last executing test programs: 17m39.640865073s ago: executing program 2 (id=6179): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@polexpire={0xc8, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfc, {{{@in=@private=0xa010102, @in6=@empty, 0x4e20, 0x3, 0x4e21, 0xf1, 0x2, 0x0, 0x0, 0x3a, 0x0, r2}, {0x4, 0xe106, 0x9, 0x4, 0x1, 0x8001, 0x5, 0x9}, {0xca, 0x5d, 0x800, 0x3}, 0x8001, 0x6e6bb2, 0x0, 0x1, 0x0, 0x3}, 0x8}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x2000c0d1) 17m39.490391154s ago: executing program 2 (id=6183): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000003c0)='\'%{#-[/-%\x00', 0x88002, &(0x7f0000000400)={@align=0x6, {0xea4b, 0x9, 0x4, 0x4}}, 0x800, &(0x7f0000000440), &(0x7f0000000480)=0xc}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=""/95, &(0x7f0000000340)=0x5f) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000240)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000012c0)=ANY=[@ANYRES16=r2, @ANYBLOB="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", @ANYRES8=r6, @ANYRES16=r3, @ANYRES16=r6], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x58, &(0x7f0000000580)}, 0x10) ioctl$int_in(r9, 0x5452, &(0x7f0000000180)=0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x24, 0x0, &(0x7f0000000000)) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f0000000280)={r5, 0x0, 0x8, 0x3, 0x5, 0x4}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbbf, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x20048410) 17m39.140572178s ago: executing program 2 (id=6191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x49}, 0x94) 17m39.051929501s ago: executing program 2 (id=6193): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 17m38.907577085s ago: executing program 2 (id=6198): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r7, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) 17m38.528157048s ago: executing program 2 (id=6202): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 17m22.991943891s ago: executing program 32 (id=6202): openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) 14m6.18996915s ago: executing program 4 (id=7761): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000085a00006b800e99149c0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14m4.192398341s ago: executing program 4 (id=7769): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000010c0)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x3872}, 0x4, 0x4, 0xc, 0x6265, 0x18, 'syz0\x00', "d3abe976d808a0c5a2b791304211ebc9007662b5b38c4230bfa7af54c9583061", "e00b4865f123ca39b476531ab2171d32083e07798657fc6143b89af4cd0c489d", [{0x1, 0x10, {0x1, 0x80000001}}, {0x6, 0x0, {0x0, 0x8}}, {0x3304, 0x0, {0x0, 0xd}}, {0x9, 0x80, {0x3, 0x2}}, {0x2, 0x0, {0x3, 0x6}}, {0xc, 0x76, {0x1, 0x7}}, {0x2, 0xd, {0x1, 0x6}}, {0x40, 0x7fff, {0x0, 0x83}}, {0x101, 0x100, {0x0, 0x6}}, {0xffff, 0x7, {0x0, 0xb2}}, {0x8001, 0x7, {0x3, 0x2}}, {0x9, 0x8, {0x0, 0xfffffffe}}, {0x7f, 0x9a8, {0x1, 0x2}}, {0x4, 0x9, {0x3, 0x7}}, {0xb5b0, 0x3, {0x3, 0x7}}, {0x0, 0x400, {0x3, 0x9}}, {0x8, 0x8, {0x1, 0xfffffff7}}, {0x74c, 0x3d, {0x1, 0xcf2}}, {0x5, 0x5, {0x1, 0x9}}, {0x6, 0x9, {0x3, 0xe476d8d}}, {0x8000, 0xfff9, {0x3, 0x5}}, {0xc, 0x9, {0x2, 0x40000}}, {0x8, 0xff16, {0x2, 0x1}}, {0x0, 0x0, {0x2, 0x5}}, {0x2, 0x7, {0x0, 0xa}}, {0xa, 0x1000, {0x2, 0x6}}, {0x3, 0x7, {0x1, 0x9}}, {0xb, 0x1, {0x3, 0x6ef6}}, {0x6, 0x3, {0x3, 0x2}}, {0xc, 0x8, {0x1, 0x800}}, {0x7fff, 0xe5, {0x1, 0xd}}, {0x2000, 0x4, {0x1, 0x4}}, {0x3, 0x7, {0x2, 0x1}}, {0x7, 0xc, {0x1}}, {0x0, 0x2, {0x1}}, {0x6, 0x63c2, {0x1, 0x400}}, {0x5, 0xac6, {0x0, 0x3ff}}, {0x6, 0x3800, {0x72e9fbff1a4ef6c3}}, {0x0, 0xffff, {0x3, 0x9}}, {0x7, 0xf, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x1, 0xd, 0x7, 0xfff9, 0x28, 'syz0\x00', "dc46805edc1e829982d45a5c2e4b058b936f2c0c1ce45d17751913cc6a2a6509", "21e25261a939679cc8087af150bb739dfeec98b314347b10765cb29b32b5e02a", [{0x7f, 0x800, {0x0, 0x4}}, {0x1, 0x5, {0x2, 0x80}}, {0x7, 0xf, {0x2, 0x11}}, {0x4000, 0x7, {0x1}}, {0x4, 0x0, {0x0, 0x3}}, {0x55b, 0x29, {0x0, 0x80000000}}, {0x9, 0x3, {0x3, 0xfffffffa}}, {0x7, 0x8, {0x3, 0x5}}, {0x2, 0x6, {0x0, 0x8}}, {0x6, 0x0, {0x0, 0x1}}, {0x7, 0xb779, {0x3}}, {0x8001, 0x9, {0x2, 0xff}}, {0x0, 0x1, {0x0, 0x10001}}, {0xea5b, 0x6, {0x2}}, {0xfff, 0x6, {0x1, 0xb515f71}}, {0xb, 0x30, {0x1, 0x34}}, {0x5, 0xf0df, {0x0, 0x9}}, {0x2, 0x5475, {0x3, 0x7f}}, {0x8, 0x100, {0x1, 0x8}}, {0x0, 0xf4, {0x2, 0x3}}, {0x6, 0x9, {0x1, 0x5}}, {0x8, 0x4, {0x1, 0x9}}, {0x6, 0x7fff, {0x1, 0x8}}, {0x4, 0xb514, {0x3, 0x1ff}}, {0x7, 0x5, {0x1, 0x80000001}}, {0xffff, 0x4, {0x0, 0x2}}, {0x3, 0x7, {0x3, 0x8}}, {0x9, 0x7fff, {0x3, 0x1b}}, {0x6, 0x400, {0x2, 0x8}}, {0x97, 0x7, {0x2, 0x1}}, {0x6, 0xfe, {0x3, 0x9}}, {0xff, 0x5, {0x0, 0xa}}, {0xff, 0x80, {0x1, 0x6}}, {0x2, 0x9, {0x1b91269a37833301, 0x19}}, {0x7b5f, 0x2, {0x3, 0xfff}}, {0x0, 0x918, {0x3, 0x7}}, {0xfffd, 0x0, {0x0, 0x5}}, {0x8000, 0x5, {0x1, 0x4}}, {0x4, 0x9, {0x1, 0x1ff}}, {0x0, 0x2, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x4, 0x3, 0xfff, 0x8, 0xa, 'syz0\x00', "734d8d395268c7199b47d72e5539f39bae5ecbab7ebc2a010bd7ccec2c1439e4", "7831a729fda171ceaf309569b9269d945b269ce949a2e179a8d4b0a2a20ae87f", [{0x4, 0x9, {0x3, 0x63f}}, {0x2, 0xb, {0x2, 0x2a4}}, {0x9, 0x4, {0x1, 0x9}}, {0x2, 0x6, {0x1, 0x2}}, {0xb0c, 0x7, {0x0, 0x7}}, {0x8001, 0xfffe, {0x3}}, {0x8, 0xd69d, {0x2, 0x101}}, {0x3, 0x9, {0x0, 0x4}}, {0x4043, 0x3, {0x0, 0x6}}, {0x4, 0xfff, {0x2, 0x8}}, {0xc, 0x9, {0x0, 0x1}}, {0x5, 0x4, {0x2, 0x40}}, {0x5f70, 0x0, {0x2, 0x2}}, {0x7, 0x8, {0x0, 0x1}}, {0xfb, 0x2, {0x3}}, {0x5, 0x51e9, {0x2, 0x3}}, {0x0, 0xe000, {0x3, 0x5}}, {0x6, 0xfc01, {0x1, 0xc63}}, {0xffff, 0xffff, {0x2, 0x1000}}, {0x8, 0x9, {0x2, 0xb2d1}}, {0x3, 0xe, {0x1, 0x78bc}}, {0x1b73, 0x5, {0x1, 0x3}}, {0x1, 0x8, {0x1, 0x716}}, {0x3ff, 0x7f, {0x3, 0x8}}, {0x6, 0x8001, {0x3, 0x8}}, {0x3, 0xfff9, {0x3, 0x10}}, {0x7, 0x5, {0x0, 0xffffffff}}, {0x8, 0x84c3, {0x0, 0x1}}, {0x4, 0x4, {0x2, 0x6}}, {0x7, 0x5, {0x3, 0x6}}, {0x8, 0x0, {0x0, 0x5}}, {0x1, 0xf1f, {0x0, 0x2}}, {0x7, 0x49, {0x1, 0x7}}, {0x4, 0x0, {0x2, 0x80000001}}, {0x0, 0x7, {0x3, 0x8}}, {0x1, 0x5, {0x3, 0x5}}, {0x1, 0x93, {0x0, 0xf9a6f12}}, {0x2e, 0x0, {0x1, 0x8}}, {0x4c, 0x6, {0x0, 0x1ff}}, {0xe, 0x96c, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1}, 0x2, 0xdb, 0x6, 0x40, 0x28, 'syz0\x00', "dd1cf3f46db65b23b7daf050c1e11e6dfc7b482ec57b6652ca23a3bd525edb0c", "e1cecd7c21e41372105b98dda13bfaafc4570a85d0c9d09c8d497fbd2cd8bbe3", [{0x3, 0x910, {0x1, 0x7}}, {0x2, 0x0, {0x0, 0x5}}, {0x3, 0x80, {0x0, 0x4}}, {0x5, 0x100, {0x2, 0x2}}, {0x8, 0x3, {0x0, 0xd}}, {0x8001, 0x2, {0x0, 0xb}}, {0x401, 0x6, {0x3, 0x8}}, {0x3, 0x5, {0x0, 0x8}}, {0x78, 0x8, {0x2, 0x100000}}, {0xee81, 0x5, {0x1, 0x2}}, {0x4, 0x3, {0x1, 0x7}}, {0x401, 0x0, {0x1, 0x3}}, {0x4, 0x0, {0x3, 0xfffffff7}}, {0x0, 0xffff, {0x3, 0x1}}, {0x1, 0x10, {0x2, 0xfa0}}, {0xf801, 0x3, {0x0, 0x5}}, {0x6, 0x3, {0x0, 0x6afb}}, {0x8, 0x1, {0x0, 0x6}}, {0x200, 0x5, {0x0, 0xff}}, {0x32fc, 0x3a0, {0x1, 0xc}}, {0x7f, 0xfc, {0x3, 0x8}}, {0x40, 0xf, {0x3, 0x81}}, {0x2, 0x7, {0x3}}, {0x8, 0x1}, {0x80, 0x1, {0x3, 0x6}}, {0x63bd, 0x7, {0x3, 0x3}}, {0xb, 0xf0, {0x0, 0x3}}, {0x2, 0xb407, {0x1, 0x3}}, {0xcd, 0x7ff, {0x0, 0xc}}, {0x973, 0x5, {0x1, 0x95cb}}, {0x1976, 0xc, {0x2}}, {0xfffd, 0x9, {0x0, 0x3}}, {0x9, 0x1ff, {0x0, 0x7}}, {0xff3a, 0x4607, {0x3, 0x7fff}}, {0x9, 0x5, {0x0, 0x8001}}, {0x4, 0xa31d, {0x0, 0x5}}, {0xc7, 0x5, {0x2, 0xfffffb12}}, {0x8, 0x2, {0x3, 0x1}}, {0x93, 0x3, {0x0, 0x6}}, {0xc, 0xa5d0, {0x1, 0x7fffffff}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x4, 0x70bd2a, 0x3a000000, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0) 14m3.141524648s ago: executing program 4 (id=7776): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64, 0x0, 0xfe, 0x40000}, {0x6}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x10, 0x4) 14m3.076797058s ago: executing program 4 (id=7777): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb, 0xfff5}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000085a00006b800e99149c0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14m0.718387155s ago: executing program 4 (id=7794): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002ccae45720000ff020000000000000000000000000001"], 0x18) (async, rerun: 32) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000240001040000000000000100000000000000008100000037eb141b27"], 0x1c}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 64) r9 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r10 = accept4(r9, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000) recvmmsg(r10, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) r11 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000f006d8b268a91227e400085000000cd0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) 13m59.477342628s ago: executing program 4 (id=7801): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 13m44.459946982s ago: executing program 33 (id=7801): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 8.624823421s ago: executing program 6 (id=15383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) sendto$packet(r4, &(0x7f0000000140), 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 8.276086356s ago: executing program 6 (id=15390): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf2525000000"], 0x14}}, 0x24004804) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x36}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 3.956362685s ago: executing program 0 (id=15446): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwrite64(r7, &(0x7f0000000080)="019aec9f289b939943d6449dca11fc0e192919918bd382292982e0eadb6459ebf3082fb438ecb40c907aac843c08dea3", 0x30, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r10}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000091}, 0x20008001) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 3.541727588s ago: executing program 1 (id=15451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="852000000200000018000000060000000000000040000000b7080000000000007b8af8ff00000000b708000067ef00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5001500185600040e00000000000032def8fe00"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x96, &(0x7f0000000200)=""/150, 0xc0f00, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x6, 0xffff0000, 0xf5}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x5, 0x4, 0x7}, {0x5, 0x5, 0xd, 0x1}, {0x1, 0x1, 0xa, 0x9}, {0x3, 0x5, 0x5, 0xc}], 0x10, 0x10000}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000140), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x10, 0x0, 0x8, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x10004080) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex=r5, r2, 0x19, 0x10, 0x0, @void, @value=r0, @void, @void, r4}, 0x20) 3.540799675s ago: executing program 0 (id=15452): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r4, 0x601, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x6, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "422d0800d2a6e4b05098a335656d780fe64dfde5ab"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2008005}, 0x4080) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "422d0800d2a6e4b05098a335656d780fe64dfde5ab"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2008005}, 0x4080) 3.307015417s ago: executing program 1 (id=15453): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000980)=0x6, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0xfffffffffffffea4}}, @mark={0xc}]}, 0x68}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000980)=0x6, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0xfffffffffffffea4}}, @mark={0xc}]}, 0x68}}, 0x0) (async) 3.229029141s ago: executing program 1 (id=15454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r1, {0xc, 0xfff1}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000001) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) 3.145196009s ago: executing program 0 (id=15455): pipe(&(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)=""/233, 0x32, 0xe9, 0x1}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl(r1, 0x2, &(0x7f0000001a80)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2000001}, 0x4}}, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x60}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) 3.144339422s ago: executing program 5 (id=15456): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x2) r5 = accept(r4, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xa809}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x40}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x3c, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_WME={0x4}]}, 0x3c}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2.76012441s ago: executing program 0 (id=15457): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.215698456s ago: executing program 5 (id=15458): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10005, 0xfffffffe}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"a3ab69b78d1ea208b020fec2dde2febc", r1, 0x0, {0x7, 0x7}, {0x47fa3fa3, 0xfffffff7}, 0x113, [0x5f1, 0x1, 0x9, 0x3, 0x8000, 0x0, 0x3, 0x4, 0x7, 0x3, 0x9, 0x4, 0x80, 0x7, 0x5, 0x7ffffffd]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x4048004) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000700)={{r0}, r2, 0x12, @unused=[0xa5f, 0x80, 0x6, 0x57b], @devid=r3}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 2.137083844s ago: executing program 5 (id=15459): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320ff6900140000007ef506be000000010000000088fb000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffff1f, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.96043882s ago: executing program 5 (id=15460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @initdev}, &(0x7f00000004c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000fc0)={0x24c, 0x0, 0x5073e80c639576bf, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40080}, 0x8480) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000", @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd1, &(0x7f00000006c0)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r9) socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r11, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004424000000000000000000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r10, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r13, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r10}, 0x20) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r15) sendmsg$ETHTOOL_MSG_DEBUG_SET(r15, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r14}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.853849362s ago: executing program 0 (id=15462): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000884}, 0x24008000) sendmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null, @bcast]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="157a3ed0af18df6d806513da35c83d99ad6d2f37fd41f3ab2e8d4ef01aaf315896a2a7a2571a342a05e6fb7798faf7effc6a609cad672ec7748155931c3f9f0b91766a27", 0x44}], 0x1, &(0x7f0000000600)=[{0xe8, 0x103, 0x0, "5cf631b877dbdac4c02a5167dc932006623488e5c3817da86a9464c976c4529c2044364461822beb96835833badd766014fb26b5f2e0962c3fc3867094d517b65d6d4cc4d6cbfcb3b8aa6e75118e1231b6a35ff9c290cae9596460f0c396bf7485efe3191cb33684586f2766b3fe1ace76b8f0a6d1897ee453253dd23e83554f9e05bf15d82d015b039af21788cda4b715925d791102e4f138d834c3f9837a830fc1599ee5f52ed635ee733ec12b4be22818214371b60382a42578df264fcad64073a54d8d95dcbe4b2f88b739a9f5dd269d"}, {0xc8, 0x10f, 0x80000001, "3f246d32d80ef2a00908e09a312b073aec928e276fad352e209a191c06a332859b4c0ccfdf95f4bf1e31b3c66b7f8e410a7f927e0c28c1c4619b30f91833b5aa54bde613dae1a1991615b0988af25f792c7cdf034afc2e1f94e58eed425b0913ec450b65e1540a94d08850485cdb78f2eeea049b9c14e9237b7d0604287e15955a794ade4948b2d9547f5c467fb0db306ad92baea5dbe7b5fed95c3e43e08eafc2d67e8d738010a917c7235e59fbb46672730ad0100e02"}, {0x70, 0x104, 0x8, "f61f502363be7af1094d4af4cc6559f5d5db3145528f332a3fe0d3c8411d5721dbd2d1df9c68d604a364191e96f961ad0edabdda8746c35a94205ac83a0ce295817b40310906b6b53510da3c7f0ea6ca27dcd5583921d514eaf0"}], 0x220}}, {{&(0x7f0000000840)=@vsock, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000980)="623be87b7814d2779a158add7ef875614083458efc33bc28ef77aeca7b4d1c6df3efe92014c7650d41f664896af515cc9ffc10283185ea4e7697dc7bb1b22bf693153a210a82fb15a463af338983c867f7", 0x51}], 0x1, &(0x7f0000000a40)=[{0x28, 0x1, 0x1, "efc3e83ba7586b0412369cbcadd3c40dca2f82bf"}], 0x28}}, {{&(0x7f0000000a80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)="075d13a1955db471fdbe050fd7d1a4426660a7d5568aaaceeed0cb1ccfe05694e7d9ff60effe6fd426960c0c119a7f4ae5f488644b6eae3bb86325cd7bc5bf4b6205c5b883af07397c4038259793c378b126e6bb58c8a2eb5c194fb14c139ad3b3b5481e5e2f13715007b19aab13d8b9420beba7ed0e449d36038829d9e835743d2f4fab49d963f39e9502d625397ba4014c29d40761605b9e639c4ddb89302a0c8d51208cb2cd4535ddb2051614cf319ffd469e771c1643097ea432ae293c985d961fd47f96425438c0d6e104be4c29e7e04b90ad3141c53d089661b1328ec87d43e698ab51155257955a7458c8ed5f15d950", 0xf3}, {&(0x7f0000000c40)="bf8c21ae66f383d088b465a6e04532589eb36e6fa1a9ab8e685d2126f1f92f829f107b11ab4a1b3db3f94dfa312f269ee68547e0be", 0x35}, {&(0x7f0000000c80)="7d6b7e0b557c67f326eee9bcf18657f0e4c8fcbf4808c092ed5e16e8cdfef92a6a9b3318039f14c1f2e8c72b020fa4240743885a3daedfb6229da0c38cc2bc1c24a8d65fec9d1fbd431b6b2b62a8b9fc363c78bdfdf5f5380210038ff95e050b2e870371598f8b1da1a511", 0x6b}, {&(0x7f0000000d00)="a9f618180cd851cd392080f7540010aa289863b771d0e7e641e67b0851187333805645d83855b27cae51589551af49cc0e838276b932ab09c43373ac0a2cbdf73a654ee24f3843877828a95597b4a3acec8eb1873dde836ade394d490f7f84d12222443b7c82cc3f49394987f12eef5d580d3b7dca3146dd555b89249ebde53886273f1a8917ba0733518d220b90b50ef94ec636c1b4f2bbdaf9673ad63ca6099758bf915a41f39124bf5f2b002058ae332ab4f2922c41081c81a1e3d344b5581c5a1d71f846b998fcc932f0a7cc3bdae149676da4303094388985106e", 0xdd}, {&(0x7f0000000e00)="a313b10b82d5bfdb9c8f916ab27838744239461b3101214863a373bb74295d7423c456918dc929dd3f93561ee5491b4d716d6ec93ef393a995db0cdc10a4b25dbec26c176dbaee45155557cb1003b21e46591088e423fda08af2ee8e", 0x5c}, {&(0x7f0000000e80)="23b543f8bfa509ddf5e2282712410c03e230b60a502f780c4ae8d98348b933027e351db8bd148fff0f1dab7e8326c1859ae6f154e339c320435b5f7c520696609e8795a59814ea05c57498afc1e4749feaf6d25026fbd4a868387516cb2aa2f267408816437aa84c9e0cef4cbecf30b0fed285b8d46aaba00cc6e44b80d96713dc7ebbdf1a9973717360bb34105274ed60e685b83f98ea40e91b9cdaae01521756189442b468d56057321f0fcdf12c2102c7207e2f16d75227cec27e7b26a3fe8f65270143da7a09e1da51018aa44127569e8e5f89a990683e", 0xd9}], 0x6, &(0x7f0000001000)=[{0x38, 0x111, 0x0, "7ca27260b879ada09d666f79e36b427659570e025970c3f773ab6c1b7c968845e118f2d8"}, {0x48, 0x29, 0x5, "ff99691284cd3808f7eaadd948ce17288046456b69d0d849cade2b1799d52a8dfc7540f598b4d09b99f405f12cca8c39ec"}, {0x80, 0x1, 0x0, "22090b5fcabff3caf9e844baeea26cda5045b49f5e3f5b2090e2cbae80cd4edff5f10f5422fd132bd75a395c3d5402d32016c0345737ebe9450f6b3caec9c56be9b939a94cdf51c7cfe9dfd2ce38ad738725a0415753f2733aa9bee63fb76011a5deca04695a903a519a59e60997"}, {0x88, 0x115, 0x2, "e62eee7e9b7f5131ba1919946f1b8226637c34d4ce599944b0bb0058d063296508d12222ea85c23909d9e655275510dafce6c8e71880f909822aeeed183635f39e94c3223b30e8eda56198c78a672a7c954c49771b7a065ca3857558c55bddd8fc68a2b28223445c1b48120c0abc2adc217845e17cfb"}, {0x1010, 0x103, 0x20, "64c4d34eb83b5f01b5afb0378ccac083428ea9da7217b21ac9b169a7b4d6f220fa85c7f2859c905a95e3186b8a44fa142a84e2834c83fcaeaf24e3220d30d656dd601dc2eee9c574fafaf7777b4748c26171d30f684c008f514e9352a4c55f7eabc4476d22a445d84b9b16ffbb2ae95174e988321ea199bb2244adb5f89d299d582917ba95083e125b1c8511172e5b31aec8e6af5bcfed9934b207e18fe2e1988d8749bcba7fc969fb9843104c4501e27f247401dcdbce4c8e4e2b88ac43f90cb3b9143a82c02a015a05c56a5d04b61c10e9c639c04d14a6a57342944904cd97d6edb943d1a4ea030f1fe92e9a7b0a7786ec9adbe3b6d4cc3f3789ad2f8a949b25e67ee36aa18059c6269c3b8b45e406105c377ebad3b8f68afb90c8296557c4766020e2b9a0fb7d16fab10210c65bbf58027cb1a05fe45e71bd645eb1f6adcbed744fc1ae631dd1d83d21596203c98b2679f912c8df158f0133e6364610fb3d9163c1357d8a550cef1c0d871c9dada3399967b34772e9fa78aada71204c0db400f4b6d7111492a9104542c0e1d0f862f9967d198db61eff47b35370fa5c3dc66e5d92ab1a44892743809159a85fccc16a5bbff62f41a46aab52ec358486eebfc9bedbd51281ba9850f7a8bbc2fddd53f2bd504af3dd47dbdbcb0f2de14432a49bac68176b7a672e3a158fc4baac81016ca54652888260ea5be0821293a24d2c9970725d15ec90bb22678c99872c705c823e6677ededcc6e46de5dd12e29daa8294b8d1f6c603551be1462ba45bfb2a03b92db263e5c2671d5db568edb0c2ffe72da26c10dbba7f76b7c7a8e3bd26ef3ac696f765e9ce6cd14bdba64e5f8502e4ffac7b24e28e1ca3eb16a730007943ecb3a3d334d30a41ebd58c3c25e0ebda829008cec4fd7cc7ede901565b61b603739e277025a0ec242cef4674ff1b826d5c217596c02522a18f93e2aceb8431f9f38416cfaf81bd4db75d7d2361e08de7785b2c9e29b751af005c152a7606ed862a951f0f976ac3ddcddfeada159eb9b367c0a78e65331f0a3f860dc265c3c75e16c815bc4e759149be042f61ea79c440e89b56100d252eb5b839ff1ce589585cc510e724f38e3381f094def39dd813824169778e93817ef26740b49bbd5e545ea92ef854d6d8107dac400a9abbf1257898ef4d6accb285f3690be0af009e584b5eb0cb50a78e288e72ef429a918cf6e94da2b4dda18def5acf4b0f845aacaff608b87798286061e6bc5cf7994d858cb0a9fec1cf7d449adba196e5bd489bace16aaa5b22c4b34353e3c42efc65b64e64dab88a3256677e09b80f04eca52ba434d4ebc2a224c18e22c4cdf7571deb481b002f977ea844d27c3f7835feed3ccac1711ed6610548470929ae03373f46d22d9566028020e09564d2220be8e71514e95ccf923059c713037564bd1d7839a03e43efe2d76097180581b729b9f7e735daf6948ac914277bc97ae6fd5765546544e8b2ce385d1f27b8916b209b137bbd42be267e16cc780f3caf184392aff0789e097fb07f0c8d4af42f053c464574014c32ed5475e2e2c13bb1612d19e9257121d265e69caf6089dab4ebb8eb0d5892cf0d340a33ac8e44d3c8b5182276f857228ac18a7e5e2bc57dc802889bf548bf9079d7a135b53faba83966ffc36e1b8b940f0d067c0e7f22ca0bab7d02a99ca5892b71bff02c14c45f5583a5533c2a3e99347166f784a2de321ddb752757872f24deb402dc41a296ce51cbb45befd9174d5189dd9b6e821034e23af45ea8e55a55cbbcd638311d14b25418970b046982711ac26652658c78a2976811a891ba3393c25abf92592dd4cf530eea8baa75cebe362322b47075d67c258011735e42ea9fea07c2659320ecf5988c453639dd3f151355a4d349db824eb2acdab966775e8f662f2bfee49dc6f9085e6726c009c4e9d788fd619b01a88975a07e02a331824632c98ada2ae2f27a7f83ef56c320eae43884c2adb52b70ac148d40c570cb470051731651567ea971cdc29d348d1ab1487fb7327de83b3304a41a15f061b656da44da6dadfa370da5b95e360e9f9075e32be04f617e0b7f939a55180fffdc104741bc198f67f6998a8f0574b2bce447d91390837010ec8e48654788fce78cca71f7bcac925eb1d5f40911276a14e75a351e55ff3c9fbf26ccc168f53c36b8ae576ced648b13e3af3d709ebf2f93d9c543c369d967e73baa143788fdd7c875373fcd0c8437fcc77ef01a28c740ca30707005ec97f3462895cf1794752c5b4ec68be4a595fe9a6cef07b37fba42f306b5927f58f68c85fc9358b022185f0e05d4bb8e6252119906cb136072f7d35718867af900f1e7e9429b93e5902f02d27063a90aa69b8f25c4581fb4681ff0c5f969507001e222ee9162c876fa18d2b89e56e425c42d1560b976e475c1340f25d2e839402b671d1e8411b28162394357326f83273613fbffb2ef3848a2879ef8570e9b08cc3a67bb2d64518d17a169fb6c74b1a0c4c638bfcc84b7bf550ae7187310d98efe28bb11817be1af7623c106ba6085a6de461b51540e7c5076bc31666541d2d8c3d4f93df225cd08e5c616b6c30e93f7d6362b1a7df9fbdfebe4ddb0efb288b99aa7f2ba1d0c612b1e87603614863c2cec14c9005aeaf9e7be9f7995ddbfe14e5b080b8b131f866fc5285bfd26aa87fd2eeb4faa5acbf6579abdb2d4ccb40aeeb116c2876f82e0a381e6562631a86072cb668518d64834102ad658e00195770ebf89e56aa8131acc9f1186781488cf8f9bf0d6b0b58a6b16de20e8dc8d883e7d2335c8270932ec84f3d3d730a8191af2db0591f0110e814670c8fc6442269807e9d3d917606f03c59977f85a4f57501e2f2d80e6549f32242a4c3e74bcb4f468d332ae73e2d138d1c5557cad6f5d65a3fcac22e22f27254fd584c3618cad9c65f64fc426c0f7a8d17876bc1d86ac938ee2534cefc77ca4c27d9872fafeac12248b46470798c66f3358e8dc6a7b61ba45662cf6a49011057252789c579049a4822c18a4882727ac52ecfac62234251cceb2d62bff3a4080152ef4cc35c26a7de1c686c28b447ef38f456276380c0c710762f91399f65fad196ad2a08696b1ae4d0abebcadae956fd895572197b68d8a2c94be245249bfc69a86e2048d3da70818762886d3540e3a9d2f3d2eeeb1390690cf34cedef22ca35f8cd73affc723121be4b2eee49bb4f42175839b7cc7eb214ea37909ad7f80136be58a3df1c3afc76200421c12491d062c4cfd04ccdba0eac895f89357eac746fa15c47b4f85a89d911b09cab703d1b8977918ebf5d10fc4c279e23f870609405b59076f031c21b56fb94a0e6a542909bc73d793ef7fa04ce6eab406038c5075b44e4ff14f8b44e0a86e214e882081b08ba6238f56c815e072d8376a0896a388131f1e513b7406fde0a3ac141e14f74975eb35bb8f3456624427e1a14075404eef64231365fa94b60baf65a32096678abba0db08c51cc2ee8a51d3cf1798988d1e780eecff5797dbd53490393771d02f9bb2d2ef2b37b5943703c5d2e19f5a55c54ae201fb92bc27c7a791cc2e51e2c02545d2fd7c982795ed8279dbb52ccfd51ef7ce63ad024ee9d0c898d3b1b08a4cb28d6c02528a832f6352e702c19cb433e44d35d982450a1e0dfe6e1fac9ad75c3addfd052368a0ab6896ad09dbb585282960758d2e1c6917bea643099fe609ced9c34161be5a7c3fd48d3a305309865d3408a25c40a4741920199937e8d4b5224b19baed609ce0e8dd5491136daf55c1961069950bf4547be6b29c6e3af03f750099cb3be7d80795d033e08bdb9ac9c9c70e5e30aa2b568aed9a6ee93a06d473a7c8309d8ec7a4da2c38a60a4341abd9dd344d22a90ec1550aa3066bf63f44fb6a094e31212474568ebb609f638801f54e908f08a195a5a75acdd641275092d9ab37c11a0df803b39ac0bb2bb28dfefc3af7f669842e4674a0ac3f277a5a8ca86a7619661a2a8c7b8e8eecfb2d618714c39481f93ff982aba58be9ba66cfd74153117c148acb5baaed42bd3d11c93e26e90208eccc468abc902b75819590a9a69dacfbf255194db7cb27afe079200975b4640143255e21de4026995c79701fa2aa311d7f27e18f3cbf18bcf112b02bbf480f850a73193a81f3e71f48174f67ed4aaefc6f661bc916f5d8e2136444408ace0808de58099d675f2a325adff4a4763daea24db05a783d65a19072758a8c98c1e7b98028d3a85d484d772e3ac502278ff0b393eabeff342d421d0ef299c7580a886a79b52822650a2acf8ea45ac177d0844c1e4d07f7f9cf3c6f26c667af724dde4b2704a2be1f62f063ebc21a08baad1600bb86570cd0d6746b46b012d7ab10795318cda1f651b02ec8246d0d8112d7a673bd20f59db9bf6b5ecb59b125ac9c452367b746e323428f1edb9ef499537cbc0f8574f3ec684f09f73abe6565c89e5c1098f493f32e70640b51a0f36cbbf3107653ddb87d853127296af93db3f3ffd00a9fb4320f9d3b1d38598bea0c569d3514b87313b49318a0e0fb0dac67915db03c1a8bdf2377bd48d282097e132a5e1f79b738c44961f4895a95546651d88eeffae2f22473a8570ed989572abcc7a27cd52a2d19cc85a1d950d4dd80869837e985bf983f3ad5f6c9a0480f221ec7f1c5b45251bccdf298fab69b296e1498763ec4f6499382e5843e25992daaeb473a8e7bd9eeb97cda48090aa73d6df3e5eeea38a9ba47bc0773dcd06185f51e31b45eaa743d4208851d10be2bac7ef2dfb366bf2552d69ce88795bc761bec9ac0d45d5f215fcafa7de40dbac1699df0d44b632593a3cb688d047e2171853b0dd03eb7c23ac3811f71bd6d5f38c3281830408509a65d506413011ae1802ac08f17157be4956b1fdcfcefe85a4a12ba10e5689611d10efdd044be8e22869ba743054e59a28133d986feaf5d394bb202e3c79e5f52af055aa289889de5d4156408fc099c5f22d4716122b103ffec3982ea04d737874833579bb07cc1117824357dc1473458fbcb515630aee8ed049c4fbcdcdffaa40c5bef241d2cdb45969fcde45237288c7550b1d0f88724b09b23aa43ad2ef40e94ad9706b527bf37356c3f9573e6a28e2368b97be94980dbd30b5d5d18ca2ec85fac5fa702bfdc9f52767de6c3540f74fc2d5ac06c24e6bc72ddcb5ed8af2f8463d41dda6d7e57f97ceb62489dea4c1eabeaa09c3f017fc4e1846cd62e4991c08fecc9e2cf907581cc36444affe6c4323aabeb1a138e6fe63b41407d1b5c38d3abdc4e332f7bfec3e93ebc1d8da1681b96d4fb561f5eb5c8d0ebf17fe1615ef2a71526f80752aabeda3f1ebee6e804b3205782efe3b0b1f8df01c96808cc143c0354e40e9c4ff95d8bd645e97739ebeffa5be7eaa4616dcc1f148bc6cb81735ed4cafed90379817ae682af6a0aec49a1dcd0955128a6876099fce1a66332220b7ea9c45a27f760ae07c5e071e619f41e3bae6a2cb89e889404c5f2c7dd6d7c521662938f72a2f9d8db051a154eee7e712a1c6a523ffd7667c8b09b066d0218f5be9fa030449a4a7fea2dc90299671af9631d40e81276790f26eaef58378812f5d8f3a6b8000be1d15ae6929e8a7ce4160dc1e54effe05e913e3b2923fe5695e9850138d391a93ad60227dc115178bb6a3366d6cc172d36b02d872f8058f0d6fbcf523d786a8d80274e1bf9c1aea92399b62834a8b564a1d37202575f0f6be1bb0080bb95f10e923223af90d08d74b0a9971321d0ee849a437045f73b421d5bccfee83c3ca93"}], 0x1198}}], 0x3, 0x4010) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r3, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)="857af0d4a072ba24254d07a15fc1a890251985c4e283ef29aeb7fded1b5d1e32cc86ef5a1cd0e4eb7ca8f45c7c996a", 0x2f}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.415050952s ago: executing program 3 (id=15465): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.351589989s ago: executing program 6 (id=15466): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020700040000df25aed694bc302eff7f71b458579b7baa92c9f74a3117d5aab942e0319c8411325480f9e237fea37725d810eedfe4e7a7c7f0d1e5781767f0c3320a6bef242dce22466cce4bb39bfbb16795cf40066464a83fcbfe01c8c738bfbd2eb8b809bc531f8891ccfb8fa0a9b8c030b241e46c4fe0481ba342734d2a8fdfea2c721da7541a0c4706a6b4ac753eeac4ae9d7c1e6efb"], 0x10}}, 0x20000084) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendto$inet(r6, &(0x7f00000003c0)="520b4635e6a2be40e784e5fd1a4f0d8f", 0x10, 0x4884, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 1.268810243s ago: executing program 5 (id=15467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfffd, 0xa}, {0xa, 0xc}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004020) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001200030400"/20, @ANYRES32=r1, @ANYBLOB="5e2e0900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c0001000700000f0100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4002601}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=ANY=[@ANYBLOB="2c0000001e000100000000000000000002000000010000070000000008000100fffffffe08000a"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x20000010) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.22299849s ago: executing program 3 (id=15468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x8814) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x8814) (async) 1.209501588s ago: executing program 1 (id=15469): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10005, 0xfffffffe}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"a3ab69b78d1ea208b020fec2dde2febc", r1, 0x0, {0x7, 0x7}, {0x47fa3fa3, 0xfffffff7}, 0x113, [0x5f1, 0x1, 0x9, 0x3, 0x8000, 0x0, 0x3, 0x4, 0x7, 0x3, 0x9, 0x4, 0x80, 0x7, 0x5, 0x7ffffffd]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x4048004) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000700)={{r0}, r2, 0x12, @unused=[0xa5f, 0x80, 0x6, 0x57b], @devid=r3}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 1.165161551s ago: executing program 5 (id=15470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x36f, @empty, 0xfffffeff}, 0x1c) listen(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000003c0)={0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) listen(r2, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf25010000000c0002000200000000000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c000500280100000000000008000100000000000c00060001000000000000000c000200ff7f000000000000580007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c40018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c000180080001002db37af83ecb4069ff51a1ba5a47d05b0c25f2ce18edda1bb901bfe1d94f5fe181ec45a62b5b7d3878a6dd414e9015ede4f89b3b99a75894c539c518d92ad453a024798c1eaeb3cac22950d19cb9facb91dabebda29806df32b401bd282afb36626442e4e5699b1e9200c18e4a5f8cc414037d1425fa205ed53951495c55c469674a03ba088ea8049b600ff02c7650bd7da479143ba9ce5cc2f001ab12fb541de4f8220572e2af17ff1a909bf34a1dc1dfa00dc11641a14179cb4a17a76d3216ee1af254513344ae15f5f3317f7d8d1d2890a9ed6cf6a3dc00000000000000", @ANYRES32=r9, @ANYBLOB="0c00019b08000100", @ANYRES32=r10, @ANYBLOB="0c000300ce00000000000000"], 0xc0}}, 0x4) socket$tipc(0x1e, 0x5, 0x0) 1.099228323s ago: executing program 1 (id=15471): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xd1, 0x12d5c, 0x3}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r12, &(0x7f0000000a00)={&(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000600)="d4c56a5015025cc2e6975c93a9c2aeeea548d58b00bf90537993ea98a8f48c5378cda30ded8b6cf360ca1a5c6084c1ed07a923c006809a961f4f0a5c3b3adf74a2d0c8604ac3e4dfe0489cea65ce262ae80da0d2581236dd4de9da2e9cfd8b3fb1ca6eecfbea3fa6eafa0c9110d0e719a0fe6a8452d3f0a6abf006a4ecff16f547b1e7e1b404d3ef15e20afc4ba36c26a886b76a69e229b7b0c1a9a8cad052010af3adb6a33c1d27886ad34c51b600c5434270283c41cde97778151476c124ed44acb2", 0xc3}, {&(0x7f0000000700)="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", 0xfb}, {&(0x7f0000000800)="3ab0f1a5a61d49417c5599788042651cd57c3a521219364301801e205237adb6bb1ab530379c86d406455ec27e7403c47d2a14986eec3dee1ade5e96351a39a6ee2bdf88be8a75d1771e24a8db7553daed266eb7178cb2e41026905a51dd0626d12c9e716adc07be75352de86e0ce62244289dba36953beca4b2f2a470f80bccb7543153be5ddffeaacbf60d74e701f2b5578d91be9f92d907566689a2e902f8f18de3411580", 0xa6}, {&(0x7f00000008c0)="7716a722c9e33377703744f2c7e7eb0371f43142383c719b4af51e7ed8f5b9e8220117d0354dcff4e034589b9f84b31bb2230d1ccf1fef9f952d2e9c3ac0d150d8f072e610961a1a6e", 0x49}], 0x4, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x70}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r12, r13, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) 1.0371523s ago: executing program 3 (id=15472): socket$inet6_mptcp(0xa, 0x1, 0x106) 929.408263ms ago: executing program 3 (id=15473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006110800000000000950000000000000005e736caac10bbf9989c41c17663d909e5c5024e7c75f24d7742931861f80680982cf9c13b3092c1260b2e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x94) 889.700349ms ago: executing program 3 (id=15474): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendto$packet(r1, &(0x7f0000000300)="a6571a1e8c3da2284ee6a150c954ad8d288b7b8ba05bb880d46b399192392975f01ada8ad112d7f548815a6c00fe2276b1d504338ee412efda8084dd875f0e45179cc42c", 0x44, 0x8010, &(0x7f0000000400)={0x11, 0x7, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x146, [0x2000000025c0, 0x0, 0x0, 0x2000000025f0, 0x200000002620], 0x0, 0x0, &(0x7f00000025c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xc, 'batadv0\x00', 'netdevsim0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @random="d685fc5d0114", [0x7f, 0x0, 0x101, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x6, {0x6}}}}}]}]}, 0x1be) r7 = socket$inet(0x2, 0x4, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) 833.365848ms ago: executing program 0 (id=15475): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x6}}}}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4004010}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x9, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000009c0)) 237.288403ms ago: executing program 1 (id=15476): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x25, 0x0, @val=@netfilter={0xa}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x0, 0x200, 0x80, 0x1, 0xf0a}, {0x3, 0x2, 0x4, 0x1, 0x1, 0x7fffffff}, 0x8000, 0xdd3, 0x203}}, @TCA_TBF_BURST={0x8, 0x6, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xfff2, 0x53a5f6a3b08b80f1}, {0x4, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x8, 0x9, 0xffffffff, 0x1, 0x4, 0x7, 0x2}}, {0x8, 0x2, [0x3, 0xe]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 229.819841ms ago: executing program 6 (id=15477): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 134.146213ms ago: executing program 6 (id=15478): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0xa, 0xf, 0x3, 0x51, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x0, 0x8000, 0x0, 0xe}}) 916.892µs ago: executing program 6 (id=15479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) unshare(0x40000000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) accept(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 0s ago: executing program 3 (id=15480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040040) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x60010, r0, 0xdc00b000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) (async, rerun: 64) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000540)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x38}, 0x8, 0xc, 0x5, 0x9, 0x20, 'syz0\x00', "1586eb912b5e57198bde0ebed748b53f524c9402271f0d69aba0d4f130a3ccd9", "d9bcdac2022045bca2524eb92c41984656d113ffd31b52efb2bd66ec50bd48af", [{0x4, 0x0, {0x2, 0x9}}, {0x5, 0x6, {0x1, 0x8}}, {0x9, 0xc, {0x2, 0x6}}, {0xfffb, 0x8, {0x1, 0x6}}, {0x69e, 0xff, {0x0, 0x1}}, {0x7, 0x5, {0x1, 0x954}}, {0x8, 0x1, {0x3, 0x7}}, {0x2, 0x3, {0x3, 0x1a8b}}, {0xe25f, 0x0, {0x1, 0xdef}}, {0x0, 0x3, {0x3, 0x74}}, {0x3, 0x3, {0x1, 0x80}}, {0x7fff, 0x1, {0x3, 0x2}}, {0xf, 0x0, {0x2, 0x9}}, {0x8, 0x5, {0x3, 0x1}}, {0xe0, 0x5, {0x1}}, {0x800, 0x3, {0x0, 0x7}}, {0xff, 0x5, {0x1, 0x2}}, {0xfffe, 0x2, {0x3, 0x9}}, {0xa, 0x0, {0x3, 0x2a80}}, {0x7, 0x24, {0x2, 0x8}}, {0x7, 0x8, {0x1, 0x8}}, {0x94a1, 0x0, {0x0, 0x6}}, {0x401, 0xe01, {0x0, 0x4}}, {0x5, 0x1, {0x2}}, {0x1, 0x4, {0x2, 0x6}}, {0x380, 0xbe4, {0x0, 0x10000}}, {0x101, 0x4, {0x2, 0x10001}}, {0x3, 0xc, {0x0, 0x2}}, {0x2, 0x5, {0x2, 0x8}}, {0xf800, 0x10, {0x0, 0x9}}, {0xc, 0x8, {0x2, 0x1}}, {0x2, 0x1, {0x1, 0x6}}, {0x10, 0x74, {0x1, 0x200}}, {0x2, 0x38c, {0x1, 0x3}}, {0x1, 0x9, {0x0, 0x7}}, {0x101, 0x9, {0x1, 0x3}}, {0x3, 0x958d, {0x3, 0xffffffff}}, {0x7, 0x0, {0x1, 0x5}}, {0x10, 0x7, {0x2, 0x200}}, {0x2, 0x9f, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x8304071a8f8b42d7, 0x7fffffff}, 0x8, 0x8f, 0xb, 0x400, 0xd, 'syz0\x00', "2015aa0220abc8cf80acfb404b70c5bf951edd9c748a5fc6379921bc05b5d29e", "7c84c4f7038076d3142b5254580164cff96f2ba3bb1fada6d64de96334dd27e0", [{0x3, 0x8, {0x2, 0x1}}, {0x4, 0x1, {0x2, 0x4}}, {0xfd, 0x0, {0x1, 0xc}}, {0x3, 0x40, {0x3, 0x7}}, {0x7, 0x1, {0x1, 0x401}}, {0x401, 0x4000, {0x2, 0x4b}}, {0x3, 0x4, {0x0, 0x10001}}, {0xa292, 0x13, {0x2, 0x987f}}, {0xcf6c, 0x48, {0x1, 0x3}}, {0x8, 0x400, {0x3, 0x10cd}}, {0x5, 0x9, {0x3, 0x6}}, {0x3, 0x8001, {0x0, 0x1}}, {0xad39, 0x6, {0x1, 0x8}}, {0x6, 0x101, {0x2, 0xffffffff}}, {0x1, 0x1, {0x0, 0xffffffff}}, {0x9, 0x8, {0x0, 0x3}}, {0x280, 0xfc4, {0x2, 0x5}}, {0x2, 0xd, {0x0, 0xffffffff}}, {0x5e, 0xf727, {0x1, 0x4}}, {0xfff4, 0x0, {0x6, 0x5}}, {0x8, 0x100, {0x2, 0xffffffff}}, {0x2, 0x3, {0x3, 0x5}}, {0x80, 0x61, {0x1, 0x6ef}}, {0xfffe, 0xfffa, {0x2, 0xa}}, {0xa025, 0x4, {0x0, 0xea}}, {0x100, 0x24c5, {0x0, 0x9}}, {0x3, 0xfffc, {0x0, 0x3}}, {0xa7f, 0x7, {0x1, 0x9043}}, {0x8000, 0x4, {0x2, 0x8}}, {0x2, 0x5, {0x2, 0x4}}, {0xe, 0xe40, {0x0, 0x3}}, {0x900, 0x6, {0x2, 0x3}}, {0x9, 0x5, {0x1, 0xfffffff4}}, {0x1, 0xc80, {0x2, 0x3}}, {0xe, 0x1, {0x3, 0x2}}, {0x2, 0x71ba, {0x2}}, {0x8000, 0x3, {0x3, 0xf}}, {0x6, 0x6, {0x0, 0xfffffffa}}, {0x8, 0x800, {0x2, 0x8001}}, {0x1, 0x3c, {0x0, 0x80000001}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x4, 0xf5, 0x6, 0x4, 0x13, 'syz0\x00', "abb3b6d442985f6ce016aa48e2797cea0619c7062dce2d76693d9f488077af11", "1acb3ac9753764f0251b1b001427e427f91a34204da02f4fe039f9906b7e03ed", [{0x0, 0x6, {0x2, 0x4}}, {0x8, 0xfffa, {0x3, 0x101}}, {0x20, 0x6, {0x3, 0x50000000}}, {0x8, 0x6, {0x3, 0x5}}, {0xdf, 0x1ff, {0x0, 0x9}}, {0x1, 0x6, {0x1, 0x3}}, {0xc957, 0x200}, {0x1, 0x2, {0x0, 0x6}}, {0x3, 0x400, {0x1, 0x8}}, {0xe1, 0x200, {0x2, 0xfffffffe}}, {0x2, 0xde5, {0x1, 0x5}}, {0xb4d, 0x10, {0x0, 0xf2}}, {0xd, 0x7, {0x3, 0x3}}, {0xfe2, 0x4ec, {0x1, 0x1}}, {0x8, 0x1, {0x0, 0x62}}, {0x5a, 0x80, {0x0, 0x8000}}, {0xe, 0x7fff, {0x3, 0x8}}, {0xfff, 0xfff3}, {0x7, 0x3, {0x3, 0x7}}, {0xe, 0x3, {0x1, 0x6}}, {0x1, 0xff, {0x2, 0x4}}, {0xd812, 0x2, {0x0, 0x8001}}, {0xf593, 0x0, {0x0, 0x5}}, {0x8, 0x8, {0x3, 0x20000}}, {0x6, 0x9, {0x1, 0x4}}, {0xfe00, 0xd, {0x0, 0x8}}, {0x7, 0x62c6, {0x1, 0x7da0}}, {0x3, 0x48, {0x1, 0x7}}, {0x6, 0x9, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0x4}}, {0x8, 0x101, {0x3, 0x4}}, {0x3, 0x3ff, {0x0, 0xffffffff}}, {0x2, 0x57c5, {0x2, 0x8001}}, {0x8, 0x101, {0x2, 0x3}}, {0xfffb, 0x1, {0x0, 0xb4}}, {0x5, 0xfff9, {0x1}}, {0x8000, 0xea1, {0x1, 0x2477}}, {0x400, 0x365, {0x2, 0xfffffffe}}, {0x54, 0x2, {0x3, 0x80000000}}, {0x9e84, 0x7fff, {0x3, 0xfff}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x1}, 0x41) (rerun: 64) kernel console output (not intermixed with test programs): 21 has an invalid length. [ 1588.053052][T20638] netlink: 'syz.6.13946': attribute type 21 has an invalid length. [ 1588.122404][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13945'. [ 1588.129414][T20641] IPv6: NLM_F_CREATE should be specified when creating new route [ 1588.138278][T20642] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1588.143371][T20633] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13946'. [ 1588.185490][T20638] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13946'. [ 1589.085826][T20692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.110045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.303464][T20706] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1589.350228][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.392883][T20708] openvswitch: netlink: Flow key attr not present in new flow. [ 1589.923518][T20743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1589.989119][T20748] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1590.390716][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.443635][T20771] xfrm1: entered promiscuous mode [ 1590.453245][T20771] xfrm1: entered allmulticast mode [ 1590.509641][T20775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1590.517626][T20775] IPv6: NLM_F_CREATE should be set when creating new route [ 1590.790099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.096937][T20804] __nla_validate_parse: 6 callbacks suppressed [ 1591.096955][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14004'. [ 1591.121553][T20806] netlink: 'syz.0.14005': attribute type 12 has an invalid length. [ 1591.213427][T20806] bond1: option primary_reselect: invalid value (255) [ 1591.255752][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14005'. [ 1591.266393][T20806] bond1 (unregistering): Released all slaves [ 1591.430994][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.750281][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.769265][T20834] syzkaller0: entered promiscuous mode [ 1591.790064][T20834] syzkaller0: entered allmulticast mode [ 1591.847887][T20840] netlink: 'syz.0.14013': attribute type 25 has an invalid length. [ 1592.221554][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14019'. [ 1592.465287][T20879] sctp: [Deprecated]: syz.1.14022 (pid 20879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1592.465287][T20879] Use struct sctp_sack_info instead [ 1592.470017][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.666491][T20885] netlink: 'syz.3.14025': attribute type 21 has an invalid length. [ 1592.696622][T20885] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14025'. [ 1592.707017][T20890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14027'. [ 1592.707509][T20885] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14025'. [ 1592.720127][T20890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14027'. [ 1592.777120][T20890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14027'. [ 1593.262450][T20903] bond1: option fail_over_mac: invalid value (16) [ 1593.288799][T20903] bond1 (unregistering): Released all slaves [ 1593.357876][T16588] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1593.392823][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14035'. [ 1593.425023][T20918] netlink: 'syz.1.14036': attribute type 13 has an invalid length. [ 1593.511578][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.920489][ T187] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1593.953979][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1593.954756][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1593.976869][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1593.987454][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1594.001728][ T4943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1594.004378][ T187] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1594.024730][ T4943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1594.042995][T20935] macvlan2: entered promiscuous mode [ 1594.048580][T20935] macvlan2: entered allmulticast mode [ 1594.056547][T20935] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1594.093554][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1594.134634][T20935] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1594.190664][T20935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1594.204163][T20935] team0: Port device macvlan2 added [ 1594.337588][T20945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1594.344924][T20945] IPv6: NLM_F_CREATE should be set when creating new route [ 1594.554111][T10399] bond8: (slave syz_tun): Removing an active aggregator [ 1594.561114][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.584868][T10399] bond8: (slave syz_tun): Releasing backup interface [ 1594.631428][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.804042][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.839496][T20963] netlink: 252 bytes leftover after parsing attributes in process `syz.0.14047'. [ 1594.895096][T20965] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1595.054519][T20971] netlink: 'syz.0.14050': attribute type 10 has an invalid length. [ 1595.250412][T20978] macvlan3: entered promiscuous mode [ 1595.262021][T20978] macvlan3: entered allmulticast mode [ 1595.263571][T20983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1595.273220][T20978] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1595.286080][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.308534][T20978] team0: Port device macvlan3 added [ 1595.474641][T20981] syz_tun: tun_net_xmit 58 [ 1595.484596][T20939] vxcan1 speed is unknown, defaulting to 1000 [ 1595.596804][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.646175][T20994] netlink: 'syz.0.14057': attribute type 1 has an invalid length. [ 1595.774093][T20994] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1595.775137][T19784] wlan1 speed is unknown, defaulting to 1000 [ 1595.813812][T19784] syz1: Port: 1 Link DOWN [ 1595.912938][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.944400][T16588] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1595.970574][T16588] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1596.094166][T16588] team0: Port device macvlan2 removed [ 1596.122196][T16588] team0: Port device macvlan3 removed [ 1596.155536][T20108] Bluetooth: hci6: command tx timeout [ 1596.160716][T21024] __nla_validate_parse: 3 callbacks suppressed [ 1596.160736][T21024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14062'. [ 1596.196603][T21027] netlink: 'syz.3.14065': attribute type 1 has an invalid length. [ 1596.214266][T21023] macvlan3: entered promiscuous mode [ 1596.220565][T21023] macvlan3: entered allmulticast mode [ 1596.228415][T21023] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1596.263851][T21023] team0: Port device macvlan3 added [ 1596.274916][T20939] lo speed is unknown, defaulting to 1000 [ 1596.368991][T21027] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1596.397946][T20939] wlan1 speed is unknown, defaulting to 1000 [ 1596.566816][T21027] bond13: (slave geneve3): making interface the new active one [ 1596.584508][T21050] netlink: 'syz.1.14069': attribute type 10 has an invalid length. [ 1596.593419][T21027] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 1596.644091][T21050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.665558][T21050] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1597.005459][T16588] pim6reg: left allmulticast mode [ 1597.036944][T16588] dvmrp0: left allmulticast mode [ 1597.067019][T16588] batman_adv: batadv0: Interface deactivated: bond0 [ 1597.325634][T21083] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1597.365243][T16588] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 1597.671534][T19784] net_ratelimit: 1 callbacks suppressed [ 1597.671554][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.737716][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14080'. [ 1597.764741][T16588] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1597.835278][T16588] bond11 (unregistering): (slave bridge0): Releasing backup interface [ 1597.878974][T16588] batman_adv: batadv0: Removing interface: bond0 [ 1597.908821][T16588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.946487][T16588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.959394][T16588] bond0 (unregistering): (slave team0): Releasing backup interface [ 1597.969566][T16588] bond0 (unregistering): Released all slaves [ 1597.980799][T16588] bond1 (unregistering): Released all slaves [ 1597.995629][T16588] bond2 (unregistering): Released all slaves [ 1598.015930][T16588] bond3 (unregistering): Released all slaves [ 1598.031353][T16588] bond4 (unregistering): Released all slaves [ 1598.045558][T16588] bond5 (unregistering): Released all slaves [ 1598.059974][T16588] bond6 (unregistering): Released all slaves [ 1598.078977][T16588] bond7 (unregistering): Released all slaves [ 1598.108672][T16588] bond8 (unregistering): Released all slaves [ 1598.123187][T16588] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1598.136350][T16588] bond9 (unregistering): Released all slaves [ 1598.152040][T16588] bond10 (unregistering): Released all slaves [ 1598.166619][T16588] bond11 (unregistering): Released all slaves [ 1598.181677][T16588] bond12 (unregistering): Released all slaves [ 1598.230653][T20108] Bluetooth: hci6: command tx timeout [ 1598.288216][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1598.476129][T16588] tipc: Disabling bearer [ 1598.491729][T16588] tipc: Left network mode [ 1598.726845][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.950621][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.043221][T21141] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1599.287699][T21154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14089'. [ 1599.349465][T21157] xt_hashlimit: size too large, truncated to 1048576 [ 1599.663807][T16588] hsr_slave_0: left promiscuous mode [ 1599.675649][T16588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.707251][T21170] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1599.718657][T16588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.740581][T16588] batman_adv: batadv0: Removing interface: dummy0 [ 1599.751555][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.264868][T21185] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1600.273285][T16588] team0 (unregistering): Port device team_slave_1 removed [ 1600.304272][T16588] team0 (unregistering): Port device team_slave_0 removed [ 1600.313224][T20108] Bluetooth: hci6: command tx timeout [ 1600.493227][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1600.720729][T21200] lo: Caught tx_queue_len zero misconfig [ 1600.743732][T20939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.764967][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.792038][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.805724][T20939] bridge_slave_0: entered allmulticast mode [ 1600.833829][T20939] bridge_slave_0: entered promiscuous mode [ 1600.876484][T20939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.915185][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.934877][T20939] bridge_slave_1: entered allmulticast mode [ 1600.970205][T20939] bridge_slave_1: entered promiscuous mode [ 1601.050900][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.187287][T21224] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1601.197313][T20939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.232759][T20939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.346494][T16588] IPVS: stop unused estimator thread 0... [ 1601.357456][T20939] team0: Port device team_slave_0 added [ 1601.395326][T20939] team0: Port device team_slave_1 added [ 1601.442531][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14111'. [ 1601.479278][T20939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.502866][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.548197][T20939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.561450][T20939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.568475][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.603468][T20939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.663527][T20939] hsr_slave_0: entered promiscuous mode [ 1601.671091][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.682708][T20939] hsr_slave_1: entered promiscuous mode [ 1601.693965][T20939] debugfs: 'hsr0' already exists in 'hsr' [ 1601.710329][T20939] Cannot create hsr debugfs directory [ 1601.830844][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.952875][T21257] netlink: 'syz.1.14115': attribute type 8 has an invalid length. [ 1601.995862][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.029112][T21257] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14115'. [ 1602.085567][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14115'. [ 1602.108609][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14116'. [ 1602.284705][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1602.361847][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14116'. [ 1602.370918][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14119'. [ 1602.391075][T20108] Bluetooth: hci6: command tx timeout [ 1602.405342][T21275] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1602.428001][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14116'. [ 1602.705500][T21288] vxcan1 speed is unknown, defaulting to 1000 [ 1602.879993][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.931188][T21288] lo speed is unknown, defaulting to 1000 [ 1602.938245][T21288] wlan1 speed is unknown, defaulting to 1000 [ 1602.954787][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.911329][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.918840][T21257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1604.967089][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.981945][T20939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1605.041084][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1605.082771][T20939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1605.129055][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1605.154603][T20939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1605.183904][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1605.211359][T21302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14125'. [ 1605.221925][T20939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1605.268393][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1605.405372][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1605.697197][T21338] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1605.741299][T21340] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14132'. [ 1605.877522][T20939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.932205][T20939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.961126][T23074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.968319][T23074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.996574][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.005536][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.034356][T16589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.041575][T16589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.128624][T21362] tipc: Started in network mode [ 1606.150296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.153674][T21362] tipc: Node identity 9e2117d02b92, cluster identity 4711 [ 1606.199339][T21362] tipc: Enabled bearer , priority 0 [ 1606.266773][T21362] syzkaller0: entered promiscuous mode [ 1606.281416][T21362] syzkaller0: entered allmulticast mode [ 1606.435022][T21362] tipc: Resetting bearer [ 1606.477129][T21360] tipc: Resetting bearer [ 1606.566767][T21360] tipc: Disabling bearer [ 1606.753195][T20939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1606.923861][T21400] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1606.976409][T21397] bond1: option lp_interval: invalid value (0) [ 1607.007271][T21397] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1607.039943][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.057255][T21397] bond1 (unregistering): Released all slaves [ 1607.432571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1607.462991][T21420] macvlan4: entered promiscuous mode [ 1607.491328][T21420] macvlan4: entered allmulticast mode [ 1607.500925][T21424] __nla_validate_parse: 1 callbacks suppressed [ 1607.500941][T21424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14149'. [ 1607.502573][T21420] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1607.528680][T21420] team0: Port device macvlan4 added [ 1607.704315][T21434] netlink: 'syz.0.14153': attribute type 1 has an invalid length. [ 1608.070421][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.095267][T21434] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1608.235400][T21455] netlink: 88 bytes leftover after parsing attributes in process `syz.0.14155'. [ 1608.423210][T21462] netlink: 'syz.5.14156': attribute type 2 has an invalid length. [ 1609.030684][T11563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.132376][ T7577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.408173][T21491] netlink: 'syz.3.14159': attribute type 1 has an invalid length. [ 1609.427675][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14159'. [ 1609.471795][T21462] : entered promiscuous mode [ 1609.490110][T20939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.654890][T21504] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1609.843104][T21513] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14163'. [ 1610.154485][ T7563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.251609][T20939] veth0_vlan: entered promiscuous mode [ 1610.285711][T20939] veth1_vlan: entered promiscuous mode [ 1610.438656][T20939] veth0_macvtap: entered promiscuous mode [ 1610.486295][T20939] veth1_macvtap: entered promiscuous mode [ 1610.513491][T21534] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14168'. [ 1610.595451][T21554] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1610.668988][T20939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.784450][T20939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.905049][T16589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.931635][T16589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.980160][T16570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.015589][T16570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.156517][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14177'. [ 1611.196977][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.276420][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.406723][T16570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.450578][T16570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.629470][T16571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.662278][T16571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.853950][T21611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14184'. [ 1611.974056][T21616] macvlan5: entered promiscuous mode [ 1611.979542][T21616] macvlan5: entered allmulticast mode [ 1612.017717][T21616] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1612.042634][T21616] team0: Port device macvlan5 added [ 1612.138675][T21621] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14188'. [ 1612.220255][T21632] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14191'. [ 1612.236388][T21632] netlink: 156 bytes leftover after parsing attributes in process `syz.5.14191'. [ 1612.998896][T21667] team_slave_1: Caught tx_queue_len zero misconfig [ 1613.026609][T21667] syzkaller0: entered promiscuous mode [ 1613.033863][T21667] syzkaller0: entered allmulticast mode [ 1613.083600][T21667] tipc: Enabled bearer , priority 0 [ 1613.146571][T21666] tipc: Resetting bearer [ 1613.208692][T21666] tipc: Disabling bearer [ 1613.215234][T21682] __nla_validate_parse: 1 callbacks suppressed [ 1613.215251][T21682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14207'. [ 1613.566993][T21697] sit0: entered promiscuous mode [ 1613.594971][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14210'. [ 1613.773835][T21706] xt_ecn: cannot match TCP bits for non-tcp packets [ 1613.928645][T21720] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1614.132637][T21726] netlink: 'syz.5.14219': attribute type 3 has an invalid length. [ 1614.171981][T21724] netlink: 'syz.5.14219': attribute type 3 has an invalid length. [ 1614.188366][T21729] netlink: 'syz.5.14219': attribute type 1 has an invalid length. [ 1614.413726][T21724] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1614.630905][ T4943] Bluetooth: hci6: command 0x0405 tx timeout [ 1615.074310][T21769] netlink: 208 bytes leftover after parsing attributes in process `syz.5.14230'. [ 1615.305352][T21780] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 1615.408954][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14233'. [ 1615.462343][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14233'. [ 1615.481022][T21780] openvswitch: netlink: EtherType 0 is less than min 600 [ 1615.499392][T21781] openvswitch: netlink: EtherType 0 is less than min 600 [ 1615.657191][T21804] netlink: 'syz.1.14241': attribute type 1 has an invalid length. [ 1615.692773][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14242'. [ 1615.708609][T21806] netlink: 'syz.6.14242': attribute type 18 has an invalid length. [ 1615.717941][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14242'. [ 1615.770290][T21804] bond12: entered promiscuous mode [ 1615.776019][T21804] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1615.798198][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14242'. [ 1615.809998][T21806] netlink: 'syz.6.14242': attribute type 18 has an invalid length. [ 1615.817990][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14242'. [ 1615.865626][T21820] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1615.875555][T21820] bond12: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1615.887600][T21820] bond12: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1615.943885][T21820] bond12: (slave ip6gre4): making interface the new active one [ 1615.963637][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14246'. [ 1615.963744][T21820] ip6gre4: entered promiscuous mode [ 1615.979265][T21820] bond12: (slave ip6gre4): Enslaving as an active interface with an up link [ 1615.999917][T16570] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.025284][T16570] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.083401][T16570] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.106979][T16570] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.108100][T21830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.147540][T21830] sctp: [Deprecated]: syz.3.14248 (pid 21830) Use of int in max_burst socket option. [ 1616.147540][T21830] Use struct sctp_assoc_value instead [ 1616.256177][T21835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1616.491728][T21849] netlink: 'syz.1.14253': attribute type 11 has an invalid length. [ 1616.586494][T21851] netlink: 'syz.1.14253': attribute type 11 has an invalid length. [ 1616.604749][T21859] netlink: 'syz.5.14256': attribute type 21 has an invalid length. [ 1616.624950][T21859] IPv6: NLM_F_CREATE should be specified when creating new route [ 1616.627015][T21860] netlink: 'syz.6.14257': attribute type 7 has an invalid length. [ 1616.647592][T21859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1616.654919][T21859] IPv6: NLM_F_CREATE should be set when creating new route [ 1616.662328][T21859] IPv6: NLM_F_CREATE should be set when creating new route [ 1616.669596][T21859] IPv6: NLM_F_CREATE should be set when creating new route [ 1616.678014][T21862] netlink: 'syz.5.14256': attribute type 21 has an invalid length. [ 1616.706483][T21862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1616.733969][T21863] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1616.827256][T21872] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1617.109189][T21883] bond0: entered promiscuous mode [ 1617.114643][T21883] bond_slave_0: entered promiscuous mode [ 1617.121560][T21883] bond_slave_1: entered promiscuous mode [ 1617.131012][T21883] gretap0: entered promiscuous mode [ 1617.141778][T21883] debugfs: 'hsr1' already exists in 'hsr' [ 1617.154650][T21883] Cannot create hsr debugfs directory [ 1617.163620][T21883] hsr1: entered promiscuous mode [ 1617.542275][T21923] syzkaller0: entered promiscuous mode [ 1617.547847][T21923] syzkaller0: entered allmulticast mode [ 1618.058790][T21928] veth9: entered allmulticast mode [ 1618.105032][T21930] ipvlan2: entered promiscuous mode [ 1619.993937][T21891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1620.589382][T21949] __nla_validate_parse: 20 callbacks suppressed [ 1620.589403][T21949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14282'. [ 1621.052248][T20108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1621.088260][T20108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1621.097168][T20108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1621.107590][T20108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1621.137894][T20108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1623.195824][T20108] Bluetooth: hci4: command tx timeout [ 1623.994682][T21968] syzkaller0: entered promiscuous mode [ 1624.037464][T21968] syzkaller0: entered allmulticast mode [ 1624.114191][T21978] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14287'. [ 1624.174963][T21978] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14287'. [ 1624.225894][T21978] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14287'. [ 1624.357903][T21985] macvlan4: entered promiscuous mode [ 1624.364869][T21985] macvlan4: entered allmulticast mode [ 1624.374103][T21985] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1624.405925][T21985] team0: Port device macvlan4 added [ 1624.444629][T21989] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14291'. [ 1624.510616][T21993] netlink: 'syz.6.14293': attribute type 30 has an invalid length. [ 1624.524937][T21989] netlink: 208 bytes leftover after parsing attributes in process `syz.3.14291'. [ 1624.531216][T21996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14292'. [ 1624.540096][T21993] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14293'. [ 1624.573246][T21951] vxcan1 speed is unknown, defaulting to 1000 [ 1624.585264][T21995] syzkaller0: entered promiscuous mode [ 1624.600583][T21995] syzkaller0: entered allmulticast mode [ 1624.894186][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14295'. [ 1624.948465][T21951] lo speed is unknown, defaulting to 1000 [ 1624.960642][T21951] wlan1 speed is unknown, defaulting to 1000 [ 1625.149825][T22005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1625.166502][T22004] netlink: 'syz.0.14296': attribute type 1 has an invalid length. [ 1625.180805][T22004] netlink: 'syz.0.14296': attribute type 4 has an invalid length. [ 1625.218314][T22004] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.14296'. [ 1625.270022][T20108] Bluetooth: hci4: command tx timeout [ 1625.275457][T22011] h: entered promiscuous mode [ 1625.352143][T16589] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1625.426809][T22011] macvlan2: entered promiscuous mode [ 1625.458693][T22011] macvlan2: entered allmulticast mode [ 1625.496074][T22018] macvlan0: entered promiscuous mode [ 1625.552071][T22025] geneve1: Caught tx_queue_len zero misconfig [ 1625.964989][T21951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.980511][T21951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.008061][T21951] bridge_slave_0: entered allmulticast mode [ 1626.037195][T21951] bridge_slave_0: entered promiscuous mode [ 1626.081255][T21951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.104879][T21951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.133454][T21951] bridge_slave_1: entered allmulticast mode [ 1626.174992][T21951] bridge_slave_1: entered promiscuous mode [ 1626.328780][T21951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.384614][T21951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.400497][T22065] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1626.438993][T22073] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1626.548836][T21951] team0: Port device team_slave_0 added [ 1626.576847][T22078] veth0: entered promiscuous mode [ 1626.612888][T21951] team0: Port device team_slave_1 added [ 1626.681513][T19787] IPVS: starting estimator thread 0... [ 1626.719143][T22078] veth0: left promiscuous mode [ 1626.753529][T22084] bond1 (unregistering): Released all slaves [ 1626.780971][T22085] IPVS: using max 29 ests per chain, 69600 per kthread [ 1626.798810][T21951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.823304][T21951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.853667][T21951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.897628][T21951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.914404][T21951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1626.969277][T21951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.971847][T22096] netlink: 'syz.6.14322': attribute type 6 has an invalid length. [ 1626.999181][T22086] vxcan1 speed is unknown, defaulting to 1000 [ 1627.016923][T22092] syzkaller0: entered promiscuous mode [ 1627.043581][T22092] syzkaller0: entered allmulticast mode [ 1627.262583][T21951] hsr_slave_0: entered promiscuous mode [ 1627.276877][T21951] hsr_slave_1: entered promiscuous mode [ 1627.293818][T21951] debugfs: 'hsr0' already exists in 'hsr' [ 1627.305010][T21951] Cannot create hsr debugfs directory [ 1627.352801][T20108] Bluetooth: hci4: command tx timeout [ 1627.578577][T22086] lo speed is unknown, defaulting to 1000 [ 1627.633258][T22086] wlan1 speed is unknown, defaulting to 1000 [ 1627.662298][T22117] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1627.875320][T22132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14333'. [ 1628.132683][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14334'. [ 1628.196389][T21951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1628.202192][T22146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14338'. [ 1628.220857][T22145] netlink: 'syz.3.14337': attribute type 1 has an invalid length. [ 1628.228725][T21951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1628.239116][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14338'. [ 1628.650910][T21951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1628.672600][T21951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1628.729162][T22160] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1628.746666][T22160] bond1 (unregistering): Released all slaves [ 1628.756345][T22164] netlink: 'syz.6.14343': attribute type 10 has an invalid length. [ 1628.794331][T21951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1628.806362][T21951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1628.929195][T21951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1629.005959][T21951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1629.044255][T22166] xt_TCPMSS: Only works on TCP SYN packets [ 1629.363233][T22185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14348'. [ 1629.430467][T20108] Bluetooth: hci4: command tx timeout [ 1629.527586][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14352'. [ 1629.543992][T21951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1629.557233][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.569625][T21951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1629.585097][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.590278][T22196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14351'. [ 1629.593968][T21951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1629.624773][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.697822][T21951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1629.712140][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.977802][T21951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.058983][T21951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.083658][T16600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.091052][T16600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.136885][T16600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.140168][T22228] netlink: 'syz.0.14361': attribute type 1 has an invalid length. [ 1630.144109][T16600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.947040][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14370'. [ 1631.084419][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14373'. [ 1631.172638][T22271] netlink: 'syz.6.14373': attribute type 1 has an invalid length. [ 1631.189406][T21951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.299269][T21951] veth0_vlan: entered promiscuous mode [ 1631.344620][T22283] netlink: 'syz.0.14377': attribute type 21 has an invalid length. [ 1631.352050][T22284] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1631.358988][T21951] veth1_vlan: entered promiscuous mode [ 1631.381571][T22283] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14377'. [ 1631.413675][T22283] netlink: 'syz.0.14377': attribute type 5 has an invalid length. [ 1631.513819][T21951] veth0_macvtap: entered promiscuous mode [ 1631.558738][T21951] veth1_macvtap: entered promiscuous mode [ 1631.640443][T21951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.688118][T21951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.712317][T16570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.724865][T16570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.743198][T23074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.788747][T23074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.084171][T16592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.097397][T22306] tunl0: entered promiscuous mode [ 1632.117646][T16592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.143804][T22306] netlink: 'syz.5.14383': attribute type 3 has an invalid length. [ 1632.212252][T22313] gtp0: entered promiscuous mode [ 1632.223757][T22313] gtp0: entered allmulticast mode [ 1632.280504][T13188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.313678][T13188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.363627][T22320] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1632.644236][T22332] netlink: 'syz.1.14283': attribute type 178 has an invalid length. [ 1632.913667][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1632.934511][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1632.945978][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1632.954174][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 1632.972288][T22350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1632.991020][T22350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1633.096780][T22357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1633.178975][T22360] vcan1: entered promiscuous mode [ 1633.192939][T22357] __nla_validate_parse: 3 callbacks suppressed [ 1633.192959][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1633.197375][T22360] vcan1: entered allmulticast mode [ 1633.216879][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14397'. [ 1633.387049][T22368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14399'. [ 1633.466120][T11615] bond4: (slave syz_tun): Releasing backup interface [ 1633.480434][T22372] netlink: 524 bytes leftover after parsing attributes in process `syz.5.14400'. [ 1633.854814][T16600] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.885304][T16600] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.893593][T22386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14404'. [ 1633.980907][T22391] netlink: 232 bytes leftover after parsing attributes in process `syz.6.14405'. [ 1634.321747][T16600] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.371322][T16600] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.413373][ T30] audit: type=1804 audit(1784798234.099:25): pid=22407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.14409" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=1882 res=1 errno=0 [ 1634.443362][ T30] audit: type=1800 audit(1784798234.119:26): pid=22407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14409" name="cgroup.controllers" dev="tmpfs" ino=1882 res=0 errno=0 [ 1634.646160][T16600] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.663681][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14412'. [ 1634.669158][T22419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14413'. [ 1634.690038][T16600] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.820060][T22345] vxcan1 speed is unknown, defaulting to 1000 [ 1634.857209][T16600] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.889157][T16600] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.938685][T22427] batadv_slave_0: entered promiscuous mode [ 1634.975905][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14417'. [ 1635.014597][T22427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.034231][ T4943] Bluetooth: hci2: command tx timeout [ 1635.075995][T22427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.346200][T22445] tls_set_device_offload_rx: netdev not found [ 1635.433290][T22345] lo speed is unknown, defaulting to 1000 [ 1635.508860][T22345] wlan1 speed is unknown, defaulting to 1000 [ 1635.807533][T22467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14426'. [ 1636.067606][T16600] batman_adv: batadv0: Interface deactivated: bond0 [ 1636.103654][T16600] batadv0: mtu less than device minimum [ 1636.122351][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.136782][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.148607][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.162665][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.174734][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.186650][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.198454][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.210432][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1636.698677][T16600] bond8 (unregistering): (slave ip6gre4): Releasing backup interface [ 1636.707304][T16600] ip6gre4 (unregistering): left promiscuous mode [ 1636.881463][T16600] bond13 (unregistering): (slave geneve3): Releasing active interface [ 1636.929281][T16600] bond11 (unregistering): (slave bridge3): Releasing active interface [ 1636.937825][T16600] bridge3 (unregistering): left promiscuous mode [ 1636.948407][T16600] bridge3 (unregistering): left allmulticast mode [ 1636.974547][T16600] batman_adv: batadv0: Removing interface: bond0 [ 1636.982796][T16600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.999518][T16600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.012748][T16600] bond0 (unregistering): Released all slaves [ 1637.025241][T16600] bond1 (unregistering): Released all slaves [ 1637.044100][T16600] bond2 (unregistering): Released all slaves [ 1637.058102][T16600] bond3 (unregistering): Released all slaves [ 1637.073471][T16600] bond4 (unregistering): Released all slaves [ 1637.094879][T16600] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1637.105843][T16600] bond5 (unregistering): Released all slaves [ 1637.110626][ T4943] Bluetooth: hci2: command tx timeout [ 1637.127562][T16600] bond6 (unregistering): Released all slaves [ 1637.145472][T16600] bond7 (unregistering): Released all slaves [ 1637.159885][T16600] bond8 (unregistering): Released all slaves [ 1637.177179][T16600] bond9 (unregistering): Released all slaves [ 1637.195856][T16600] bond10 (unregistering): Released all slaves [ 1637.215867][T16600] bond11 (unregistering): Released all slaves [ 1637.237766][T16600] bond12 (unregistering): Released all slaves [ 1637.257424][T16600] bond13 (unregistering): Released all slaves [ 1637.287692][T22481] tipc: Started in network mode [ 1637.292710][T22481] tipc: Node identity b630ade4b602, cluster identity 4711 [ 1637.302612][T22481] tipc: Enabled bearer , priority 0 [ 1637.357643][T22480] erspan0: entered promiscuous mode [ 1637.374826][T22486] syzkaller0: entered promiscuous mode [ 1637.388419][T22486] syzkaller0: entered allmulticast mode [ 1637.448076][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1637.482571][T22512] netlink: 'syz.5.14433': attribute type 1 has an invalid length. [ 1637.513518][T22512] netlink: 'syz.5.14433': attribute type 4 has an invalid length. [ 1637.536994][T16600] tipc: Left network mode [ 1637.612182][T22489] tipc: Resetting bearer [ 1637.688696][T22489] tipc: Disabling bearer [ 1638.237927][T22549] __nla_validate_parse: 1 callbacks suppressed [ 1638.237946][T22549] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14439'. [ 1638.944799][T22345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.953205][T22345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.970171][T22345] bridge_slave_0: entered allmulticast mode [ 1638.978214][T22345] bridge_slave_0: entered promiscuous mode [ 1639.006321][T22345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.056634][T22345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.075880][T22345] bridge_slave_1: entered allmulticast mode [ 1639.092556][T22345] bridge_slave_1: entered promiscuous mode [ 1639.200003][ T4943] Bluetooth: hci2: command tx timeout [ 1639.293347][T22345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.306384][T22345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.346077][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1639.504379][T22588] syzkaller1: entered promiscuous mode [ 1639.515560][T22588] syzkaller1: entered allmulticast mode [ 1639.744092][T16570] smbdirect: ib_dev[syz1] removed [ 1639.868891][T22592] vxcan1 speed is unknown, defaulting to 1000 [ 1639.872898][T22345] team0: Port device team_slave_0 added [ 1639.897162][T22345] team0: Port device team_slave_1 added [ 1640.227955][T22345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.258272][T22345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.341724][T22345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.381110][T22345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.403339][T22345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.489748][T22345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.586337][T22630] netlink: 48 bytes leftover after parsing attributes in process `syz.6.14458'. [ 1640.624337][T22592] lo speed is unknown, defaulting to 1000 [ 1640.750686][T22345] hsr_slave_0: entered promiscuous mode [ 1640.765854][T22345] hsr_slave_1: entered promiscuous mode [ 1640.776197][T22345] debugfs: 'hsr0' already exists in 'hsr' [ 1640.783387][T22345] Cannot create hsr debugfs directory [ 1640.881142][T22638] bond1: entered promiscuous mode [ 1640.886457][T22638] bond1: entered allmulticast mode [ 1640.901753][T22638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1640.915799][T22646] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14461'. [ 1641.056814][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14462'. [ 1641.155312][T22653] hsr_slave_1 (unregistering): left promiscuous mode [ 1641.169279][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1641.270469][ T4943] Bluetooth: hci2: command tx timeout [ 1641.689283][T16600] hsr_slave_0: left promiscuous mode [ 1641.697301][T16600] hsr_slave_1: left promiscuous mode [ 1641.703841][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.713001][T16600] net_ratelimit: 11 callbacks suppressed [ 1641.713016][T16600] batadv0: mtu less than device minimum [ 1641.726525][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.738381][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.750176][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.762109][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.773938][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.785788][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.797713][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.809548][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.821346][T16600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1641.856535][T22666] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14465'. [ 1641.924037][T16600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.955290][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.022104][T22676] netlink: 41 bytes leftover after parsing attributes in process `syz.6.14466'. [ 1642.039053][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.063299][T16600] batman_adv: batadv0: Interface deactivated: dummy0 [ 1642.082254][T16600] batman_adv: batadv0: Removing interface: dummy0 [ 1642.091901][T22676] netlink: 140 bytes leftover after parsing attributes in process `syz.6.14466'. [ 1642.135015][T16600] veth1_vlan: left promiscuous mode [ 1642.144639][T16600] veth0_vlan: left promiscuous mode [ 1642.248761][T22686] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14469'. [ 1642.834619][T22676] netlink: 41 bytes leftover after parsing attributes in process `syz.6.14466'. [ 1642.854715][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1643.480008][T22715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14476'. [ 1643.516843][T22715] netlink: 'syz.5.14476': attribute type 10 has an invalid length. [ 1643.526709][T22715] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14476'. [ 1643.591937][T22715] team0: Port device geneve1 added [ 1644.031446][T22746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14482'. [ 1644.059152][T22746] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14482'. [ 1644.496032][T22760] netlink: 244 bytes leftover after parsing attributes in process `syz.5.14484'. [ 1644.694802][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14487'. [ 1644.775864][T22763] syzkaller0: entered promiscuous mode [ 1644.793141][T22763] syzkaller0: entered allmulticast mode [ 1644.898483][T22785] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14489'. [ 1644.976713][T22786] vxcan1 speed is unknown, defaulting to 1000 [ 1645.522351][T22812] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14494'. [ 1650.231810][T22786] lo speed is unknown, defaulting to 1000 [ 1650.681136][T22846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14497'. [ 1650.751545][T22849] tipc: Enabling of bearer rejected, failed to enable media [ 1650.992918][T22864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14501'. [ 1651.003756][T22345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1651.051414][T22345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1651.066790][T22345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1651.105909][T22345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1651.130240][T22345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1651.178503][T22345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1651.213670][T22345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1651.229592][T22345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1651.451353][T22345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.497516][T22882] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14503'. [ 1651.521530][T22345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.548605][T22882] netlink: 65019 bytes leftover after parsing attributes in process `syz.0.14503'. [ 1651.617398][T23074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.624600][T23074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.686206][T16589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.693474][T16589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.755471][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14504'. [ 1651.794770][T22890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14504'. [ 1651.832881][T22897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.851601][T22345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1652.069278][T22906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14507'. [ 1652.146748][T22906] team0: Port device team_slave_0 removed [ 1652.443189][T22922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1652.457571][T22915] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 1652.660180][T22941] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14515'. [ 1652.711068][T22946] netlink: 284 bytes leftover after parsing attributes in process `syz.5.14514'. [ 1653.020790][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14516'. [ 1653.099952][T22963] netlink: 'syz.5.14519': attribute type 4 has an invalid length. [ 1653.165349][T22345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.272843][T22971] syzkaller0: entered promiscuous mode [ 1653.291182][T22971] syzkaller0: entered allmulticast mode [ 1653.333726][T22345] veth0_vlan: entered promiscuous mode [ 1653.368519][T22345] veth1_vlan: entered promiscuous mode [ 1653.441521][T22977] netlink: 'syz.0.14523': attribute type 1 has an invalid length. [ 1653.463893][T22345] veth0_macvtap: entered promiscuous mode [ 1653.484076][T22980] netlink: 'syz.5.14524': attribute type 30 has an invalid length. [ 1653.525934][T22345] veth1_macvtap: entered promiscuous mode [ 1653.574611][T22981] bond1: (slave veth0_to_bond): making interface the new active one [ 1653.588751][T22981] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1653.627335][T22977] macvlan5: entered promiscuous mode [ 1653.633204][T22977] macvlan5: entered allmulticast mode [ 1653.639486][T22977] bond1: entered promiscuous mode [ 1653.645310][T22977] veth0_to_bond: entered promiscuous mode [ 1653.652919][T22977] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1653.661055][T22977] bond1: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1653.678478][T22977] bond1: left promiscuous mode [ 1653.683491][T22977] veth0_to_bond: left promiscuous mode [ 1653.765603][T22345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.803522][T22345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.858447][T16600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.886475][T16600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.921829][T16600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.938533][T16600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.254127][T23021] macvlan2: entered promiscuous mode [ 1654.259456][T23021] macvlan2: entered allmulticast mode [ 1654.277913][T16323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.294092][T16323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.364683][T23025] syzkaller0: entered promiscuous mode [ 1654.371991][T23025] syzkaller0: entered allmulticast mode [ 1654.385303][T23018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1654.395867][T16323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.407648][T16323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.571557][T23032] xt_hashlimit: invalid rate [ 1654.768590][T23043] netlink: 'syz.1.14540': attribute type 1 has an invalid length. [ 1654.904918][T23046] bond1: (slave veth0_to_bond): making interface the new active one [ 1654.943107][T23046] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1654.987252][T23043] macvlan2: entered promiscuous mode [ 1655.003731][T23043] macvlan2: entered allmulticast mode [ 1655.014452][T23043] bond1: entered promiscuous mode [ 1655.022809][T23043] veth0_to_bond: entered promiscuous mode [ 1655.033314][T23043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1655.042267][T23043] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1655.060341][T23043] bond1: left promiscuous mode [ 1655.065224][T23043] veth0_to_bond: left promiscuous mode [ 1655.652084][T23089] net_ratelimit: 31 callbacks suppressed [ 1655.652104][T23089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1655.904233][T23109] tipc: Started in network mode [ 1655.911306][T23109] tipc: Node identity e2abf3719244, cluster identity 4711 [ 1655.918818][T23109] tipc: Enabled bearer , priority 0 [ 1656.022333][T23109] syzkaller0: entered promiscuous mode [ 1656.027878][T23109] syzkaller0: entered allmulticast mode [ 1656.039039][T23109] tipc: Resetting bearer [ 1656.087496][T23107] tipc: Resetting bearer [ 1656.166878][T23124] __nla_validate_parse: 6 callbacks suppressed [ 1656.166899][T23124] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14563'. [ 1656.630446][T23132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14565'. [ 1657.361500][T16323] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1660.885698][T23107] tipc: Disabling bearer [ 1660.896882][T23122] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1661.010208][ T7563] tipc: Node number set to 1894773617 [ 1661.205450][T23147] syzkaller0: entered promiscuous mode [ 1661.216753][T23151] netlink: 'syz.0.14569': attribute type 1 has an invalid length. [ 1661.237749][T23147] syzkaller0: entered allmulticast mode [ 1661.252241][T23157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14572'. [ 1661.283820][T23158] dvmrp8: entered allmulticast mode [ 1661.316923][T23151] bond2: (slave gretap2): making interface the new active one [ 1661.340627][T23161] sctp: [Deprecated]: syz.1.14574 (pid 23161) Use of int in max_burst socket option. [ 1661.340627][T23161] Use struct sctp_assoc_value instead [ 1661.365608][T23151] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1661.447473][T23164] netlink: 'syz.3.14575': attribute type 1 has an invalid length. [ 1661.497491][T23163] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1661.545218][T23164] macvlan2: entered promiscuous mode [ 1661.553052][T23164] macvlan2: entered allmulticast mode [ 1661.555541][T23166] Cannot find add_set index 2 as target [ 1661.560557][T23164] bond0: entered promiscuous mode [ 1661.571509][T23164] bond_slave_0: entered promiscuous mode [ 1661.580504][T23164] bond_slave_1: entered promiscuous mode [ 1661.609284][T23164] veth0_to_bond: entered promiscuous mode [ 1661.638291][T23164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1661.696201][T23164] bond0: left promiscuous mode [ 1661.722006][T23164] bond_slave_0: left promiscuous mode [ 1661.724033][T23180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14580'. [ 1661.738363][T23181] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14577'. [ 1661.749386][T23164] bond_slave_1: left promiscuous mode [ 1661.767543][T23164] veth0_to_bond: left promiscuous mode [ 1661.799174][T23186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1661.925112][T23189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14582'. [ 1661.974001][T23193] netlink: 'syz.3.14584': attribute type 1 has an invalid length. [ 1661.988853][T23193] netlink: 'syz.3.14584': attribute type 2 has an invalid length. [ 1661.998167][T23193] netlink: 244 bytes leftover after parsing attributes in process `syz.3.14584'. [ 1662.288342][T23217] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1662.301991][T23217] bond2 (unregistering): Released all slaves [ 1662.363484][T23214] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1662.400354][T23214] bond2 (unregistering): Released all slaves [ 1662.596948][T23228] netlink: 'syz.5.14592': attribute type 1 has an invalid length. [ 1662.617060][T23233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14595'. [ 1662.626743][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14593'. [ 1662.631398][T23228] netlink: 228 bytes leftover after parsing attributes in process `syz.5.14592'. [ 1662.636580][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14595'. [ 1662.674359][T23233] gretap1: entered promiscuous mode [ 1662.680241][T23233] gretap1: entered allmulticast mode [ 1662.833089][T23237] netlink: 'syz.5.14596': attribute type 11 has an invalid length. [ 1662.836965][T23241] syzkaller0: entered promiscuous mode [ 1662.847128][T23241] syzkaller0: entered allmulticast mode [ 1662.968196][T23245] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14600'. [ 1662.990627][T23247] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1663.263443][T23267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.305297][T23272] block nbd0: not configured, cannot reconfigure [ 1663.320822][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057b0f800: rx timeout, send abort [ 1663.434607][T23279] gretap0: entered promiscuous mode [ 1663.444981][T23279] vlan2: entered promiscuous mode [ 1663.829192][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057b0f800: abort rx timeout. Force session deactivation [ 1664.015679][T16589] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1664.033709][T16323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1664.045205][T16323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1664.066439][T16323] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1664.178033][T23325] netlink: 'syz.1.14622': attribute type 5 has an invalid length. [ 1664.204059][T23328] netlink: 'syz.0.14623': attribute type 13 has an invalid length. [ 1664.220628][T23328] netlink: 'syz.0.14623': attribute type 13 has an invalid length. [ 1664.621601][T23352] netlink: 'syz.6.14631': attribute type 14 has an invalid length. [ 1664.643854][T23352] netlink: 'syz.6.14631': attribute type 13 has an invalid length. [ 1664.645843][T23348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1664.735725][T23357] x_tables: unsorted underflow at hook 3 [ 1664.956633][T23361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.964055][T23361] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.971459][T23361] IPv6: NLM_F_CREATE should be set when creating new route [ 1665.023799][T23372] xt_nat: multiple ranges no longer supported [ 1665.177347][T23378] syzkaller0: entered promiscuous mode [ 1665.205164][T23378] syzkaller0: entered allmulticast mode [ 1665.227695][T23383] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1665.725754][T23401] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1665.938143][T16600] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.956701][T16600] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.969011][T16600] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.998311][T16600] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1666.096026][T23435] nbd: must specify an index to disconnect [ 1666.364550][T23456] Dead loop on virtual device ip6_vti0 (net 856), fix it urgently! [ 1666.375544][T23456] Dead loop on virtual device ip6_vti0 (net 856), fix it urgently! [ 1666.383882][T23456] Dead loop on virtual device ip6_vti0 (net 856), fix it urgently! [ 1666.392281][T23456] Dead loop on virtual device ip6_vti0 (net 856), fix it urgently! [ 1666.400567][T23456] Dead loop on virtual device ip6_vti0 (net 856), fix it urgently! [ 1666.469154][T23461] sock: sock_set_timeout: `syz.6.14664' (pid 23461) tries to set negative timeout [ 1666.499294][T23462] validate_nla: 1 callbacks suppressed [ 1666.499314][T23462] netlink: 'syz.1.14667': attribute type 8 has an invalid length. [ 1666.516070][T23464] __nla_validate_parse: 33 callbacks suppressed [ 1666.516087][T23464] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14666'. [ 1666.739591][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14671'. [ 1666.752913][ T5784] IPVS: starting estimator thread 0... [ 1666.818818][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14673'. [ 1666.855266][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14673'. [ 1666.870285][T23480] IPVS: using max 38 ests per chain, 91200 per kthread [ 1666.877520][T23477] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1667.148226][T23505] netlink: 'syz.5.14680': attribute type 1 has an invalid length. [ 1667.625908][T23524] 8021q: VLANs not supported on vcan0 [ 1667.857598][T23536] vxcan1 speed is unknown, defaulting to 1000 [ 1668.092753][T23544] team0 (unregistering): Port device team_slave_0 removed [ 1668.136493][T23544] team0 (unregistering): Port device team_slave_1 removed [ 1668.165901][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14693'. [ 1668.373879][T23536] lo speed is unknown, defaulting to 1000 [ 1669.674146][T23599] sctp: [Deprecated]: syz.3.14705 (pid 23599) Use of int in max_burst socket option deprecated. [ 1669.674146][T23599] Use struct sctp_assoc_value instead [ 1669.796254][T23606] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14706'. [ 1669.880639][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14707'. [ 1674.292175][T23614] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1674.459407][T23624] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1674.468661][T23624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1674.487233][T23628] x_tables: duplicate underflow at hook 1 [ 1674.495375][T23629] x_tables: duplicate underflow at hook 1 [ 1674.495969][T23625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14712'. [ 1674.798770][T23649] netlink: 'syz.5.14718': attribute type 142 has an invalid length. [ 1674.813078][T23649] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1674.826306][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1674.837185][T23649] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1674.847198][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1674.878706][T23649] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1674.908244][T23649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14718'. [ 1675.295140][T23679] vxcan1 speed is unknown, defaulting to 1000 [ 1675.463940][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14730'. [ 1675.485650][T23689] bridge_slave_0: default FDB implementation only supports local addresses [ 1675.616780][T23697] vcan1: entered promiscuous mode [ 1675.632999][T23697] vcan1: entered allmulticast mode [ 1675.674689][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14733'. [ 1675.687364][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14733'. [ 1675.785760][T23679] lo speed is unknown, defaulting to 1000 [ 1676.117353][T23718] xt_hashlimit: size too large, truncated to 1048576 [ 1676.221212][T23724] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1676.392744][T23733] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1676.669110][T23744] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1676.797104][T23750] IPv6: sit1: Disabled Multicast RS [ 1676.823019][T23750] sit1: entered allmulticast mode [ 1677.057798][T23757] vxcan1 speed is unknown, defaulting to 1000 [ 1677.571759][T23777] syzkaller0: entered promiscuous mode [ 1677.586568][T23777] syzkaller0: entered allmulticast mode [ 1677.612984][T23778] 0: reclassify loop, rule prio 0, protocol 800 [ 1677.631902][T23757] lo speed is unknown, defaulting to 1000 [ 1678.338748][T23807] veth3: entered promiscuous mode [ 1678.935171][T23843] netlink: 'syz.5.14776': attribute type 1 has an invalid length. [ 1679.644698][T23880] __nla_validate_parse: 12 callbacks suppressed [ 1679.644718][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14787'. [ 1679.754337][T23880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14787'. [ 1679.951888][T23890] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:5 [ 1680.117082][T23913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14796'. [ 1680.128385][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14798'. [ 1680.234354][T23911] netlink: 'syz.3.14798': attribute type 1 has an invalid length. [ 1680.414580][T23925] netlink: 'syz.5.14802': attribute type 2 has an invalid length. [ 1680.469113][T23929] tipc: New replicast peer: 255.255.255.255 [ 1680.486022][T23929] tipc: Enabled bearer , priority 10 [ 1680.596450][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14809'. [ 1680.614197][T23935] netlink: 'syz.0.14806': attribute type 1 has an invalid length. [ 1680.714703][T23935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1680.749502][T23940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14808'. [ 1681.019239][T23955] IPVS: persistence engine module ip_vs_pe_ not found [ 1681.334268][T23971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14817'. [ 1681.339051][T23973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.028200][T24006] nbd: must specify a device to reconfigure [ 1682.129595][T24013] netlink: 'syz.0.14833': attribute type 1 has an invalid length. [ 1682.150170][T24013] netlink: 'syz.0.14833': attribute type 1 has an invalid length. [ 1682.164187][T24015] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.14832'. [ 1682.254711][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14833'. [ 1682.296347][T24006] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.317610][T24006] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.395680][T24019] netlink: 'syz.3.14834': attribute type 3 has an invalid length. [ 1682.537595][T24028] netlink: 'syz.5.14835': attribute type 26 has an invalid length. [ 1682.582751][T24006] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.594237][T24006] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.613776][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14835'. [ 1682.646743][T24036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.669014][T24036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.768318][T24006] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.780487][T24006] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.916649][T24006] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.946067][T24006] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.998987][T24047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.090609][T16323] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.099023][T16323] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.121194][T16323] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.131837][T16323] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.149130][T16323] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.158153][T16323] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.181282][T13188] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.191947][T13188] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.427817][T24066] syzkaller1: entered promiscuous mode [ 1683.434805][T24066] syzkaller1: entered allmulticast mode [ 1683.846784][T24096] netlink: 'syz.5.14858': attribute type 39 has an invalid length. [ 1684.010778][T24099] openvswitch: netlink: Duplicate key (type 6). [ 1685.092363][T24155] __nla_validate_parse: 61 callbacks suppressed [ 1685.092380][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14877'. [ 1685.108827][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14877'. [ 1685.148223][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14877'. [ 1685.386834][T24177] netlink: 260 bytes leftover after parsing attributes in process `syz.3.14883'. [ 1685.468092][T24182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14885'. [ 1685.587722][T24189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.604027][T24189] bridge_slave_0 (unregistering): left allmulticast mode [ 1685.626668][T24189] bridge_slave_0 (unregistering): left promiscuous mode [ 1685.635811][T24189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.884560][T24207] netlink: 'syz.5.14892': attribute type 2 has an invalid length. [ 1686.192120][T24230] netlink: 'syz.0.14898': attribute type 1 has an invalid length. [ 1686.200415][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14898'. [ 1686.209443][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14898'. [ 1686.286685][T24230] netlink: 'syz.0.14898': attribute type 3 has an invalid length. [ 1686.301137][T24238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14901'. [ 1686.441226][T24243] veth0_to_bond: entered allmulticast mode [ 1686.448264][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.468209][T24243] netlink: 'syz.1.14903': attribute type 2 has an invalid length. [ 1686.539243][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.579216][T24246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14900'. [ 1686.598712][T24246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14900'. [ 1686.644010][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.836433][T24265] netlink: 'syz.1.14909': attribute type 21 has an invalid length. [ 1686.904113][T24269] bond8: option min_links: invalid value (18446744073709551614) [ 1686.912227][T24269] bond8: option min_links: allowed values 0 - 2147483647 [ 1686.923834][T24269] bond8 (unregistering): Released all slaves [ 1687.158960][T24287] mac80211_hwsim hwsim136 ÿ: renamed from wlan1 (while UP) [ 1687.756032][T24320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.981704][T24339] netlink: 'syz.0.14930': attribute type 11 has an invalid length. [ 1688.014514][T24341] IPv6: addrconf: prefix option has invalid lifetime [ 1688.082007][T13188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.107499][T13188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.116322][T19788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.252489][T24348] xt_connbytes: Forcing CT accounting to be enabled [ 1688.430335][T19788] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.446106][T24359] Cannot find del_set index 3 as target [ 1688.607485][T24363] bond0: entered promiscuous mode [ 1688.620308][T24363] bond_slave_0: entered promiscuous mode [ 1688.635476][T24363] bond_slave_1: entered promiscuous mode [ 1688.649076][T24363] batadv0: entered promiscuous mode [ 1688.656795][T24363] debugfs: 'hsr1' already exists in 'hsr' [ 1688.663301][T24363] Cannot create hsr debugfs directory [ 1688.672812][T19787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1688.683981][T24363] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1688.694441][T24363] bond0: left promiscuous mode [ 1688.699552][T24363] bond_slave_0: left promiscuous mode [ 1688.706968][T24363] bond_slave_1: left promiscuous mode [ 1688.719071][T24363] batadv0: left promiscuous mode [ 1688.745719][T24374] netlink: 'syz.1.14944': attribute type 7 has an invalid length. [ 1689.036925][T24402] FAULT_INJECTION: forcing a failure. [ 1689.036925][T24402] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.053199][T24402] CPU: 1 UID: 0 PID: 24402 Comm: syz.3.14953 Not tainted syzkaller #0 PREEMPT(full) [ 1689.053226][T24402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1689.053238][T24402] Call Trace: [ 1689.053246][T24402] [ 1689.053255][T24402] dump_stack_lvl+0xe8/0x150 [ 1689.053380][T24402] should_fail_ex+0x40c/0x560 [ 1689.053408][T24402] should_failslab+0xa8/0x100 [ 1689.053437][T24402] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1689.053458][T24402] ? local_lock_release+0x9c/0x160 [ 1689.053486][T24402] ? __alloc_skb+0x1d7/0x7a0 [ 1689.053508][T24402] ? __alloc_skb+0x1d7/0x7a0 [ 1689.053537][T24402] __alloc_skb+0x1d7/0x7a0 [ 1689.053566][T24402] netlink_sendmsg+0x5d4/0xb40 [ 1689.053594][T24402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1689.053617][T24402] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1689.053642][T24402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1689.053659][T24402] sock_sendmsg_nosec+0x13a/0x180 [ 1689.053685][T24402] ____sys_sendmsg+0x54e/0x850 [ 1689.053709][T24402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1689.053735][T24402] ? import_iovec+0x73/0xa0 [ 1689.053765][T24402] ___sys_sendmsg+0x2a5/0x360 [ 1689.053782][T24402] ? __lock_acquire+0x683/0x2cf0 [ 1689.053812][T24402] ? __pfx____sys_sendmsg+0x10/0x10 [ 1689.053870][T24402] ? __fget_files+0x2a/0x420 [ 1689.053894][T24402] ? __fget_files+0x3a2/0x420 [ 1689.053928][T24402] __x64_sys_sendmsg+0x1b1/0x290 [ 1689.053951][T24402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1689.053987][T24402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.054012][T24402] do_syscall_64+0x174/0x580 [ 1689.054032][T24402] ? trace_irq_disable+0x3b/0x140 [ 1689.054058][T24402] ? clear_bhb_loop+0x40/0x90 [ 1689.054084][T24402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.054104][T24402] RIP: 0033:0x7f118bb9de99 [ 1689.054123][T24402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.054140][T24402] RSP: 002b:00007f118ca54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1689.054161][T24402] RAX: ffffffffffffffda RBX: 00007f118be25fa0 RCX: 00007f118bb9de99 [ 1689.054176][T24402] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1689.054188][T24402] RBP: 00007f118ca54090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.054200][T24402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.054211][T24402] R13: 00007f118be26038 R14: 00007f118be25fa0 R15: 00007ffc97b100f8 [ 1689.054243][T24402] [ 1689.350362][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1689.364951][T16570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1689.552613][T24423] netlink: 'syz.1.14960': attribute type 4 has an invalid length. [ 1689.637792][T24426] vlan2: entered promiscuous mode [ 1689.843165][T24447] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1689.903656][T24454] syzkaller0: entered promiscuous mode [ 1689.913964][T24454] syzkaller0: entered allmulticast mode [ 1690.418807][T24486] __nla_validate_parse: 16 callbacks suppressed [ 1690.418825][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14981'. [ 1690.477496][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14981'. [ 1690.489088][T24486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1690.788833][T24501] syzkaller0: entered promiscuous mode [ 1690.803810][T24501] syzkaller0: entered allmulticast mode [ 1690.899439][T24508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14988'. [ 1691.178961][T24527] netlink: 'syz.6.14993': attribute type 12 has an invalid length. [ 1691.220752][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14992'. [ 1691.243441][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14993'. [ 1691.257488][T24531] netlink: 6212 bytes leftover after parsing attributes in process `syz.0.14994'. [ 1691.271588][T24527] netlink: 'syz.6.14993': attribute type 12 has an invalid length. [ 1691.286613][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14995'. [ 1691.311269][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14993'. [ 1691.430351][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 1691.544046][T24543] netlink: 'syz.5.14998': attribute type 1 has an invalid length. [ 1691.552616][T24543] netlink: 208 bytes leftover after parsing attributes in process `syz.5.14998'. [ 1691.563946][T24539] can: request_module (can-proto-5) failed. [ 1691.639025][T24547] netlink: 'syz.5.15000': attribute type 1 has an invalid length. [ 1691.731945][T24552] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15003'. [ 1691.759437][T24547] bond3: (slave veth0_to_bond): Releasing backup interface [ 1691.817481][T24547] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1691.865697][T24556] macvlan7: entered promiscuous mode [ 1691.877111][T24556] macvlan7: entered allmulticast mode [ 1691.887083][T24556] bond8: entered promiscuous mode [ 1691.893741][T24556] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1691.907111][T24556] bond8: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1691.951010][T24556] bond8: left promiscuous mode [ 1691.971009][T24562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1692.144624][T24578] netlink: 'syz.1.15010': attribute type 9 has an invalid length. [ 1692.550405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1692.712551][T24611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.758114][T24617] veth0_virt_wifi: entered promiscuous mode [ 1692.778940][T24617] veth0_virt_wifi: entered allmulticast mode [ 1693.259012][T24646] netlink: 'syz.6.15030': attribute type 15 has an invalid length. [ 1693.462066][T24653] FAULT_INJECTION: forcing a failure. [ 1693.462066][T24653] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.518819][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.1.15035 Not tainted syzkaller #0 PREEMPT(full) [ 1693.518849][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1693.518861][T24653] Call Trace: [ 1693.518869][T24653] [ 1693.518877][T24653] dump_stack_lvl+0xe8/0x150 [ 1693.518913][T24653] should_fail_ex+0x40c/0x560 [ 1693.518943][T24653] should_failslab+0xa8/0x100 [ 1693.518972][T24653] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1693.518995][T24653] ? skb_clone+0x212/0x3a0 [ 1693.519014][T24653] ? skb_clone+0x212/0x3a0 [ 1693.519040][T24653] skb_clone+0x212/0x3a0 [ 1693.519064][T24653] __netlink_deliver_tap+0x413/0x860 [ 1693.519098][T24653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1693.519120][T24653] netlink_deliver_tap+0x19c/0x1b0 [ 1693.519141][T24653] netlink_sendskb+0x68/0x140 [ 1693.519171][T24653] netlink_rcv_skb+0x2a4/0x4a0 [ 1693.519191][T24653] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1693.519221][T24653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1693.519255][T24653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1693.519275][T24653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1693.519298][T24653] netlink_unicast+0x7bb/0x940 [ 1693.519335][T24653] netlink_sendmsg+0x813/0xb40 [ 1693.519365][T24653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1693.519391][T24653] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1693.519417][T24653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1693.519437][T24653] sock_sendmsg_nosec+0x13a/0x180 [ 1693.519465][T24653] ____sys_sendmsg+0x54e/0x850 [ 1693.519490][T24653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1693.519519][T24653] ? import_iovec+0x73/0xa0 [ 1693.519551][T24653] ___sys_sendmsg+0x2a5/0x360 [ 1693.519570][T24653] ? __lock_acquire+0x683/0x2cf0 [ 1693.519601][T24653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1693.519661][T24653] ? __fget_files+0x2a/0x420 [ 1693.519681][T24653] ? __fget_files+0x3a2/0x420 [ 1693.519712][T24653] __x64_sys_sendmsg+0x1b1/0x290 [ 1693.519731][T24653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1693.519766][T24653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.519786][T24653] do_syscall_64+0x174/0x580 [ 1693.519810][T24653] ? trace_irq_disable+0x3b/0x140 [ 1693.519833][T24653] ? clear_bhb_loop+0x40/0x90 [ 1693.519855][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.519874][T24653] RIP: 0033:0x7f1acad9de99 [ 1693.519892][T24653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.519907][T24653] RSP: 002b:00007f1acbd12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.519925][T24653] RAX: ffffffffffffffda RBX: 00007f1acb025fa0 RCX: 00007f1acad9de99 [ 1693.519938][T24653] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1693.519949][T24653] RBP: 00007f1acbd12090 R08: 0000000000000000 R09: 0000000000000000 [ 1693.519960][T24653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1693.519971][T24653] R13: 00007f1acb026038 R14: 00007f1acb025fa0 R15: 00007ffe068f9038 [ 1693.520004][T24653] [ 1694.013500][T24667] netlink: 'syz.1.15040': attribute type 16 has an invalid length. [ 1694.028778][T24663] ip6gre1: entered allmulticast mode [ 1694.031977][T24667] netlink: 'syz.1.15040': attribute type 17 has an invalid length. [ 1694.155050][T24663] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 1694.202885][T24663] bond4 (unregistering): Released all slaves [ 1694.243257][T16323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1694.269609][T24667] veth0_to_bond: left allmulticast mode [ 1694.372131][T24667] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1694.401426][T24683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1694.420574][T24686] bridge0: port 3(syz_tun) entered blocking state [ 1694.431554][T24686] bridge0: port 3(syz_tun) entered disabled state [ 1694.445726][T24686] syz_tun: entered allmulticast mode [ 1694.467768][T24686] syz_tun: entered promiscuous mode [ 1694.484755][T24686] bridge0: port 3(syz_tun) entered blocking state [ 1694.494050][T24686] bridge0: port 3(syz_tun) entered forwarding state [ 1694.653255][T24701] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1694.923253][T24721] netlink: 'syz.0.15055': attribute type 15 has an invalid length. [ 1694.985523][T24723] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1695.005439][T16323] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1695.015184][T24721] netlink: 'syz.0.15055': attribute type 15 has an invalid length. [ 1695.037411][T16323] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1695.063263][T16323] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1695.097038][T16323] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1695.392900][T24716] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1695.648872][T24753] __nla_validate_parse: 13 callbacks suppressed [ 1695.648895][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15064'. [ 1695.747525][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15064'. [ 1697.909896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1698.063074][T24754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.070768][T24754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.143176][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.155790][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.212220][T24733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1698.421924][T24755] mac80211_hwsim hwsim152 ÿ: renamed from wlan1 [ 1698.469647][T16592] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.483785][T16592] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.511822][T16592] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.547414][T24763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15066'. [ 1698.565636][T16592] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.593514][T16592] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.604677][T24763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15066'. [ 1698.627957][T16592] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.660451][T16592] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.680254][T16592] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.823122][T24777] netlink: 10184 bytes leftover after parsing attributes in process `syz.0.15071'. [ 1698.881161][T24777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15071'. [ 1699.005746][T24791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15074'. [ 1699.044221][T24791] netlink: 'syz.5.15074': attribute type 12 has an invalid length. [ 1699.327707][T24812] erspan0: left promiscuous mode [ 1699.587780][T24820] No such timeout policy "syz0" [ 1699.598435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1699.685518][T24826] mac80211_hwsim hwsim146 wlan0: entered promiscuous mode [ 1699.708636][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15082'. [ 1700.369028][T24872] 8021q: VLANs not supported on ip_vti0 [ 1700.550547][T24882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15097'. [ 1700.591192][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15098'. [ 1700.657512][T24888] __nla_validate_parse: 2 callbacks suppressed [ 1700.657533][T24888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15099'. [ 1700.749535][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15101'. [ 1700.768186][T24895] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1700.903985][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15105'. [ 1701.053161][T24911] syzkaller0: entered promiscuous mode [ 1701.079864][T24911] syzkaller0: entered allmulticast mode [ 1701.209160][T24918] FAULT_INJECTION: forcing a failure. [ 1701.209160][T24918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.237721][T24918] CPU: 0 UID: 0 PID: 24918 Comm: syz.0.15110 Not tainted syzkaller #0 PREEMPT(full) [ 1701.237748][T24918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1701.237761][T24918] Call Trace: [ 1701.237769][T24918] [ 1701.237778][T24918] dump_stack_lvl+0xe8/0x150 [ 1701.237813][T24918] should_fail_ex+0x40c/0x560 [ 1701.237841][T24918] _copy_from_user+0x2d/0xb0 [ 1701.237869][T24918] kstrtouint_from_user+0xd6/0x180 [ 1701.237897][T24918] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1701.237939][T24918] proc_fail_nth_write+0x8e/0x210 [ 1701.237967][T24918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1701.238001][T24918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1701.238027][T24918] vfs_write+0x296/0xba0 [ 1701.238063][T24918] ? __pfx_vfs_write+0x10/0x10 [ 1701.238093][T24918] ? __fget_files+0x2a/0x420 [ 1701.238121][T24918] ? __fget_files+0x3a2/0x420 [ 1701.238143][T24918] ? __fget_files+0x2a/0x420 [ 1701.238184][T24918] ksys_write+0x150/0x270 [ 1701.238215][T24918] ? __pfx_ksys_write+0x10/0x10 [ 1701.238253][T24918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.238274][T24918] do_syscall_64+0x174/0x580 [ 1701.238296][T24918] ? clear_bhb_loop+0x40/0x90 [ 1701.238320][T24918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.238339][T24918] RIP: 0033:0x7fda72d5e6ce [ 1701.238360][T24918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1701.238378][T24918] RSP: 002b:00007fda73becfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1701.238398][T24918] RAX: ffffffffffffffda RBX: 00007fda73bed6c0 RCX: 00007fda72d5e6ce [ 1701.238413][T24918] RDX: 0000000000000001 RSI: 00007fda73bed0a0 RDI: 0000000000000004 [ 1701.238425][T24918] RBP: 00007fda73bed090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.238438][T24918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.238449][T24918] R13: 00007fda73026038 R14: 00007fda73025fa0 R15: 00007ffec4c2d968 [ 1701.238483][T24918] [ 1701.500972][T24931] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1701.559250][T24935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15115'. [ 1701.744337][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15118'. [ 1701.807630][T24948] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15118'. [ 1701.916952][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15121'. [ 1702.128228][T24964] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1702.150028][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1702.232828][T24974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1702.272069][ T7563] IPVS: starting estimator thread 0... [ 1702.340328][T24970] netlink: 'syz.0.15128': attribute type 10 has an invalid length. [ 1702.369960][T24978] IPVS: using max 30 ests per chain, 72000 per kthread [ 1702.556237][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15135'. [ 1702.591027][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15135'. [ 1702.775315][T25002] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1702.814170][T25004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15140'. [ 1703.316631][T25042] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1703.480703][T25042] mac80211_hwsim hwsim158 wlan0: entered promiscuous mode [ 1703.589331][T25053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1703.629517][T25058] netlink: 'syz.0.15153': attribute type 11 has an invalid length. [ 1703.676866][T25064] netlink: 'syz.0.15153': attribute type 11 has an invalid length. [ 1704.398708][T25112] netlink: 'syz.0.15163': attribute type 21 has an invalid length. [ 1704.635804][ T202] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1704.650454][T25127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1704.664715][ T202] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1704.723869][ T202] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1704.757316][ T202] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1705.349906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1705.465122][T25185] netlink: 'syz.5.15182': attribute type 15 has an invalid length. [ 1705.869171][T25207] __nla_validate_parse: 17 callbacks suppressed [ 1705.869191][T25207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15191'. [ 1705.952302][T25213] netlink: 'syz.0.15194': attribute type 1 has an invalid length. [ 1706.023634][T25213] bond1: (slave veth0_to_bond): Releasing active interface [ 1706.058949][T25213] bond4: (slave veth0_to_bond): making interface the new active one [ 1706.087203][T25213] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1706.097210][T25216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1706.114545][T25224] macvlan5: entered promiscuous mode [ 1706.158781][T25224] macvlan5: entered allmulticast mode [ 1706.183319][T25224] bond4: entered promiscuous mode [ 1706.188469][T25224] veth0_to_bond: entered promiscuous mode [ 1706.213977][T25224] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1706.231089][T25224] bond4: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1706.252259][T25224] bond4: left promiscuous mode [ 1706.257190][T25224] veth0_to_bond: left promiscuous mode [ 1706.383829][T25244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15202'. [ 1706.692631][T25255] netlink: 'syz.1.15204': attribute type 1 has an invalid length. [ 1706.819032][T25255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1706.983362][T25255] bond4: (slave geneve3): making interface the new active one [ 1707.009546][T25255] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1707.116893][T25281] pim6reg1: entered promiscuous mode [ 1707.126497][T25281] pim6reg1: entered allmulticast mode [ 1707.138639][T25281] netlink: 'syz.3.15215': attribute type 1 has an invalid length. [ 1707.161427][T25281] netlink: 240 bytes leftover after parsing attributes in process `syz.3.15215'. [ 1707.171210][T25281] netlink: 'syz.3.15215': attribute type 1 has an invalid length. [ 1707.584687][T25308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.602600][T25308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15224'. [ 1707.614230][T25310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15226'. [ 1707.659180][T25310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15226'. [ 1707.705761][T25317] bond0: entered promiscuous mode [ 1707.711561][T25317] bond_slave_0: entered promiscuous mode [ 1707.718726][T25317] bond_slave_1: entered promiscuous mode [ 1707.727057][T25317] batadv0: entered promiscuous mode [ 1707.734055][T25317] debugfs: 'hsr1' already exists in 'hsr' [ 1707.740429][T25317] Cannot create hsr debugfs directory [ 1707.746289][T25317] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1707.765102][T25317] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1707.776527][T25317] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1707.784282][T25317] bond0: left promiscuous mode [ 1707.789283][T25317] bond_slave_0: left promiscuous mode [ 1707.794998][T25317] bond_slave_1: left promiscuous mode [ 1707.801899][T25317] batadv0: left promiscuous mode [ 1707.878552][T25325] bond5: option fail_over_mac: invalid value (16) [ 1707.887725][T25325] bond5 (unregistering): Released all slaves [ 1707.965323][T25327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.144985][T25334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15234'. [ 1708.726785][T25361] tipc: Enabling of bearer rejected, failed to enable media [ 1708.832348][T25365] netlink: 'syz.3.15243': attribute type 1 has an invalid length. [ 1708.891030][T25365] bond0: (slave veth0_to_bond): Releasing backup interface [ 1708.927783][T25365] bond1: (slave veth0_to_bond): making interface the new active one [ 1708.939449][T25365] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1708.981274][T25367] macvlan2: entered promiscuous mode [ 1708.999425][T25367] macvlan2: entered allmulticast mode [ 1709.041035][T25367] bond1: entered promiscuous mode [ 1709.060592][T25367] veth0_to_bond: entered promiscuous mode [ 1709.073230][T25367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1709.090360][T25367] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1709.126299][T25367] bond1: left promiscuous mode [ 1709.136848][T25367] veth0_to_bond: left promiscuous mode [ 1709.282061][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15245'. [ 1709.442056][T25386] sctp: [Deprecated]: syz.1.15248 (pid 25386) Use of int in maxseg socket option. [ 1709.442056][T25386] Use struct sctp_assoc_value instead [ 1709.526980][T25390] netlink: 72 bytes leftover after parsing attributes in process `syz.5.15250'. [ 1709.657825][T25396] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15252'. [ 1709.673258][T25399] netlink: 'syz.5.15253': attribute type 21 has an invalid length. [ 1709.809969][T25410] netlink: 'syz.3.15256': attribute type 1 has an invalid length. [ 1709.891546][T25410] bond1: (slave veth0_to_bond): Releasing active interface [ 1709.932385][T25410] bond2: (slave veth0_to_bond): making interface the new active one [ 1709.945547][T25410] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1709.983575][T25416] macvlan2: entered promiscuous mode [ 1709.989285][T25416] macvlan2: entered allmulticast mode [ 1710.003182][T25416] bond2: entered promiscuous mode [ 1710.009276][T25416] veth0_to_bond: entered promiscuous mode [ 1710.029405][T25416] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1710.050274][T25416] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1710.068284][T25416] bond2: left promiscuous mode [ 1710.076254][T25416] veth0_to_bond: left promiscuous mode [ 1710.522509][T25434] lo: entered allmulticast mode [ 1710.592374][T25438] netlink: 'syz.1.15267': attribute type 7 has an invalid length. [ 1710.620788][T25438] netlink: 'syz.1.15267': attribute type 8 has an invalid length. [ 1710.819883][T25451] netlink: 'syz.5.15272': attribute type 1 has an invalid length. [ 1710.868612][T25457] sctp: [Deprecated]: syz.1.15273 (pid 25457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1710.868612][T25457] Use struct sctp_sack_info instead [ 1711.001564][T25451] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1711.103633][T25451] __nla_validate_parse: 8 callbacks suppressed [ 1711.103656][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15272'. [ 1711.199054][T25477] tipc: Enabling of bearer rejected, failed to enable media [ 1711.253849][T25476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15278'. [ 1711.332136][T25481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1711.373320][T25479] netlink: 'syz.0.15278': attribute type 1 has an invalid length. [ 1711.426544][T25488] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15284'. [ 1711.443257][T25488] openvswitch: netlink: Flow key attr not present in new flow. [ 1711.477622][T25490] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1711.506599][T25490] syzkaller1: linktype set to 823 [ 1711.730976][T25502] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1711.773132][T25494] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1711.794903][T25494] syzkaller0: entered promiscuous mode [ 1711.811530][T25494] syzkaller0: entered allmulticast mode [ 1711.843429][T25504] IPVS: set_ctl: invalid protocol: 33 172.30.1.1:20001 [ 1711.918077][T25507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15289'. [ 1712.152732][T25521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15294'. [ 1712.153160][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15293'. [ 1712.177473][T25520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15295'. [ 1712.704991][T25546] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1712.717624][T25546] syzkaller0: entered promiscuous mode [ 1712.724376][T25546] syzkaller0: entered allmulticast mode [ 1712.819443][T25556] netlink: 'syz.5.15306': attribute type 21 has an invalid length. [ 1712.869066][T25556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15306'. [ 1712.930890][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15308'. [ 1713.110560][T22350] Bluetooth: hci2: command 0x0405 tx timeout [ 1713.218262][T25587] netlink: 'syz.1.15317': attribute type 28 has an invalid length. [ 1713.241709][T25587] netlink: 'syz.1.15317': attribute type 3 has an invalid length. [ 1713.250284][T25587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15317'. [ 1713.466085][T25601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.601366][T25601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.647941][T25605] bridge0: port 1(ipvlan2) entered blocking state [ 1713.680069][T25605] bridge0: port 1(ipvlan2) entered disabled state [ 1713.693336][T25605] ipvlan2: entered allmulticast mode [ 1713.704882][T25605] bridge0: entered allmulticast mode [ 1713.721170][T25605] ipvlan2: left allmulticast mode [ 1713.736767][T25605] bridge0: left allmulticast mode [ 1713.771246][T25609] ip6_vti0: entered promiscuous mode [ 1713.945924][T25616] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 1713.974218][T25610] syzkaller0: entered promiscuous mode [ 1713.981540][T25610] syzkaller0: entered allmulticast mode [ 1713.985234][T25635] FAULT_INJECTION: forcing a failure. [ 1713.985234][T25635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.026132][T25635] CPU: 1 UID: 0 PID: 25635 Comm: syz.1.15332 Not tainted syzkaller #0 PREEMPT(full) [ 1714.026160][T25635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1714.026173][T25635] Call Trace: [ 1714.026181][T25635] [ 1714.026189][T25635] dump_stack_lvl+0xe8/0x150 [ 1714.026225][T25635] should_fail_ex+0x40c/0x560 [ 1714.026253][T25635] _copy_from_iter+0x1d3/0x1660 [ 1714.026277][T25635] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1714.026300][T25635] ? rcu_is_watching+0x15/0xb0 [ 1714.026329][T25635] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1714.026350][T25635] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1714.026371][T25635] ? __pfx__copy_from_iter+0x10/0x10 [ 1714.026394][T25635] ? __alloc_skb+0x276/0x7a0 [ 1714.026419][T25635] ? __alloc_skb+0x276/0x7a0 [ 1714.026451][T25635] ? netlink_sendmsg+0x650/0xb40 [ 1714.026470][T25635] ? skb_put+0x112/0x210 [ 1714.026500][T25635] netlink_sendmsg+0x6c0/0xb40 [ 1714.026530][T25635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1714.026555][T25635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1714.026581][T25635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1714.026600][T25635] sock_sendmsg_nosec+0x13a/0x180 [ 1714.026627][T25635] ____sys_sendmsg+0x54e/0x850 [ 1714.026651][T25635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1714.026678][T25635] ? import_iovec+0x73/0xa0 [ 1714.026709][T25635] ___sys_sendmsg+0x2a5/0x360 [ 1714.026727][T25635] ? __lock_acquire+0x683/0x2cf0 [ 1714.026757][T25635] ? __pfx____sys_sendmsg+0x10/0x10 [ 1714.026812][T25635] ? __fget_files+0x2a/0x420 [ 1714.026836][T25635] ? __fget_files+0x3a2/0x420 [ 1714.026879][T25635] __x64_sys_sendmsg+0x1b1/0x290 [ 1714.026901][T25635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1714.026939][T25635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.026960][T25635] do_syscall_64+0x174/0x580 [ 1714.026979][T25635] ? trace_irq_disable+0x3b/0x140 [ 1714.027003][T25635] ? clear_bhb_loop+0x40/0x90 [ 1714.027027][T25635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.027045][T25635] RIP: 0033:0x7f1acad9de99 [ 1714.027064][T25635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.027081][T25635] RSP: 002b:00007f1acbd12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.027102][T25635] RAX: ffffffffffffffda RBX: 00007f1acb025fa0 RCX: 00007f1acad9de99 [ 1714.027116][T25635] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1714.027129][T25635] RBP: 00007f1acbd12090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.027141][T25635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.027153][T25635] R13: 00007f1acb026038 R14: 00007f1acb025fa0 R15: 00007ffe068f9038 [ 1714.027185][T25635] [ 1714.069830][T25638] netlink: 'syz.5.15333': attribute type 18 has an invalid length. [ 1714.197683][T25640] tipc: Failed to remove unknown binding: 66,0,0/0:1878968095/1878968096 [ 1714.332102][T25640] tipc: Failed to remove unknown binding: 66,0,0/0:1878968095/1878968096 [ 1714.364934][T25640] nbd: must specify at least one socket [ 1714.442221][T25652] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1717.030048][ T4943] Bluetooth: hci6: command 0x0405 tx timeout [ 1717.522844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1719.429964][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.996722][T25684] netlink: 'syz.3.15345': attribute type 22 has an invalid length. [ 1720.022998][T25684] __nla_validate_parse: 5 callbacks suppressed [ 1720.023018][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1720.064055][T25684] netlink: 'syz.3.15345': attribute type 22 has an invalid length. [ 1720.116240][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15345'. [ 1720.221511][T25699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15351'. [ 1720.352004][T25704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15353'. [ 1720.692117][T25735] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1720.837195][T25744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15364'. [ 1721.251397][T25773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15370'. [ 1721.268575][T25761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1721.302295][T25787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15372'. [ 1721.349941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1721.488196][T25796] netlink: 'syz.0.15374': attribute type 1 has an invalid length. [ 1721.617874][T25793] vlan2: entered promiscuous mode [ 1722.247788][T25823] netlink: 'syz.6.15383': attribute type 10 has an invalid length. [ 1722.286854][T25823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.296648][T25823] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1722.334214][T25823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1722.368267][T25823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.377675][T25827] netlink: 'syz.1.15384': attribute type 21 has an invalid length. [ 1722.382585][T25833] x_tables: duplicate entry at hook 2 [ 1722.394730][T25823] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1722.407244][T25823] bond0 (unregistering): Released all slaves [ 1722.436326][T25827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15384'. [ 1722.571800][T25841] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1722.636422][T25845] lo speed is unknown, defaulting to 1000 [ 1722.692968][T25845] lo speed is unknown, defaulting to 1000 [ 1722.749030][T25851] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1722.782816][T25858] netlink: 'syz.5.15392': attribute type 1 has an invalid length. [ 1722.808358][T25851] bond0 (unregistering): Released all slaves [ 1722.839849][T25845] lo speed is unknown, defaulting to 1000 [ 1722.926965][T25855] bond8: (slave veth0_to_bond): Releasing active interface [ 1722.985137][T25855] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1723.038079][T25858] macvlan7: entered promiscuous mode [ 1723.045341][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15391'. [ 1723.051287][T25858] macvlan7: entered allmulticast mode [ 1723.072528][T25858] bond10: entered promiscuous mode [ 1723.090652][T25858] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 1723.098505][T25858] bond10: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1723.140724][T25858] bond10: left promiscuous mode [ 1723.338653][T25845] infiniband syz1: set down [ 1723.346302][ T7577] lo speed is unknown, defaulting to 1000 [ 1723.362611][T25845] infiniband syz1: added lo [ 1723.393717][T25845] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1723.410222][T25845] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1723.428017][T25845] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1723.480768][T25845] RDS/IB: syz1: added [ 1723.485465][T25845] smc: adding ib device syz1 with port count 1 [ 1723.492546][T25845] smc: ib device syz1 port 1 has no pnetid [ 1723.498803][ T7577] lo speed is unknown, defaulting to 1000 [ 1723.507435][T25845] lo speed is unknown, defaulting to 1000 [ 1723.771702][T25888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15401'. [ 1723.868477][T25881] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 1723.878075][T25881] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿ [ 1724.046801][T25845] lo speed is unknown, defaulting to 1000 [ 1724.048805][T25900] netlink: 'syz.3.15408': attribute type 21 has an invalid length. [ 1724.305729][T25845] lo speed is unknown, defaulting to 1000 [ 1724.625905][T25845] lo speed is unknown, defaulting to 1000 [ 1724.702553][T25918] netlink: 'syz.0.15415': attribute type 1 has an invalid length. [ 1724.734645][T25918] netlink: 'syz.0.15415': attribute type 1 has an invalid length. [ 1724.764195][T25918] netlink: 'syz.0.15415': attribute type 2 has an invalid length. [ 1725.102511][T25845] lo speed is unknown, defaulting to 1000 [ 1725.222094][T25952] validate_nla: 1 callbacks suppressed [ 1725.222113][T25952] netlink: 'syz.3.15424': attribute type 4 has an invalid length. [ 1725.363212][T25958] __nla_validate_parse: 3 callbacks suppressed [ 1725.363233][T25958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15427'. [ 1725.496652][T25845] lo speed is unknown, defaulting to 1000 [ 1725.506994][T25964] tipc: Enabled bearer , priority 0 [ 1725.515879][T25964] syzkaller0: entered promiscuous mode [ 1725.526146][T25964] syzkaller0: entered allmulticast mode [ 1725.587918][T25964] tipc: Resetting bearer [ 1725.606612][T25960] tipc: Resetting bearer [ 1725.652216][T25960] tipc: Disabling bearer [ 1725.863668][T25973] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1725.883457][T25974] netlink: 'syz.3.15432': attribute type 3 has an invalid length. [ 1725.893847][T25974] netlink: 666 bytes leftover after parsing attributes in process `syz.3.15432'. [ 1725.969010][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15433'. [ 1726.001821][T25978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15433'. [ 1726.008763][T25845] lo speed is unknown, defaulting to 1000 [ 1726.036270][T25977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15433'. [ 1726.047350][T25977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15433'. [ 1726.156234][T25985] syzkaller0: entered promiscuous mode [ 1726.166581][T25985] syzkaller0: entered allmulticast mode [ 1726.221553][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15439'. [ 1726.238577][T25991] netlink: 100 bytes leftover after parsing attributes in process `syz.5.15439'. [ 1726.353592][T25996] x_tables: duplicate underflow at hook 1 [ 1726.388444][T26000] x_tables: duplicate underflow at hook 1 [ 1726.591814][T26008] netlink: 'syz.5.15444': attribute type 21 has an invalid length. [ 1726.622618][T26008] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15444'. [ 1726.635023][T25845] lo speed is unknown, defaulting to 1000 [ 1727.163130][T26026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.211996][T25845] lo speed is unknown, defaulting to 1000 [ 1727.367865][T26026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.433307][T26036] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1727.624740][T26026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.673757][T25845] lo speed is unknown, defaulting to 1000 [ 1727.814816][T26049] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1727.846120][T26049] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.926480][T26059] tipc: Enabling of bearer rejected, failed to enable media [ 1728.032254][T26026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.121844][T25845] lo speed is unknown, defaulting to 1000 [ 1728.266238][T26055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1728.278144][T26055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.344758][T16600] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.454633][T26055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1728.465292][T26055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.486889][T25845] lo speed is unknown, defaulting to 1000 [ 1728.498608][T16600] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.532276][T16600] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.637576][T26055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1728.665372][T26055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.834729][T16600] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.883661][T25845] lo speed is unknown, defaulting to 1000 [ 1729.211568][T16570] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.230198][T16570] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.284450][T16589] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.311848][T16589] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.428041][T16588] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.458567][T16588] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.531904][T26094] netlink: 'syz.6.15466': attribute type 21 has an invalid length. [ 1729.543823][T16588] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.554832][T16588] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.565009][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15467'. [ 1730.641453][T26134] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 1730.665333][T22350] block nbd0: Receive control failed (result -32) [ 1730.665873][ T4943] block nbd0: Receive control failed (result -32) [ 1730.731107][T26113] nbd0: detected capacity change from 0 to 63 [ 1730.748930][ T1602] block nbd0: Dead connection, failed to find a fallback [ 1730.760639][ T1602] block nbd0: shutting down sockets [ 1730.768425][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.783294][ T1602] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1730.792569][ T1184] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1730.802398][ T1184] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1730.810588][ T1184] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1730.818463][ T1184] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1730.839576][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1730.849939][ T1184] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1730.861590][ T1184] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1730.869450][ T1184] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1730.881583][ T1184] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1730.893379][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1730.904697][ T1602] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1730.913499][ T1602] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1730.925390][ T1602] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.929044][ T1184] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.946545][ T1184] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.969266][ T1184] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.979280][ T1184] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1730.989435][ T1184] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1731.006645][T26061] ldm_validate_partition_table(): Disk read failed. [ 1731.023167][T26061] Dev nbd0: unable to read RDB block 0 [ 1731.033311][T26061] nbd0: unable to read partition table [ 1731.105630][T26061] ldm_validate_partition_table(): Disk read failed. [ 1731.137308][T26153] netlink: 'syz.0.15482': attribute type 1 has an invalid length. [ 1731.158763][T26153] netlink: 'syz.0.15482': attribute type 2 has an invalid length. [ 1731.159115][T26061] Dev nbd0: unable to read RDB block 0 [ 1731.203851][T26061] nbd0: unable to read partition table [ 1731.214331][T26147] vxcan1 speed is unknown, defaulting to 1000 [ 1731.366241][T26161] __nla_validate_parse: 6 callbacks suppressed [ 1731.366262][T26161] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15484'. [ 1731.424191][T26163] vlan2: entered promiscuous mode [ 1731.431649][T26163] bridge0: entered promiscuous mode [ 1731.642558][T26147] lo speed is unknown, defaulting to 1000 [ 1731.649344][T26147] lo speed is unknown, defaulting to 1000 [ 1746.310081][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1752.870138][T22350] Bluetooth: hci4: command 0x0405 tx timeout [ 1752.884238][ T4943] [ 1752.887148][ T4943] ====================================================== [ 1752.896210][ T4943] WARNING: possible circular locking dependency detected [ 1752.905743][ T4943] syzkaller #0 Not tainted [ 1752.911195][ T4943] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1752.918995][ T4943] kworker/u9:1/4943 is trying to acquire lock: [ 1752.925883][ T4943] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1752.937121][ T4943] [ 1752.937121][ T4943] but task is already holding lock: [ 1752.944691][ T4943] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1752.957804][ T4943] [ 1752.957804][ T4943] which lock already depends on the new lock. [ 1752.957804][ T4943] [ 1752.968565][ T4943] [ 1752.968565][ T4943] the existing dependency chain (in reverse order) is: [ 1752.977789][ T4943] [ 1752.977789][ T4943] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1752.986892][ T4943] down_read+0x4a/0x330 [ 1752.991993][ T4943] kernfs_remove_by_name_ns+0x3f/0x140 [ 1752.998195][ T4943] internal_create_group+0x58e/0x1180 [ 1753.005013][ T4943] sysfs_update_groups+0x60/0x130 [ 1753.011307][ T4943] pmu_dev_alloc+0x29b/0x300 [ 1753.016707][ T4943] perf_event_sysfs_init+0x76/0x100 [ 1753.022658][ T4943] do_one_initcall+0x250/0x870 [ 1753.027947][ T4943] do_initcall_level+0x10a/0x1a0 [ 1753.035877][ T4943] do_initcalls+0x59/0xa0 [ 1753.040910][ T4943] kernel_init_freeable+0x29d/0x3e0 [ 1753.046900][ T4943] kernel_init+0x1d/0x1d0 [ 1753.051845][ T4943] ret_from_fork+0x514/0xb70 [ 1753.057169][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.062452][ T4943] [ 1753.062452][ T4943] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1753.069940][ T4943] __mutex_lock+0x19d/0x1550 [ 1753.075159][ T4943] perf_event_init_cpu+0x1d1/0x7a0 [ 1753.080892][ T4943] cpuhp_invoke_callback+0x434/0x810 [ 1753.086717][ T4943] cpuhp_thread_fun+0x362/0x780 [ 1753.092193][ T4943] smpboot_thread_fn+0x57c/0xa80 [ 1753.097925][ T4943] kthread+0x388/0x470 [ 1753.102632][ T4943] ret_from_fork+0x514/0xb70 [ 1753.107948][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.113258][ T4943] [ 1753.113258][ T4943] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1753.120837][ T4943] cpuhp_thread_fun+0x127/0x780 [ 1753.126220][ T4943] smpboot_thread_fn+0x57c/0xa80 [ 1753.131677][ T4943] kthread+0x388/0x470 [ 1753.136593][ T4943] ret_from_fork+0x514/0xb70 [ 1753.141728][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.147110][ T4943] [ 1753.147110][ T4943] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1753.155257][ T4943] cpus_read_lock+0x42/0x160 [ 1753.160377][ T4943] static_key_slow_inc+0x12/0x30 [ 1753.165888][ T4943] nbd_genl_reconfigure+0x1301/0x1e80 [ 1753.171885][ T4943] genl_family_rcv_msg_doit+0x233/0x340 [ 1753.178644][ T4943] genl_rcv_msg+0x614/0x7a0 [ 1753.183750][ T4943] netlink_rcv_skb+0x226/0x4a0 [ 1753.189035][ T4943] genl_rcv+0x28/0x40 [ 1753.193575][ T4943] netlink_unicast+0x7bb/0x940 [ 1753.199322][ T4943] netlink_sendmsg+0x813/0xb40 [ 1753.205122][ T4943] sock_sendmsg_nosec+0x13a/0x180 [ 1753.211907][ T4943] ____sys_sendmsg+0x54e/0x850 [ 1753.217725][ T4943] ___sys_sendmsg+0x2a5/0x360 [ 1753.223091][ T4943] __x64_sys_sendmsg+0x1b1/0x290 [ 1753.229347][ T4943] do_syscall_64+0x174/0x580 [ 1753.234749][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.241169][ T4943] [ 1753.241169][ T4943] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1753.248933][ T4943] __mutex_lock+0x19d/0x1550 [ 1753.254319][ T4943] nbd_queue_rq+0x373/0x1150 [ 1753.259561][ T4943] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1753.265847][ T4943] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1753.273360][ T4943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1753.280832][ T4943] blk_mq_run_work_fn+0x16c/0x300 [ 1753.287259][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 1753.294389][ T4943] worker_thread+0xa47/0xfb0 [ 1753.300393][ T4943] kthread+0x388/0x470 [ 1753.306072][ T4943] ret_from_fork+0x514/0xb70 [ 1753.312270][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.317933][ T4943] [ 1753.317933][ T4943] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1753.327350][ T4943] __mutex_lock+0x19d/0x1550 [ 1753.332947][ T4943] nbd_queue_rq+0xc1/0x1150 [ 1753.338701][ T4943] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1753.345025][ T4943] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1753.351947][ T4943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1753.358568][ T4943] blk_mq_run_work_fn+0x16c/0x300 [ 1753.364315][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 1753.370731][ T4943] worker_thread+0xa47/0xfb0 [ 1753.376149][ T4943] kthread+0x388/0x470 [ 1753.380848][ T4943] ret_from_fork+0x514/0xb70 [ 1753.387300][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.393044][ T4943] [ 1753.393044][ T4943] -> #4 (set->srcu){.+.+}-{0:0}: [ 1753.402363][ T4943] __synchronize_srcu+0xc9/0x2f0 [ 1753.409190][ T4943] elevator_switch+0x1e8/0x7b0 [ 1753.415495][ T4943] elevator_change+0x2fa/0x480 [ 1753.421701][ T4943] elevator_set_default+0x375/0x440 [ 1753.428488][ T4943] blk_register_queue+0x3f3/0x4e0 [ 1753.434929][ T4943] __add_disk+0x6cb/0xe30 [ 1753.440112][ T4943] add_disk_fwnode+0x100/0x3a0 [ 1753.447095][ T4943] nbd_dev_add+0x733/0xb60 [ 1753.453114][ T4943] nbd_init+0x15f/0x1e0 [ 1753.458845][ T4943] do_one_initcall+0x250/0x870 [ 1753.464868][ T4943] do_initcall_level+0x10a/0x1a0 [ 1753.471038][ T4943] do_initcalls+0x59/0xa0 [ 1753.476544][ T4943] kernel_init_freeable+0x29d/0x3e0 [ 1753.482539][ T4943] kernel_init+0x1d/0x1d0 [ 1753.488352][ T4943] ret_from_fork+0x514/0xb70 [ 1753.495698][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.502056][ T4943] [ 1753.502056][ T4943] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1753.511473][ T4943] __mutex_lock+0x19d/0x1550 [ 1753.516603][ T4943] elevator_change+0x1af/0x480 [ 1753.521995][ T4943] elevator_set_none+0xb5/0x140 [ 1753.527480][ T4943] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1753.533998][ T4943] nbd_start_device+0x189/0xb30 [ 1753.539902][ T4943] nbd_genl_connect+0x1597/0x1c10 [ 1753.545576][ T4943] genl_family_rcv_msg_doit+0x233/0x340 [ 1753.551828][ T4943] genl_rcv_msg+0x614/0x7a0 [ 1753.557266][ T4943] netlink_rcv_skb+0x226/0x4a0 [ 1753.562709][ T4943] genl_rcv+0x28/0x40 [ 1753.567310][ T4943] netlink_unicast+0x7bb/0x940 [ 1753.572619][ T4943] netlink_sendmsg+0x813/0xb40 [ 1753.578243][ T4943] sock_sendmsg_nosec+0x13a/0x180 [ 1753.583906][ T4943] ____sys_sendmsg+0x54e/0x850 [ 1753.589219][ T4943] ___sys_sendmsg+0x2a5/0x360 [ 1753.594436][ T4943] __x64_sys_sendmsg+0x1b1/0x290 [ 1753.599999][ T4943] do_syscall_64+0x174/0x580 [ 1753.605133][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.613295][ T4943] [ 1753.613295][ T4943] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1753.622525][ T4943] blk_alloc_queue+0x544/0x690 [ 1753.627944][ T4943] __blk_mq_alloc_disk+0x194/0x390 [ 1753.633956][ T4943] nbd_dev_add+0x494/0xb60 [ 1753.640650][ T4943] nbd_init+0x15f/0x1e0 [ 1753.645339][ T4943] do_one_initcall+0x250/0x870 [ 1753.650808][ T4943] do_initcall_level+0x10a/0x1a0 [ 1753.656455][ T4943] do_initcalls+0x59/0xa0 [ 1753.661417][ T4943] kernel_init_freeable+0x29d/0x3e0 [ 1753.667240][ T4943] kernel_init+0x1d/0x1d0 [ 1753.672083][ T4943] ret_from_fork+0x514/0xb70 [ 1753.677188][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.682464][ T4943] [ 1753.682464][ T4943] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1753.689674][ T4943] fs_reclaim_acquire+0x71/0x100 [ 1753.695241][ T4943] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1753.701746][ T4943] alloc_inode+0xb8/0x1b0 [ 1753.706949][ T4943] iget_locked+0x131/0x6a0 [ 1753.712165][ T4943] kernfs_get_inode+0x4f/0x770 [ 1753.717549][ T4943] kernfs_get_tree+0x5cd/0x980 [ 1753.722839][ T4943] vfs_get_tree+0x92/0x2a0 [ 1753.727784][ T4943] do_new_mount+0x319/0xdc0 [ 1753.732798][ T4943] __se_sys_mount+0x31d/0x420 [ 1753.738181][ T4943] do_syscall_64+0x174/0x580 [ 1753.743454][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.749949][ T4943] [ 1753.749949][ T4943] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1753.758002][ T4943] __lock_acquire+0x1520/0x2cf0 [ 1753.763460][ T4943] lock_acquire+0x106/0x350 [ 1753.768569][ T4943] down_write+0x96/0x200 [ 1753.773591][ T4943] kernfs_remove_by_name_ns+0x4e/0x140 [ 1753.779694][ T4943] sysfs_unmerge_group+0xd3/0x140 [ 1753.785782][ T4943] dpm_sysfs_remove+0x5f/0xd0 [ 1753.791495][ T4943] device_del+0x250/0x8f0 [ 1753.796782][ T4943] device_unregister+0x21/0xf0 [ 1753.802589][ T4943] hci_conn_del+0xc3d/0x1200 [ 1753.808038][ T4943] hci_abort_conn_sync+0xdd0/0x1190 [ 1753.814074][ T4943] hci_cmd_sync_work+0x20b/0x3f0 [ 1753.819924][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 1753.826791][ T4943] worker_thread+0xa47/0xfb0 [ 1753.832046][ T4943] kthread+0x388/0x470 [ 1753.836660][ T4943] ret_from_fork+0x514/0xb70 [ 1753.841827][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.847376][ T4943] [ 1753.847376][ T4943] other info that might help us debug this: [ 1753.847376][ T4943] [ 1753.857639][ T4943] Chain exists of: [ 1753.857639][ T4943] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1753.857639][ T4943] [ 1753.871727][ T4943] Possible unsafe locking scenario: [ 1753.871727][ T4943] [ 1753.879250][ T4943] CPU0 CPU1 [ 1753.884660][ T4943] ---- ---- [ 1753.890112][ T4943] rlock(&root->kernfs_supers_rwsem); [ 1753.895834][ T4943] lock(pmus_lock); [ 1753.902322][ T4943] lock(&root->kernfs_supers_rwsem); [ 1753.910468][ T4943] lock(&root->kernfs_rwsem); [ 1753.915507][ T4943] [ 1753.915507][ T4943] *** DEADLOCK *** [ 1753.915507][ T4943] [ 1753.923664][ T4943] 5 locks held by kworker/u9:1/4943: [ 1753.928939][ T4943] #0: ffff88804b238140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1753.939904][ T4943] #1: ffffc9000fcbfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1753.952442][ T4943] #2: ffff888088e18ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1753.963245][ T4943] #3: ffff888088e180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1753.973247][ T4943] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1753.987018][ T4943] [ 1753.987018][ T4943] stack backtrace: [ 1753.993012][ T4943] CPU: 1 UID: 0 PID: 4943 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1753.993034][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1753.993047][ T4943] Workqueue: hci4 hci_cmd_sync_work [ 1753.993083][ T4943] Call Trace: [ 1753.993092][ T4943] [ 1753.993101][ T4943] dump_stack_lvl+0xe8/0x150 [ 1753.993124][ T4943] print_circular_bug+0x2e1/0x300 [ 1753.993142][ T4943] check_noncircular+0x12e/0x150 [ 1753.993168][ T4943] __lock_acquire+0x1520/0x2cf0 [ 1753.993190][ T4943] ? __lock_acquire+0x13e8/0x2cf0 [ 1753.993216][ T4943] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1753.993238][ T4943] lock_acquire+0x106/0x350 [ 1753.993258][ T4943] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1753.993285][ T4943] down_write+0x96/0x200 [ 1753.993301][ T4943] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1753.993324][ T4943] ? __pfx_down_write+0x10/0x10 [ 1753.993343][ T4943] kernfs_remove_by_name_ns+0x4e/0x140 [ 1753.993367][ T4943] sysfs_unmerge_group+0xd3/0x140 [ 1753.993387][ T4943] dpm_sysfs_remove+0x5f/0xd0 [ 1753.993407][ T4943] device_del+0x250/0x8f0 [ 1753.993421][ T4943] ? klist_iter_exit+0xc1/0x100 [ 1753.993550][ T4943] ? __pfx_device_del+0x10/0x10 [ 1753.993570][ T4943] device_unregister+0x21/0xf0 [ 1753.993585][ T4943] hci_conn_del+0xc3d/0x1200 [ 1753.993607][ T4943] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1753.993627][ T4943] hci_abort_conn_sync+0xdd0/0x1190 [ 1753.993649][ T4943] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1753.993679][ T4943] ? abort_conn_sync+0x26/0x210 [ 1753.993795][ T4943] ? abort_conn_sync+0x26/0x210 [ 1753.993820][ T4943] ? abort_conn_sync+0x19c/0x210 [ 1753.993840][ T4943] ? __pfx_abort_conn_sync+0x10/0x10 [ 1753.993877][ T4943] hci_cmd_sync_work+0x20b/0x3f0 [ 1753.993906][ T4943] ? process_scheduled_works+0xa20/0x14e0 [ 1753.993925][ T4943] process_scheduled_works+0xa8e/0x14e0 [ 1753.993953][ T4943] ? __pfx_process_scheduled_works+0x10/0x10 [ 1753.993971][ T4943] ? assign_work+0x3cf/0x5d0 [ 1753.993988][ T4943] worker_thread+0xa47/0xfb0 [ 1753.994016][ T4943] kthread+0x388/0x470 [ 1753.994036][ T4943] ? __pfx_worker_thread+0x10/0x10 [ 1753.994052][ T4943] ? __pfx_kthread+0x10/0x10 [ 1753.994071][ T4943] ret_from_fork+0x514/0xb70 [ 1753.994095][ T4943] ? __pfx_ret_from_fork+0x10/0x10 [ 1753.994114][ T4943] ? __switch_to+0xc89/0x1420 [ 1753.994134][ T4943] ? __pfx_kthread+0x10/0x10 [ 1753.994154][ T4943] ret_from_fork_asm+0x1a/0x30 [ 1753.994176][ T4943] [ 1754.957023][T22345] bridge0: port 3(syz_tun) entered disabled state [ 1754.968366][T22345] syz_tun (unregistering): left allmulticast mode [ 1754.976819][T22345] syz_tun (unregistering): left promiscuous mode [ 1754.984577][T22345] bridge0: port 3(syz_tun) entered disabled state [ 1755.027014][T16600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.038113][T16600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1755.050969][T16600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.114250][T16600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.127700][T16600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1755.141033][T16600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.194613][T16600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.210743][T16600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1755.224017][T16600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.295515][T16600] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1755.309163][T16600] team0: Port device macvlan2 removed [ 1755.318105][T16600] team0: Port device macvlan3 removed [ 1755.327017][T16600] team0: Port device macvlan4 removed [ 1755.335440][T16600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.345976][T16600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1755.356900][T16600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.443485][T16600] bridge_slave_1: left allmulticast mode [ 1755.450879][T16600] bridge_slave_1: left promiscuous mode [ 1755.456942][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.466862][T16600] bridge_slave_0: left allmulticast mode [ 1755.474420][T16600] bridge_slave_0: left promiscuous mode [ 1755.482487][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.494386][T16600] vlan1: left allmulticast mode [ 1755.499410][T16600] veth0_vlan: left allmulticast mode [ 1755.585423][T16600] gretap0 (unregistering): left promiscuous mode [ 1755.604825][T16600] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1755.681607][T16600] bond0 (unregistering): left promiscuous mode [ 1755.689376][T16600] bond_slave_0: left promiscuous mode [ 1755.695866][T16600] bond_slave_1: left promiscuous mode [ 1755.706148][T16600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.721438][T16600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.731734][T16600] bond0 (unregistering): Released all slaves [ 1755.739824][T16600] bond1 (unregistering): Released all slaves [ 1755.749200][T16600] bond2 (unregistering): Released all slaves [ 1755.758875][T16600] bond3 (unregistering): Released all slaves [ 1755.772604][T16600] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1755.785422][T16600] bond4 (unregistering): Released all slaves [ 1755.796308][T16600] bond5 (unregistering): Released all slaves [ 1755.933830][T16600] tipc: Left network mode [ 1755.994387][T16600] IPVS: stopping backup sync thread 20642 ... [ 1756.183789][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1756.426238][T16600] hsr_slave_0: left promiscuous mode [ 1756.450667][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1756.474749][T16600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1756.484161][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1756.494201][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1756.506297][T16600] veth1_macvtap: left promiscuous mode [ 1756.513673][T16600] veth0_macvtap: left promiscuous mode [ 1756.521245][T16600] veth1_vlan: left promiscuous mode [ 1756.526845][T16600] veth0_vlan: left promiscuous mode [ 1756.685171][T16600] team0 (unregistering): Port device team_slave_1 removed [ 1756.700888][T16600] team0 (unregistering): Port device team_slave_0 removed [ 1756.766502][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1757.105361][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1757.170137][T16600] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.216917][T16600] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.274260][T16600] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.324219][T16600] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.357329][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1757.593060][T16600] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.606582][T16600] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.663751][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1757.674794][T16600] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.685462][T16600] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.743167][T16600] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.753245][T16600] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.783358][T16600] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.793430][T16600] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.937343][T16600] bridge_slave_1: left allmulticast mode [ 1757.947925][T16600] bridge_slave_1: left promiscuous mode [ 1757.954178][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.963247][T16600] bridge_slave_0: left allmulticast mode [ 1757.969216][T16600] bridge_slave_0: left promiscuous mode [ 1757.976502][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.988042][T16600] lo: left allmulticast mode [ 1757.993875][T16600] dvmrp8: left allmulticast mode [ 1758.001451][T16600] bridge_slave_1: left allmulticast mode [ 1758.007417][T16600] bridge_slave_1: left promiscuous mode [ 1758.014465][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.023915][T16600] bridge_slave_0: left allmulticast mode [ 1758.032889][T16600] bridge_slave_0: left promiscuous mode [ 1758.038832][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.050464][T16600] bridge_slave_1: left allmulticast mode [ 1758.056328][T16600] bridge_slave_1: left promiscuous mode [ 1758.062810][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.199463][T16600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.213118][T16600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.224301][T16600] bond0 (unregistering): Released all slaves [ 1758.233063][T16600] bond1 (unregistering): Released all slaves [ 1758.242918][T16600] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1758.253874][T16600] bond2 (unregistering): Released all slaves [ 1758.400138][T16600] bond1 (unregistering): Released all slaves [ 1758.409213][T16600] bond2 (unregistering): Released all slaves [ 1758.499471][T16600] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1758.519621][T16600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.530815][T16600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.541116][T16600] bond0 (unregistering): Released all slaves [ 1758.553910][T16600] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1758.564898][T16600] bond1 (unregistering): Released all slaves [ 1758.595537][T16600] bond2 (unregistering): Released all slaves [ 1758.604753][T16600] bond3 (unregistering): Released all slaves [ 1758.618502][T16600] bond4 (unregistering): Released all slaves [ 1758.630313][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1758.761013][T16600] tipc: Disabling bearer [ 1758.790428][T16600] tipc: Left network mode [ 1758.795257][T16600] tipc: Left network mode [ 1759.043950][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1759.379967][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1759.775531][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1759.964893][T16600] hsr_slave_0: left promiscuous mode [ 1759.971445][T16600] hsr_slave_1: left promiscuous mode [ 1759.977611][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.985422][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.994763][T16600] hsr_slave_0: left promiscuous mode [ 1760.000983][T16600] hsr_slave_1: left promiscuous mode [ 1760.006937][T16600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.023029][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.036266][T16600] hsr_slave_0: left promiscuous mode [ 1760.042450][T16600] hsr_slave_1: left promiscuous mode [ 1760.048642][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1760.056286][T16600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.064489][T16600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1760.072871][T16600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.087563][T16600] veth1_macvtap: left promiscuous mode [ 1760.093505][T16600] veth0_macvtap: left promiscuous mode [ 1760.099113][T16600] veth1_vlan: left promiscuous mode [ 1760.104547][T16600] veth0_vlan: left promiscuous mode [ 1760.111167][T16600] veth1_macvtap: left promiscuous mode [ 1760.116726][T16600] veth0_macvtap: left promiscuous mode [ 1760.125832][T16600] veth1_vlan: left promiscuous mode [ 1760.131827][T16600] veth0_vlan: left promiscuous mode [ 1760.283651][T16600] team0 (unregistering): Port device team_slave_1 removed [ 1760.294488][T16600] team0 (unregistering): Port device team_slave_0 removed [ 1760.408832][T16600] team0 (unregistering): Port device team_slave_1 removed [ 1760.422219][T16600] team0 (unregistering): Port device team_slave_0 removed [ 1760.495705][T16570] smc: removing ib device syz1 [ 1760.516782][T16570] smbdirect: ib_dev[syz1] removed [ 1760.928742][ T5288] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1761.756500][ T5288] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1761.988662][T16600] IPVS: stop unused estimator thread 0... [ 1761.996207][T16600] IPVS: stop unused estimator thread 0... [ 1762.061966][ T5288] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1762.272037][ T5288] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1762.482764][ T5288] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1762.691484][ T5288] 8021q: adding VLAN 0 to HW filter on device eth19