][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.135769][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.149699][T22447] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 650.719063][T22466] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 650.755375][T22466] bond8 (unregistering): Released all slaves [ 651.190726][T22510] lo speed is unknown, defaulting to 1000 [ 651.311306][T22515] netlink: 'syz.3.4362': attribute type 13 has an invalid length. [ 651.529458][T22524] netlink: 'syz.3.4364': attribute type 3 has an invalid length. [ 651.915854][T22549] netlink: 'syz.3.4369': attribute type 2 has an invalid length. [ 651.955274][T22549] __nla_validate_parse: 15 callbacks suppressed [ 651.955299][T22549] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4369'. [ 652.054014][T22551] openvswitch: netlink: Key type 349 is out of range max 32 [ 652.091707][T22551] IPv6: sit2: Disabled Multicast RS [ 652.114388][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 652.219666][T22562] xt_CT: No such helper "pptp" [ 652.404670][T22574] lo speed is unknown, defaulting to 1000 [ 652.431310][T22578] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 652.583298][T22584] mac80211_hwsim hwsim47 syzkaller0: Caught tx_queue_len zero misconfig [ 652.931053][T22596] IPv6: Can't replace route, no match found [ 653.090158][T22610] netlink: 'syz.3.4388': attribute type 6 has an invalid length. [ 653.139468][T22608] lo speed is unknown, defaulting to 1000 [ 653.238378][T22617] batadv0: entered promiscuous mode [ 653.246033][T22617] bond0: entered promiscuous mode [ 653.251118][T22617] bond_slave_0: entered promiscuous mode [ 653.257411][T22617] bond_slave_1: entered promiscuous mode [ 653.263553][T22617] bridge0: entered promiscuous mode [ 653.270492][T22617] debugfs: 'hsr1' already exists in 'hsr' [ 653.292411][T22617] Cannot create hsr debugfs directory [ 653.298116][T22617] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 653.308550][T22617] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 653.322517][T22617] hsr1: entered allmulticast mode [ 653.327787][T22617] batadv0: entered allmulticast mode [ 653.334578][T22617] bond0: entered allmulticast mode [ 653.339735][T22617] bond_slave_0: entered allmulticast mode [ 653.345570][T22617] bond_slave_1: entered allmulticast mode [ 653.351394][T22617] bridge0: entered allmulticast mode [ 653.357358][T22617] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 653.450000][T22625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4393'. [ 653.468769][T22626] lo speed is unknown, defaulting to 1000 [ 653.793591][T22640] netlink: 'syz.4.4395': attribute type 1 has an invalid length. [ 653.802736][T22640] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4395'. [ 653.813256][T22640] netlink: 'syz.4.4395': attribute type 1 has an invalid length. [ 653.821031][T22640] netlink: 'syz.4.4395': attribute type 8 has an invalid length. [ 653.834475][T22640] netlink: 606 bytes leftover after parsing attributes in process `syz.4.4395'. [ 653.844112][T22640] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4395'. [ 653.903316][T22640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'. [ 653.940795][T22640] netlink: 'syz.4.4395': attribute type 10 has an invalid length. [ 653.957692][T22640] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4395'. [ 654.076945][T22640] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 654.228365][T22641] netlink: 'syz.4.4395': attribute type 1 has an invalid length. [ 654.407719][T22665] Bluetooth: MGMT ver 1.23 [ 654.809500][T22682] Unsupported ieee802154 address type: 0 [ 655.078692][ T6267] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.106031][ T6267] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.164417][ T6267] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.196017][ T6267] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.359680][T22721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4411'. [ 655.438125][T22726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.488152][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 655.510545][T22728] netlink: 'syz.3.4413': attribute type 17 has an invalid length. [ 655.532434][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 655.570792][T22728] bond0: option all_slaves_active: invalid value (99) [ 655.821291][ T8154] IPVS: starting estimator thread 0... [ 655.925799][T22746] IPVS: using max 26 ests per chain, 62400 per kthread [ 657.758805][T22831] __nla_validate_parse: 1 callbacks suppressed [ 657.758841][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4438'. [ 657.881353][T22821] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4438'. [ 657.913652][T22821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'. [ 657.948695][T22830] lo speed is unknown, defaulting to 1000 [ 657.955248][T22821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4438'. [ 658.408786][T22864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 658.476494][T22846] lo speed is unknown, defaulting to 1000 [ 658.779982][T22873] erspan1: entered promiscuous mode [ 658.802583][T22873] erspan1: entered allmulticast mode [ 659.032740][T22845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.047036][T22895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4448'. [ 659.096855][ T29] audit: type=1800 audit(1773575421.361:8): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4448" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1314 res=0 errno=0 [ 659.122959][T22897] SET target dimension over the limit! [ 659.253910][T22900] pim6reg99999999: entered allmulticast mode [ 659.291866][T22904] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4453'. [ 659.301723][T22904] netlink: 'syz.0.4453': attribute type 2 has an invalid length. [ 659.335568][T22908] netlink: 'syz.3.4452': attribute type 13 has an invalid length. [ 659.345625][T22906] x_tables: duplicate underflow at hook 3 [ 659.365043][T22908] netlink: 'syz.3.4452': attribute type 17 has an invalid length. [ 659.390484][T22908] erspan0: entered promiscuous mode [ 659.405511][T22910] sctp: [Deprecated]: syz.0.4455 (pid 22910) Use of int in max_burst socket option deprecated. [ 659.405511][T22910] Use struct sctp_assoc_value instead [ 659.428896][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4452'. [ 659.459350][T22908] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.466640][T22908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.475948][T22908] bridge0: left allmulticast mode [ 659.483815][T22915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.499377][T22908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.600616][T22917] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.608028][T22918] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.716864][T22920] tun0: tun_chr_ioctl cmd 1074025675 [ 659.722435][T22920] tun0: persist enabled [ 659.727258][T22920] tun0: tun_chr_ioctl cmd 1074025675 [ 659.734969][T22920] tun0: persist enabled [ 659.748205][T22920] tun0: tun_chr_ioctl cmd 1074025673 [ 660.159487][T22940] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4463'. [ 660.181006][T22940] geneve2: entered promiscuous mode [ 660.191861][ T6939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.211197][ T6938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.234577][ T6938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.281981][ T6938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.435492][T22940] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.511614][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4468'. [ 660.660826][T22940] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.809464][T22940] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.961974][T22940] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.129389][T22545] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.245927][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.305672][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.340047][T22545] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.495008][T22994] FAULT_INJECTION: forcing a failure. [ 661.495008][T22994] name failslab, interval 1, probability 0, space 0, times 0 [ 661.508189][T22994] CPU: 1 UID: 0 PID: 22994 Comm: syz.4.4479 Not tainted syzkaller #0 PREEMPT(full) [ 661.508219][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.508232][T22994] Call Trace: [ 661.508241][T22994] [ 661.508249][T22994] dump_stack_lvl+0xe8/0x150 [ 661.508285][T22994] should_fail_ex+0x412/0x560 [ 661.508318][T22994] should_failslab+0xa8/0x100 [ 661.508346][T22994] __kmalloc_cache_noprof+0x88/0x660 [ 661.508371][T22994] ? tipc_nametbl_insert_publ+0x8a1/0x13d0 [ 661.508401][T22994] tipc_nametbl_insert_publ+0x8a1/0x13d0 [ 661.508452][T22994] tipc_nametbl_publish+0xc7/0x1f0 [ 661.508481][T22994] tipc_sk_publish+0x17b/0x3c0 [ 661.508512][T22994] ? __pfx_tipc_sk_publish+0x10/0x10 [ 661.508535][T22994] ? tipc_nametbl_build_group+0x4c8/0x500 [ 661.508555][T22994] ? tipc_nametbl_build_group+0x2e/0x500 [ 661.508586][T22994] tipc_sk_join+0x3ab/0x6a0 [ 661.508612][T22994] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 661.508639][T22994] ? __pfx_tipc_sk_join+0x10/0x10 [ 661.508663][T22994] ? tipc_setsockopt+0x731/0x990 [ 661.508714][T22994] ? __local_bh_enable_ip+0xd0/0x130 [ 661.508747][T22994] tipc_setsockopt+0x73e/0x990 [ 661.508780][T22994] ? __pfx_tipc_setsockopt+0x10/0x10 [ 661.508800][T22994] ? aa_sock_opt_perm+0xbe/0x1a0 [ 661.508828][T22994] ? aa_sock_opt_perm+0xff/0x1a0 [ 661.508858][T22994] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 661.508880][T22994] ? __pfx_tipc_setsockopt+0x10/0x10 [ 661.508907][T22994] do_sock_setsockopt+0x17c/0x1b0 [ 661.508943][T22994] __x64_sys_setsockopt+0x13d/0x1b0 [ 661.508978][T22994] do_syscall_64+0x14d/0xf80 [ 661.509004][T22994] ? trace_irq_disable+0x3b/0x150 [ 661.509040][T22994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.509062][T22994] ? clear_bhb_loop+0x40/0x90 [ 661.509088][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.509109][T22994] RIP: 0033:0x7fe895b9c799 [ 661.509130][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.509148][T22994] RSP: 002b:00007fe896a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 661.509171][T22994] RAX: ffffffffffffffda RBX: 00007fe895e15fa0 RCX: 00007fe895b9c799 [ 661.509185][T22994] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 661.509198][T22994] RBP: 00007fe896a26090 R08: 0000000000000010 R09: 0000000000000000 [ 661.509210][T22994] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 661.509223][T22994] R13: 00007fe895e16038 R14: 00007fe895e15fa0 R15: 00007ffd0e94c308 [ 661.509259][T22994] [ 661.509268][T22994] tipc: Failed to bind to 66,3,3 [ 661.555388][T22998] netlink: 'syz.0.4481': attribute type 1 has an invalid length. [ 661.672116][T23001] netlink: 'syz.4.4482': attribute type 9 has an invalid length. [ 661.702913][T22998] netlink: 'syz.0.4481': attribute type 2 has an invalid length. [ 662.151658][T23017] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.193125][T23017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 662.210141][T23017] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.277164][T23026] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 662.303174][T23017] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.315174][T23017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 662.342184][T23017] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 662.363073][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 662.498284][T23037] FAULT_INJECTION: forcing a failure. [ 662.498284][T23037] name failslab, interval 1, probability 0, space 0, times 0 [ 662.511893][T23037] CPU: 0 UID: 0 PID: 23037 Comm: syz.3.4492 Not tainted syzkaller #0 PREEMPT(full) [ 662.511934][T23037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.511947][T23037] Call Trace: [ 662.511955][T23037] [ 662.511964][T23037] dump_stack_lvl+0xe8/0x150 [ 662.511997][T23037] should_fail_ex+0x412/0x560 [ 662.512093][T23037] should_failslab+0xa8/0x100 [ 662.512130][T23037] __kmalloc_cache_noprof+0x88/0x660 [ 662.512154][T23037] ? tipc_net+0x45/0x270 [ 662.512181][T23037] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 662.512214][T23037] tipc_topsrv_queue_evt+0xef/0x2d0 [ 662.512254][T23037] tipc_sub_report_overlap+0x4bd/0x8b0 [ 662.512306][T23037] tipc_nametbl_insert_publ+0xe5a/0x13d0 [ 662.512356][T23037] tipc_nametbl_publish+0xc7/0x1f0 [ 662.512384][T23037] tipc_sk_publish+0x17b/0x3c0 [ 662.512414][T23037] ? __pfx_tipc_sk_publish+0x10/0x10 [ 662.512437][T23037] ? tipc_nametbl_build_group+0x4c8/0x500 [ 662.512457][T23037] ? tipc_nametbl_build_group+0x2e/0x500 [ 662.512489][T23037] tipc_sk_join+0x3ab/0x6a0 [ 662.512515][T23037] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 662.512541][T23037] ? __pfx_tipc_sk_join+0x10/0x10 [ 662.512564][T23037] ? tipc_setsockopt+0x731/0x990 [ 662.512592][T23037] ? __local_bh_enable_ip+0xd0/0x130 [ 662.512622][T23037] tipc_setsockopt+0x73e/0x990 [ 662.512654][T23037] ? __pfx_tipc_setsockopt+0x10/0x10 [ 662.512680][T23037] ? __fget_files+0x2a/0x420 [ 662.512707][T23037] ? aa_sock_opt_perm+0xff/0x1a0 [ 662.512738][T23037] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 662.512830][T23037] ? __pfx_tipc_setsockopt+0x10/0x10 [ 662.512859][T23037] do_sock_setsockopt+0x17c/0x1b0 [ 662.512898][T23037] __x64_sys_setsockopt+0x13d/0x1b0 [ 662.512937][T23037] do_syscall_64+0x14d/0xf80 [ 662.512966][T23037] ? trace_irq_disable+0x3b/0x150 [ 662.512995][T23037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.513016][T23037] ? clear_bhb_loop+0x40/0x90 [ 662.513043][T23037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.513066][T23037] RIP: 0033:0x7f0854b9c799 [ 662.513089][T23037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.513119][T23037] RSP: 002b:00007f0855aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.513143][T23037] RAX: ffffffffffffffda RBX: 00007f0854e15fa0 RCX: 00007f0854b9c799 [ 662.513158][T23037] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 662.513171][T23037] RBP: 00007f0855aca090 R08: 0000000000000010 R09: 0000000000000000 [ 662.513185][T23037] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 662.513198][T23037] R13: 00007f0854e16038 R14: 00007f0854e15fa0 R15: 00007ffce3e2d7f8 [ 662.513237][T23037] [ 662.788525][T23017] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.803928][T23017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 662.813916][T23017] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 663.020805][T23017] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.031004][T23017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 663.041002][T23017] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 663.070694][T23057] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 663.092380][T23057] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 663.100594][T23057] __nla_validate_parse: 4 callbacks suppressed [ 663.100614][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 663.118107][T23057] netlink: 'syz.2.4496': attribute type 1 has an invalid length. [ 663.126331][T23057] netlink: 'syz.2.4496': attribute type 2 has an invalid length. [ 663.136484][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 663.248964][ T6269] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.257733][ T6269] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 663.266124][ T6269] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.368166][ T6269] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.377258][ T6269] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 663.408278][ T6269] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.444377][ T6269] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.458987][ T6269] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 663.467821][ T6269] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.489005][ T6938] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.498335][ T6938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 663.525102][ T6938] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 663.705651][T23086] FAULT_INJECTION: forcing a failure. [ 663.705651][T23086] name failslab, interval 1, probability 0, space 0, times 0 [ 663.718764][T23086] CPU: 1 UID: 0 PID: 23086 Comm: syz.3.4505 Not tainted syzkaller #0 PREEMPT(full) [ 663.718792][T23086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.718805][T23086] Call Trace: [ 663.718814][T23086] [ 663.718823][T23086] dump_stack_lvl+0xe8/0x150 [ 663.718859][T23086] should_fail_ex+0x412/0x560 [ 663.718892][T23086] should_failslab+0xa8/0x100 [ 663.718920][T23086] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 663.718944][T23086] ? __alloc_skb+0x1d0/0x7d0 [ 663.718988][T23086] __alloc_skb+0x1d0/0x7d0 [ 663.719023][T23086] tipc_buf_acquire+0x2b/0xe0 [ 663.719051][T23086] tipc_named_publish+0x278/0x740 [ 663.719087][T23086] tipc_nametbl_publish+0xfb/0x1f0 [ 663.719116][T23086] tipc_sk_publish+0x17b/0x3c0 [ 663.719147][T23086] ? __pfx_tipc_sk_publish+0x10/0x10 [ 663.719170][T23086] ? tipc_nametbl_build_group+0x4c8/0x500 [ 663.719189][T23086] ? tipc_nametbl_build_group+0x2e/0x500 [ 663.719220][T23086] tipc_sk_join+0x3ab/0x6a0 [ 663.719246][T23086] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 663.719272][T23086] ? __pfx_tipc_sk_join+0x10/0x10 [ 663.719296][T23086] ? tipc_setsockopt+0x731/0x990 [ 663.719323][T23086] ? __local_bh_enable_ip+0xd0/0x130 [ 663.719355][T23086] tipc_setsockopt+0x73e/0x990 [ 663.719388][T23086] ? __pfx_tipc_setsockopt+0x10/0x10 [ 663.719413][T23086] ? __fget_files+0x2a/0x420 [ 663.719441][T23086] ? aa_sock_opt_perm+0xff/0x1a0 [ 663.719471][T23086] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 663.719494][T23086] ? __pfx_tipc_setsockopt+0x10/0x10 [ 663.719522][T23086] do_sock_setsockopt+0x17c/0x1b0 [ 663.719558][T23086] __x64_sys_setsockopt+0x13d/0x1b0 [ 663.719596][T23086] do_syscall_64+0x14d/0xf80 [ 663.719624][T23086] ? trace_irq_disable+0x3b/0x150 [ 663.719652][T23086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.719674][T23086] ? clear_bhb_loop+0x40/0x90 [ 663.719700][T23086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.719719][T23086] RIP: 0033:0x7f0854b9c799 [ 663.719739][T23086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.719757][T23086] RSP: 002b:00007f0855aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 663.719780][T23086] RAX: ffffffffffffffda RBX: 00007f0854e15fa0 RCX: 00007f0854b9c799 [ 663.719795][T23086] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 663.719807][T23086] RBP: 00007f0855aca090 R08: 0000000000000010 R09: 0000000000000000 [ 663.719820][T23086] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 663.719833][T23086] R13: 00007f0854e16038 R14: 00007f0854e15fa0 R15: 00007ffce3e2d7f8 [ 663.719868][T23086] [ 663.719878][T23086] tipc: Publication distribution failure [ 664.789451][T23119] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4513'. [ 664.817438][T23122] netlink: 'syz.1.4514': attribute type 7 has an invalid length. [ 664.828419][T23122] netlink: 'syz.1.4514': attribute type 8 has an invalid length. [ 664.837652][T23122] netlink: 'syz.1.4514': attribute type 9 has an invalid length. [ 664.945908][T23129] netlink: 'syz.1.4518': attribute type 10 has an invalid length. [ 665.035612][T23137] tipc: Publication distribution failure [ 665.215378][T23148] syzkaller0: entered promiscuous mode [ 665.220971][T23148] syzkaller0: entered allmulticast mode [ 666.895538][T23099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.107713][T23160] sock: sock_timestamping_bind_phc: sock not bind to device [ 667.559685][T23182] FAULT_INJECTION: forcing a failure. [ 667.559685][T23182] name failslab, interval 1, probability 0, space 0, times 0 [ 667.601890][T23182] CPU: 0 UID: 0 PID: 23182 Comm: syz.2.4532 Not tainted syzkaller #0 PREEMPT(full) [ 667.601924][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.601937][T23182] Call Trace: [ 667.601945][T23182] [ 667.601954][T23182] dump_stack_lvl+0xe8/0x150 [ 667.601990][T23182] should_fail_ex+0x412/0x560 [ 667.602025][T23182] should_failslab+0xa8/0x100 [ 667.602054][T23182] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 667.602080][T23182] ? __alloc_skb+0x1d0/0x7d0 [ 667.602114][T23182] __alloc_skb+0x1d0/0x7d0 [ 667.602149][T23182] tipc_msg_create+0x51/0x4d0 [ 667.602185][T23182] tipc_group_proto_xmit+0xce/0x790 [ 667.602228][T23182] tipc_group_join+0x160/0x700 [ 667.602257][T23182] ? tipc_nametbl_publish+0x13a/0x1f0 [ 667.602282][T23182] ? __pfx_tipc_group_join+0x10/0x10 [ 667.602307][T23182] ? tipc_sk_publish+0x1dc/0x3c0 [ 667.602336][T23182] ? tipc_nametbl_build_group+0x4c8/0x500 [ 667.602354][T23182] ? tipc_nametbl_build_group+0x2e/0x500 [ 667.602383][T23182] tipc_sk_join+0x478/0x6a0 [ 667.602410][T23182] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 667.602435][T23182] ? __pfx_tipc_sk_join+0x10/0x10 [ 667.602459][T23182] ? tipc_setsockopt+0x731/0x990 [ 667.602486][T23182] ? __local_bh_enable_ip+0xd0/0x130 [ 667.602517][T23182] tipc_setsockopt+0x73e/0x990 [ 667.602549][T23182] ? __pfx_tipc_setsockopt+0x10/0x10 [ 667.602573][T23182] ? __fget_files+0x2a/0x420 [ 667.602600][T23182] ? aa_sock_opt_perm+0xff/0x1a0 [ 667.602631][T23182] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 667.602652][T23182] ? __pfx_tipc_setsockopt+0x10/0x10 [ 667.602675][T23182] do_sock_setsockopt+0x17c/0x1b0 [ 667.602710][T23182] __x64_sys_setsockopt+0x13d/0x1b0 [ 667.602744][T23182] do_syscall_64+0x14d/0xf80 [ 667.602770][T23182] ? trace_irq_disable+0x3b/0x150 [ 667.602795][T23182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.602812][T23182] ? clear_bhb_loop+0x40/0x90 [ 667.602834][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.602859][T23182] RIP: 0033:0x7f890679c799 [ 667.602880][T23182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.602896][T23182] RSP: 002b:00007f89076fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 667.602917][T23182] RAX: ffffffffffffffda RBX: 00007f8906a15fa0 RCX: 00007f890679c799 [ 667.602931][T23182] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 667.602943][T23182] RBP: 00007f89076fc090 R08: 0000000000000010 R09: 0000000000000000 [ 667.602954][T23182] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 667.602965][T23182] R13: 00007f8906a16038 R14: 00007f8906a15fa0 R15: 00007ffc4a2b0208 [ 667.602995][T23182] [ 668.157781][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 668.203414][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 668.938968][T23240] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4547'. [ 669.700865][T23259] [ 669.703346][T23259] ====================================================== [ 669.710403][T23259] WARNING: possible circular locking dependency detected [ 669.717453][T23259] syzkaller #0 Not tainted [ 669.721933][T23259] ------------------------------------------------------ [ 669.729068][T23259] syz.2.4551/23259 is trying to acquire lock: [ 669.735248][T23259] ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 669.744826][T23259] [ 669.744826][T23259] but task is already holding lock: [ 669.752189][T23259] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 669.761884][T23259] [ 669.761884][T23259] which lock already depends on the new lock. [ 669.761884][T23259] [ 669.772484][T23259] [ 669.772484][T23259] the existing dependency chain (in reverse order) is: [ 669.781685][T23259] [ 669.781685][T23259] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 669.789623][T23259] _raw_spin_lock_bh+0x36/0x50 [ 669.795173][T23259] nr_rt_ioctl+0x40c/0xf90 [ 669.800149][T23259] sock_do_ioctl+0x101/0x320 [ 669.805819][T23259] sock_ioctl+0x5c6/0x7f0 [ 669.810754][T23259] __se_sys_ioctl+0xfc/0x170 [ 669.815933][T23259] do_syscall_64+0x14d/0xf80 [ 669.821067][T23259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.827488][T23259] [ 669.827488][T23259] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 669.835773][T23259] _raw_spin_lock_bh+0x36/0x50 [ 669.841090][T23259] nr_rt_ioctl+0x215/0xf90 [ 669.846061][T23259] sock_do_ioctl+0x101/0x320 [ 669.851284][T23259] sock_ioctl+0x5c6/0x7f0 [ 669.856274][T23259] __se_sys_ioctl+0xfc/0x170 [ 669.861433][T23259] do_syscall_64+0x14d/0xf80 [ 669.866845][T23259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.873279][T23259] [ 669.873279][T23259] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 669.881119][T23259] __lock_acquire+0x15a5/0x2cf0 [ 669.886516][T23259] lock_acquire+0xf0/0x2e0 [ 669.891474][T23259] _raw_spin_lock_bh+0x36/0x50 [ 669.896778][T23259] nr_rt_device_down+0xbe/0x860 [ 669.902344][T23259] nr_device_event+0x137/0x150 [ 669.907648][T23259] notifier_call_chain+0x1be/0x400 [ 669.913294][T23259] netif_close_many+0x2ae/0x420 [ 669.918675][T23259] netif_close+0x160/0x220 [ 669.923627][T23259] dev_close+0x10a/0x220 [ 669.928495][T23259] bpq_device_event+0x377/0x6a0 [ 669.933873][T23259] notifier_call_chain+0x1be/0x400 [ 669.939523][T23259] __dev_notify_flags+0x16d/0x310 [ 669.945075][T23259] netif_change_flags+0xe8/0x1a0 [ 669.950638][T23259] dev_change_flags+0x130/0x260 [ 669.956104][T23259] dev_ioctl+0x7b4/0x1150 [ 669.961063][T23259] sock_do_ioctl+0x23e/0x320 [ 669.966202][T23259] sock_ioctl+0x5c6/0x7f0 [ 669.971071][T23259] __se_sys_ioctl+0xfc/0x170 [ 669.976273][T23259] do_syscall_64+0x14d/0xf80 [ 669.981388][T23259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.987800][T23259] [ 669.987800][T23259] other info that might help us debug this: [ 669.987800][T23259] [ 669.998027][T23259] Chain exists of: [ 669.998027][T23259] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 669.998027][T23259] [ 670.012110][T23259] Possible unsafe locking scenario: [ 670.012110][T23259] [ 670.019644][T23259] CPU0 CPU1 [ 670.025035][T23259] ---- ---- [ 670.030400][T23259] lock(nr_neigh_list_lock); [ 670.035094][T23259] lock(&nr_node->node_lock); [ 670.042392][T23259] lock(nr_neigh_list_lock); [ 670.049598][T23259] lock(nr_node_list_lock); [ 670.054187][T23259] [ 670.054187][T23259] *** DEADLOCK *** [ 670.054187][T23259] [ 670.062446][T23259] 2 locks held by syz.2.4551/23259: [ 670.067642][T23259] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 670.076456][T23259] #1: ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 670.086485][T23259] [ 670.086485][T23259] stack backtrace: [ 670.092387][T23259] CPU: 0 UID: 0 PID: 23259 Comm: syz.2.4551 Not tainted syzkaller #0 PREEMPT(full) [ 670.092407][T23259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.092417][T23259] Call Trace: [ 670.092426][T23259] [ 670.092434][T23259] dump_stack_lvl+0xe8/0x150 [ 670.092460][T23259] print_circular_bug+0x2e1/0x300 [ 670.092486][T23259] check_noncircular+0x12e/0x150 [ 670.092511][T23259] __lock_acquire+0x15a5/0x2cf0 [ 670.092535][T23259] ? __lock_acquire+0x6b5/0x2cf0 [ 670.092559][T23259] lock_acquire+0xf0/0x2e0 [ 670.092578][T23259] ? nr_rt_device_down+0xbe/0x860 [ 670.092603][T23259] ? nr_rt_device_down+0xbe/0x860 [ 670.092622][T23259] _raw_spin_lock_bh+0x36/0x50 [ 670.092642][T23259] ? nr_rt_device_down+0xbe/0x860 [ 670.092664][T23259] nr_rt_device_down+0xbe/0x860 [ 670.092684][T23259] ? nr_device_event+0x12f/0x150 [ 670.092707][T23259] nr_device_event+0x137/0x150 [ 670.092726][T23259] notifier_call_chain+0x1be/0x400 [ 670.092752][T23259] netif_close_many+0x2ae/0x420 [ 670.092773][T23259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 670.092795][T23259] ? __pfx_netif_close_many+0x10/0x10 [ 670.092815][T23259] ? bond_netdev_event+0x231/0xfa0 [ 670.092837][T23259] ? __neigh_ifdown+0x7fd/0x8c0 [ 670.092857][T23259] netif_close+0x160/0x220 [ 670.092875][T23259] ? __pfx_netif_close+0x10/0x10 [ 670.092894][T23259] ? __asan_memset+0x22/0x50 [ 670.092908][T23259] ? macvtap_device_event+0xd1/0x400 [ 670.092927][T23259] dev_close+0x10a/0x220 [ 670.092959][T23259] bpq_device_event+0x377/0x6a0 [ 670.092978][T23259] notifier_call_chain+0x1be/0x400 [ 670.093004][T23259] __dev_notify_flags+0x16d/0x310 [ 670.093029][T23259] ? __pfx___dev_notify_flags+0x10/0x10 [ 670.093051][T23259] ? __dev_change_flags+0x4c6/0x690 [ 670.093076][T23259] ? __pfx___dev_change_flags+0x10/0x10 [ 670.093099][T23259] ? full_name_hash+0x92/0xe0 [ 670.093122][T23259] netif_change_flags+0xe8/0x1a0 [ 670.093146][T23259] dev_change_flags+0x130/0x260 [ 670.093170][T23259] dev_ioctl+0x7b4/0x1150 [ 670.093191][T23259] sock_do_ioctl+0x23e/0x320 [ 670.093210][T23259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 670.093228][T23259] ? freezing_slow_path+0x115/0x160 [ 670.093250][T23259] sock_ioctl+0x5c6/0x7f0 [ 670.093268][T23259] ? __pfx_sock_ioctl+0x10/0x10 [ 670.093285][T23259] ? __fget_files+0x2a/0x420 [ 670.093308][T23259] ? __fget_files+0x3a0/0x420 [ 670.093329][T23259] ? __fget_files+0x2a/0x420 [ 670.093352][T23259] ? bpf_lsm_file_ioctl+0x9/0x20 [ 670.093372][T23259] ? __pfx_sock_ioctl+0x10/0x10 [ 670.093389][T23259] __se_sys_ioctl+0xfc/0x170 [ 670.093407][T23259] do_syscall_64+0x14d/0xf80 [ 670.093430][T23259] ? trace_irq_disable+0x3b/0x150 [ 670.093453][T23259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.093469][T23259] ? clear_bhb_loop+0x40/0x90 [ 670.093487][T23259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.093503][T23259] RIP: 0033:0x7f890679c799 [ 670.093520][T23259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.093535][T23259] RSP: 002b:00007f89076ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.093553][T23259] RAX: ffffffffffffffda RBX: 00007f8906a16180 RCX: 00007f890679c799 [ 670.093566][T23259] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000005 [ 670.093576][T23259] RBP: 00007f8906832c99 R08: 0000000000000000 R09: 0000000000000000 [ 670.093587][T23259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.093596][T23259] R13: 00007f8906a16218 R14: 00007f8906a16180 R15: 00007ffc4a2b0208 [ 670.093614][T23259] [ 675.030495][ T7078] lec:lec_start_xmit: lec0:No lecd attached