last executing test programs: 3.379764606s ago: executing program 1 (id=7648): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xa) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 3.052375713s ago: executing program 1 (id=7651): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8040, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400001c0200000006000800000000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) (async) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) socket$rxrpc(0x21, 0x2, 0x0) 2.723593697s ago: executing program 1 (id=7656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x74}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x1a, &(0x7f0000000380)=""/26, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x8, 0xd18, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0]}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20000814) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x6, 0x9, 0x1, 0x8}, 0xe, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa634, 0x23, 0x3, 0x40, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000540)=r4, 0x4) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=r1, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}}, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) 2.597818314s ago: executing program 2 (id=7657): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe8000000000000000000000000000bb00000000000000000000000000000000000000004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ff"], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) socketpair(0x26, 0x6, 0x1, &(0x7f0000000080)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r3, 0x8008b705, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f00000010c0)='*', 0x1}, {&(0x7f0000002100)="59c9feaf2419f5b7fdb0bda895a11ca132c1a13073902ff2282dbe446e9271395451d35c88a55a871f978cedc6250555672deb47f889967278620654da52d173b676146c052a4580b28dad665e535dafc9dd09a6154191af24c009827f68ba7adcd2ada5345c699e94c2cdf1d46fbfb74dda077c0c709e16aeb98bb0dc625c610e5ec433342aa0494df9820fcce5ad8b9e4d399e27c4f18731f668f7479b6a15df15c1900b3b988d19e6263046b5de88b39b0c3270e77e7b07fc354ae4c105cabce0f8058c44186e44f0593f67a1b77fdd79400572a42568a3bb5edd2bb5d13d40392e7c0bed8aa2bcf8fa882041b42b5a88898e6567c7d48d61a1a65ce854a9a45646c5932f38ff54012c79fcdb0df5ff756772d35d1d7bff436aff519664d37c062b71bb13340493cc0fd5dff49dee7852ce000278d4f76817d18e40961a02e6e417910a566857788043917817e648e8a0ad02597f15f0cf4019e41b771d9868cb0c46c020cb41b1c367012e76e39f8f9bb8986cd3a49d21ccfd0fa41d79ec430e1273f658261e7f91a50b29c8fa8237833008f68aa30a74736c424f3026f8ff2b9fd3e5bd788a92894010bb967cfe105a1e3be945d4f831ea61a1bfcd9c295fe0ba6b81fb6ded6ceeaed513b7a611f63a0cebd5cc177b1385e1e24497bf1a0df5f95f1e298f4eca3b3ba425d5fa25054726f85159e13596d5140db102af3817bdec904800c25dde8725251a4f7d335b3f96f73225c637b05614bc605b81f06c28b832d6cf1f94df7631b08682cb0090c75d82195958d045c2a7c535af5c9abb74cc7dd5dac48e06602da148bc5708324abd637ade0df394784f0aad5d774011e64fd21c4e3712a18de8af863818505909fc7fd7ef13f46e6f07d693a0af38f163f8403dc65ac434adb9c335a973e0192e560afc8dcb9f8185e6805dfb3cb1f94cf036333c0a569821d9ca96ace0efd508d2b414766d9c4a9c0bc078751058d0be00529752e369bafedb35107f84e903675dc7db20121ba7f79f8b376f19b570bb6d4016761664749594adc8f1225e674794212410b1c0453233823f90ebd93bc7d83133e9e6fb1cbc055ac3908a62d324f05c77c67bca5913d20ae71f193a145444223b4b930b2709967b5d18db5f6aac2e2bd6fc37c24f3d545c6557c00c3abf43686fa4fc14c93f4ac806e9dbb623450331e49dae51f0a807898a9d66fc5f79105093b3de61f4c0f24ce6ba5277b67859232f39ca37560b8c3a45ea0b9456857bb7920bf4a7c07e45e7ca308e278abf63fab912bdc3db063cfa5a4fac59c531c0606164e5431fc4175f9744432451a74e49b5482cda97b105f541b34448bbe14f92d5e0b81f5fb29d3a365c15a0f489566c253cf00435b70e80528a6bc7f816da5320023f91ad4d02c85432f25039a0c363cbb9808ad8e0d7e4deefe92289061a79df9c9a444a8543ee19bc8efc345903c17707e217e57d5ec5275fbaea438e8f7258e5b4e7b808e9e5c28e311074213f1aee52c7a69008ecda131d32e855640c4c55664a01fe8be279325f7dc55361b795c250da92eade4dfccab621f2740fd64b32a6fa8cd916cd22d808d0c23bf57043755aea8eb8087d53a767abbfa06faa30f24ecdaaae87bc13bd11eb9c5bb3079411ebdc396968447a9727cb4a9b573d38d47da1c42409a784b7b158dfa482953a3f6e5879bb6ecfc4bc0f84540aa2796b98ed5bce6780618c2d59039e52b7602681e9d4268e678831dae5950603ecc99432800124b2ef7b432ac66b84f64e20d6e0eba1c01794ce60c390e3ec9c29d6f69fd51018abb1ab6e90bedfbf2b5bbb2ff04d39e4e05545bc6329145fba34ac9b145b709d16c1b26e44ac48be52a1566b926a015cdf57932055db43a1cce262569004b73b3b25b6b5cb357b992fe985315c07278f34310d210a1e39b88d2b93eb7fa84bf64ef038108c5518f517646c4d12ad71549fab21b442f242e4167f18ac8f096512984e84db6b83c6166cce9a812c29111de702e4216b7d1e255b9f1c77390d00a679b4314a6472ddee909f8821d683cf916c2b9232211daeb758b5d228ed1dd04c3aaebab57f0f863bcd64c4a8a46224b2daf4baa77639ee5a24cd6ff332769095a5d34f5361690d1fc666e682a6f044dc2aefe9d593d72031b6b6af823bc52ec1852ef365a406b43493eb728c3fccafa8cab1a7ec21d5079ba07aee910fa86c98967e907c1978ca09e811a1d1d80460a655244105f9af7341d42cf4766ed2fbaea9e220e753482c7d4290462d10118f8f1c130995a5b55705a04a6365cdf64b7115781f26dd981b6d1190ed0af361c03174acb5606f46405c84a6d6c433c7952a5c8891e3427303b705569a06ff56aff61b852897f89d6b1b7a781af0e8762b0fa8ca7c1781e84271871334dfc8149fea84c7b0fb00866551fd66eabac8d10fa8a8394e6b3af2dfe9adc9f94882d8ab8855b701621c2ace26aa7894b6f7720cd239960777b861d54a0e2b6280de0faffafee94ee77a2db4a976039fbb0047b468e6d273a187ebb6c5b44bf1eef1933fea3054f2af75295bbfd50c560a799a9a17282c3dd4462574595200a1707ae3cffa001eaf6b62ae7fcdf5b2a5d352d9281295d0686bcc64346a8ff502d5610f9313427743e4773634c9a71886e602202a3b41c7819a54847483615b7954b206db2cc75b348350f2f8d5a2bd2b016664fed6f2261bfa0cb80492fdda12682e34237582f0a9e7bf8615cf9967ac2b0bb692eb1bd23af4cc74379b0500a977f70f066040b6ec8636baa0cf9d1affb387140aeedabdd73c51197c7db56ab4fd683925af54c9ee905e7cd6f669c5758851e7ea44d7d9926ce5e3413af545fac0e0088ff4d51eb872f4d68731e92ba29c8ddeb529ae2f33b25a571b4448ff25763ed0d92094780595be35a30e7a8673de0bc2e07998ea0971befc6529239ab4fa6d9e4c750be2d3b30d35809827c2f3d3e60b7974ce507111d46fcd4534db354bc497b653017fa6fb42ec96ea213e773e9b8fd1184135dde8eb2c6bc7b41aa4c6b2b2c9f5ece8b4a3705b1f14fd4fed89fc1f9f71ab57d74efb1afbe1e6438f0305c60a54fb342c15aa7ff9d9bef250803b2ae2cd58a2d7fd2fec04575fdf94bc3c9b45afff2567dfa9247ad7e56965776e43801bd85fddc91f5128b2608a25f21548457e9b901d4783917600238c2ee7c4fe638238e6ad30036134dc4c03cc74df00de06c9ff708b0a51ffbbb31035e2370b1838bf5136395b37480e451e0a6bb02dc93af05f2b3438c0a919aa32baed474d79815ae2e43f879e1f51d773cff6b7b74b3531994d269c8d220fa1b850ac6d7a70860b135a8c15e37f8ec38942d2e39605775d1c38eb3e88184449d496359378009c2675202ee7f9b14a36122c68d1da79016c34e5531247ec41d30a251e604dc9f1212abcfbc9e4b572159ebf676ccc1aa0905ac239fc7be8f1938c17e2dc2ed8a024639ff87adeea89cec1c8b190ce3e25449b874f3363b5ab70e6c597dd66d6867681c0bb641ea7db335fbd187d497047760de22dbc1726cb708b8c8b57141f38a5b78b29ff872374da36f55d1be774e673e2cd6cb71931cd43f82fd82b71ecf9d803f33d0041ec05bb5c872df13e6c58eeabd86cf4fb07e62845d2917fba1ba4f7c79b7c4eb53d5f835f3022276dfdcd4a487342bc5d9488164dfc20dea1fb220fc306330addc718549c7930b4fd6f45a4c3854e639c1569b96625d0b199bfb4a691cf92435acc60436e4ad5066c9994142b0ade648a072cd1a9f1382bb25311ec76a6a44f777010db880592bcacc2d5d4f4deca30497cdd350972a672e641e8f0026c96a9cac01dccc8d8dc799282da1fcb5fe2e410c90bc746ff634161e6805b2283727c9f2a6ac515ac7849a65bc26f2b2530178433a52b20e8ba371dbb1b9f4e5bde48b8f90d0f008f915162681a6cd2cc35a9f960e1662bb73088feb4cc884adffc59bb7090add8b56b737120eb1f3fe39d627a19d26f21d4f671725945b8cb75f7bd1dae67704d37e7d9c439b735140f1f0dc5b561ebb246f4218bef35b4f87977a3f03ae08ce3c2db21bca7c4217f4f11840a997a288a7eb13ccd352e97dbfce086abaa5a87c3d1d6fe7bd3af13d1c60853ec737793fd5c91237feef477f86b927d84dbdfa0a09fa8ef76e784ab399d4331728612c82c34730d2d32cee82e80f3adafd83f6678dc563c775d9e0528eeaa1fc10e09f163fe6b55792ea95040fa46db965aff1ef4aed13eba6353b4417695b969e0fd75ea330dc613987ced2b26ee14cdf74844ea88558751bd4b766188585931a98c9a27e26bc02a028d7e0cca461493822fa22fdc47fec723f9680f9a135f0f66e177736f93d249f8976cdffb48bb09554d322d39523fe1b9d0529bf9310fe4e81ef3fcd88ffbf9fddf6ec03e0fa730399097e01061dc9571631881643190d5be7dd9bbbbed4d0db57fc814bc4f53710f55d7b0b870efa82624d96f47f1dc8d91d39f59555190191fcb77af4d15bd904cf7d6c42084ff204d393dea3a27f0110df22d9cc17d4aeb98f748b26da721f98adbae425ce9707c72d7916d7de390c21891a68c488deffb2c0430d4bb3104ec2251783c3804d8ef0e43d45a1f5ed0e3c22ca90f2dda8391cc4fca5be6c50d2979bc857a7defb989e86c71cbf5563890aa2c52b790fa3bc83aae4de2f831221a4f765572035cfe42042259ddefaf57dd9f4a75a2921da8e5477f1cec8217b28a792cf624ebb93a2e0c67c3910f13ccefaf806e1be8716ffafc581fae7a42ea08f2f71f828e2af1641369b13af5e7080811a0bb4e1099609162faadf77ebeec01666b558f272f5e6ef9d5bfacb21fc96d447f76aba629e249eddef04e67050e8bf50220d7402f15cad055e087ce5ada72f137aa1cb8410fef560131b761de182af299d6ef78e239f2b0b97698c4f1b2ba73b2662df399b6a5aa0ab28e4e048f3a1da05578624609c3ab3fd5f7dc0e1e7863b64fd4ce5b84c6e3863c40ed9ce2acc362cc49b81d506b167889679e1737943c42e8b9ee8a1cec57d09bf1bfa30610d011a42e0dcc7299673fd73c8d17f3302441da54dd58d62deb54625324cb45b2ddbd3f2474d0d80b39fcc092823b809387ee172931b2ccd2abf993e98023e0c337f36bf6706fc22c4672baa706d37493958c1e01ee4e54f4f192767b81097b8b37b4cf98960f60838aca0a480adecd53e2dddec522f979560666b4baf46e291fba76acb0fde50a9c19407ae98077e9f6a9e8fff9673c2813a93f151f96758a13028918ba7e95d781526e8396e8f2b4d6a7cb5592dcc6f0ef7179ce33e81763c2104b631e9de241dcc9847afa7f2b91210ebdf9abc9f360298f23ee230c9a9f6a6f3a7a6f58cd7cd1ff20717668ddadf09ff0ff", 0xf01}], 0x2, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x10000000000066, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18001f0000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.288269398s ago: executing program 4 (id=7659): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xa18388a7980ea2d1}, 0x400c000) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r9 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0xce62, 0x0, 0x0, 0x48, 0x2, 0x20, 0x0, 0x1}, {0x6d, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0xa, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 2.143793847s ago: executing program 3 (id=7661): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706105006f6164001400028008000340000000e108000240000000050900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) 1.995134595s ago: executing program 0 (id=7662): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) 1.802065807s ago: executing program 1 (id=7663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.801679695s ago: executing program 3 (id=7664): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r2, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 1.801318736s ago: executing program 2 (id=7665): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r3, 0x10, 0x1, 0x828e, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r4, r0, 0x2c, 0x28, 0x0, @void, @void, @void, @value=r2, r9}, 0x20) r10 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f00000003c0), 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r13, 0xff08, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061138a0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.800284836s ago: executing program 4 (id=7666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000150001009c81345ee559fea10e0000001981ef4e03496ebb7e8af2a02822dcce968aac72ca8196caf9ab7ff15566a4cc7f88b09066d61c531ca3c13a4a8ce7"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.64422072s ago: executing program 0 (id=7667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 1.643127093s ago: executing program 1 (id=7668): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x3) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0xfffffffe, 0x8000000000000000, 0xfffffffffffffffd, 0x1000000, 0xfff, 0xffffffffffffff02, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2cfd33b6c69ee3dbc9c94aabd87f323ece0010000f14010022bd7000fbdbdf25080001000000000009004500"], 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafe, {0x0, 0x0, 0x0, r12, {0xc, 0xe}, {0x1, 0xfff1}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4041080) r13 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r13, 0x29, 0x7, 0x0, &(0x7f0000000040)) 1.521103299s ago: executing program 3 (id=7669): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f0000000000)) 1.315276536s ago: executing program 2 (id=7670): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) (async, rerun: 32) sendto$inet(r6, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) (rerun: 32) sendmsg$tipc(r5, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0, 0xffffffffffffff8d}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000010000000100000000050000", @ANYRES32, @ANYBLOB="000000000000000000000000800000c8fc49c7f1", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@struct={0xa, 0x2, 0x0, 0x4, 0x0, 0xbd8, [{0xa, 0x0, 0x9}, {0xa, 0x0, 0x1000}]}, @enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x4, [{0x9, 0x6, 0x1}, {0xe, 0x1, 0x2}]}]}, {0x0, [0x7f, 0x0, 0x30, 0x2e]}}, &(0x7f0000000800)=""/155, 0x66, 0x9b, 0x0, 0x7, 0x10000}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00'}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r12, 0x0, 0x0}, 0x20) r13 = socket(0x10, 0x3, 0x0) (async) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0x4, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x9, 0x4, 0x2, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0xf8, &(0x7f0000000500)=""/248, 0x41000, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x1, 0x0, 0x5, 0x15}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r10, 0x1, r11, r12, r16, 0x1], &(0x7f0000000b00)=[{0x2, 0x5, 0x10}], 0x10, 0x9}, 0x94) 1.196266295s ago: executing program 3 (id=7671): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000002500010b0000000000000000f46aa2f541ce1cf04bca11a0b37ba319e659f43cda5485b916ce53207db6d458271f4743fcae667c16eb5790397939a0d5d60fe8ffbe5ebdce1a29cb17231f12c7fd77c3993746d1de3ad8be6720f6ae10132d78374791631d61b6d0ced499d905e0415bd8f3fa79a9fdc53c"], 0x7c}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) connect$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) 1.174808468s ago: executing program 0 (id=7672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1, 0x1, 0x102, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4011) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x38}}, 0x4000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5029}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="31514fdca75bf625a8ed1a74cf1016aef577ebd7eb92fa816178739ecff7e5ab5b317b7ef32d2cb53955cb51647f8b55dea85a1dcf1d0d7c2121df05306d5b510ba28f134b192a63f7e4abfd57cf0d62496452117388342d0a5137b2654fcf5c72e42b61ccd6af4065d81615b6f96d86e8269798b36294a0eaa5db37090a94f43a5d7c57506bebb0070cffc1e278f3c2e9aa7ab9bc55091d25ecbabc5f2009df86ac7f41ca1244a1b379daf2ea3983500ecee030270f170a3a17a64d7367318379dc5b50c7fe022a2881bcea3462a88cedfd168b6eaec56c96b2418fd9b79e9c264eb7c067e50d78529c3b0f6454e2ee49f09227551d30428d1d4b89c70a42c92f388affa721a00f4ac7416e3b20925b7a5211a79b95e45243004b8080a30c269dc5b579b25aed7d6292b49f4ec7867d5e5e3123347627d9ff8672453f7195116e12d22f63681fff22deb1bbbce639b0b31bfa8538c5b15c7126be820a988458fd8f4fd9d44116760e768771a65771717a2b7166fa092c341d6e2e24b50f27833b83d5833216625a400e1af702772940c8bed21ce2b3274be4f11fb05c72841e6f409bbfad8574e9c1738b9483a056c52ca77c7fa51108010ecddacef1313e4e35ac17a08bd58823cdec35234873baf1d4a54b00d63a97cb0a28c4be5eca26983e6300b9d2e3f3f05b9d1b4cd1707383ab62dea5b0807149adad87f58f06a124e276d484fa980f2e3d92673f5c26e5d17a7a8b2e8cfa6453a1dbf86affac9c911de34957022ecf6cf66108326be3632093240a9209ae1ea3ac6ef1e1dd5148636954ffc594a2320d8cd14669d0bc7393e9007d5dbddf649d69d12bdec493716a0102f8a1e02eea59498c9a8e9321477acfe8673b6ccfc377ee821557688b02cda3f6aa649326bf6689e8c093a34065052c95a0a5a03f92837c1f144b645dc835e258d11e350c171f308fef778069d4cd82c1520f47e2b37f3bf926f1e353fdc8a95709495554526dda24e391c85fb72674cd45ca031f7673c9a8233f2edc68f44e51fc9b6bc1eb9fd80aeaa637528d0f42b81dbd0fdc0018dd155a7b6cda50f92f2ba4a9b7f42225c388a0712e1357aff2c2a6fb9311a34945e4e0dba68ea95eaed5cb532c8f248dd45ec52ccca8398a8f346fb805c89b651e37f0e2ea0a7f8a6f4be571771726703fe87e5636c03f9253fc7c55e3c5e4bf2bd85a0e741285a2cc7400257f5defae65aa3f66ff56eeebbc13aa9437c5812d5a950c1a319f47e54085611a965a4c250aa321631fef09602bd519dedbba00beecfc2eff043951d318ffc4030ec03eb4622ddbd0329e0e7c51dddd09e3e7698846ee12fa1005c2d15dd29b26515e58c1f5c26bcc4855c477f41abe035282886fdc084998a0efe3f2a94a5077e1657ab781e49f25b6581d30b2216ede4f930dcf91f7bb4618bc71fc4fde77ca4284c5c18c69aadd1cc39f7da1acaa49bac0f631f39d5791a36d618d5c096331d11c3570367b07284e617f7e03f9d5a28dc45a2fb5981d24f7f34177ed8fed429bf8b9f6033a84c1525e8d2bec4ef195f2e860d41ec7de0d5dd7e42108278076eef2f322529217b73459e4001c58a38c1fe4b091895d153e139be80ccf066aadc30632788f62c878fd95c0db0a4a176ac8b4fdf994fb85ffb4685272b52b9aae810ec88c8f3365febc77cd3bd3965c81e3725da8858d0c9f63a308107e497fbe38ce41b315e07ca51b588092bac40e07f614d647440a1ad4574b22686d9e7f522911e812579d9bedd806f510884aeff1b674e8f7d6952f04837e8d00898440a4eb66b33e5f816f3cb0ed89f3bea1eebfadf60300bbb35a8e30198c49d5aaf5ff9e0c2ed055d62e1ff15a94d65aa1d46650488ffe1859ba3605b756cecf009541647963323aa03f55778402842f0a4dfd1e9c11960c5db6f19ba357bd5691f7a88a150e235cbe390d20b587d6e4ae231388913c3906326dbe45ddb892d5e8abcf1b447185ef4f8ae1e74c2577403fbf6f755e6c51b07f44b2827d1f2f27efbc8f82ef253de11252bbbff3faa66e31817d7366cdf464e942da10421999b0d3bbdbdfd221c353c5f40bf6528fc52329ddb684b9fc9b4822fbae44633ec1181cdea4614239e0eb666e39c360ac4e3d877d5b0d29cfd50e859ca0262ad90e0f4d4dfdb1f5284a25b26562a291fbdedd668d248b55eff92d727b804173bfe7c659c83f1d05b7f9c3267fa3e3f591806493ae4881277c0ad89f6ecf0fd54d3e21aa18b5cbcbff11e2b87e708e22e708f03ddfe4d57149f52af5e65811e8805262a7d59081e35d9effb63bd2b43b20f96901dab168804601c0b350dc7a8242e3e047dff52fbd0172b50e5bbc20c55cbb8bab8a39947673271d0d7482d428c413072e815b682f55708b344197100fa80c7d1885af77e2c44305bf1fb093a31502cdeea86f6f67881f867ca17633f54236f15360dbbf9063ab21680307a7de5f5fcc8ed6a1bdb6318cfe109af943053e490c3087a7595f3ccddb706522a116d36279d835fe69d6b65f0974845917f365ada56bce31700f9daed73151c906aba279275d24c5f3cc0804daa91797d8c20579acd461be54f34cfc04ddfad6ef065eff1ee3e6d7596939d4a7748c46d505e5d688119ccf29b4c2d6a712bc01ef1b23718d30e1ca4b89b0a8769a3296459bdc3ef45166828685e319515a456ceb4084f5a35f0079be96509cd7efd341370f599d84b4ae303dbfbb1acb6f44607376942bbb21edefb2f8a8aec75d62ec06d7acf41e552b9ff779c561cd4125dd3a68ccff9d75c00fc4850520023ecc40651b7af9b0f1023001aba08e52f43be654eb87181f9c237b1f311553fbab4aeb54cd569f9f8bfe4cff2a07e10b42c31c7663346539c8bf09977e9d1ee02e2c25169cbc4194fb55a86436ca1b494b4e959b318c16816147ae0492d2f174cb3d471b9671c5a30513a87ff0685127d5585cfa17831e968b78c3018ed338627217be379c549c869b3ff301293f48594414b271af14f423d60f4dc552fee7880d745f93eaf901d71a556d203a82dd1bf21a740a0482a298bd9184883e7fa740d0fd28627dc0e98952a782a03ba1293b45bee316854d7a479d6a7afc3dd19ed249e0d3835b7f84699a06c361fbedd3a4aeb573d4872a0f9bf4e5ad835517c5170914d9185a613600782629900b87c6d4521a47c2a8fe5a4190e632ed021d559cadb05bacb0a713c4aad6b7f193593361702d1f1318e15ece20e6667b549a93154dd9d42c1f6fb27dbe7836eb5bc2a2de00dec0c92b9e8a303c6bc50fec565097eac1828add687e69e13c073e673df45978d3e5267af53d547aa7d15fb07c6661c1ce9c6139608f4e1d32d1223e5cafa8c795b9d40afece74bc99a8cab78848bdde9d2ca6d75cb960f2077f5c6301d619d9d67b0b3564215efce0483a283f5c863289f236107e2e76f97be677d53a83853aa7ed2ec07cdecc6f2901ecda0f499ec88c93e8fb5bd58be46d942ebe1378b18f4bd0eea7cc0cb54b65514c11a4646dd645fa0eb0c61e6002776b32676e681f5c75001a9d50059501f1e5c0e0a75eb5a89452561c45830ff0c124f1a91ce9c5e10e24d240dc6334b19988af9a412090c35c34f6bf0c00b3fac0dde041b668d43a2a143cf91f0d273ece3dbcf17cc4e0ab4043db43254f7b326d6c71b07ba945d3d0156e11f5871b8d5d5c3854bb399fa36327b27d1a94c852c6a6fc669287a924de45ff969e99580d26ca50c05c3cded5edab55904b93c9ca64fedf94d2d1930b73395e32edde1aa7a00b122f5475a25721f2117dfb082772a56038a2796632df8f840ab92e14b9efbd7d744b0d9cf69cf9de89835d027a0b632b2a2b23688db27afe42fdf07eac9b3132e72da69b8525efdfbbe8a8a4270bb8858ccfeebf56874a4fff90535edbf286ffaab10eae391d85d87ddb86d9583c849220620ae3a4748baad7a4968d21796abd61c347ef33a6b4927f51c545fe3b75fa849d6de5cf453630bb21cea8f499a74432f706ce71e914426f9e2f1f864e685e4843b75116fbf203ecda9e67e062645a6e8f061857f62e7dc61625ba31f1444eef91871ca9cdc3764094dbe9b5afb942fb96f9a7d483f80b646f491c58d044122612623a3cbc95b6d7f41a7bcf349074ea36e56abc548efd16c7b157bf57afdf735023aded753c486d07ba5082ce440410b409db27007bf1bd6a497c32ecc1e0bcd0fbb6648b56cde88851d1be14b42de2b373e0462bdf20d59fb65170b41a8e95e804c0755ca1fb15200a06a00753f3aecb2c75f2e07a805f7ebfca5857d8fed4e43593e9e00ab499f9b95349813d706d2faba8ab310874a6327922718f0d987c743bf87e7e76a3394c5d7b90648cc20b2901dbbc144045e1823f2faa6b04daaba060252ae6e92fe0bfa4c4217734293ff0a26df9ab4d4920315dad57a18656038b78ccf9651a00bea27a596bca7af4e931b217e00502ba354c948fe3768d9983b1fecee2ff973504837c705b260e0003a3d743e67d0071fafd4496ae3da1012566df2a3d8d6afc0f0c4ecce41db3e8332f89c351509defc5889c83a24975406ba23cb3ff06457b885b04a18958b612a0180cd98b5137ac5e341b1b9c231293c1b58506ecba643e53c27dd1f811c02dbee95ea617974fb2781028317946678c9528315e548264843a8d9378ba15d54d4ae2812b30e2be9437f6fc345facad689c9098395b252f4b7197b026bda2c2f5c62210c11e6e5e328be1f0858649ea1891f9e95863066340d634e01b22316baf8cba4f9942b0be660a6799fc01a50a558b49d346e1855525edb7be7f27c15ee7194b7bab72aef79a5284e77895e1c5ff925617815d1636bedb04f489288ababf90897f6fb8f74107d434a302bfc3855744bbf4ee3fd881ec4b996425f813970f912c7e36206c0a301334c680bd286ba27abb4c329115c7dd83a17151335b8b71d6654a1136f811a9ead1785c72ce6bdd240353499621080fa178b0eb502c98fdc9a61f415b7ab77b0505193d28a8f0347de1974c1c53dfbcb93360aa00bd4b78419f03595ed07322ef840ac5657bf5911d4598e5b786b0a71c89c7bb4813da8f1c0f70df653a4604ea28e821dad83157ddcae3861ebf69735295e8918cda3c98e4bd6fdc38de87c3be95fe3872fb2f4093c14e387a4d655760c4bae27e3e15778437f17e78e9f9fc5767d92f0e355ada5c5544f92ae95130e7b0ff78dd21a3d0289332d3969d5c17401a349ff52d656660f1afaa56a12622c778f9c57af3edc447e628ee998d22a11da947bbc67e699b9b0af8789b3b6dc9d38d8e324b381d55d32cd32c3894cffc2a183154c8c0f50e23d4342c11ce2e162d6742d38381cf6e80fc4639c79792030ce60f5e28f12dbd63a8d15ccec677c78854d1fd5adb90246306a5e99db942a54455b703f475fdb71b7e520360a44bfb7ef326941e1b8d95a92a1f2437ef330edb38a463df5aa79b45a1165c99ca799ac768f9e1329a05ef413c70fa1d6d72e1847bc761d7f466d2c1161cc45e9d63c150510eb94e4748792214ed7e1b38e19d4e5df81a8f2ba7b2071d714ca4a7346b93088d97d2d02a20fd6d176368891cdd12d73586c2c73a35ca12ec95d9f9dd324c213556d060dcf120af8bf15b150830896075fa6a8548780d1b2d0a73efb20f58dc286f7c256683e616b56b2693d6bf4dbb0623141037afabebae30436e52aa011fa159df82808698a244ec2453d5024ad16a019709d8132a74ea86124883dd9c700b07"], 0x9c}, 0x1, 0x0, 0x0, 0x80080}, 0x0) (async, rerun: 32) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) (rerun: 32) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="186900000e00000000deffff040000001800000007000000000000000500000095000000000000005d37dde374827e608dbe2660a56da2e455e9c001255c0a243402521acc1c598943e3b97ff480927f7f6fb4"], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x6c, &(0x7f00000005c0)=""/108, 0x40f00, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x10, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x5, 0x4, 0x1, 0xc}, {0x3, 0x3, 0x0, 0x7}, {0x0, 0x1, 0x5, 0x7}, {0x2, 0x3, 0x3, 0x3}, {0x1, 0x3, 0x10, 0xc}, {0x2, 0x3, 0xe, 0x4}, {0x4, 0x1, 0x1}, {0x5, 0x2, 0x4, 0xb}], 0x10, 0x9e60}, 0x94) (async, rerun: 32) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_buf(r10, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r4, 0x8, 0x1, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000100000000000000000200001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffb702000008000000b703000000100000850000000600c5441a1d000004000000000000000000000035a5000010000000950000000000000000"], &(0x7f0000000a40)='syzkaller\x00', 0xffff, 0x81, &(0x7f0000000a80)=""/129, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xe, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000bc0)=[{0x5, 0x5, 0x9, 0x3}, {0x2, 0x5, 0xb, 0x3}, {0x2, 0x1, 0xe, 0xc}, {0x5, 0x5, 0x7}, {0x1, 0x3, 0x1, 0x3}, {0x1, 0x2, 0xe, 0xa}, {0x4, 0x4, 0x7, 0x8}], 0x10, 0x6}, 0x94) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r13, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="80d06187b79569d9e7c9757650e816964eccb76e54107bc0d794bd733bf713fe6e5be5d8bce77ee04b7a79c0a82642a9701531fe99ccc08cd63f519f5af451430400f6bbfe1fca96a078b275f5bfdb77c900", @ANYRES64=r11], 0x20) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f00000003c0)={0x80fb, 0x2}) (async) syz_emit_ethernet(0xda, &(0x7f0000000e00)={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x27, 0x4, 0x0, 0x5, 0xc4, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0xcdc6}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x800000}, {@remote, 0x7}, {@local, 0x6}]}, @timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0xd, [{@broadcast, 0x4c5}, {@multicast2, 0x10001}, {@private=0xa010100, 0x4}, {@loopback, 0xfffffffc}, {@loopback, 0x46}, {@dev={0xac, 0x14, 0x14, 0x38}}, {@rand_addr=0x64010100, 0xffffffe}, {@multicast1, 0x9}]}, @noop, @timestamp={0x44, 0xc, 0x82, 0x0, 0xe, [0x4, 0x88d]}]}}, "4a92b9c1c302eff885d368093c351cf4803d7f2aa6a9dfb9591086114407be29c7edf51f6e4e2209"}}}}, 0x0) 1.140279824s ago: executing program 4 (id=7673): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 839.411207ms ago: executing program 2 (id=7674): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x3c}}, 0x0) 725.039489ms ago: executing program 0 (id=7675): sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000004) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\x1d&%-*!\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x4000010) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x8, 0x3, 0x8}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dvmrp1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x408c4) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@bridge_getneigh={0x54, 0x1e, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4400, 0x10001}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_LINKMODE={0x5}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40881) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000081}, 0x51) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000740)={0x0, 0x401}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000007c0)={r5, 0x7, 0xe8, "7a315b853c9906b7ecbf162ae79d94691c4c51bed33101c6121cc91b9f783408bc07d8e32c345c9df97462c1def45218f308a7487252e0738cd77da8a336d0bf916f7fc3e6d1354f084a760cf1653299920154d37664bd7a62adde3c105b985705edf49789141ec399149ad533c1f3817bc208050417fad07b643e81f5771d03632bb3a4f098320b082726d2c64d9e8fbf9c712f4f79448789a57a8e917617fac91762c1206a76498d69de2772d27850dd886276d70d2a8a4a597765f35b0d0ffb0c9bd24464a56f87f6b8191ec53510b5e57a410432dd4f20e4f69ea6b8976a9df15e0bef9f674d"}, 0xf0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) accept$alg(r2, 0x0, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000b80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), r2) write$nci(r2, &(0x7f0000000c00)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x4, {0x1, 0xf4, "9ffb60ebfeadf3ce5af7d1a1d9766dac3b108328bb21e3492538b55c1a98d54de64012c5a533acdba4d2a33a9ca8e949a99147aed4df173787122fad2205610e852ec88cf5df302be6a97e22e3c28aaa55f025c630ccc38ad4d90455e2e9dae71be7f4b6400ca64ab0364dba824ab35fe10b3704d528bbb01edd0098a77aeb415d56dfb59ad57356028c97705f6b4e604f552d98c805a854a42ca1c6feb3b7139cc9a123adbdc3292419ca519ad8576794c0c1abc031656ff8db52ef913bf4a7e7deac233ee5d924b5ef75f63468f534f2e0c6017e48eff91b21e02cbc4e7d19a039ae0942d8e3afa937dab35b808470bfd2a793"}}, 0xf9) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000d40)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x7, 0x8, 0xfffffffffffffffb, 0xc, 0xe3de], 0x2, &(0x7f0000000d00)=[{}], 0x0, [{}, {}]}, 0x98) syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000e80)) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000ec0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001040)="661c7ccc0ad3076a2df45d3a2c04217ca9a050dba8078b482ffae218a0982751e7cae71682e74f187f91695043a6e308a1b8590de1c8c6aae29c417ee4cc03185c22804b075dbeb84ffb3a36d24a892f8084fe613a7a", 0x56) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r7) sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r9, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x40004) 648.483453ms ago: executing program 4 (id=7676): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) 590.534434ms ago: executing program 3 (id=7677): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x6c}}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2], 0x9c}}, 0x0) 444.177095ms ago: executing program 2 (id=7678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000180)=0x5b, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 419.321181ms ago: executing program 0 (id=7679): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 350.415132ms ago: executing program 4 (id=7680): syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xf}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000140)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="a82100657673696d3000000000000014001780100001800c000700040000001000ffe722c2d0421406788df0a27d47a0a0d63a127e228ceee78d79bf5545e8cec79e959640874216c1031b912899efbbb7f8ae8ffece8496f6f022dad023b76a0623ab911ff1a106503e779e672ac337d353d9", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 300.626006ms ago: executing program 2 (id=7681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) (async) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1}, 0x4020) (async) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1}, 0x4020) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 300.201152ms ago: executing program 1 (id=7682): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xd9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 198.593007ms ago: executing program 3 (id=7683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b87a04ca0fc0badcaadb0f4edf7e5463877aae139c5c77c5c6216a4245bd522eed3f7a450d7725d74ad07dfab450822fad3bcbb346d767a2625b07f5c8e279bfcc9393fd2a6c7792fa6115b3e8301599d00ef6fc46de9272f6f84764aa68d9884628b7cf2f1e8ede3ec1a3f05dda0a98640ddbcc749df7d4cbf7a73e514c", 0xc5}], 0x1}, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r5, &(0x7f000000b400)=[{{&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}], 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @broadcast}, 0x2ac, 0x0, 0x0, 0x0, 0xab6, &(0x7f00000000c0)='batadv_slave_1\x00', 0x2, 0x7fffffffffffffff, 0x1}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000022c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYBLOB="df480000000000000001806fb433ad508b555d645843f7000e0f00006005460000100001890900020073697430000000001800010000000000b97b74300000000000000400"/82], 0x58}}, 0x24) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000080)={0x80000001, 0x9, 0x0, 0x10000}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r7) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="c1342bbd7000fddbdf2507000000080005000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0017000202aaaaaaaaaaaa0a0004007770616e34000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) close(r3) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="58aa7065", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf253000000005003500060000000a0001007770616e340000000500330001000000050035000a000000050036000100000008000200", @ANYRES32=r9, @ANYBLOB="050034009300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 116.935707ms ago: executing program 0 (id=7684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000020500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1e, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000400000000000000f600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff0000000000bfa100800000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000e7ab27a77bd940715bbf3837b86d1675fb489fce649b3a81aa5167a08efc5ef3a0cdc6", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0xa, '\x00', r8, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x1, 0x2, 0x82ac}, 0x10, r9, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[r1, r1, r1, r1, r1], &(0x7f0000000440)=[{0x0, 0x5, 0x9, 0x2}, {0x0, 0x5, 0xc, 0xc}, {0x0, 0x4, 0xf, 0xc}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x1, 0xa}], 0x10, 0x8}, 0x94) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r10, 0xc040583f, &(0x7f0000000840)={{@align=0x2, {0x9, 0x5, 0x0, 0x1}}, {{[0x1, 0x6, 0x4, 0x3]}, 0x0, 0x3, 0x7, 0x0, &(0x7f0000000740)=[{{@align=0x8, {0x6, 0x6, 0x8, 0x8}}, 0x40, 0x0, '\x00'}, {{@align=0xa63d, {0xfff7, 0x7, 0xf5, 0x3}}, 0x4, 0x0, '!{:}^-&,-\x00'}, {{@_ha_fsid={[0x10, 0xfffffffe]}, {0x5, 0x3, 0x7, 0x7}}, 0x5, 0x0, '@\x00'}, {{@align=0x1, {0x4, 0x0, 0xfffffff8, 0x1ff}}, 0x61e, 0x0, '-5:\x00'}, {{@align=0xeb, {0x3, 0x400, 0x1, 0x80}}, 0x6, 0x0, '(\x00'}, {{@align, {0x579, 0x4, 0x0, 0x4}}, 0xa, 0x0, '\x00'}, {{@align=0x8, {0xfffa, 0x5, 0xb8e0, 0x7}}, 0x2d3, 0x0, 'GPL\x00'}]}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r7}, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x100, 0x0, 0x1, 0x0, &(0x7f00000001c0)='\x00', 0x0}, 0x50) 0s ago: executing program 4 (id=7685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="10000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="10000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x16}, {0x18}, {0x1b}, {0x9}, {0x25}, {0x60, 0x1}, {0x12, 0x1}, {0x60, 0x1}, {0x6c, 0x1}, {0x12}, {0x4}, {0x1b}, {0x3}, {0xc, 0x1}, {0x6c, 0x1}, {0x5, 0x1}, {0x9}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x2) kernel console output (not intermixed with test programs): lmulticast mode [ 786.975476][T30842] bridge_slave_1: entered promiscuous mode [ 787.114616][T30842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.145155][T30842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.220308][T30842] team0: Port device team_slave_0 added [ 787.280369][T30842] team0: Port device team_slave_1 added [ 787.364434][T30842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.393978][T30842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.480962][T30842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.525035][T31008] SET target dimension over the limit! [ 787.552996][T30842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.583437][T30842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.672512][T30842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.798312][T30842] hsr_slave_0: entered promiscuous mode [ 787.817712][T30842] hsr_slave_1: entered promiscuous mode [ 787.825717][T30842] debugfs: 'hsr0' already exists in 'hsr' [ 787.833061][T30842] Cannot create hsr debugfs directory [ 787.951502][T31020] netlink: 'syz.3.6390': attribute type 1 has an invalid length. [ 787.972406][T31020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6390'. [ 787.973606][ T50] Bluetooth: hci5: command tx timeout [ 788.213982][T29364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.392951][T31042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6397'. [ 788.406724][T31044] netem: change failed [ 788.441173][T31045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6396'. [ 788.620585][T30842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.900557][T30842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.926283][T31067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.017220][T30842] team0: Port device netdevsim1 removed [ 789.029446][T30842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.146183][T30842] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.444727][T31048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.455914][T31081] netlink: 'syz.2.6406': attribute type 1 has an invalid length. [ 789.469696][T31081] netlink: 'syz.2.6406': attribute type 1 has an invalid length. [ 789.478616][T31081] netlink: 'syz.2.6406': attribute type 8 has an invalid length. [ 789.496911][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 789.581335][T30842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 789.666503][T30842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.689252][T30842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 789.718963][T30842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.729632][T30842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 789.744836][T31089] netlink: 'syz.2.6410': attribute type 8 has an invalid length. [ 789.756082][T30842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.766793][T30842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 789.775516][T31093] netlink: 'syz.2.6410': attribute type 8 has an invalid length. [ 789.789228][T30842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.797149][T31092] netlink: 'syz.0.6409': attribute type 1 has an invalid length. [ 789.807761][T31092] NCSI netlink: No device for ifindex 813332851 [ 790.058436][T30842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.097144][T30842] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.126540][T29364] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.133841][T29364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.149801][T29363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.189409][T31104] gretap0: refused to change device tx_queue_len [ 790.221662][T31104] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 790.249753][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.257031][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.468591][T31126] __nla_validate_parse: 6 callbacks suppressed [ 790.468611][T31126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6419'. [ 790.529665][T31126] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6419'. [ 790.563199][T31134] sctp: [Deprecated]: syz.0.6421 (pid 31134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.563199][T31134] Use struct sctp_sack_info instead [ 790.580685][T31132] sctp: [Deprecated]: syz.0.6421 (pid 31132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.580685][T31132] Use struct sctp_sack_info instead [ 790.635745][T31126] bridge_slave_0: left allmulticast mode [ 790.655261][T31126] bridge_slave_0: left promiscuous mode [ 790.700704][T31126] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.774961][T31147] validate_nla: 2 callbacks suppressed [ 790.774985][T31147] netlink: 'syz.3.6423': attribute type 10 has an invalid length. [ 790.790591][T31126] bridge_slave_1: left allmulticast mode [ 790.798913][T31126] bridge_slave_1: left promiscuous mode [ 790.806151][T31126] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.834916][T31126] bond0: (slave bond_slave_1): Releasing backup interface [ 790.857618][T31151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.872755][T31126] team0: Port device team_slave_0 removed [ 790.889170][T31126] team0: Port device team_slave_1 removed [ 790.898404][T31126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.908247][T31126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.920049][T31126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.930701][T31126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.953780][T31126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 791.008715][T31147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.043372][T31147] team0: Port device netdevsim1 added [ 791.186410][T31162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6425'. [ 791.510613][T31177] tc_dump_action: action bad kind [ 791.641084][T30842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.803867][T31191] syzkaller0: entered promiscuous mode [ 791.809442][T31191] syzkaller0: entered allmulticast mode [ 791.934343][T30842] veth0_vlan: entered promiscuous mode [ 791.947327][T30842] veth1_vlan: entered promiscuous mode [ 791.985820][T30842] veth0_macvtap: entered promiscuous mode [ 791.996484][T30842] veth1_macvtap: entered promiscuous mode [ 792.017463][T30842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.035660][T30842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.050382][T29363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.064181][T29363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.077045][T29363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.086472][T29363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.556183][T31134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.768878][T31198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 793.974214][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.903140][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.179927][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 797.749658][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.803532][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.900258][T31217] : renamed from vlan0 (while UP) [ 797.919433][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.943401][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.966776][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6441'. [ 797.987504][T31224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6440'. [ 798.004157][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6441'. [ 798.316475][T31235] netlink: 'syz.3.6443': attribute type 1 has an invalid length. [ 798.373946][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6443'. [ 798.500934][T31248] netlink: 'syz.2.6446': attribute type 2 has an invalid length. [ 798.569610][T31235] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.578753][T31248] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6446'. [ 798.590228][T31245] ipt_rpfilter: unknown options [ 798.606297][T31240] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 798.622806][T31240] bond7: entered allmulticast mode [ 798.680347][T31242] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 798.756255][T31258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 798.899285][T31262] netlink: 'syz.0.6447': attribute type 4 has an invalid length. [ 798.952444][T31260] ip6gre2: entered allmulticast mode [ 799.038881][T31260] team0: Port device ip6gre2 added [ 799.129097][T31270] mac80211_hwsim hwsim45 ÿ: renamed from wlan1 [ 799.209105][T31277] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6454'. [ 799.360057][T31281] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6456'. [ 799.377373][T31283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6455'. [ 799.407619][T31274] bond3: option all_slaves_active: invalid value (222) [ 799.460069][T31274] bond3 (unregistering): Released all slaves [ 799.476707][T31288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6458'. [ 799.715887][T31296] sctp: [Deprecated]: syz.2.6461 (pid 31296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.715887][T31296] Use struct sctp_sack_info instead [ 799.744479][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.818942][T31298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6462'. [ 800.006878][T31309] netlink: 'syz.0.6464': attribute type 1 has an invalid length. [ 800.309817][T31311] bond8: (slave bridge18): making interface the new active one [ 800.361123][T31311] bond8: (slave bridge18): Enslaving as an active interface with an up link [ 800.673403][T31341] Bluetooth: MGMT ver 1.23 [ 800.706540][T31341] netlink: 'syz.3.6472': attribute type 1 has an invalid length. [ 801.738665][T31372] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 801.904395][T29633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.922967][T29633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.934894][T29633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.946359][T29633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.962860][T29633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.708367][T31402] netlink: 'syz.2.6488': attribute type 178 has an invalid length. [ 803.054880][T31417] __nla_validate_parse: 3 callbacks suppressed [ 803.054905][T31417] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6491'. [ 803.148393][T31420] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6493'. [ 803.362979][T31427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6495'. [ 803.411006][T31429] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6496'. [ 803.492507][T31429] tipc: Enabling of bearer rejected, failed to enable media [ 804.051796][T29633] Bluetooth: hci4: command tx timeout [ 804.081995][T31376] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.089364][T31376] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.097772][T31376] bridge_slave_0: entered allmulticast mode [ 804.106056][T31376] bridge_slave_0: entered promiscuous mode [ 804.115221][T31376] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.122764][T31376] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.130310][T31376] bridge_slave_1: entered allmulticast mode [ 804.138779][T31376] bridge_slave_1: entered promiscuous mode [ 804.178412][T31376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.192060][T31376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.246122][T31376] team0: Port device team_slave_0 added [ 804.255403][T31376] team0: Port device team_slave_1 added [ 804.290083][T31376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.297380][T31376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.324209][T31376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.337208][T31376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.345745][T31376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.393060][T31376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.529209][T31376] hsr_slave_0: entered promiscuous mode [ 804.542037][T31376] hsr_slave_1: entered promiscuous mode [ 804.557090][T31376] debugfs: 'hsr0' already exists in 'hsr' [ 804.596017][T31376] Cannot create hsr debugfs directory [ 804.711573][T31473] netlink: 'syz.1.6504': attribute type 1 has an invalid length. [ 804.777371][T31473] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6504'. [ 805.307904][T31495] netlink: 'syz.4.6512': attribute type 4 has an invalid length. [ 805.328593][T31495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6512'. [ 805.500711][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.509276][T29365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.530110][T31502] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 805.624393][T31507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6516'. [ 805.634889][T31505] bond9: (slave geneve4): making interface the new active one [ 805.647960][T31502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6515'. [ 805.679490][T31507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6516'. [ 805.699706][T31511] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 805.711784][T31505] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 805.805252][ T35] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 806.095213][ T35] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 806.115978][T31526] vlan1: entered allmulticast mode [ 806.122522][T11275] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 806.136106][T29633] Bluetooth: hci4: command tx timeout [ 806.186231][T11275] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 806.277756][T31531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6524'. [ 806.367917][T31535] netlink: 'syz.2.6526': attribute type 16 has an invalid length. [ 806.401925][T31535] veth0_macvtap: entered allmulticast mode [ 806.647019][T31547] xt_hashlimit: size too large, truncated to 1048576 [ 806.829567][T31555] nbd: couldn't find a device at index 1048580 [ 807.024574][T12910] syzkaller0: tun_net_xmit 76 [ 807.069299][T30435] syzkaller0: tun_net_xmit 76 [ 807.074772][T12910] syzkaller0: tun_net_xmit 48 [ 807.087902][T31569] netlink: 'syz.1.6534': attribute type 12 has an invalid length. [ 807.363921][T31574] netlink: 'syz.1.6535': attribute type 3 has an invalid length. [ 807.508552][T18243] syzkaller0: tun_net_xmit 76 [ 808.060521][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 150 seconds [ 808.071979][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 150 seconds [ 808.084008][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 150 seconds [ 808.095502][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 150 seconds [ 808.218681][T29633] Bluetooth: hci4: command tx timeout [ 810.294455][T29633] Bluetooth: hci4: command tx timeout [ 811.252655][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.262981][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.531429][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.574281][T31376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.622047][T31376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 812.637285][T31376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 812.657350][T31376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 812.687691][T31376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 812.700395][T31606] __nla_validate_parse: 10 callbacks suppressed [ 812.700416][T31606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6543'. [ 812.747572][T31376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.786742][T31376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.838433][T31610] Cannot find del_set index 0 as target [ 812.859207][T31376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 812.900801][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6545'. [ 812.943293][T31610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6545'. [ 813.032202][T31623] netlink: 'syz.1.6548': attribute type 1 has an invalid length. [ 813.138284][T31623] bond3: entered promiscuous mode [ 813.167265][T31623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.239920][T31633] netlink: 'syz.2.6552': attribute type 10 has an invalid length. [ 813.248222][T31629] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 813.281397][T31629] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 813.302357][T31629] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 813.367080][T31633] ipvlan0: entered allmulticast mode [ 813.382589][T31633] veth0_vlan: entered allmulticast mode [ 813.400075][T31633] team0: Device ipvlan0 failed to register rx_handler [ 813.590066][T31642] netlink: 'syz.2.6557': attribute type 1 has an invalid length. [ 813.604683][T31376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.611568][T31642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6557'. [ 813.631063][T31643] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6556'. [ 813.690539][T31376] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.744216][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.751511][T12910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.273040][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.280521][T11274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.518124][T31668] block nbd4: not configured, cannot reconfigure [ 814.710098][T31676] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6564'. [ 814.814432][T31678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6565'. [ 814.825885][T31681] xt_hashlimit: invalid rate [ 814.928924][T31681] bridge_slave_0: left allmulticast mode [ 814.945322][T31681] bridge_slave_0: left promiscuous mode [ 814.965267][T31681] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.028378][T31681] bridge_slave_1: left allmulticast mode [ 815.055864][T31681] bridge_slave_1: left promiscuous mode [ 815.100747][T31681] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.147908][T31681] bond0: (slave bond_slave_0): Releasing backup interface [ 815.190017][T31681] bond0: (slave bond_slave_1): Releasing backup interface [ 815.283280][T31681] team0: Port device team_slave_0 removed [ 815.345047][T31681] team0: Port device team_slave_1 removed [ 815.364790][T31681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.376782][T31681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.391017][T31681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.401729][T31681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.425308][T31681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 815.476707][T31682] ip6gre1: entered allmulticast mode [ 815.487801][T31682] team0: Port device ip6gre1 added [ 815.657863][T31701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6571'. [ 815.683626][T31704] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6572'. [ 815.734501][T31705] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6572'. [ 816.356157][T31726] syzkaller0: entered promiscuous mode [ 816.377337][T31726] syzkaller0: entered allmulticast mode [ 816.399852][T31726] 0: reclassify loop, rule prio 0, protocol 800 [ 816.619954][T31376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.817634][T31376] veth0_vlan: entered promiscuous mode [ 816.868305][T31376] veth1_vlan: entered promiscuous mode [ 816.985001][T31376] veth0_macvtap: entered promiscuous mode [ 817.013871][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.023639][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.084247][T31376] veth1_macvtap: entered promiscuous mode [ 817.239171][T31376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.276863][T31376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.324566][ T6907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.336173][ T6907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.347326][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.388868][ T98] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.563414][T31753] netlink: 'syz.2.6586': attribute type 32 has an invalid length. [ 817.792498][T31753] bond2: Setting coupled_control to off (0) [ 817.820018][T31755] __nla_validate_parse: 4 callbacks suppressed [ 817.820042][T31755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6587'. [ 818.409292][T11274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.449059][T11274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.610509][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.642978][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.733162][T31787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6595'. [ 819.125104][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6599'. [ 819.376767][T31811] syzkaller0: entered promiscuous mode [ 819.390113][T31811] syzkaller0: entered allmulticast mode [ 819.691830][T31824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6605'. [ 819.714672][T31824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6605'. [ 822.158037][T29366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.774623][T29372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.773489][T11274] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.888940][T11274] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.942466][T11274] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.965733][T11274] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.091039][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'. [ 826.116735][T31866] netlink: 'syz.2.6616': attribute type 1 has an invalid length. [ 826.195441][T31871] netlink: 4520 bytes leftover after parsing attributes in process `syz.4.6617'. [ 826.339986][T31877] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 826.350330][T31877] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 826.368439][T31871] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 826.409422][T31881] netlink: 404 bytes leftover after parsing attributes in process `syz.0.6621'. [ 826.423011][T31871] bond1 (unregistering): Released all slaves [ 826.430807][T31881] netlink: 'syz.0.6621': attribute type 30 has an invalid length. [ 826.505730][T31883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6620'. [ 826.677187][T31888] netlink: 'syz.2.6622': attribute type 1 has an invalid length. [ 826.697462][T31888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6622'. [ 826.707298][T31888] netlink: 'syz.2.6622': attribute type 7 has an invalid length. [ 826.718595][T31888] netlink: 'syz.2.6622': attribute type 8 has an invalid length. [ 826.753693][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6622'. [ 826.813477][T31888] gretap0: entered promiscuous mode [ 826.833774][T31888] gretap0: left promiscuous mode [ 826.885362][T31898] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6625'. [ 827.438016][T31920] syzkaller0: entered promiscuous mode [ 827.453195][T31920] syzkaller0: entered allmulticast mode [ 827.568417][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6636'. [ 827.746331][T31941] tipc: Started in network mode [ 827.764918][T31941] tipc: Node identity b6723b943d33, cluster identity 4711 [ 827.794714][T31941] tipc: Enabled bearer , priority 0 [ 827.875040][T31943] syzkaller0: entered promiscuous mode [ 827.896881][T31943] syzkaller0: entered allmulticast mode [ 827.903159][T29372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.932832][T31951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.012608][T31939] tipc: Resetting bearer [ 828.108886][T31939] tipc: Disabling bearer [ 828.503018][T30437] IPVS: starting estimator thread 0... [ 828.527769][T31976] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 828.538438][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.556456][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6643'. [ 828.573366][T31976] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6645'. [ 828.601947][T31974] IPVS: using max 27 ests per chain, 64800 per kthread [ 828.653215][T31976] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 828.673600][T31976] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 828.681751][T31976] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 828.744257][T31976] netlink: 'syz.0.6645': attribute type 1 has an invalid length. [ 828.806901][T31978] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 828.919602][T31988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.957149][T31987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.002276][T31990] tls_set_device_offload: netdev not found [ 829.095320][T31990] IPVS: Scheduler module ip_vs_sip not found [ 829.409052][T32014] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 829.858556][T32013] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 829.893668][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 830.556148][T32046] veth0: entered promiscuous mode [ 831.255978][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 831.603685][T32089] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 831.834227][T32101] __nla_validate_parse: 40 callbacks suppressed [ 831.834253][T32101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6681'. [ 831.870217][ T98] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 832.025602][T30435] IPVS: starting estimator thread 0... [ 832.116479][T32116] validate_nla: 31 callbacks suppressed [ 832.116499][T32116] netlink: 'syz.1.6685': attribute type 39 has an invalid length. [ 832.150730][T32117] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 832.162332][T32112] IPVS: using max 26 ests per chain, 62400 per kthread [ 832.179174][T32117] batman_adv: batadv0: Adding interface: wlan0 [ 832.180147][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6686'. [ 832.196732][T32117] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.225060][T32117] batman_adv: batadv0: Interface activated: wlan0 [ 832.240421][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6686'. [ 832.425042][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6688'. [ 832.585661][T32143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6691'. [ 832.626123][T32143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6691'. [ 832.849328][T32155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6695'. [ 833.026345][T32163] netlink: 'syz.3.6699': attribute type 16 has an invalid length. [ 833.036179][T32163] netlink: 'syz.3.6699': attribute type 17 has an invalid length. [ 833.228543][T32163] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.235861][T32163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.260022][T32163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.276247][T32163] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.334430][T32163] veth0_to_bond: left allmulticast mode [ 833.428068][T32163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.463525][T32163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 833.488786][T32163] xfrm1: left promiscuous mode [ 833.494099][T32163] xfrm1: left allmulticast mode [ 833.504710][T32163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 833.527861][T32163] bond7: left allmulticast mode [ 833.534344][T32163] 8021q: adding VLAN 0 to HW filter on device bond7 [ 833.549436][T32163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 833.562569][T32163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 833.580818][T32167] netlink: 'syz.1.6700': attribute type 29 has an invalid length. [ 833.616093][T32181] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 833.632121][T29365] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.639456][T29365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.654246][ T98] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.831986][T29366] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 833.859805][T32197] netlink: 'syz.2.6705': attribute type 1 has an invalid length. [ 833.878157][T32197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6705'. [ 834.032542][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 834.103152][T32209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.118045][T32211] netlink: 'syz.3.6709': attribute type 1 has an invalid length. [ 834.139187][T32208] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 834.171849][T29365] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 834.203672][T32211] 8021q: adding VLAN 0 to HW filter on device bond10 [ 834.214415][T32216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6709'. [ 834.223799][T32208] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 834.223858][T32208] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 834.241421][T29366] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 834.242490][T29366] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 834.301489][T29365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.316615][T32221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6713'. [ 834.350763][T32221] netlink: 'syz.1.6713': attribute type 7 has an invalid length. [ 834.357462][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 834.379379][T29372] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 835.793272][T32266] xt_TCPMSS: Only works on TCP SYN packets [ 836.140695][T32275] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001 [ 836.609475][T32289] netlink: 'syz.0.6726': attribute type 4 has an invalid length. [ 837.034100][T32313] sctp: [Deprecated]: syz.0.6734 (pid 32313) Use of int in max_burst socket option. [ 837.034100][T32313] Use struct sctp_assoc_value instead [ 837.267475][T32313] bond1 (unregistering): Released all slaves [ 837.632893][T32342] __nla_validate_parse: 11 callbacks suppressed [ 837.632919][T32342] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6739'. [ 837.691063][T32345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6740'. [ 837.722209][T32337] syzkaller1: entered promiscuous mode [ 837.744585][T32337] syzkaller1: entered allmulticast mode [ 837.974438][T32355] syz_tun: refused to change device tx_queue_len [ 838.050250][T32362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6742'. [ 838.133734][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 180 seconds [ 838.148403][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 180 seconds [ 838.160198][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 180 seconds [ 838.172923][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 180 seconds [ 838.364260][T32366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'. [ 838.711675][ T3330] net_ratelimit: 95 callbacks suppressed [ 838.711697][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 838.777977][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.801411][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 838.926298][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.963122][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 838.971888][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.984316][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 839.003972][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 839.014153][T29363] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 839.023911][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 839.084226][T32384] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 839.113892][T32385] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6748'. [ 839.141508][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 839.155370][T32385] netlink: 'syz.0.6748': attribute type 2 has an invalid length. [ 839.206247][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 839.298220][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 839.340957][T32384] bond4: entered promiscuous mode [ 839.392846][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 839.404107][T32384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.442975][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 839.596207][T32384] bond4: (slave bridge2): making interface the new active one [ 839.625071][T32384] bridge2: entered promiscuous mode [ 839.642273][T32384] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 840.114691][T32415] netlink: 'syz.1.6754': attribute type 4 has an invalid length. [ 840.318334][T32421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6756'. [ 840.434353][T32422] netlink: 'syz.2.6756': attribute type 9 has an invalid length. [ 840.459233][T32421] netlink: 'syz.2.6756': attribute type 9 has an invalid length. [ 840.963039][T32451] netlink: 'syz.2.6763': attribute type 1 has an invalid length. [ 841.038229][T32457] netlink: 'syz.1.6764': attribute type 1 has an invalid length. [ 841.052305][T32451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 841.069408][T32457] netlink: 'syz.1.6764': attribute type 1 has an invalid length. [ 841.092702][ T50] Bluetooth: hci2: command tx timeout [ 841.119065][T32456] bond3: (slave gretap1): making interface the new active one [ 841.132674][T32456] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 841.307297][T32470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 841.639784][T32379] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.661095][T32379] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.701731][T32379] bridge_slave_0: entered allmulticast mode [ 841.720199][T32379] bridge_slave_0: entered promiscuous mode [ 841.758671][T32379] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.793367][T32379] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.834755][T32379] bridge_slave_1: entered allmulticast mode [ 841.864090][T32379] bridge_slave_1: entered promiscuous mode [ 842.031144][T32379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.048616][T32379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.176978][T32379] team0: Port device team_slave_0 added [ 842.200961][T32506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6779'. [ 842.219073][T32379] team0: Port device team_slave_1 added [ 842.353908][T32379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.384449][T32379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.434220][T32379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.465639][T32379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.484166][T32379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.539539][T32525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6783'. [ 842.585361][T32379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.868310][T32379] hsr_slave_0: entered promiscuous mode [ 842.889644][T32379] hsr_slave_1: entered promiscuous mode [ 842.907476][T32379] debugfs: 'hsr0' already exists in 'hsr' [ 842.922649][T32379] Cannot create hsr debugfs directory [ 843.080876][T32553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6792'. [ 843.171574][ T50] Bluetooth: hci2: command tx timeout [ 843.288057][T32553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 843.652990][T32585] netlink: 'syz.4.6803': attribute type 1 has an invalid length. [ 843.703531][T32585] bond1: entered promiscuous mode [ 843.709346][T32585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.733719][ T6905] net_ratelimit: 147 callbacks suppressed [ 843.733742][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 843.818323][T12910] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 843.842022][T32585] bond1: (slave bridge1): making interface the new active one [ 843.869143][T32585] bridge1: entered promiscuous mode [ 843.886392][T32585] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 843.898357][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 843.933163][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 844.071516][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.123492][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.162173][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.201664][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.262439][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.331728][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 844.405409][T32379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.433280][T32379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.446493][T32379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 844.534181][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 844.925054][T32379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.959919][T32622] xt_CT: No such helper "snmp_trap" [ 845.003821][T32379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.118897][T32379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.251638][ T50] Bluetooth: hci2: command tx timeout [ 845.621748][T32379] team0: Port device netdevsim1 removed [ 845.634068][T32379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.645447][T32379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.660979][T32379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 845.932362][T32379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.953290][T32379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.968957][T32379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 846.304671][T32694] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6829'. [ 846.331831][T32694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6829'. [ 846.366366][T32695] tipc: Enabled bearer , priority 0 [ 846.380438][T32697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6830'. [ 846.740083][T32715] netlink: 'syz.4.6834': attribute type 1 has an invalid length. [ 847.076098][T32689] tipc: Disabling bearer [ 847.128289][T32729] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6837'. [ 847.223966][T32379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 847.254456][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 847.275277][T32379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 847.300927][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 847.319885][T32379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 847.331726][ T50] Bluetooth: hci2: command tx timeout [ 847.365716][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 847.408860][T32379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 847.456877][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 847.906866][T32379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.935511][T32761] netlink: 'syz.0.6843': attribute type 1 has an invalid length. [ 847.947966][T32379] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.966363][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'. [ 847.992939][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.000228][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.035922][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.043214][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.107560][T32764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6844'. [ 848.285760][ T302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6847'. [ 848.337579][ T302] macsec1: entered promiscuous mode [ 848.348667][ T302] bridge0: entered promiscuous mode [ 848.368597][ T302] macsec1: entered allmulticast mode [ 848.386206][ T302] bridge0: entered allmulticast mode [ 848.409541][ T302] bridge0: port 3(macsec1) entered blocking state [ 848.428427][ T302] bridge0: port 3(macsec1) entered disabled state [ 848.498108][ T302] bridge0: left allmulticast mode [ 848.621989][T30437] bridge0: left promiscuous mode [ 848.687475][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.695311][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.752055][ T6909] net_ratelimit: 161 callbacks suppressed [ 848.752078][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 848.790600][ T326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6851'. [ 848.815145][ T6909] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 848.924337][ T326] Cannot find del_set index 2 as target [ 848.943331][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 848.966254][ T333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6852'. [ 848.985683][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 849.038317][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 849.063683][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 849.092166][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 849.125394][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6854'. [ 849.183076][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6854'. [ 849.202362][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 849.214936][ T345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6854'. [ 849.228416][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 849.371357][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 849.567259][T32379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.629995][T32379] veth0_vlan: entered promiscuous mode [ 849.663061][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.673682][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.689810][T32379] veth1_vlan: entered promiscuous mode [ 849.741397][T32379] veth0_macvtap: entered promiscuous mode [ 849.759631][T32379] veth1_macvtap: entered promiscuous mode [ 849.785206][T32379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.825395][T32379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.920245][ T6907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.932219][ T6907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.965739][ T6907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.980573][ T6907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.923979][ T331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.197989][T11276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.238026][T11276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.342131][ T6907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.377367][ T6907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.676702][ T395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6864'. [ 852.688541][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6867'. [ 852.932858][ T421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6868'. [ 853.163687][ T426] netlink: 'syz.1.6872': attribute type 13 has an invalid length. [ 853.361014][ T409] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 853.383758][ T438] netlink: 'syz.2.6876': attribute type 1 has an invalid length. [ 853.384501][ T409] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 853.521026][ T443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6877'. [ 853.552408][ T443] nbd: must specify a size in bytes for the device [ 853.777913][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6878'. [ 853.864301][ T6909] net_ratelimit: 98 callbacks suppressed [ 853.864323][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 853.945095][ T453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6880'. [ 853.960048][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 853.995158][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.031909][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.052146][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.092906][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.136492][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.165491][ T6909] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 854.312557][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 854.330762][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 854.944207][ T498] netlink: 'syz.1.6893': attribute type 9 has an invalid length. [ 855.200300][ T507] netlink: 'syz.0.6896': attribute type 3 has an invalid length. [ 855.239626][ T507] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6896'. [ 855.332114][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 855.332406][ T4951] Bluetooth: hci0: command 0x0406 tx timeout [ 855.428113][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6900'. [ 856.014096][ T545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6908'. [ 856.601905][ T561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6912'. [ 856.666695][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 856.697116][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 856.729356][ T564] netlink: 'syz.4.6914': attribute type 4 has an invalid length. [ 856.737705][ T564] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6914'. [ 857.267560][ T592] netlink: 'syz.4.6920': attribute type 1 has an invalid length. [ 857.279021][ T598] netlink: 'syz.1.6922': attribute type 1 has an invalid length. [ 857.311367][ T598] netlink: 'syz.1.6922': attribute type 1 has an invalid length. [ 857.329250][ T598] netlink: 'syz.1.6922': attribute type 8 has an invalid length. [ 857.947764][ T643] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 858.638777][ T673] netlink: 'syz.4.6942': attribute type 1 has an invalid length. [ 858.659981][ T670] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 858.660940][ T674] __nla_validate_parse: 6 callbacks suppressed [ 858.660984][ T674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6941'. [ 858.720168][ T670] bond4 (unregistering): Released all slaves [ 858.808116][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6944'. [ 858.937166][T11273] net_ratelimit: 178 callbacks suppressed [ 858.961659][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 858.989362][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 859.123001][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 859.142918][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 859.266920][ T702] netlink: 'syz.3.6952': attribute type 32 has an invalid length. [ 859.281623][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 859.318236][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 859.322713][ T702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 859.462296][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 859.480649][ T702] bond1: option coupled_control: invalid value (192) [ 859.541285][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 859.558349][ T702] bond1 (unregistering): Released all slaves [ 859.581736][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 859.621717][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 860.194034][ T735] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6959'. [ 860.278034][ T737] netlink: 'syz.4.6960': attribute type 64 has an invalid length. [ 860.307328][ T737] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6960'. [ 860.825136][ T769] xt_hashlimit: max too large, truncated to 1048576 [ 860.895382][ T755] syzkaller0: entered promiscuous mode [ 860.914748][ T755] syzkaller0: entered allmulticast mode [ 860.921987][ T774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6971'. [ 860.950057][ T774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6971'. [ 863.960429][T29363] net_ratelimit: 171 callbacks suppressed [ 863.960454][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 863.975219][T30432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.001378][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.029725][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.054765][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.097040][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.108378][ T5001] udevd[5001]: worker [21583] /devices/virtual/block/nbd2 timeout; kill it [ 864.130224][ T5001] udevd[5001]: seq 28493 '/devices/virtual/block/nbd2' killed [ 864.131118][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.162969][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.181908][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 864.213310][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 866.419527][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6976'. [ 866.440509][ T802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6979'. [ 866.489980][ T808] netlink: 'syz.4.6977': attribute type 12 has an invalid length. [ 866.508422][ T808] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.6977'. [ 866.525458][ T801] netlink: 'syz.2.6976': attribute type 1 has an invalid length. [ 866.551865][ T801] netlink: 'syz.2.6976': attribute type 2 has an invalid length. [ 866.804846][ T826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.812227][ T826] IPv6: NLM_F_CREATE should be set when creating new route [ 867.068875][ T822] syzkaller0: entered promiscuous mode [ 867.081420][ T822] syzkaller0: entered allmulticast mode [ 867.120493][ T824] batman_adv: batadv0: Interface deactivated: wlan0 [ 867.167971][ T836] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 867.475521][ T815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.637677][ T843] netlink: 'syz.3.6990': attribute type 83 has an invalid length. [ 868.244150][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 210 seconds [ 868.255256][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 210 seconds [ 868.274381][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 210 seconds [ 868.285621][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 210 seconds [ 868.961818][T11274] net_ratelimit: 204 callbacks suppressed [ 868.961841][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.015331][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.051837][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.091261][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.113490][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.131745][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.172290][T30440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.184072][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.218907][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 869.242997][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 872.347637][ T854] FAULT_INJECTION: forcing a failure. [ 872.347637][ T854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 872.367793][ T854] CPU: 0 UID: 0 PID: 854 Comm: syz.4.6993 Not tainted syzkaller #0 PREEMPT(full) [ 872.367823][ T854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.367837][ T854] Call Trace: [ 872.367846][ T854] [ 872.367856][ T854] dump_stack_lvl+0xe8/0x150 [ 872.367889][ T854] should_fail_ex+0x412/0x560 [ 872.367920][ T854] _copy_from_iter+0x1d3/0x1670 [ 872.367947][ T854] ? rcu_is_watching+0x15/0xb0 [ 872.368026][ T854] ? __pfx__copy_from_iter+0x10/0x10 [ 872.368068][ T854] ? netlink_sendmsg+0x650/0xb40 [ 872.368099][ T854] ? skb_put+0x11b/0x210 [ 872.368132][ T854] netlink_sendmsg+0x6c0/0xb40 [ 872.368173][ T854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.368210][ T854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 872.368245][ T854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.368277][ T854] ____sys_sendmsg+0x972/0x9f0 [ 872.368307][ T854] ? __might_fault+0xaf/0x130 [ 872.368342][ T854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.368383][ T854] ? import_iovec+0x73/0xa0 [ 872.368412][ T854] ___sys_sendmsg+0x2a5/0x360 [ 872.368441][ T854] ? __lock_acquire+0x6b5/0x2cf0 [ 872.368470][ T854] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.368534][ T854] ? __fget_files+0x2a/0x420 [ 872.368559][ T854] ? __fget_files+0x3a0/0x420 [ 872.368594][ T854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 872.368627][ T854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.368667][ T854] ? __pfx_ksys_write+0x10/0x10 [ 872.368706][ T854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.368731][ T854] do_syscall_64+0x174/0xf80 [ 872.368763][ T854] ? trace_irq_disable+0x3b/0x140 [ 872.368793][ T854] ? clear_bhb_loop+0x40/0x90 [ 872.368819][ T854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.368839][ T854] RIP: 0033:0x7fbb9ed9ce59 [ 872.368859][ T854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.368877][ T854] RSP: 002b:00007fbb9fc8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.368899][ T854] RAX: ffffffffffffffda RBX: 00007fbb9f015fa0 RCX: 00007fbb9ed9ce59 [ 872.368913][ T854] RDX: 000000000000c8c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 872.368926][ T854] RBP: 00007fbb9fc8c090 R08: 0000000000000000 R09: 0000000000000000 [ 872.368938][ T854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.368950][ T854] R13: 00007fbb9f016038 R14: 00007fbb9f015fa0 R15: 00007ffe53144e58 [ 872.368985][ T854] [ 872.725000][ T853] netlink: 'syz.1.6992': attribute type 1 has an invalid length. [ 872.751061][ T853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6992'. [ 872.828102][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6996'. [ 872.880350][ T863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6996'. [ 873.080437][ T869] netlink: 'syz.3.6999': attribute type 1 has an invalid length. [ 873.096654][ T869] syzkaller0: entered promiscuous mode [ 873.104729][ T869] syzkaller0: entered allmulticast mode [ 873.239932][ T873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7000'. [ 873.426992][ T879] netlink: 'syz.3.7002': attribute type 1 has an invalid length. [ 873.550916][ T879] bond2: entered promiscuous mode [ 873.573334][ T879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 873.669276][ T879] macvtap1: entered allmulticast mode [ 873.745599][ T879] bond2: (slave bridge1): making interface the new active one [ 873.762354][ T879] bridge1: entered promiscuous mode [ 873.785074][ T894] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7006'. [ 873.812644][ T879] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 873.870860][ T891] veth1_macvtap: entered allmulticast mode [ 873.891019][ T890] veth1_macvtap: left allmulticast mode [ 873.983542][ T6905] net_ratelimit: 192 callbacks suppressed [ 873.983564][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 874.037892][ T900] FAULT_INJECTION: forcing a failure. [ 874.037892][ T900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.053023][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 874.064976][ T900] CPU: 0 UID: 0 PID: 900 Comm: syz.1.7007 Not tainted syzkaller #0 PREEMPT(full) [ 874.065007][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 874.065021][ T900] Call Trace: [ 874.065030][ T900] [ 874.065040][ T900] dump_stack_lvl+0xe8/0x150 [ 874.065070][ T900] should_fail_ex+0x412/0x560 [ 874.065121][ T900] _copy_from_iter+0x1d3/0x1670 [ 874.065149][ T900] ? rcu_is_watching+0x15/0xb0 [ 874.065180][ T900] ? __pfx__copy_from_iter+0x10/0x10 [ 874.065212][ T900] ? netlink_sendmsg+0x650/0xb40 [ 874.065241][ T900] ? skb_put+0x11b/0x210 [ 874.065273][ T900] netlink_sendmsg+0x6c0/0xb40 [ 874.065313][ T900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.065347][ T900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 874.065379][ T900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.065418][ T900] ____sys_sendmsg+0x972/0x9f0 [ 874.065448][ T900] ? __might_fault+0xaf/0x130 [ 874.065482][ T900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.065522][ T900] ? import_iovec+0x73/0xa0 [ 874.065550][ T900] ___sys_sendmsg+0x2a5/0x360 [ 874.065578][ T900] ? __lock_acquire+0x6b5/0x2cf0 [ 874.065605][ T900] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.065674][ T900] ? __fget_files+0x2a/0x420 [ 874.065697][ T900] ? __fget_files+0x3a0/0x420 [ 874.065733][ T900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 874.065766][ T900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.065806][ T900] ? __pfx_ksys_write+0x10/0x10 [ 874.065846][ T900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.065873][ T900] do_syscall_64+0x174/0xf80 [ 874.065903][ T900] ? trace_irq_disable+0x3b/0x140 [ 874.065933][ T900] ? clear_bhb_loop+0x40/0x90 [ 874.065958][ T900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.065979][ T900] RIP: 0033:0x7ffa8459ce59 [ 874.065998][ T900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.066016][ T900] RSP: 002b:00007ffa853ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.066039][ T900] RAX: ffffffffffffffda RBX: 00007ffa84815fa0 RCX: 00007ffa8459ce59 [ 874.066054][ T900] RDX: 000000000000c8c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 874.066067][ T900] RBP: 00007ffa853ed090 R08: 0000000000000000 R09: 0000000000000000 [ 874.066081][ T900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.066093][ T900] R13: 00007ffa84816038 R14: 00007ffa84815fa0 R15: 00007ffecc0133a8 [ 874.066127][ T900] [ 874.066185][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 874.372674][T30435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.622401][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 874.681912][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 874.705910][T29364] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 874.837146][ T926] vlan2: entered allmulticast mode [ 874.856724][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 874.874829][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 874.894321][ T922] IPv6: NLM_F_REPLACE set, but no existing node found! [ 874.933063][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.015675][ T932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7016'. [ 875.062792][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e105c00: rx timeout, send abort [ 875.126956][ T941] FAULT_INJECTION: forcing a failure. [ 875.126956][ T941] name failslab, interval 1, probability 0, space 0, times 0 [ 875.161385][ T941] CPU: 1 UID: 0 PID: 941 Comm: syz.3.7019 Not tainted syzkaller #0 PREEMPT(full) [ 875.161414][ T941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 875.161428][ T941] Call Trace: [ 875.161437][ T941] [ 875.161446][ T941] dump_stack_lvl+0xe8/0x150 [ 875.161477][ T941] should_fail_ex+0x412/0x560 [ 875.161506][ T941] should_failslab+0xa8/0x100 [ 875.161528][ T941] ? skb_clone+0x212/0x3a0 [ 875.161560][ T941] kmem_cache_alloc_noprof+0x87/0x650 [ 875.161589][ T941] ? __netlink_lookup+0xc6/0x8b0 [ 875.161627][ T941] skb_clone+0x212/0x3a0 [ 875.161662][ T941] __netlink_deliver_tap+0x404/0x850 [ 875.161705][ T941] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.161736][ T941] netlink_deliver_tap+0x19c/0x1b0 [ 875.161773][ T941] netlink_unicast+0x730/0x8e0 [ 875.161812][ T941] netlink_sendmsg+0x813/0xb40 [ 875.161853][ T941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.161894][ T941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 875.161927][ T941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.161959][ T941] ____sys_sendmsg+0x972/0x9f0 [ 875.161989][ T941] ? __might_fault+0xaf/0x130 [ 875.162024][ T941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.162065][ T941] ? import_iovec+0x73/0xa0 [ 875.162095][ T941] ___sys_sendmsg+0x2a5/0x360 [ 875.162124][ T941] ? __lock_acquire+0x6b5/0x2cf0 [ 875.162153][ T941] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.162224][ T941] ? __fget_files+0x2a/0x420 [ 875.162249][ T941] ? __fget_files+0x3a0/0x420 [ 875.162286][ T941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 875.162320][ T941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.162362][ T941] ? __pfx_ksys_write+0x10/0x10 [ 875.162402][ T941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.162426][ T941] do_syscall_64+0x174/0xf80 [ 875.162460][ T941] ? clear_bhb_loop+0x40/0x90 [ 875.162487][ T941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.162508][ T941] RIP: 0033:0x7f59a879ce59 [ 875.162528][ T941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.162546][ T941] RSP: 002b:00007f59a96f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.162568][ T941] RAX: ffffffffffffffda RBX: 00007f59a8a15fa0 RCX: 00007f59a879ce59 [ 875.162583][ T941] RDX: 000000000000c8c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 875.162596][ T941] RBP: 00007f59a96f8090 R08: 0000000000000000 R09: 0000000000000000 [ 875.162610][ T941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.162622][ T941] R13: 00007f59a8a16038 R14: 00007f59a8a15fa0 R15: 00007ffc90ae5f18 [ 875.162657][ T941] [ 875.563000][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805e93dc00: rx timeout, send abort [ 875.572320][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e105c00: abort rx timeout. Force session deactivation [ 875.761135][ T955] syzkaller0: entered promiscuous mode [ 875.791982][ T955] syzkaller0: entered allmulticast mode [ 876.071449][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805e93dc00: abort rx timeout. Force session deactivation [ 876.594420][ T991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7031'. [ 876.718644][ T997] FAULT_INJECTION: forcing a failure. [ 876.718644][ T997] name failslab, interval 1, probability 0, space 0, times 0 [ 876.770918][ T997] CPU: 0 UID: 0 PID: 997 Comm: syz.3.7032 Not tainted syzkaller #0 PREEMPT(full) [ 876.770948][ T997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 876.770961][ T997] Call Trace: [ 876.770969][ T997] [ 876.770980][ T997] dump_stack_lvl+0xe8/0x150 [ 876.771010][ T997] should_fail_ex+0x412/0x560 [ 876.771038][ T997] should_failslab+0xa8/0x100 [ 876.771060][ T997] __kmalloc_noprof+0xe8/0x760 [ 876.771090][ T997] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 876.771120][ T997] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 876.771161][ T997] genl_family_rcv_msg_doit+0xd9/0x330 [ 876.771192][ T997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 876.771224][ T997] ? apparmor_capable+0x126/0x170 [ 876.771249][ T997] ? bpf_lsm_capable+0x9/0x20 [ 876.771270][ T997] ? security_capable+0x7e/0x2c0 [ 876.771423][ T997] genl_rcv_msg+0x61c/0x7a0 [ 876.771453][ T997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 876.771475][ T997] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 876.771580][ T997] ? __pfx_nl80211_set_key+0x10/0x10 [ 876.771608][ T997] ? __pfx_nl80211_post_doit+0x10/0x10 [ 876.771636][ T997] ? __pfx_ref_tracker_free+0x10/0x10 [ 876.771713][ T997] netlink_rcv_skb+0x232/0x4b0 [ 876.771743][ T997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 876.771768][ T997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 876.771812][ T997] ? down_read+0x270/0x2e0 [ 876.771865][ T997] ? genl_rcv+0xd/0x40 [ 876.771888][ T997] genl_rcv+0x28/0x40 [ 876.771909][ T997] netlink_unicast+0x75c/0x8e0 [ 876.771948][ T997] netlink_sendmsg+0x813/0xb40 [ 876.771988][ T997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.772023][ T997] ? aa_sock_msg_perm+0xf1/0x1b0 [ 876.772055][ T997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 876.772086][ T997] ____sys_sendmsg+0x972/0x9f0 [ 876.772118][ T997] ? __might_fault+0xaf/0x130 [ 876.772152][ T997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.772193][ T997] ? import_iovec+0x73/0xa0 [ 876.772224][ T997] ___sys_sendmsg+0x2a5/0x360 [ 876.772251][ T997] ? __lock_acquire+0x6b5/0x2cf0 [ 876.772279][ T997] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.772347][ T997] ? __fget_files+0x2a/0x420 [ 876.772372][ T997] ? __fget_files+0x3a0/0x420 [ 876.772419][ T997] __x64_sys_sendmsg+0x1bd/0x2a0 [ 876.772451][ T997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.772489][ T997] ? __pfx_ksys_write+0x10/0x10 [ 876.772527][ T997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.772551][ T997] do_syscall_64+0x174/0xf80 [ 876.772579][ T997] ? trace_irq_disable+0x3b/0x140 [ 876.772609][ T997] ? clear_bhb_loop+0x40/0x90 [ 876.772634][ T997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.772654][ T997] RIP: 0033:0x7f59a879ce59 [ 876.772674][ T997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.772692][ T997] RSP: 002b:00007f59a96f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.772713][ T997] RAX: ffffffffffffffda RBX: 00007f59a8a15fa0 RCX: 00007f59a879ce59 [ 876.772727][ T997] RDX: 000000000000c8c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 876.772741][ T997] RBP: 00007f59a96f8090 R08: 0000000000000000 R09: 0000000000000000 [ 876.772753][ T997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.772766][ T997] R13: 00007f59a8a16038 R14: 00007f59a8a15fa0 R15: 00007ffc90ae5f18 [ 876.772800][ T997] [ 877.348219][ T1014] netlink: 'syz.0.7037': attribute type 29 has an invalid length. [ 877.356213][ T1014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7037'. [ 877.369734][ T1014] netlink: 'syz.0.7037': attribute type 1 has an invalid length. [ 877.378135][ T1014] netlink: 'syz.0.7037': attribute type 2 has an invalid length. [ 877.443170][ T1002] xt_hashlimit: size too large, truncated to 1048576 [ 877.618800][ T1029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7041'. [ 877.828474][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7044'. [ 878.094020][ T1054] FAULT_INJECTION: forcing a failure. [ 878.094020][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 878.139914][ T1054] CPU: 1 UID: 0 PID: 1054 Comm: syz.3.7048 Not tainted syzkaller #0 PREEMPT(full) [ 878.139943][ T1054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 878.139956][ T1054] Call Trace: [ 878.139964][ T1054] [ 878.139974][ T1054] dump_stack_lvl+0xe8/0x150 [ 878.140005][ T1054] should_fail_ex+0x412/0x560 [ 878.140034][ T1054] should_failslab+0xa8/0x100 [ 878.140055][ T1054] ? skb_clone+0x212/0x3a0 [ 878.140085][ T1054] kmem_cache_alloc_noprof+0x87/0x650 [ 878.140125][ T1054] skb_clone+0x212/0x3a0 [ 878.140160][ T1054] __netlink_deliver_tap+0x404/0x850 [ 878.140202][ T1054] ? netlink_deliver_tap+0x2e/0x1b0 [ 878.140233][ T1054] netlink_deliver_tap+0x19c/0x1b0 [ 878.140274][ T1054] netlink_sendskb+0x68/0x140 [ 878.140303][ T1054] netlink_rcv_skb+0x2b6/0x4b0 [ 878.140334][ T1054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 878.140360][ T1054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.140408][ T1054] ? down_read+0x270/0x2e0 [ 878.140428][ T1054] ? genl_rcv+0xd/0x40 [ 878.140453][ T1054] genl_rcv+0x28/0x40 [ 878.140473][ T1054] netlink_unicast+0x75c/0x8e0 [ 878.140513][ T1054] netlink_sendmsg+0x813/0xb40 [ 878.140554][ T1054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.140588][ T1054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 878.140620][ T1054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.140651][ T1054] ____sys_sendmsg+0x972/0x9f0 [ 878.140680][ T1054] ? __might_fault+0xaf/0x130 [ 878.140714][ T1054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.140755][ T1054] ? import_iovec+0x73/0xa0 [ 878.140785][ T1054] ___sys_sendmsg+0x2a5/0x360 [ 878.140814][ T1054] ? __lock_acquire+0x6b5/0x2cf0 [ 878.140842][ T1054] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.140917][ T1054] ? __fget_files+0x2a/0x420 [ 878.140941][ T1054] ? __fget_files+0x3a0/0x420 [ 878.140979][ T1054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 878.141012][ T1054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.141054][ T1054] ? __pfx_ksys_write+0x10/0x10 [ 878.141094][ T1054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.141117][ T1054] do_syscall_64+0x174/0xf80 [ 878.141147][ T1054] ? trace_irq_disable+0x3b/0x140 [ 878.141176][ T1054] ? clear_bhb_loop+0x40/0x90 [ 878.141203][ T1054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.141224][ T1054] RIP: 0033:0x7f59a879ce59 [ 878.141252][ T1054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.141270][ T1054] RSP: 002b:00007f59a96f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.141292][ T1054] RAX: ffffffffffffffda RBX: 00007f59a8a15fa0 RCX: 00007f59a879ce59 [ 878.141312][ T1054] RDX: 000000000000c8c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 878.141325][ T1054] RBP: 00007f59a96f8090 R08: 0000000000000000 R09: 0000000000000000 [ 878.141338][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.141350][ T1054] R13: 00007f59a8a16038 R14: 00007f59a8a15fa0 R15: 00007ffc90ae5f18 [ 878.141386][ T1054] [ 878.639421][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7051'. [ 878.748886][ T1075] nft_compat: unsupported protocol 0 [ 879.063506][ T6907] net_ratelimit: 73 callbacks suppressed [ 879.063531][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.101331][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.133349][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.172014][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.224121][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.238343][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 879.385319][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.432437][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 879.561935][ T1116] netlink: 'syz.1.7064': attribute type 5 has an invalid length. [ 879.591827][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.600294][ T1116] : renamed from veth0_to_bond (while UP) [ 879.631375][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 879.683406][ T1127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7065'. [ 879.709146][ T1127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7065'. [ 879.806290][ T1130] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 879.889594][ T1132] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 880.367788][ T1163] netlink: 'syz.2.7074': attribute type 64 has an invalid length. [ 880.709041][ T1192] macvlan0: entered promiscuous mode [ 880.815213][ T6909] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 880.852551][ T6909] nci: nci_rx_work: unknown MT 0x6 [ 880.877298][ T6909] nci: nci_rx_work: unknown MT 0x1 [ 881.408459][ T1183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.432633][ T1196] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7080'. [ 881.739218][ T1228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7089'. [ 881.767761][ T1227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7090'. [ 881.990985][ T1220] syzkaller0: create flow: hash 2277747401 index 2 [ 882.569290][ T1244] dvmrp0: entered allmulticast mode [ 882.605433][ T1219] syzkaller0: delete flow: hash 2277747401 index 2 [ 884.075554][T11274] net_ratelimit: 153 callbacks suppressed [ 884.075579][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.077521][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.118600][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.141557][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.161911][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.190247][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.212705][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.222470][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.246422][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 884.273747][T11274] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 887.963480][ T1293] IPVS: Error connecting to the multicast addr [ 888.185581][ T1312] ipt_ECN: cannot use operation on non-tcp rule [ 888.193549][ T1312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.200893][ T1312] IPv6: NLM_F_CREATE should be set when creating new route [ 888.208261][ T1312] IPv6: NLM_F_CREATE should be set when creating new route [ 888.448487][ T1324] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7116'. [ 888.672124][ T1338] netlink: 'syz.3.7120': attribute type 1 has an invalid length. [ 888.680964][ T1339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7121'. [ 888.738219][ T1341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7122'. [ 888.755909][ T1341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 888.773876][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7122'. [ 888.801849][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7121'. [ 889.082005][T11275] net_ratelimit: 197 callbacks suppressed [ 889.082059][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.128569][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.167586][ T6909] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.250045][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.279272][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.301361][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.323537][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.338410][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.412044][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 889.458629][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.091921][ T6907] net_ratelimit: 199 callbacks suppressed [ 894.091946][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.127884][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.152416][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.171430][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.191444][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.236034][T30432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.237198][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.278408][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.315676][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 894.341896][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 895.172604][ T1341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7122'. [ 895.218019][ T1341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 895.228521][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7122'. [ 895.602153][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7127'. [ 895.760339][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 895.772544][ T1380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7130'. [ 895.893902][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 895.915179][ T1380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7130'. [ 896.138086][ T1397] netlink: 'syz.0.7138': attribute type 2 has an invalid length. [ 896.161696][ T1397] netlink: 'syz.0.7138': attribute type 1 has an invalid length. [ 896.199328][ T1404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7140'. [ 896.259565][ T1404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 896.275682][ T1409] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 896.432317][ T1413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7142'. [ 896.464692][ T1411] xt_TCPMSS: Only works on TCP SYN packets [ 896.471607][ T1411] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 896.497886][ T1411] syzkaller0: entered promiscuous mode [ 896.504919][ T1411] syzkaller0: entered allmulticast mode [ 896.528757][ T1411] macvtap0: entered allmulticast mode [ 896.546929][ T1411] veth0_macvtap: entered allmulticast mode [ 896.699674][ T1428] netlink: 'syz.1.7146': attribute type 1 has an invalid length. [ 896.747685][ T1429] netlink: 'syz.1.7146': attribute type 1 has an invalid length. [ 897.371812][ T1459] netlink: 'syz.4.7154': attribute type 9 has an invalid length. [ 897.697213][ T1478] vlan2: entered promiscuous mode [ 897.702664][ T1478] bridge0: entered promiscuous mode [ 897.818024][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 897.850663][ T1482] netlink: 'syz.4.7162': attribute type 1 has an invalid length. [ 897.995085][ T1482] bond2: entered promiscuous mode [ 898.000940][ T1482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 898.295639][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 240 seconds [ 898.306719][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 240 seconds [ 898.319966][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 240 seconds [ 898.332836][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 240 seconds [ 898.396429][ T1471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.742294][ T1516] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 898.877760][ T1521] bond4 (unregistering): Released all slaves [ 898.960122][ T1527] netlink: 'syz.2.7175': attribute type 3 has an invalid length. [ 899.191625][T11275] net_ratelimit: 131 callbacks suppressed [ 899.191647][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 899.259790][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 899.392162][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 899.422191][T30440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.430039][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 899.515199][ T1549] x_tables: duplicate underflow at hook 2 [ 899.572725][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.584841][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 899.617581][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 899.752984][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 899.782626][T29363] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 900.256400][ T1585] __nla_validate_parse: 9 callbacks suppressed [ 900.256429][ T1585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7191'. [ 900.302890][ T4951] Bluetooth: hci2: command tx timeout [ 900.315416][ T1585] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 900.528606][ T1601] netlink: 'syz.4.7195': attribute type 5 has an invalid length. [ 900.608613][ T1605] netlink: 'syz.4.7195': attribute type 5 has an invalid length. [ 900.673423][ T1610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'. [ 900.998948][ T1628] bridge_slave_0: left allmulticast mode [ 901.025873][ T1628] bridge_slave_0: left promiscuous mode [ 901.053601][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.114690][ T1628] bridge_slave_1: left allmulticast mode [ 901.154853][ T1628] bridge_slave_1: left promiscuous mode [ 901.165140][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.247062][ T1628] bond1: (slave ): Releasing active interface [ 901.269536][ T1628] bond0: (slave bond_slave_0): Releasing backup interface [ 901.287308][ T1628] bond0: (slave bond_slave_1): Releasing backup interface [ 901.315585][ T1628] team0: Port device team_slave_0 removed [ 901.333106][ T1628] team0: Port device team_slave_1 removed [ 901.340157][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.354413][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.366903][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.376203][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.518555][ T1651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7207'. [ 901.555791][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7207'. [ 901.790709][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7213'. [ 901.824281][ T1664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7213'. [ 901.865204][ T1660] tipc: Enabling of bearer rejected, failed to enable media [ 902.127972][ T1676] tap0: tun_chr_ioctl cmd 1074025676 [ 902.152509][ T1676] tap0: owner set to 0 [ 902.359886][ T1684] syzkaller0: entered promiscuous mode [ 902.376343][ T1684] syzkaller0: entered allmulticast mode [ 902.937951][ T4951] Bluetooth: hci5: command 0x0406 tx timeout [ 903.254506][ T1707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7223'. [ 903.305819][ T1704] bond1: entered promiscuous mode [ 903.311239][ T1704] bond1: entered allmulticast mode [ 903.316853][ T1704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.404169][ T1714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7227'. [ 903.417402][ T1714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7227'. [ 903.435036][ T1714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7227'. [ 903.515405][ T1718] netlink: 'syz.2.7225': attribute type 1 has an invalid length. [ 903.685876][ T1721] netlink: 'syz.0.7229': attribute type 1 has an invalid length. [ 904.109330][ T1741] can: request_module (can-proto-0) failed. [ 904.272214][T11273] net_ratelimit: 145 callbacks suppressed [ 904.272237][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 904.311690][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 904.347732][ T1758] openvswitch: netlink: Flow key attr not present in new flow. [ 904.432722][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 904.447956][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 904.581857][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 904.611024][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 904.638890][T30440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.741858][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 904.764976][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 904.937417][ T1780] bridge_slave_0: left allmulticast mode [ 904.980438][ T1780] bridge_slave_0: left promiscuous mode [ 905.015017][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.055482][ T1780] bridge_slave_1: left allmulticast mode [ 905.070493][ T1780] bridge_slave_1: left promiscuous mode [ 905.078702][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.107118][ T1780] bond0: (slave bond_slave_0): Releasing backup interface [ 905.147637][ T1797] x_tables: duplicate underflow at hook 2 [ 905.163434][ T1780] bond0: (slave bond_slave_1): Releasing backup interface [ 905.243393][ T1780] team0: Port device team_slave_0 removed [ 905.263940][ T1802] xt_hashlimit: overflow, try lower: 3/0 [ 905.289277][ T1780] team0: Port device team_slave_1 removed [ 905.321010][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.345835][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.367051][ T1780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.375307][ T1780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.435433][ T1797] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 905.466783][ T1797] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 905.490823][ T1797] gretap1: entered promiscuous mode [ 905.507734][ T1797] gretap1: entered allmulticast mode [ 905.540240][ T1808] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 905.971786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 906.049756][ T1826] netlink: 'syz.4.7260': attribute type 1 has an invalid length. [ 906.089878][ T1831] __nla_validate_parse: 6 callbacks suppressed [ 906.089898][ T1831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7262'. [ 906.168657][ T1826] bond3: entered promiscuous mode [ 906.202690][ T1826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 906.267198][ T1844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7264'. [ 906.278186][ T1836] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 906.292793][ T1836] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 906.304663][ T1836] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 906.475689][ T1844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 906.495502][ T1847] macvlan2: entered promiscuous mode [ 906.501057][ T1847] macvlan2: entered allmulticast mode [ 906.508558][ T1847] bond4: entered promiscuous mode [ 906.514717][ T1847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.550013][ T1847] bond4: left promiscuous mode [ 906.723597][ T1858] netlink: 'syz.0.7266': attribute type 1 has an invalid length. [ 906.762015][ T1858] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7266'. [ 906.902523][ T1868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7267'. [ 907.068289][ T1878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7271'. [ 907.156695][ T1884] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7273'. [ 907.315697][ T1889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7274'. [ 907.327012][ T1889] netlink: 'syz.1.7274': attribute type 11 has an invalid length. [ 907.336616][ T1889] netlink: 'syz.1.7274': attribute type 5 has an invalid length. [ 907.356299][ T1889] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.7274'. [ 909.342479][T11275] net_ratelimit: 131 callbacks suppressed [ 909.342502][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 909.356324][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 909.471968][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 909.479824][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 909.572057][T18243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.591932][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 909.599818][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 909.711830][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 909.731873][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 909.813320][T30435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.421815][T11275] net_ratelimit: 88 callbacks suppressed [ 914.421838][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 914.435534][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 914.551410][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 914.559225][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 914.671779][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 914.679719][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 914.801680][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 914.809507][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 914.922031][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 914.929911][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 919.503179][T11273] net_ratelimit: 89 callbacks suppressed [ 919.503205][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 919.517160][T11273] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 919.631988][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 919.639832][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 919.751925][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 919.759794][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 919.871528][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 919.879461][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 919.991797][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 919.999639][ T6905] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 924.581984][T29364] net_ratelimit: 88 callbacks suppressed [ 924.582008][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 924.596540][T29364] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 924.711740][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 924.719547][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 924.771982][ T5623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.831667][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 924.839485][T29363] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 924.951871][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 924.959735][ T6907] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 925.071833][ T6907] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 928.373508][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 270 seconds [ 928.384563][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 270 seconds [ 928.395853][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 270 seconds [ 928.407364][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 270 seconds [ 928.531694][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 929.662708][T11275] net_ratelimit: 90 callbacks suppressed [ 929.662732][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 929.676504][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 929.791495][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 929.799411][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 929.911695][T29363] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 929.919546][T29363] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 930.032575][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 930.040402][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 930.151543][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 930.159373][T11275] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 932.702486][ T1924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7284'. [ 932.715157][ T1923] syzkaller0: entered promiscuous mode [ 932.740297][ T1923] syzkaller0: entered allmulticast mode [ 932.799129][ T1924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7284'. [ 932.838266][ T1924] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7284'. [ 932.882957][ T1930] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7286'. [ 933.209819][ T1946] netlink: 'syz.1.7290': attribute type 1 has an invalid length. [ 933.407233][ T1952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7293'. [ 933.458099][ T1954] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7294'. [ 933.471093][ T1952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7293'. [ 933.504295][ T1954] 8021q: VLANs not supported on gre0 [ 934.064410][ T1983] netlink: 'syz.1.7304': attribute type 1 has an invalid length. [ 934.074041][ T1983] netlink: 'syz.1.7304': attribute type 1 has an invalid length. [ 934.083342][ T1983] netlink: 'syz.1.7304': attribute type 1 has an invalid length. [ 934.091765][ T1983] netlink: 'syz.1.7304': attribute type 2 has an invalid length. [ 934.099732][ T1983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7304'. [ 934.209083][ T1987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7306'. [ 934.565478][ T2005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7311'. [ 934.619720][ T2007] netlink: 'syz.4.7311': attribute type 15 has an invalid length. [ 934.716078][ T2007] netlink: 'syz.4.7311': attribute type 15 has an invalid length. [ 934.721758][T29364] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 934.766974][T29364] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 934.776492][ T35] net_ratelimit: 101 callbacks suppressed [ 934.776512][ T35] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 934.789360][T30440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.817629][T29364] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 934.831981][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 934.880872][T29364] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 934.912239][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 934.958506][T11276] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 935.097227][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 935.153928][ T35] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 935.182181][ T35] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 935.211997][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 935.254960][ T35] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 935.428330][ T2037] netlink: 'syz.4.7322': attribute type 10 has an invalid length. [ 935.555489][ T2038] vlan2: entered promiscuous mode [ 935.602937][ T2038] bridge0: entered promiscuous mode [ 935.706126][ T2049] 8021q: VLANs not supported on ip_vti0 [ 935.983861][T30440] IPVS: starting estimator thread 0... [ 936.092106][ T2063] IPVS: using max 29 ests per chain, 69600 per kthread [ 936.515020][ T2088] netlink: 'syz.1.7337': attribute type 1 has an invalid length. [ 936.526886][ T2092] netlink: 'syz.2.7340': attribute type 11 has an invalid length. [ 936.755100][ T2100] netlink: 'syz.4.7341': attribute type 3 has an invalid length. [ 937.019280][ T2094] veth3: entered promiscuous mode [ 937.986141][ T2159] __nla_validate_parse: 10 callbacks suppressed [ 937.986164][ T2159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7357'. [ 938.068605][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7358'. [ 938.084080][ T2165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7358'. [ 938.144522][ T2133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.171238][ T2165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7358'. [ 938.507214][ T2179] ipt_REJECT: TCP_RESET invalid for non-tcp [ 938.847650][ T2193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7365'. [ 939.863487][T11276] net_ratelimit: 127 callbacks suppressed [ 939.863511][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 939.893633][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.911383][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 939.951654][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 939.981787][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.011949][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.052742][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.092059][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.123590][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.152314][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 940.362260][ T2234] netlink: 'syz.3.7378': attribute type 21 has an invalid length. [ 940.387542][ T2232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7377'. [ 940.404836][ T2234] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 940.417347][ T2234] bond4 (unregistering): Released all slaves [ 940.420316][ T2232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7377'. [ 940.565569][ T2238] lo: entered promiscuous mode [ 940.587653][ T2238] tunl0: entered promiscuous mode [ 940.605340][ T2238] gre0: entered promiscuous mode [ 940.654742][ T2238] gretap0: entered promiscuous mode [ 940.778505][ T2238] erspan0: entered promiscuous mode [ 940.805379][ T2238] ip_vti0: entered promiscuous mode [ 940.898115][ T2248] netlink: 'syz.0.7381': attribute type 1 has an invalid length. [ 941.429236][ T2277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7389'. [ 941.492289][ T2279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7390'. [ 941.625980][ T2279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7390'. [ 942.499317][ T2326] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 943.027990][ T2345] __nla_validate_parse: 2 callbacks suppressed [ 943.028230][ T2345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7408'. [ 943.057086][ T2349] x_tables: duplicate entry at hook 2 [ 943.712403][ T2371] netlink: 'syz.0.7413': attribute type 1 has an invalid length. [ 943.734994][ T2371] netlink: 'syz.0.7413': attribute type 2 has an invalid length. [ 943.998343][ T2379] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7417'. [ 944.378898][T29365] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.393195][ T2394] netlink: 'syz.4.7422': attribute type 1 has an invalid length. [ 944.401333][T29365] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.450781][ T2395] netlink: 'syz.3.7419': attribute type 11 has an invalid length. [ 944.493936][ T2395] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7419'. [ 944.584970][ T2395] netlink: 'syz.3.7419': attribute type 11 has an invalid length. [ 944.602802][ T2394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 944.646655][ T2395] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7419'. [ 944.903651][ T2416] net_ratelimit: 128 callbacks suppressed [ 944.903671][ T2416] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 944.942902][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.013678][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.026283][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.072184][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.086298][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 945.223153][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.276818][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.328062][ T2394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.359829][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.431845][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 945.449620][ T2439] bond0: Error: Cannot enslave bond to itself. [ 945.678178][ T2444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7431'. [ 945.834492][ T2457] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7433'. [ 945.868691][ T2455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7434'. [ 946.170834][ T2479] netlink: 'syz.4.7439': attribute type 1 has an invalid length. [ 946.193496][ T2478] netlink: 'syz.4.7439': attribute type 1 has an invalid length. [ 946.433001][ T2492] netlink: 'syz.3.7442': attribute type 12 has an invalid length. [ 946.538539][ T2492] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 946.594046][ T2507] netlink: 'syz.4.7444': attribute type 3 has an invalid length. [ 946.760131][ T2511] syzkaller0: entered promiscuous mode [ 946.792109][ T2511] syzkaller0: entered allmulticast mode [ 947.421316][ T2551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7457'. [ 947.816095][ T2567] syz_tun: entered allmulticast mode [ 947.887870][ T2567] pim6reg: entered allmulticast mode [ 947.915719][ T2572] netlink: 'syz.4.7460': attribute type 4 has an invalid length. [ 947.968908][ T2568] netlink: 'syz.4.7460': attribute type 4 has an invalid length. [ 948.088176][ T2571] syz_tun (unregistering): left allmulticast mode [ 948.519355][ T2609] netlink: 'syz.2.7471': attribute type 24 has an invalid length. [ 949.399650][ T4951] block nbd0: Receive control failed (result -107) [ 949.418902][ T2662] block nbd0: reconnected socket [ 949.705435][ T2686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7485'. [ 950.004573][ T6917] net_ratelimit: 108 callbacks suppressed [ 950.004594][ T6917] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.036714][ T2711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7490'. [ 950.053809][ T2693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.102960][ T6917] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 950.139195][T29372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.187104][ T2705] x_tables: duplicate underflow at hook 1 [ 950.232092][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.262976][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.280566][ T2719] netlink: 'syz.2.7492': attribute type 1 has an invalid length. [ 950.289792][ T2719] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7492'. [ 950.302837][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.327611][ T2719] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7492'. [ 950.340201][T29372] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 950.352171][ T2719] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7492'. [ 950.463370][ T3330] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.492112][ T3330] bond7: (slave ip6gretap0): failed to get link speed/duplex [ 950.593627][ T2741] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7498'. [ 950.639379][T29364] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 950.649286][ T2744] syzkaller1: entered promiscuous mode [ 950.701818][ T2744] syzkaller1: entered allmulticast mode [ 951.088725][ T2759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7504'. [ 951.130556][ T2761] syzkaller0: entered promiscuous mode [ 951.145669][ T2761] syzkaller0: entered allmulticast mode [ 951.859980][ T2803] netlink: 272 bytes leftover after parsing attributes in process `syz.3.7514'. [ 952.370547][ T2822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7519'. [ 952.760982][ T2836] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 952.801338][ T2836] bond5 (unregistering): Released all slaves [ 953.558896][ T2847] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 954.008417][ T2898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7534'. [ 954.037836][ T2898] block nbd3: Unsupported socket: should be TCP or UNIX. [ 954.086393][ T2902] netlink: 'syz.2.7537': attribute type 8 has an invalid length. [ 954.255332][ T2911] rdma_op ffff888058ba71f0 conn xmit_rdma 0000000000000000 [ 955.033549][T11275] net_ratelimit: 112 callbacks suppressed [ 955.033571][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.103844][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.152861][ T6905] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.214114][T29365] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.253436][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.263356][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.268553][T29365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.322660][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.372413][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 955.412285][T11276] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 956.217450][ T2989] __nla_validate_parse: 1 callbacks suppressed [ 956.217473][ T2989] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7558'. [ 956.240751][ T2978] syzkaller0: entered promiscuous mode [ 956.263555][ T2978] syzkaller0: entered allmulticast mode [ 956.283863][ T2989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7558'. [ 958.454880][ T1751] block nbd2: Possible stuck request ffff88809d8de000: control (read@0,1024B). Runtime 300 seconds [ 958.466280][ T1751] block nbd2: Possible stuck request ffff88809d8de1c0: control (read@1024,1024B). Runtime 300 seconds [ 958.479216][ T1751] block nbd2: Possible stuck request ffff88809d8de380: control (read@2048,1024B). Runtime 300 seconds [ 958.491821][ T1751] block nbd2: Possible stuck request ffff88809d8de540: control (read@3072,1024B). Runtime 300 seconds [ 958.587654][ T3016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 958.597127][ T3016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 958.622988][ T3016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 958.675676][ T3016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 958.876020][ T3022] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 960.042620][T11273] net_ratelimit: 183 callbacks suppressed [ 960.042643][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.085976][T11273] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.147805][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.179871][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.207061][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.241875][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.271027][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.308811][T11275] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.335136][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 960.378295][T29372] bond7: (slave ip6gretap0): link status up, enabling it in 0 ms [ 963.164780][ T3022] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 963.191661][T29372] bridge_slave_1: left allmulticast mode [ 963.225904][T29372] bridge_slave_1: left promiscuous mode [ 963.233129][T29372] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.248283][T29372] bridge_slave_0: left allmulticast mode [ 963.268228][T29372] bridge_slave_0: left promiscuous mode [ 963.287715][T29372] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.352108][T29372] pimreg3: left allmulticast mode [ 963.526094][T29372] bond7 (unregistering): (slave ip6gretap0): Releasing active interface [ 963.732106][T29372] bond2 (unregistering): (slave gretap1): Releasing active interface [ 963.812939][T29372] bond9 (unregistering): (slave geneve4): Releasing active interface [ 963.870226][T29372] bond4 (unregistering): (slave geneve3): Releasing active interface [ 964.437586][T29372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.451364][T29372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.466946][T29372] bond0 (unregistering): Released all slaves [ 964.482405][T29372] bond1 (unregistering): Released all slaves [ 964.499447][T29372] bond2 (unregistering): Released all slaves [ 964.519089][T29372] bond3 (unregistering): (slave lo): Releasing backup interface [ 964.528146][T29372] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 964.547557][T29372] bond3 (unregistering): Released all slaves [ 964.573969][T29372] bond4 (unregistering): Released all slaves [ 964.590060][T29372] bond5 (unregistering): Released all slaves [ 964.625038][T29372] bond6 (unregistering): Released all slaves [ 964.664574][T29372] bond7 (unregistering): Released all slaves [ 964.684211][T29372] bond8 (unregistering): Released all slaves [ 964.750076][T29372] bond9 (unregistering): Released all slaves [ 964.777370][T29372] bond10 (unregistering): Released all slaves [ 964.828156][ T3007] netlink: 'syz.2.7562': attribute type 1 has an invalid length. [ 964.852445][ T3007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7562'. [ 964.888021][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7562'. [ 964.945099][ T3007] netlink: 'syz.2.7562': attribute type 2 has an invalid length. [ 964.988563][ T3007] netlink: 'syz.2.7562': attribute type 2 has an invalid length. [ 965.027743][ T3007] netlink: 'syz.2.7562': attribute type 2 has an invalid length. [ 965.330834][ T3042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7571'. [ 965.370549][ T3043] geneve2: entered promiscuous mode [ 965.399977][ T3043] geneve2: entered allmulticast mode [ 965.429371][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 965.477856][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 965.533430][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 965.631531][ T3050] tipc: Failed to obtain node identity [ 965.648186][ T3050] tipc: Enabling of bearer rejected, failed to enable media [ 965.693024][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 965.741580][ T3062] veth0_to_bridge: entered promiscuous mode [ 965.786013][T29372] tipc: Disabling bearer [ 965.821067][T29372] tipc: Left network mode [ 965.826766][ T3062] veth0_to_bridge: left promiscuous mode [ 966.142043][T12910] net_ratelimit: 121 callbacks suppressed [ 966.142065][T12910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.172081][T29372] IPVS: stopping backup sync thread 24532 ... [ 966.233403][ T3071] syzkaller0: entered promiscuous mode [ 966.266224][ T3071] syzkaller0: entered allmulticast mode [ 966.531058][ T3071] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7578'. [ 966.772518][T29365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.954945][ T3101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7585'. [ 967.019214][ T3074] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 967.061924][ T3105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.178035][ T3105] tipc: Enabling of bearer rejected, media not registered [ 967.364816][T29372] hsr_slave_0: left promiscuous mode [ 967.367245][ T3117] netlink: 'syz.2.7590': attribute type 4 has an invalid length. [ 967.380460][T29372] hsr_slave_1: left promiscuous mode [ 967.444253][T29372] veth1_macvtap: left promiscuous mode [ 967.458385][T29372] veth0_macvtap: left promiscuous mode [ 967.460168][ T3117] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7590'. [ 967.515796][ T3128] netlink: 'syz.4.7593': attribute type 1 has an invalid length. [ 967.669913][T29372] pim6reg (unregistering): left allmulticast mode [ 967.830601][ T3138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7595'. [ 967.850171][ T3138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7595'. [ 968.110150][T29372] team0 (unregistering): Port device team_slave_1 removed [ 968.130205][T29372] team0 (unregistering): Port device team_slave_0 removed [ 968.211527][ T4951] Bluetooth: hci4: command 0x0405 tx timeout [ 968.386981][ T3117] .`: renamed from bond0 (while UP) [ 968.427370][ T3128] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 968.652926][ T3140] bond2 (unregistering): Released all slaves [ 968.887767][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7598'. [ 969.125956][ T3159] xt_policy: too many policy elements [ 969.199688][ T3162] netlink: 'syz.2.7601': attribute type 1 has an invalid length. [ 969.211630][ T3163] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 969.281072][T29372] IPVS: stop unused estimator thread 0... [ 969.413333][ T3171] netlink: 'syz.2.7601': attribute type 1 has an invalid length. [ 969.482362][ T3171] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7601'. [ 969.547188][ T3171] netlink: 'syz.2.7601': attribute type 1 has an invalid length. [ 969.693866][ T3162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.231601][ T3205] __nla_validate_parse: 1 callbacks suppressed [ 970.231619][ T3205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7611'. [ 970.369145][ T3205] veth1_to_team: entered promiscuous mode [ 970.392990][ T3205] hsr1: entered promiscuous mode [ 970.581027][ T3238] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7616'. [ 970.653950][ T3240] netlink: 'syz.2.7617': attribute type 1 has an invalid length. [ 970.738021][ T3242] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7617'. [ 970.936922][ T3254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7621'. [ 970.973059][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7621'. [ 970.988859][ T3255] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7620'. [ 971.030578][ T3255] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7620'. [ 971.363046][ T3260] x_tables: duplicate underflow at hook 4 [ 971.538032][ T3278] netlink: 'syz.3.7629': attribute type 33 has an invalid length. [ 971.892440][T11273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.003824][ T3300] pim6reg1: entered promiscuous mode [ 972.090377][ T3300] pim6reg1: entered allmulticast mode [ 972.456678][ T3329] netlink: 'syz.3.7635': attribute type 16 has an invalid length. [ 972.559068][T29371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.580252][ T3329] netlink: 'syz.3.7635': attribute type 17 has an invalid length. [ 972.655173][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7635'. [ 973.117675][ T3329] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 973.165369][ T3346] lo: entered allmulticast mode [ 973.479336][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7645'. [ 973.595314][ T3380] sctp: [Deprecated]: syz.0.7643 (pid 3380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 973.595314][ T3380] Use struct sctp_sack_info instead [ 973.639311][ T3386] netlink: 'syz.1.7648': attribute type 29 has an invalid length. [ 973.655890][ T29] audit: type=1804 audit(1779956190.071:22): pid=3383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7645" name="/newroot/159/cgroup.controllers" dev="tmpfs" ino=824 res=1 errno=0 [ 973.726548][ T29] audit: type=1800 audit(1779956190.111:23): pid=3383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7645" name="cgroup.controllers" dev="tmpfs" ino=824 res=0 errno=0 [ 973.772237][ T3373] veth3: entered allmulticast mode [ 974.003470][ T3400] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 974.045872][ T3400] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 974.087443][ T3402] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7651'. [ 974.458433][ T3421] syzkaller0: entered promiscuous mode [ 974.479580][ T3421] syzkaller0: entered allmulticast mode [ 974.935245][ T3438] netlink: 'syz.4.7659': attribute type 2 has an invalid length. [ 974.945608][ T3438] netlink: 'syz.4.7659': attribute type 2 has an invalid length. [ 975.242393][ T3453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7665'. [ 975.490828][ T3470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7665'. [ 975.547663][ T3472] ip6gretap0: entered promiscuous mode [ 975.568752][ T3472] ip6gretap0: entered allmulticast mode [ 976.586713][ T3516] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7677'. [ 976.913630][T29367] [ 976.916062][T29367] ====================================================== [ 976.923116][T29367] WARNING: possible circular locking dependency detected [ 976.930192][T29367] syzkaller #0 Not tainted [ 976.934637][T29367] ------------------------------------------------------ [ 976.941695][T29367] kworker/u8:15/29367 is trying to acquire lock: [ 976.948068][T29367] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 976.957969][T29367] [ 976.957969][T29367] but task is already holding lock: [ 976.965379][T29367] ffff8880ac79e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 976.975203][T29367] [ 976.975203][T29367] which lock already depends on the new lock. [ 976.975203][T29367] [ 976.985644][T29367] [ 976.985644][T29367] the existing dependency chain (in reverse order) is: [ 976.994713][T29367] [ 976.994713][T29367] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 977.002683][T29367] lock_sock_nested+0x41/0x100 [ 977.008026][T29367] __inet6_bind+0x30c/0xf60 [ 977.013233][T29367] mptcp_bind+0x110/0x1d0 [ 977.018212][T29367] __sys_bind+0x2e3/0x410 [ 977.023124][T29367] __x64_sys_bind+0x7a/0x90 [ 977.028217][T29367] do_syscall_64+0x174/0xf80 [ 977.033386][T29367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.039848][T29367] [ 977.039848][T29367] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 977.047629][T29367] lock_sock_nested+0x41/0x100 [ 977.052973][T29367] inet_shutdown+0x6a/0x390 [ 977.058046][T29367] nbd_mark_nsock_dead+0x2e9/0x560 [ 977.063871][T29367] recv_work+0x1c2e/0x1d40 [ 977.068851][T29367] process_scheduled_works+0xb5d/0x1860 [ 977.074998][T29367] worker_thread+0xa53/0xfc0 [ 977.080189][T29367] kthread+0x389/0x470 [ 977.084830][T29367] ret_from_fork+0x514/0xb70 [ 977.090029][T29367] ret_from_fork_asm+0x1a/0x30 [ 977.095371][T29367] [ 977.095371][T29367] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 977.103079][T29367] __mutex_lock+0x1a3/0x1550 [ 977.108248][T29367] nbd_queue_rq+0x37b/0x1100 [ 977.113418][T29367] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 977.119646][T29367] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 977.123419][ T3529] IPv6: sit2: Disabled Multicast RS [ 977.126626][T29367] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 977.126663][T29367] blk_mq_run_hw_queue+0x348/0x4f0 [ 977.144043][T29367] blk_mq_dispatch_list+0xd16/0xe10 [ 977.149816][T29367] blk_mq_flush_plug_list+0x48d/0x570 [ 977.155937][T29367] __blk_flush_plug+0x3ed/0x4d0 [ 977.161478][T29367] __submit_bio+0x28d/0x580 [ 977.166558][T29367] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 977.172773][T29367] block_read_full_folio+0x599/0x830 [ 977.178668][T29367] filemap_read_folio+0x137/0x3b0 [ 977.184304][T29367] do_read_cache_folio+0x358/0x590 [ 977.189996][T29367] read_part_sector+0xb6/0x2b0 [ 977.195376][T29367] adfspart_check_ICS+0xb1/0x960 [ 977.200893][T29367] bdev_disk_changed+0x817/0x1770 [ 977.206492][T29367] blkdev_get_whole+0x380/0x510 [ 977.212028][T29367] bdev_open+0x31e/0xd30 [ 977.216841][T29367] blkdev_open+0x470/0x610 [ 977.221832][T29367] do_dentry_open+0x822/0x13a0 [ 977.227164][T29367] vfs_open+0x3b/0x340 [ 977.231786][T29367] path_openat+0x2e08/0x3860 [ 977.236930][T29367] do_file_open+0x23e/0x4a0 [ 977.241993][T29367] do_sys_openat2+0x113/0x200 [ 977.247213][T29367] __x64_sys_openat+0x138/0x170 [ 977.252608][T29367] do_syscall_64+0x174/0xf80 [ 977.257754][T29367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.264190][T29367] [ 977.264190][T29367] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 977.271430][T29367] __mutex_lock+0x1a3/0x1550 [ 977.276569][T29367] nbd_queue_rq+0xc6/0x1100 [ 977.281614][T29367] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 977.287696][T29367] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 977.294571][T29367] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 977.301092][T29367] blk_mq_run_hw_queue+0x348/0x4f0 [ 977.306748][T29367] blk_mq_dispatch_list+0xd16/0xe10 [ 977.312551][T29367] blk_mq_flush_plug_list+0x48d/0x570 [ 977.318485][T29367] __blk_flush_plug+0x3ed/0x4d0 [ 977.323888][T29367] __submit_bio+0x28d/0x580 [ 977.328936][T29367] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 977.335112][T29367] block_read_full_folio+0x599/0x830 [ 977.340950][T29367] filemap_read_folio+0x137/0x3b0 [ 977.346542][T29367] do_read_cache_folio+0x358/0x590 [ 977.352221][T29367] read_part_sector+0xb6/0x2b0 [ 977.357534][T29367] adfspart_check_ICS+0xb1/0x960 [ 977.363021][T29367] bdev_disk_changed+0x817/0x1770 [ 977.369017][T29367] blkdev_get_whole+0x380/0x510 [ 977.374424][T29367] bdev_open+0x31e/0xd30 [ 977.379233][T29367] blkdev_open+0x470/0x610 [ 977.384198][T29367] do_dentry_open+0x822/0x13a0 [ 977.389507][T29367] vfs_open+0x3b/0x340 [ 977.394117][T29367] path_openat+0x2e08/0x3860 [ 977.399258][T29367] do_file_open+0x23e/0x4a0 [ 977.404309][T29367] do_sys_openat2+0x113/0x200 [ 977.409530][T29367] __x64_sys_openat+0x138/0x170 [ 977.414925][T29367] do_syscall_64+0x174/0xf80 [ 977.420074][T29367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.426543][T29367] [ 977.426543][T29367] -> #3 (set->srcu){.+.+}-{0:0}: [ 977.433697][T29367] __synchronize_srcu+0xca/0x300 [ 977.439181][T29367] elevator_switch+0x1e8/0x7a0 [ 977.444491][T29367] elevator_change+0x2cc/0x450 [ 977.449795][T29367] elevator_set_default+0x36c/0x430 [ 977.455537][T29367] blk_register_queue+0x3e9/0x4e0 [ 977.461109][T29367] __add_disk+0x677/0xd50 [ 977.465993][T29367] add_disk_fwnode+0xfb/0x480 [ 977.471244][T29367] nbd_dev_add+0x72c/0xb50 [ 977.476219][T29367] nbd_init+0x168/0x1f0 [ 977.481058][T29367] do_one_initcall+0x250/0x870 [ 977.486370][T29367] do_initcall_level+0x104/0x190 [ 977.491932][T29367] do_initcalls+0x59/0xa0 [ 977.496975][T29367] kernel_init_freeable+0x2a6/0x3e0 [ 977.502713][T29367] kernel_init+0x1d/0x1d0 [ 977.507667][T29367] ret_from_fork+0x514/0xb70 [ 977.512788][T29367] ret_from_fork_asm+0x1a/0x30 [ 977.518093][T29367] [ 977.518093][T29367] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 977.525929][T29367] __mutex_lock+0x1a3/0x1550 [ 977.531055][T29367] elevator_change+0x1b3/0x450 [ 977.536364][T29367] elevator_set_none+0xb5/0x140 [ 977.541764][T29367] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 977.548204][T29367] nbd_start_device+0x17f/0xb10 [ 977.553600][T29367] nbd_genl_connect+0x165b/0x1cf0 [ 977.559217][T29367] genl_family_rcv_msg_doit+0x22a/0x330 [ 977.565307][T29367] genl_rcv_msg+0x61c/0x7a0 [ 977.570348][T29367] netlink_rcv_skb+0x232/0x4b0 [ 977.576093][T29367] genl_rcv+0x28/0x40 [ 977.580610][T29367] netlink_unicast+0x75c/0x8e0 [ 977.585915][T29367] netlink_sendmsg+0x813/0xb40 [ 977.591226][T29367] ____sys_sendmsg+0x972/0x9f0 [ 977.596548][T29367] ___sys_sendmsg+0x2a5/0x360 [ 977.601771][T29367] __x64_sys_sendmsg+0x1bd/0x2a0 [ 977.607259][T29367] do_syscall_64+0x174/0xf80 [ 977.612396][T29367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.618830][T29367] [ 977.618830][T29367] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 977.627461][T29367] blk_alloc_queue+0x546/0x680 [ 977.632774][T29367] __blk_mq_alloc_disk+0x197/0x390 [ 977.638434][T29367] nbd_dev_add+0x499/0xb50 [ 977.643411][T29367] nbd_init+0x168/0x1f0 [ 977.649066][T29367] do_one_initcall+0x250/0x870 [ 977.654372][T29367] do_initcall_level+0x104/0x190 [ 977.659865][T29367] do_initcalls+0x59/0xa0 [ 977.664836][T29367] kernel_init_freeable+0x2a6/0x3e0 [ 977.670766][T29367] kernel_init+0x1d/0x1d0 [ 977.675995][T29367] ret_from_fork+0x514/0xb70 [ 977.681129][T29367] ret_from_fork_asm+0x1a/0x30 [ 977.687240][T29367] [ 977.687240][T29367] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 977.694574][T29367] __lock_acquire+0x15a5/0x2cf0 [ 977.699977][T29367] lock_acquire+0x106/0x350 [ 977.705017][T29367] fs_reclaim_acquire+0x71/0x100 [ 977.710507][T29367] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 977.716882][T29367] __alloc_skb+0x1d0/0x7d0 [ 977.721845][T29367] tcp_stream_alloc_skb+0x3f/0x580 [ 977.727589][T29367] tcp_connect+0x15a9/0x53a0 [ 977.732764][T29367] tcp_v6_connect+0x1295/0x1b10 [ 977.738231][T29367] __inet_stream_connect+0x25a/0xdd0 [ 977.744057][T29367] inet_stream_connect+0x66/0xa0 [ 977.749536][T29367] kernel_connect+0x141/0x1c0 [ 977.754754][T29367] rds_tcp_conn_path_connect+0x6f6/0x930 [ 977.761008][T29367] rds_connect_worker+0x1d8/0x290 [ 977.766610][T29367] process_scheduled_works+0xb5d/0x1860 [ 977.772699][T29367] worker_thread+0xa53/0xfc0 [ 977.777824][T29367] kthread+0x389/0x470 [ 977.782433][T29367] ret_from_fork+0x514/0xb70 [ 977.787567][T29367] ret_from_fork_asm+0x1a/0x30 [ 977.792869][T29367] [ 977.792869][T29367] other info that might help us debug this: [ 977.792869][T29367] [ 977.803113][T29367] Chain exists of: [ 977.803113][T29367] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 977.803113][T29367] [ 977.816093][T29367] Possible unsafe locking scenario: [ 977.816093][T29367] [ 977.823561][T29367] CPU0 CPU1 [ 977.828938][T29367] ---- ---- [ 977.834318][T29367] lock(k-sk_lock-AF_INET6); [ 977.839016][T29367] lock(sk_lock-AF_INET6); [ 977.846056][T29367] lock(k-sk_lock-AF_INET6); [ 977.853266][T29367] lock(fs_reclaim); [ 977.857270][T29367] [ 977.857270][T29367] *** DEADLOCK *** [ 977.857270][T29367] [ 977.865423][T29367] 4 locks held by kworker/u8:15/29367: [ 977.870894][T29367] #0: ffff8880346f7940 ((wq_completion)krds_cp_wq#22/0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 977.882846][T29367] #1: ffffc90004157c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 977.895661][T29367] #2: ffff8880af730c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 977.906741][T29367] #3: ffff8880ac79e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 977.916861][T29367] [ 977.916861][T29367] stack backtrace: [ 977.922767][T29367] CPU: 0 UID: 0 PID: 29367 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 977.922788][T29367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.922800][T29367] Workqueue: krds_cp_wq#22/0 rds_connect_worker [ 977.922823][T29367] Call Trace: [ 977.922831][T29367] [ 977.922839][T29367] dump_stack_lvl+0xe8/0x150 [ 977.922858][T29367] print_circular_bug+0x2e1/0x300 [ 977.922882][T29367] check_noncircular+0x12e/0x150 [ 977.922906][T29367] __lock_acquire+0x15a5/0x2cf0 [ 977.922933][T29367] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 977.922956][T29367] lock_acquire+0x106/0x350 [ 977.922973][T29367] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 977.922996][T29367] ? ip6_dst_check+0xe2/0x7e0 [ 977.923128][T29367] fs_reclaim_acquire+0x71/0x100 [ 977.923153][T29367] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 977.923174][T29367] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 977.923196][T29367] ? ip6_default_advmss+0x80/0x3b0 [ 977.923212][T29367] ? __alloc_skb+0x1d0/0x7d0 [ 977.923235][T29367] __alloc_skb+0x1d0/0x7d0 [ 977.923258][T29367] tcp_stream_alloc_skb+0x3f/0x580 [ 977.923277][T29367] ? __asan_memset+0x22/0x50 [ 977.923299][T29367] tcp_connect+0x15a9/0x53a0 [ 977.923328][T29367] ? __pfx_tcp_connect+0x10/0x10 [ 977.923344][T29367] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 977.923369][T29367] ? lockdep_hardirqs_on+0x7a/0x110 [ 977.923395][T29367] ? ktime_get_with_offset+0x93/0x2d0 [ 977.923418][T29367] ? seqcount_lockdep_reader_access+0xea/0x100 [ 977.923446][T29367] ? __asan_memset+0x22/0x50 [ 977.923473][T29367] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 977.923532][T29367] ? inet6_hash_connect+0xeb/0x170 [ 977.923608][T29367] tcp_v6_connect+0x1295/0x1b10 [ 977.923633][T29367] ? __pfx_tcp_v6_connect+0x10/0x10 [ 977.923652][T29367] ? __bfs+0x153/0x290 [ 977.923668][T29367] ? __bfs+0x153/0x290 [ 977.923683][T29367] ? __pfx_hlock_conflict+0x10/0x10 [ 977.923705][T29367] __inet_stream_connect+0x25a/0xdd0 [ 977.923724][T29367] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.923746][T29367] ? lock_sock_nested+0x6a/0x100 [ 977.923764][T29367] ? __pfx___inet_stream_connect+0x10/0x10 [ 977.923782][T29367] ? inet_stream_connect+0x51/0xa0 [ 977.923799][T29367] ? __local_bh_enable_ip+0xd0/0x130 [ 977.923817][T29367] inet_stream_connect+0x66/0xa0 [ 977.923834][T29367] kernel_connect+0x141/0x1c0 [ 977.923852][T29367] ? __pfx_kernel_connect+0x10/0x10 [ 977.923874][T29367] ? __local_bh_enable_ip+0xd0/0x130 [ 977.923892][T29367] rds_tcp_conn_path_connect+0x6f6/0x930 [ 977.923920][T29367] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 977.923942][T29367] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 977.923966][T29367] ? process_scheduled_works+0xa70/0x1860 [ 977.923984][T29367] ? process_scheduled_works+0xa70/0x1860 [ 977.924003][T29367] rds_connect_worker+0x1d8/0x290 [ 977.924020][T29367] ? process_scheduled_works+0xa70/0x1860 [ 977.924036][T29367] process_scheduled_works+0xb5d/0x1860 [ 977.924065][T29367] ? __pfx_process_scheduled_works+0x10/0x10 [ 977.924084][T29367] ? assign_work+0x3d5/0x5e0 [ 977.924101][T29367] worker_thread+0xa53/0xfc0 [ 977.924129][T29367] kthread+0x389/0x470 [ 977.924150][T29367] ? __pfx_worker_thread+0x10/0x10 [ 977.924166][T29367] ? __pfx_kthread+0x10/0x10 [ 977.924186][T29367] ret_from_fork+0x514/0xb70 [ 977.924204][T29367] ? __pfx_ret_from_fork+0x10/0x10 [ 977.924220][T29367] ? __switch_to+0xc79/0x1410 [ 977.924245][T29367] ? __pfx_kthread+0x10/0x10 [ 977.924265][T29367] ret_from_fork_asm+0x1a/0x30 [ 977.924291][T29367] [ 978.285192][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.297706][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.414159][T11272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.052816][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog