last executing test programs: 6.715182788s ago: executing program 2 (id=5157): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.999195246s ago: executing program 2 (id=5160): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) shutdown(r3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, @l2={0x1f, 0x1000, @none, 0x2}, @l2={0x1f, 0xfff, @any, 0x5, 0x1}, @sco={0x1f, @none}, 0x9, 0x0, 0x0, 0x0, 0x800, 0x0, 0x9, 0x8, 0xd}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) write$cgroup_subtree(r4, &(0x7f00000017c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xae}, &(0x7f00000003c0)=0x8) 4.941731964s ago: executing program 1 (id=5164): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.714438997s ago: executing program 4 (id=5166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltaction={0x14, 0x31, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000fddbdf250d00000006000800feff000005001b0009000000050019005b0000000500070003000000060008005155000006000a000100000006000a00ffff0000e2eea85f3a2ebdd039bb107833d1d20c3da0742cebde39a6b75b096d8528568fedec98470b9e29dda9a3343c5fe771c2f3845481f6cb9652b2b520ade1edf7855f3e1469492a6a5533ef1ab1b8457f434f8a0e500f131f1b682fe7e3223cbcad177e2a2f4593e351256aec85a096c3536d25462fcacff6fd1a8a5817d728112668d3d96d59ba5acc1670d63791531947fbde0aaf543246891364f8839f7bd65bdae7fe4f92db"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0xc040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.671956579s ago: executing program 1 (id=5168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x939, 0x10000000, 0xb5b4, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002ac0)={'syztnl0\x00', &(0x7f0000002a40)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x8, 0x9, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x10, 0xe, 0x8}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtfilter={0x824, 0x2c, 0xd27, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x7f4, 0x2, [@TCA_ROUTE4_ACT={0x7f0, 0x6, [@m_mirred={0x180, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x101, 0x5, 0x70000, 0x9}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xb4b, 0x3, 0xffff25a9, 0x8}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xe, 0x8, 0x9, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x8, 0x10000000, 0x7fffffff, 0x4}, 0x4, r4}}]}, {0xd1, 0x6, "29ad2b07759079c6d34ce5238741eee387ff02e7d20dbbce26a9d5b8a371bf78e35b9b8df2220618cc76a54732184fe45e80f5fc60bb68b8f26a43f010384b87c7424d7453c568a4c5a7abe9c45d855bd7329da20f0a4cb73763d667313f9009d29c7c8bd73f4d39a78b5d31fbfbca27fec94dd75f7f2397aeac556c53b50e37318de40f6b1170ce83b1cd9fdedf65006f0bc4e02abdc61dc887501737772544b402644adc4a57b9cf731d2e77e17d67384bb9e989252e6b5ffec1d0cbca9648817495a96eaf7cd9e05709ce85"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x530, 0x1a, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x10, 0x7ff, 0x0, 0x4, 0x9, 0x3, 0x54f3, 0x2, 0x8, 0x7, 0x5, 0xfad2, 0x1, 0x8, 0x8, 0xb54, 0x1, 0x6, 0x5, 0x0, 0xffffffff, 0x3, 0xa, 0x1, 0x6, 0xffff, 0x1, 0x8, 0x6, 0x4, 0x2, 0x7fd, 0x10001, 0xac9, 0x7, 0x9, 0x7f, 0x5, 0x2, 0x7, 0x1f400000, 0xfff, 0x0, 0x80000001, 0x6, 0x3, 0xff, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffd, 0x6, 0x18cc, 0x2, 0x8, 0x3, 0xff, 0xe6, 0x2, 0x3, 0xb, 0xb, 0x8c0, 0x4, 0x3, 0x0, 0x10, 0x5, 0xbc8e, 0x8, 0x0, 0x1, 0x6, 0x2, 0xffffff51, 0x2, 0x1, 0x1, 0x384e, 0x3, 0x7ff, 0x3, 0x5ce14266, 0x5, 0x2, 0x6, 0x3, 0x2, 0x8, 0x1, 0xfffffff9, 0x9, 0x1, 0xffffffff, 0x6, 0x3, 0x9, 0x70, 0x1, 0x1000, 0x4, 0xfffffff7, 0x3, 0x5, 0x5, 0x5, 0x5, 0x10, 0xca, 0xffff0000, 0xfffffffd, 0xfff, 0x7ff, 0x34e, 0x4, 0xb12c, 0x8, 0x3, 0x4, 0x7, 0xffffffff, 0x7fffffff, 0x101, 0xfffffffd, 0x200, 0x1, 0x5, 0x4, 0x5, 0xb, 0x0, 0x1, 0x2, 0x391, 0x81, 0xfffffffc, 0x3dd7, 0xd, 0x1, 0xa, 0x34a5, 0x101, 0x4, 0x7, 0x2, 0x3, 0x7, 0xfffffffe, 0x5, 0x5, 0xd82, 0x2, 0xcb, 0x8, 0x68, 0x10, 0xfffffff6, 0x3, 0x3, 0x40, 0xffff806d, 0xd90eed6, 0x5, 0x9, 0xe000, 0x10001, 0x3, 0x5, 0x0, 0xd0f, 0x80000001, 0xca3, 0x1, 0x4, 0x40, 0x1, 0x9, 0xffff, 0x1003, 0x10, 0x4f, 0x8, 0xdff, 0xd, 0x0, 0xa, 0xe88, 0x6, 0x9, 0x4, 0x9, 0xf3f, 0x401, 0x9, 0x0, 0xfffffffb, 0x0, 0x2, 0x7, 0x5, 0x9, 0x8, 0x5, 0xf, 0x222, 0xffffffff, 0x8, 0x6, 0x17, 0x1000, 0x9, 0xd7, 0x80, 0xcbb, 0x0, 0x9, 0xd, 0x2, 0xef, 0x200, 0xe883, 0xffff09aa, 0xfff, 0x6, 0x1c, 0xffffffff, 0xd6a0000, 0x4, 0x5, 0x8, 0x5042, 0x2, 0x8, 0x10001, 0x4c, 0x7ff, 0x7, 0x80000001, 0x8, 0x9, 0x800, 0xc86b, 0x8, 0x4, 0x2, 0x9, 0x0, 0xffffffc0, 0x8, 0x7, 0x7df05fa6, 0xffffff23]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x96}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x38}]]}, {0xc1, 0x6, "f6d609460daea518800eaae54b45af22d3e489d6dbdeb4b7371ef9060deef539557e63a55390a98942e04c0e568e390dcac4dd0499f5e0cb00739c4e07a8ac74f47ae8584abbce4a200ad03d21c674a3e3f9a0ee461780a2eb8ca591de484541fc25c8f21de21a166ad448a1085625f0639e352471c7f5f69d964a7fb6558be7da203f5239634bb9d5b7dc0612567e2cc636c9e70da986f3d032f8d10e4c089f81ffbd982989762a0845365847ee21b51d7b9be1b67262716d3755173b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x13c, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x10000000, 0x1b0, 0x8000}, 0x0, r4}}]}, {0xef, 0x6, "dc32a88966e77af4b8216b832b2f3d1e48ca1418247df02ef4091262dae6da19c78662d642aa751b7c6e10e7529affba50e44b4ba2f92465d2a6bbbaecf6ef6cef612e3fac32d30fb00ed5ddcabcda48982ebd2b8007c9d54b1ce555f717c53656ca79a50dbc11375cb1bbd617b40ad5287b6831065c81b77faecfab933407ade1bab5530c41bff6cb8e4d2962d9ebb7c658bcc740c87db368e6e514058e2cbf57d707094dc3eb2637666f2d6be471a2404363a52e12f43edded7ef8a1d3039c75c6382a0bfe65d2dca14c552e4c8b192e4e80881270da39843d14d6be83d6c0b657090dc308ae592b8edd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x824}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}, 0xfe}, 0x18) 4.569263558s ago: executing program 2 (id=5169): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="92eafd", 0x3}], 0x1, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x7fff, 0x100000001}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x30, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r3, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @loopback}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010400010000000000000c000100040000000000000008000500", @ANYRES32=r7], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8004) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x104, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) syz_emit_ethernet(0x56, &(0x7f00000009c0)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x2c, [@broadcast, @broadcast, @multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x61, 0x7]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4.078622382s ago: executing program 1 (id=5172): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="7e0ad844", @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r5, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.917058629s ago: executing program 0 (id=5173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0xdb, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x3, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0xffff, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x6, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x802, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="64e50000", @ANYRES16=r6, @ANYBLOB="0100ffffffff00004000010000000500070000000000080009000000001014002000fe80000000000000000000000000003a08000a000000000014001f0000000000000000000000000000000000060002000000000006001b004e200000"], 0x64}, 0x1, 0x620b}, 0x40cd4) r7 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4) (async) sendmmsg(r7, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9", 0x5a}], 0x2}}], 0x1, 0x24044015) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000009705000000000000000000000000000000000000f15994754392d1726e4e3a3f57cb88c375ea9c9fb4d6db45463e17d0805d100bbf64d738b8a4bc3272f2a63e6999a68a586274175990e6a307dec6b7d8062b975f6b4355d5b2336ae068a72a652a8ce607b282ac9253d76365c7a52a657d6fa5c00d823f528f372095f861e2ba79e9755fd77985aa42d2d9fbf025873f3f260bc63e7533d718bf68108411f845a6f9de6127b9abc8c6a3e1a4e7bd2e2e54e0bb0b314e574f54d5b6468439e254d75cadd5998c750764c2f7a498"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)='%-010d \x00'}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002cc0)={'erspan0\x00', &(0x7f0000002c80)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x8001, 0x8, {{0x8, 0x4, 0x2, 0x35, 0x20, 0x66, 0x0, 0x27, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xab5}]}]}}}}}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000002e00)={0xffffffffffffffff, &(0x7f0000002d00)='devlink\x00', 0x420ac0, &(0x7f0000002d40)={@align=0x5, {0x1, 0x7e5c, 0x7, 0x8000}}, 0x5, &(0x7f0000002d80), &(0x7f0000002dc0)}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000031c0)={r0, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002ec0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000002f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0], 0x0, 0xa7, &(0x7f0000002f80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003000), &(0x7f0000003040), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000003080)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000006000000080000000500000040000000c38dc68b2f567f35e8fc642736d48b6f726705e205de9e9761b421d0d2a365463ae9385f5a4051716e51b8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="080000010f000000db0400000100000000050000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000040000000100"/28], 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r11, 0x0, 0x0, 0x800) 3.749849734s ago: executing program 2 (id=5174): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000001680)=0xe) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000080)=""/212, 0xd4}) 3.295578657s ago: executing program 0 (id=5176): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x5f}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={r1, 0x5}, &(0x7f0000000380)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x0, 0x2000000000000}, {}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xfffffe82, 0x60, "210466d38547aa140db90100000000c542cb7a7db03db53320d36967b88848c18519f6516997b7a358ea37f391a3ef0acba616c503e48d50875d8ad2d60e2afd5b52c64b586f6dd9f7787bb65879848c53dc6f70922e9aaa5b97e41ae8875eb53423b28738991e65b3af6a0fe946af1a3c1af71e1637f2e6c025f181b69b16a65c193b70a3b8104e155cf41db9a1067ec9007940bda5fb6d686a793f426f739bb26a99769b0c5192ba59d4d68f66af00"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00'}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r5 = accept4(r2, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80, 0x80000) getsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 3.294038817s ago: executing program 4 (id=5177): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000180)={{0x6, 0x7}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x72}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x8010, r2, 0x0) r4 = socket(0x8, 0xa, 0x6) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) readv(r5, &(0x7f0000001640)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/163, 0xa3}, {&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f0000001300)=""/40, 0x28}, {&(0x7f0000001340)=""/33, 0x21}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001480)=""/248, 0xf8}, {&(0x7f0000001580)=""/140, 0x8c}], 0x9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmmsg$alg(r4, &(0x7f0000002d00)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="dc", 0x1}, {&(0x7f0000000040)="f643f0659ee5891b230b3a83124129d4cfa2873ad57c663a82a79a110e5fa1c4", 0x20}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x800) 3.026390304s ago: executing program 1 (id=5179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)='_', 0x1}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20044004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 2.854316459s ago: executing program 3 (id=5180): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="980000000001010100000000000000000a0000023c0001802c0001"], 0x98}}, 0x0) 2.619900722s ago: executing program 3 (id=5181): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x24}, {&(0x7f0000001740)={0x344, 0x3a, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@generic="dffceff00f59cfadee444a14c1dee2c869c1eecc6e663fc370702d719f2879fe9eafa087be54647586bd594b0056edb5ea32c7c8e42c9e3e13e786a0b28a50c98cfc416b6fae477517e93f33d333ed83e621e8ee843f3290286513f0a6656998b4201ab7d3746ffd07a6929fd3f83e041b7cf04d0d7c73b446bbacd5ba258965148718709c7c99663a63dce87f0cb1660433f98dc28f59ef728dac02f63cfb76c64ecca3807a2790a1e605279f375faf6e34e5be0ea8d74413e91403b46d78b1d10b06939652a89246dfc29f36aa9aba2217659ce105b823843799278860d3ef724b064fd1c3fe63d5aeb4f92e756b5d3246006fd446", @typed={0x4, 0x23}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0xae0}, @nested={0x170, 0x131, 0x0, 0x1, [@generic="9f9b6bb6e771993464d8d10d9f8d7690ebd974ef96d650bea3fb1b62a2a3f7acb8d77c6b65b3ad122d854058923ad4d3684b64741eac10dee4e98b12e7c0df61ee32036af0a69a81e6ff7baaa98ea2442b5fb0047603afd5db684e33b7a98f506c2cedda12fa2e6e04e7fb25aa3363e138528f92d9f82780441b22b319bf75c5b338c2b369515eb4f279ddba65eba83e52cda93fa801ddeef99d43b06536ba870dd45a439ab773874b4a53dd6e514a69823a75bbb2f163ade0b3deec92da", @generic="b52dc95f8426cfb868670e320f8b4087222b3696e39e33a4732b98bf149674b83fd76b12233ff3f658c93e9f14147b14817a", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r3}, @typed={0x4, 0xb6}, @generic="fccaa3c95e73f343b13df44b4161ba930fdfdbbec3c3ad81797ac7a5083449c045143397c997481525fd7564789b98fd0c59e4415b5e0eeeb51ee444f060ff9a890abc740d496df4ac30464e53c1ea9ae028387214f9f2628d150c9d07fd6f12072d313f48cc620c937401e6e793c448d154c2c42ea117f87b61f71c521d2d61963e7da4b8971b9e3fe2a69c47d4d0cc93fdc274d378a40b5ed07a0a0494409239b481cfd13986085ea55ed0dff9d00d574b7f7616e9473a35c90cdc3b79e35a39e1c294a1287d92eaccf4758b31be8207b8a64bc9ca5c2b5a383afc2b45c38d5d35ac29f9b647e1d40653090402e8bd82ca4faada1421b3d549", @typed={0x8, 0x7f, 0x0, 0x0, @fd=r1}, @nested={0xfffffffffffffd0b, 0xfc}, @nested={0x4, 0xd}, @generic="01b32e46a0b2a373976146c3fae49e2a4b304df6a9a0e66e5ec10305c3905380fb7f8dbcefaa3fd460b2adb8bece73f76716a21129ad6979d20dcb5b6ec802449b0843b5f7436128c65af8c4"]}, @nested={0xbc, 0x13f, 0x0, 0x1, [@generic="d4d62cfdb9bfa1b24337fac21b16ef6f729810b15fdaf6dfeec602e974d8979b71705f47b711e51f9c20ca2127bb75617a62cb2f2fb6dad58f056718c3113cbe82d69354e25f7d7d", @generic="fd52c17f16d8ad6ca82ad44532aa6723a6c8596341423958ca9c4dc1c388ad74bbeb9d4dfa2f8bf6cd1d1a1f5b93bb6ed177b4e2e921a9601270595cde597c9d4a4433db42928fbba2cc6e", @nested={0x4, 0x136}, @typed={0x8, 0x100, 0x0, 0x0, @u32}, @generic="370272cde10c698ae4", @typed={0x5, 0x17, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x79, 0x0, 0x0, @uid}]}]}, 0x344}, {&(0x7f0000001300)={0x3fc, 0x36, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="111ddd77800bd60a0e5ac12619927c4ed1bf1cb58c82fad1d05be44f588cd4910dd4166ddca8ea94a18314e1d2", @typed={0x9, 0x5d, 0x0, 0x0, @binary="3014a640ec"}, @generic="8699268f9c2da198617a4ac7ef23ec36b62e275233ba63a2844a2273cae8f45edb4f2aab9c1bde99070d97811cc61d8baa2f6ef35311bb75b657571b3689e884e06b8311ced7b1e2597e9cf896f211590c500f3ff205b2e135dde48e28a1682f0dcccc2f71df6fe63a587e19264be9af2860c2eec41ff1ab26cec59443cd4abd9b5d32f7b63a9527f9a5f1815634ffa33c6e887c698c219637e1bb92d0ad5d9746dd9d32c10ae48b6e45b41525d6c262c48008d96e0a8a63ccb20b5687e140", @generic="f0f6edf25aa3bcfddfbfd69c45f3033e20b06bead4830c4e5b9d1a8a7d8fc696d91410dc93bab59aec0598", @generic="b3bfb160a0c131a7622ab5", @nested={0x1e5, 0x58, 0x0, 0x1, [@generic, @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x81}, @generic="15bc384f6aa4489c4ec372fedc8b5df9ac9dd695172314b625b9b00333a1ab44cc1a57af1affeb28ad91339e0e0e36366e2fc8a2311259259e2d78f17d793bbdbfde31efbdaea6ce1398ed66c19e7f83d714191e6f854a2c2760ebdfb0e79a1d41a0c2865e5909853f1b6b626a35de02115724fe70162c97b1f5271ef270b8637dd41979e5290bd4a6f7c8e40e2bd49ae77e5031a21da17ddf0f00a2164d1653764bc0c2a2b49f7c41c9123e281adf11618bfd88bf34881f1f1d3b815e7049440ba49a149b6cf935790abbc878f70b3130474d5e845978ca114346f9d6410d84fcc8e45ccd2ce33237124a1d2085f1b5abd3982f53aa9efed7", @generic="e8905dce4d3a620cb9ab61a8d73a3b6f31926443b83171c4d1647618f73313cb8ab01c6acdc20ab23e01b8b639399b83158b0ebe5e7895cb861f478061b3c248444ffbaf2a0c53c061b7ab7fb53a5a198adff38684ae011e2574dccd204753510845e9a2f6a2fc0d7c4bd574d7c37bc979b8f5329e5e67e01109897879922c27d7218d361d47e00c835081afa97fcdd8004cef545b14c72bd2f2791b1499fd7ac64308b9280f1fb961afe96dad50ee708951a6956c9c96a971ca14616a06e903e94fe9a4a6a45948465b91bb16d558d0a857153b", @nested={0x4, 0xfa}, @nested={0x4, 0x2}]}, @generic="4d2b844586c199229ea7be92acec0ca51cd580ed38fd0c33b4d8c14ed58ef5c5f0e378a58e3c8e24d6a700bde9825943240ff23de1c0e0d2bbef5398fb4f2d080fa685404b097066f602bde4c16917dafbcc2b77b6c3a64e510ef81cc6415ad1b3b677017f589ab6ba2717fb3424940bd9712ffcd90842bdfd6cc36d102b9193452fdc663f9540cd3814319101fb2e88c7af6b24fcc14cf60e81e0fc313709ac303b360e58fb65e6e9111fdc7620dd21714b513c09ae338d0384d979c08db30200be1846c6dfcd412d8f3facdc11ce99309f57"]}, 0x3fc}], 0x3, 0x0, 0x0, 0x20000800}, 0x10008000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='{\x00', 0x4001, &(0x7f0000000080)={@_ha_fsid={[0x1ff, 0x4]}, {0x2, 0x3, 0x944, 0x8000000000000001}}, 0xd74c, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7fffffff}, {[0x7, 0x2, 0x3, 0x7f]}, 0xfffff998, 0x32, &(0x7f0000000140)=""/50}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0xb9}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffff81}, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x96, &(0x7f0000000500)=""/150, 0x41000, 0x6f, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x3, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x0, 0x3, 0xc, 0x3}, {0x1, 0x3, 0x8, 0xb}, {0x1, 0x1, 0x5, 0x14}, {0x0, 0x1, 0xf, 0x9}], 0x10, 0xf85}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', r6, 0x29, 0x1, 0x9, 0x9, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7800, 0x3, 0x38}}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dbdbfe, {0x0, 0x0, 0x0, r11, {0x2, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24, 0x2, 0xd}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x40005) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}]}, 0x48}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x4, @local, 'macvtap0\x00'}}, 0x1e) (async) connect$rxrpc(r4, &(0x7f00000002c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x24) 2.551921374s ago: executing program 2 (id=5182): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x2, 0x3, 0xff) getsockname$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000200)=0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e27}]}, 0x40}, 0x1, 0x0, 0x0, 0x48100}, 0x44) bind$802154_raw(r2, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2d, 'cpuset'}, {0x2b, 'freezer'}, {0x2d, 'memory'}, {0x2b, 'rlimit'}, {0x2d, 'memory'}, {0x6, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}]}, 0x4a) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24020400) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x4c, r9, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x5, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x4c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) getsockopt(r7, 0x8, 0x40, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="8dbe9de29a1823474186f72aea11678235a71ee4828c75d76df69110ae2b2baa4ca3f238a147af68c7999e831fc3594436dea27d", 0x34}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20044000) 2.380144764s ago: executing program 0 (id=5183): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x52}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.349819467s ago: executing program 3 (id=5184): r0 = socket$inet(0x2, 0xa, 0x400) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES16], 0xfdef) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000100020004000000003"], 0x50) unshare(0x400) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r3, &(0x7f0000000e80), 0x0}, 0x20) (rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300021c000000000003a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000300060000dd000002000000"], 0xe0}, 0x1, 0x7}, 0x8800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.030091962s ago: executing program 4 (id=5185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2a100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x2000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xfffff800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) 1.984926257s ago: executing program 0 (id=5186): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) unshare(0xe040400) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x300) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) (async) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000e2ffffff10010000003db20600"/27], 0x18}, 0xfc00) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x101, 0x3, 0x8005, 0x29, 0x1, 0x4, 0xc4, 0x1, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000240)={r7, 0x7}, 0x8) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000005c0)='wg2\x00', 0x4) (async, rerun: 64) r8 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590211c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 1.815082229s ago: executing program 4 (id=5187): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7edf) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x5}, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c80)={'ip6gre0\x00', &(0x7f0000001c00)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xdb, 0x0, 0x26, @remote, @loopback, 0x60, 0x10, 0x100, 0xfffffffa}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000740)="05032200", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="e901ca87c0436de00cdcf6f885fc8545ff882ef3d1d5", 0x16}, {&(0x7f0000000040)="17f3f39d82e70cca8e0066c6555a07735fedcc90c46ce8c18800d876aa0271762b8d5f9e8c0b909d8d67ca2644260eb14065eba03d8a3240004e293a4f54427561f88d422fb273044180b248c1b02c621868ec52c2f1b876c8b24ead40d796f29be32afc6341bc1d6bc63dae27faea235268a4e73e2997b9de9d3a9b56cb03ae87695c3de10c187b71dd9dd9cc1455d4d7fc60a65a922b874a26dfd8fe5035f0ace019", 0xa3}, {&(0x7f0000000100)="0b7562712d7f892d4b75", 0xa}, {&(0x7f0000000140)="e579e5e09de1ef95586892f2bffc0f34e88169508a2961bd5b37f27199c9346dbdfea6e77a13b82602c65e3cd06d5633963b460ccf9e11221d7071e4b4d2a90cb111c7494941081c436299506890e8c59f5ad5d27cd24c15169e", 0x5a}, {&(0x7f00000001c0)="fa9fca51181885bf796961a13ad7037b6318ce3066a1cb4d7c8c7ae13723c12fa65bf97dad190de3e905e7b5d76f32b84c381a7c26d72e0bcb6623bfba544671f8158615e93b887941989a806e2f6f0b5a30b97bcc449c7bea5a430f20957404a35852280d16d935dc1019bf420b62145fbc1e6491054302c2808ea847da20f964afd1b0f64dbf4b52d5775e9078d3", 0x8f}, {&(0x7f0000000280)="e070d99f9d7270f7ea66ef3c60434d3140ee485ca291ad19051f7779d47a", 0x1e}, {&(0x7f00000002c0)="4b8db255192d05cdce1ceef995197abae77d921873c010d88331efcf6b3822a245c4092f4ba94bdfd9d784afb42b6025dc131b33be55db511a1e5bc5cf845522f3626dcdf27af785eb70108225c93070a12badd80c0952f56035c789dd0502fde0cbff8dfcbe80c70606ca74dc860d1dce2739ffe740b835b9bb7c1362a354070045c4030eae71c52a22b77b0fae45bd16016cd6b73abe38f8d61bf75e65ecb309fcf5051779a85ef0db76a3cef827c07ee7b506247cc2d1ee11920ba09103f6df349db3679ca6375de651bca3794a5c5befc4454350", 0xd6}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="f2f2f10163695201cc051d380fbcdbeb72a270a26192166625bfa52b3e862ffb26772da32f05790e58ebc82c19619c27e24bd11574246c33b767a12399209c80fe75b89bf4960d89505deaa49786c3a66898c8fdd7ef917a728823de2a0d745c94444f92e61e91952f825bdb4769d15fd1de3b9cd9430bafe10f4fee7e62d07e34fd", 0x82}, {&(0x7f0000000500)="7c38026ec6ae2d52a66053", 0xb}, {&(0x7f0000000540)="fc87b37aa0b4e5828d64429be132baa3581433089df963d5a52a9f31e50bb00518c88f0e4416cab427c473200cf874e418ecd4e8a90350d4d62a4aaaf1fd2f3dcc2182b57f81db4a99c8def107e6c657261fb20282b1f7a40811d3c1b2fb8a81a4f941819d6c835c0ecc190908db94c783321ecf10aa73aa763343fb48977807db3cece2949966868c687ec7351c2b1e3de7fe0e00c069cec5c0b38ad254799f3bba093a561f71ab0a387c75fce400b0631ab7272eb44610e9feb919012fd0", 0xbf}], 0x3, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x48}}, {{&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000700)="3397ee89b03faf34a1d2541ce3784aa82ac94f2e5d38b5aedd6bdc77f7e9f9eee5968423eff8124649df1c21129975b4b88305b7ff23ec94bf5a1114f7c6425796b77447f15d794b7df301f06eb53b2da368859681883b9cb625384698e93d681610c5c4e0f2fcf9b0099eb427b0f4fb1009cbae7e73ff48e150633cba781503947e601f9a433be7b15f8524356406038bc669fc502f0e32ae7fc64828b84e99abc9ef09d50acee26c81912aa160344b8104d042035c3df75662030b4cbf5ddca905f2ed238ac39157e058cc531bd54b58d3d96d71", 0xd5}, {&(0x7f0000000800)="ce925cf520ef47405c9f2760fb771970250d724e3b0bf321d189173cb5ae667c00cb36f856031d35eb6b34b2db87c117882d994a857639bb79639c6897082a7761bb34f143c5c31cbe9eedbb6214a057d2778b79f8f6", 0x56}], 0x2}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000900)="ac0f73e96786718b0b91ea7dd606dd21dfd526c55cd350409477ca7cab914563988b8a358708c5cce6565a218cfdc64fb8aa2602b0ff073823b3f797bc454f335982d54693fe1eed33b95ca8b268bc93a7108ddbffb60a40150c1b5456774066fac35a73f2e655202d32b1979dd8b3d85a", 0x71}, {&(0x7f0000000980)="cc3b1c9f907217a28685c1843887901e40f4133386b503c9b8f570d581689a68b3197e4fa656ef51155a0bdd5b59659bab66fefb830ec48fbef770a5ebc4e658516e97d384fbfc0e75fad14e14ec096849fe2e722f3b73d26943b39cf18fdd48e1231cdaf0d9f7336cd6beb779d6829a37a9ed28c6737fd85614e9175bb040d031a57a28c78560738e0ef10c071377084bf75b8dc43b", 0x96}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="d6347ac417fefc2e25fc68aeae4382fc9ebe6252b81d6b6efda093a2ae170c887561c53b312cca212a7be7641ad3d16bbfbb6e8c3adbbb3ca0744be9f701c6edbfff7f03e5149c8c4cfcfb9ecb63f7e72b400a8600c6e7a5122841170b72dcc6fd531b1a035c6ddbd519b9725e8906fe1f1cdce661ef795b00c4b1e9e0d5529a4ce1625ff6ffaea29850345571d1546773bda8", 0x93}, {&(0x7f0000001b00)="da67bc7d05a6afe5f94ba04c61874a568984a2028e712c894f470441a39eba5412a3ec320b2cac17fe630d1d6c273c96d68f1889592573dc1fe0d033bf2aa9dc72febf1b2031a07b3e81a99dcbf6c3972ea25155743ee00719070f6e35d6d5ea9a0277c14e05f5af4fe138d24b6db9bb568052f9", 0x74}], 0x5, &(0x7f0000003c00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ffff09000000c19dd9740e7f2ef51d7dd7886742bebbf2ce0ba9a6000000001c0006dc09e18117151b3cea75e51897fd906418f6a08f3221beb527b600e12393be858e241aa4413b10701c5897cf9ce1f939bdffc94795d313d79df4f741d079b1b99ad0d88552120d4e48f04a6eb3242de3999ea004fccf", @ANYRES32=r5, @ANYBLOB="ac1414bb6401010100000000"], 0x148}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e40)="d56451b3bb1f9e98702edba0ca23e99c5a7e48806cce9666e17af40ba358ef950eefa462a4e48fee7836e3b6b1da8c334318445814e750e53df8814ae96636e116fd2caa0e9c1a7ccb61cdd094ec83682eed98f82ee4323b30d1a851db09aae4f0623034d370d46eaaec1b7fafeec0ee62bd63220f9e54cce430ffc4ce82dd5e3a07621ca1aa7a9de65dfbce09c1309542d82f7e7094dc18ad1960884a19f654afe0857517e85f23d76636942c20d2f1fdd38cc59f43098829e708bdc11f7fc4b4138d7b024528020214ffc19a9cecfceb9c979572bdfe2b9d15fd1a5336c51c667bd6cbfa2afe09477a7ec6be6990", 0xef}, {&(0x7f0000001f40)="213bc87639b8e647bfe192d2c72851332aa309af43cc686c28341aced575e0fae6b53467cf4000bda5a2f672e653a82b293e6f4a5146df8903463da8a749e8cba028ddc1be74189657cc2419232940f0ebb7eb77ce1606308eefe65e8f9c4e017c5318f4a3ffbd0a9aa9f1b60950bb706a6de7d678e8fdf6717cc612da7a9612bd835962ccbe9e3d4e512f575952e2c4295fadc0b46122c44040ce496a7d3734919bbcab42c9acdef2ba6d6930cb", 0xae}], 0x2}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002040)="c4d5c875a050953ed0b92f65da750f5f6aea1d896287654b9ad851cf4f2413e1434fff5b2e158d583e528bb244785ec8d7562e958ce9772889bf39d61da12e5e3372d217ed8b702c4c939ee1c1f2c6270a8bc7dfcd5736429a7387c3744c37f2e21de1d385dfd30dbc6b4a01fa1b10ad6055f34e054211358fd8d9258a589361cedc2c3d6196e5049acb50fecb1fde5992a364108f552e2be793331d2b678870347034a58a5c406676bd5f86233f95224efcf5b7f153664d64019fb43872b68c142e98ab64cddb5264ce03f1d63b7d3d5963f20215d5b5a7e8693a756167e85044f482f3002bbc8b9c6a271c3d46fda6f159a30e", 0xf4}, {&(0x7f0000002140)="2b807a63df", 0x5}, {&(0x7f0000002180)="270e2b79ae86a6f0d25fb95b85d2bfbd8d25957d1a50a9fa792f33e963384b497e0956059c38504854ae583c74deed78e0c6744ec429b1f2ec9346b4a854eff2fcaf3451fc9f4d190d6b61efb747b27d460c4dd25a610681c4dc2d1914f9a952eaff70c25b0ced2a28406dff4d62b855bf1cc9269f95a55e97c2cff8c6043f4312af7454b4e8a12f0d202c706e974756bffee3da4691975c016b15a11bf8f51ee7a00d212bcef9e5737096b56ee5a1a141577c3016375d2468b8aae70390d283618aba242ad2bf28db2d5ee755e8a042f78dd1d33ba2", 0xd6}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)}], 0x5, &(0x7f0000003340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x80}}, {{&(0x7f00000033c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003400)="854536c61976ba823acf00887b40132e9b22b63ab17512b280733748f2ea72a81f8b884607685a22bd37a935e69280a455ca7648b246b74afd62221a3b87f1b0675af5886040bff2fe27a018039e67ffdd941f13f99c0c95ab601cc22be9db3d0355384fd2bab88f08723d2df0a3aa1cfefa288f9b32e0195cc3eb089bbeb5fe7afd19bcb57ca48fdbc4d7f5594858ec8e855cf701d19b177c0f71204ad9fd1a23d5f8526edf559afbce6b", 0xab}, {&(0x7f00000034c0)="7fba4ad5684b5003e49ec499ca68d521111639218638154b8533628e62c74b7dd0588cc972d551ecf908d2327126d2738b485547f73ad9a7585140341c7811dded7a2f77c8fefd94206d7ddcad7484d4471ead8d5ea7f10261cc2861de3871506d2d9e9bfa959f569f139507065114ee8ed257bd663114f6b38cd4c4b1dc63054bd84c47e8d60d6cc1894973ff374f30904977eaad7984d2209ed3e371fbf6b6fd", 0xa1}], 0x2, &(0x7f00000035c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{&(0x7f0000003600)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000003840)=[{&(0x7f0000003640)="23783a091dbd83395f2612f42d074f9f07291fc3fa90e9295c7805efeb6d34fe4943ff024f1d279540501a9f78560d7fb0065f29871f6bdb3664147bb1e6416e556001cca7d189bcfe15d4f6102b16674c62995e57e8a880b7", 0x59}, {&(0x7f00000036c0)="aff94ec73c6f709aa56db9e8213abd1c0fa1b484b9c96086ac24985c064d142999292d1d6d8a131aa61be6c1e75ca22826111d43233518f7bf32fc6e13b10bf3e19446ec882df5757a2e2f7ec5b21fc45b1c9b4eeee8647be91adad8143e8e9653035e4a117c80b6d6c3d97dd131ef3748e471e328a62c6019c37b2e7f", 0x7d}, {&(0x7f0000003740)="319b7a6a19139efaaedcdbc47acde700956183105a922d73e10540f43a949cc53ebbdec7a6431e653518ae63407c5736c76efec1e26a80a364407b", 0x3b}, {&(0x7f0000003780)="0da575d25d19154fdc657b448d4c4b77b38ce09bd58ef4d2a440c2411c4f355854b8077833a19fc400fb351dcbccf8f88ffe56efe996a7a532bb8537d9fbfa2b0677a02c2a1190dcfdcc3f71446c6bc0dcd533ad734be0f924ec3f35497ec016930575fc2f3ae1b1cb3121c3a0a8cd2798ed27b34c0215c0f8f2704117b42d1a7c44a8e05cf3ab6f851cdb5ef695387b872c04f8cd", 0x95}], 0x4, &(0x7f0000003880)=ANY=[@ANYBLOB="110000000000000000000000010000000300000000000000f00000000000000000000000070000008611000000030103ed010858a6b1a7a3e1f9c2e9122dd08f414b56279404000044085107000000898317bb7f0000017f0000010a010102ac14141d00000000866200000003030eba1ae43d36bf4a48c68fd3af07076a8aacbfa1020329010e3c0f8fe765292526fe31444c0512313aaf9ff75d289aa1e470afc84267ac0208ca89cfdab60c060d53518c87d60ce2a249d468070ff9fd15c901108c6fbf48a95545863500000003000e0ad8e35ce9aeb596b2f89da9021049e5740e4ef45a5e64aa2b50b9c60211ec6a3d7268de4208371dc51d64f37d4414be50a86e33320000000500000000000000790014000000fac6c3d3775c9f660100000000e000000000000011000000000000001a00000001000000780000000000000011000000000000000000000001000000040000000000000014000000000000000000000001000000050000800000000014000000000000000000000002"], 0x180}}], 0x8, 0x4040) syz_init_net_socket$ax25(0x3, 0x2, 0x7) 1.6716152s ago: executing program 3 (id=5188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000005000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="000000010000000039080000000000807b5af8ff00000000bf07020000f8ffffffb703000008000000b7040000020000008500000015000000180100002020752520000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b77b3c3d5600000085000000060000009500"/136], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r2 = socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x4b2}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x7) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1.565693775s ago: executing program 1 (id=5189): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x6, {{0x2, 0x4e20, @private=0xa010102}}, 0x1, 0x1, [{{0x2, 0x4e23, @empty}}]}, 0x110) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3a5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000840}, 0x8014) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250aff8000", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 1.482435907s ago: executing program 0 (id=5190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0x71af}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 1.481977844s ago: executing program 2 (id=5191): r0 = socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000000)="51bafb463d6b5d82ded138a29f86bca967133f49a75fa16fd596cb396610da493ae4b0ad5f973a90e09532defdb20c9ddbdaa99c457c4f86efc2ee41c3ebf549b7460c4a9c0657f00380546c8322e6de9231ffff49", 0x55}, {&(0x7f0000000080)="227396dbcb7926f3b48b7f3d66a1cf897c9c31a8f3f4be74b38d5258243ea0419db71657dc77aaa53e31d9a45ce707b491ba2a809fe6f976779b85ef10dd51522053656e9876b5fc743cbea8202d61948c6e4347ab757ecc", 0x58}, {&(0x7f0000000280)="e1b1830f41578a6ab814773f3ef39d08ae5e232747e5f89a9977642266172fb232656e37b0869d43075da0a1bd5fb19761d730f7df4f7b7bd3bc40244965304ad9f80f46762f629e4de4450c37aa9261a93823a38553e3d2b1e433612ed934149c4b993d3d19b10ce593538d3ff8e24751d52eefa7097e2ff36176588f3211fd295a706d0400882379fbda1a73b0c7e979128e87c4f73e6742d8c1d441575a277448fd3d6daaa5429c580ecf49a8224cf166d8cfbcd9191a4e4f5443af1dd8c047", 0xc1}, {&(0x7f0000000380)="f8855ecbee9a9f855c9cad65d1d5c44b04d4cb701b333e4e9d3cf2fa4b58c0a1c4c2f1e24163bc6955ff6ba27e9e69c2e86faa309b4568e2a25b509d926741ed82e448552cc3cc5a037a1dc16a155fe3208e6b3359c3a47b1f7e1ccf69c67b9b96a9287fded9fbad08518a15a81ca4a2ca675188c1f4021f0262bdd4174c99e8b4df4e21aceca7", 0x87}], 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x1, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0x601be29b}, 0x18, 0x0}}], 0x1, 0x4004c051) 1.386972706s ago: executing program 4 (id=5192): r0 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x101, 0x8001, 0x6, 0x6, r1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x1b, "26f0021c48bd2429ac0e281afcdfabf42c883ce8c51157ae0d5e54"}, &(0x7f0000000140)=0x23) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0xfffffffb}, &(0x7f0000000240)=0x8) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x10) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000400)='&#\x00', 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r9, 0x200, 0x3, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x70}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x24040041) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000600)={r4, 0x7}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000c80)={{r0, &(0x7f0000000900)='&#\x00', 0x101200, &(0x7f0000000940)={@_ha_fsid={[0x125c, 0x9]}, {0x3, 0x0, 0x6, 0x2}}, 0x81, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x8}, 0x2, &(0x7f0000000c40)=[{0x2, 0xfffffd2c, &(0x7f0000000a00)='mptcp_pm\x00', &(0x7f0000000a40)="310fb87f82c90a640df3a77382486068229a4101d796d85fa671dfc37cc1445edd62ee6f6dda584661e77d8dd70c6a2024ee72f418e9f73f4051074e76ab26369ca561e1624f155fbdbdb9327a9d4bcdeae2cf22b9eeb6137238b7e9aa181dee5bdaebd1aa3c95bfea8085c86ed01c07c78d74d92649dc99bfb8de21d813c9eb0cab7def75c7fc40a5315cddc48e8058346e3088233ecd40e0de3343fdfb21fc2e2a2a55f7eec447364c35b666e671d025b72a1126400aa1643c754691507b00d39b90af9e94", 0xc6, 0x38}, {0x1, 0x4f8f000, &(0x7f0000000b40)='mptcp_pm\x00', &(0x7f0000000b80)="79af9d9ccf120a9a28a3ff6e1a742754cd507c8eaa22e9b0e635546dc8bdcec67e02a19c14406075b92f9dab1ac8a0b6d2ed5070aa2443d05d27a80a5a2567a9d6e630e23f888ef3431dc59b1e5509fe7163d6662b44656886c871eb35da126d47832104b5bc173b15f2d36d75bfef556e5335f08430b7198227d1a54c31cdfc2b13a4508b22799f9fba01bf08772fa486d9", 0x92, 0x28}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x27, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x77}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x12}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff02}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x3, 0x8b, &(0x7f00000007c0)=""/139, 0x40f00, 0x2, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x2, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r3, 0x1, r10, r3], 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd7e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x43e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_USERDATA={0x25, 0xc, "a76817cc7c74fdd3c14d7a66048a3b8b368dc2753c61c814a74b18d7fbfa842fb8"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x108}}, 0x20000000) socket$netlink(0x10, 0x3, 0x5) sendmsg$sock(r5, &(0x7f0000001240)={&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'ip6erspan0\x00'}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001080)="fb259a37a23a", 0x6}, {&(0x7f00000010c0)="9acaeb4ac7beef61aa78b28dd3883e82ad47b6b135bacc3ed2f9f367e3acb82bb283f4d7219c773d5af021ed06893579840b57955c903db879ceb7082ec019ef6400d8d79766445a3f17284f9a2a6836584de941bfaa962cfd074c8c83418731382a4f4aa81c5af98470d8a6bd2930b2c66056e06cbaa170020ce0cb335a8a430eeead705e1d8c719fb2de8ba4a7369d912e189136f63bc0ace1b98325a1e63a7f211f73f28b09d7aebda741e3a7dd", 0xaf}, {&(0x7f0000001180)="b505866f39f8d14f231f6be4e47c63e20c736e3aa96b567101855ec8cabd1ed28aba2c57329340", 0x27}], 0x3, &(0x7f0000001200)=[@txtime={{0x18, 0x1, 0x3d, 0x25f}}], 0x18}, 0x4000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r11, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x80) pipe(&(0x7f0000001380)) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001440)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r12, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10000) openat$cgroup_ro(r2, &(0x7f0000001540)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 1.253388824s ago: executing program 3 (id=5193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) unshare(0x22020400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x24000811, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0xfd61) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) unshare(0x26020480) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x7}, 0x38) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 852.297283ms ago: executing program 4 (id=5194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) write(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000040)={0xfffc, 0x1}, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xed}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x200000e4, 0x2, 0x40000005, 0x5, {0xfd, 0x1, 0xfffc, 0xd, 0x2, 0x4000}, {0x4, 0x1, 0xdef8, 0xee4a, 0x3c, 0x8}, 0x8, 0x3, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004000) 363.307827ms ago: executing program 1 (id=5195): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "d50bb9be6a03d497", "40e62b51c177d8e64ab66ac3d49824a8", "f0b27018", "a54dc30d6d389b76"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "8e7eaff2", "d4c27feb98ae71cc"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r4, 0x0, 0x80000025a5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000002c0)=r5}, 0x20) close(r5) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0xadc, &(0x7f0000001200)=0x4) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r6, 0x58, &(0x7f00000000c0)}, 0x10) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}, {&(0x7f0000000040)="4efcf9", 0x3}], 0x2}}], 0x2, 0x40444c4) pipe(&(0x7f0000000040)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "d50bb9be6a03d497", "40e62b51c177d8e64ab66ac3d49824a8", "f0b27018", "a54dc30d6d389b76"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "8e7eaff2", "d4c27feb98ae71cc"}, 0x28) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) recvmmsg$unix(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) (async) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0x80000025a5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000002c0)=r5}, 0x20) (async) close(r5) (async) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0xadc, &(0x7f0000001200)=0x4) (async) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r6, 0x58, &(0x7f00000000c0)}, 0x10) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmmsg$inet(r7, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x11, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}, {&(0x7f0000000040)="4efcf9", 0x3}], 0x2}}], 0x2, 0x40444c4) (async) 357.479132ms ago: executing program 3 (id=5196): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x52}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 0 (id=5197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x4, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, 0x4cfd, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x108}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff0000ff, 0xb, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x40, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x9}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) unshare(0x2a020400) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x26, 0x0, &(0x7f00000010c0)=0x11) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) kernel console output (not intermixed with test programs): lloc+0x52/0x360 [ 585.537887][T20485] sk_prot_alloc+0x101/0x210 [ 585.537918][T20485] ? sk_alloc+0x27/0x390 [ 585.537951][T20485] sk_alloc+0x3a/0x390 [ 585.537987][T20485] bpf_prog_test_run_skb+0x409/0x21f0 [ 585.538038][T20485] ? __fget_files+0x2a/0x420 [ 585.538057][T20485] ? __fget_files+0x3a0/0x420 [ 585.538076][T20485] ? __fget_files+0x2a/0x420 [ 585.538102][T20485] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 585.538133][T20485] bpf_prog_test_run+0x2c7/0x340 [ 585.538161][T20485] __sys_bpf+0x643/0x950 [ 585.538184][T20485] ? __pfx___sys_bpf+0x10/0x10 [ 585.538222][T20485] ? ksys_write+0x242/0x270 [ 585.538250][T20485] ? __pfx_ksys_write+0x10/0x10 [ 585.538287][T20485] __x64_sys_bpf+0x7c/0x90 [ 585.538318][T20485] do_syscall_64+0x14d/0xf80 [ 585.538350][T20485] ? trace_irq_disable+0x3b/0x150 [ 585.538368][T20485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.538390][T20485] ? clear_bhb_loop+0x40/0x90 [ 585.538415][T20485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.538437][T20485] RIP: 0033:0x7fd4b079c819 [ 585.538457][T20485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.538475][T20485] RSP: 002b:00007fd4b1610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.538498][T20485] RAX: ffffffffffffffda RBX: 00007fd4b0a15fa0 RCX: 00007fd4b079c819 [ 585.538514][T20485] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 585.538528][T20485] RBP: 00007fd4b1610090 R08: 0000000000000000 R09: 0000000000000000 [ 585.538541][T20485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.538554][T20485] R13: 00007fd4b0a16038 R14: 00007fd4b0a15fa0 R15: 00007ffc2f8690d8 [ 585.538589][T20485] [ 585.866126][T20490] __nla_validate_parse: 8 callbacks suppressed [ 585.866148][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'. [ 585.980054][T20490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3509'. [ 586.216485][T20506] netlink: 'syz.2.3513': attribute type 2 has an invalid length. [ 586.255959][T20478] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.807792][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 586.823219][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 586.832463][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3520'. [ 586.858110][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3520'. [ 587.073593][T20555] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3525'. [ 587.132869][T20555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3525'. [ 587.192026][T20560] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3525'. [ 587.332089][T20565] openvswitch: netlink: IP tunnel dst address not specified [ 587.407764][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3528'. [ 587.908082][T20604] bond1 (unregistering): Released all slaves [ 588.157810][T20583] veth3: entered allmulticast mode [ 588.905062][T20636] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 590.134775][T20636] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 590.226902][T20670] netlink: 'syz.2.3540': attribute type 1 has an invalid length. [ 590.461134][T20658] syzkaller0: entered promiscuous mode [ 590.466701][T20658] syzkaller0: entered allmulticast mode [ 590.592121][T20690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.705039][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 593.187078][T20692] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 593.510953][T20758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.544806][T20761] __nla_validate_parse: 7 callbacks suppressed [ 593.544827][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3553'. [ 593.649057][T20762] ip_vti0: entered promiscuous mode [ 593.655822][T20769] netlink: 'syz.4.3555': attribute type 1 has an invalid length. [ 593.666382][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 593.737955][T20773] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3556'. [ 593.823688][T20769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.934991][T20809] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 598.969563][T20816] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3560'. [ 598.979080][T20809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3563'. [ 598.990320][T20810] tipc: Started in network mode [ 598.995360][T20810] tipc: Node identity be25068b6e98, cluster identity 4711 [ 599.016802][T20810] tipc: Enabled bearer , priority 0 [ 599.044791][T20820] syzkaller0: entered promiscuous mode [ 599.079055][T20820] syzkaller0: entered allmulticast mode [ 599.097146][T20810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3559'. [ 599.240685][T20810] tipc: Resetting bearer [ 599.276853][T20807] tipc: Resetting bearer [ 599.371720][T20807] tipc: Disabling bearer [ 599.418185][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3565'. [ 599.890810][ T30] audit: type=1800 audit(1776245769.576:14): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3573" name="memory.events" dev="tmpfs" ino=336 res=0 errno=0 [ 600.118653][T20865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3574'. [ 600.357084][T20843] lec:lec_atm_close: lec0: Shut down! [ 600.464988][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3576'. [ 600.644795][T20886] netlink: 'syz.0.3578': attribute type 1 has an invalid length. [ 600.816872][T20888] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 600.839283][T20888] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 600.943851][T20890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.954596][T20894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.020937][T20895] bond4: (slave gretap1): making interface the new active one [ 601.046378][T20895] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 601.085810][T20905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3582'. [ 601.314883][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3583'. [ 601.374711][T20915] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 601.439935][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 601.508111][T20919] netlink: 'syz.4.3588': attribute type 51 has an invalid length. [ 601.684352][T20937] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3592'. [ 601.851150][T20937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 602.294467][T20958] netlink: 'syz.4.3596': attribute type 13 has an invalid length. [ 602.332406][T20958] netlink: 'syz.4.3596': attribute type 17 has an invalid length. [ 602.373805][T20958] gre0: left promiscuous mode [ 602.389078][T20958] gre0: left allmulticast mode [ 602.579185][T20958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.589787][T20958] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.601030][T20958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.635707][T20976] tipc: Enabling of bearer rejected, failed to enable media [ 603.160642][T20997] sctp: [Deprecated]: syz.1.3603 (pid 20997) Use of int in max_burst socket option. [ 603.160642][T20997] Use struct sctp_assoc_value instead [ 603.999514][T21033] ip6tnl1: entered allmulticast mode [ 604.331376][T21047] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 604.387647][T21050] __nla_validate_parse: 8 callbacks suppressed [ 604.387669][T21050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 604.748517][T21073] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3619'. [ 604.761969][T21076] netlink: 'syz.0.3620': attribute type 49 has an invalid length. [ 605.343799][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'. [ 605.366239][T21097] 8021q: VLANs not supported on ip_vti0 [ 605.410697][T21099] netlink: 'syz.4.3627': attribute type 10 has an invalid length. [ 605.435232][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3626'. [ 605.451609][T21099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 605.812600][T21116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3632'. [ 605.889666][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 605.978325][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 605.986401][ C1] lec:lec_tx_timeout: lec0 [ 605.988834][T21119] wg1 speed is unknown, defaulting to 1000 [ 605.993686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 606.124674][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 606.221166][T21133] netlink: 'syz.4.3636': attribute type 1 has an invalid length. [ 606.249951][T21133] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3636'. [ 606.259358][T21133] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3636'. [ 606.288350][T21133] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3636'. [ 606.339273][T21119] virt_wifi0 speed is unknown, defaulting to 1000 [ 606.595031][T21144] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 606.946957][T21154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.029364][T21156] tipc: Enabled bearer , priority 21 [ 607.271622][T21157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.817441][T21191] IPv6: addrconf: prefix option has invalid lifetime [ 607.838809][T21185] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 607.861529][T21185] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 607.889407][T21185] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 607.926854][T21190] team0: No ports can be present during mode change [ 608.178804][ T5845] Bluetooth: hci3: link tx timeout [ 608.184682][ T5845] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 608.194673][ T5845] Bluetooth: hci3: link tx timeout [ 608.201846][ T5845] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 608.278656][ T5890] tipc: Node number set to 2365265523 [ 608.473598][T21217] rdma_op ffff88803373a9f0 conn xmit_rdma 0000000000000000 [ 610.298527][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 611.008397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 611.016429][ C1] lec:lec_tx_timeout: lec0 [ 611.178582][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 612.378413][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 614.218672][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.099315][T21253] bridge0: entered promiscuous mode [ 615.288982][T21261] wg1 speed is unknown, defaulting to 1000 [ 615.332757][T21259] bridge0: left promiscuous mode [ 615.390946][T21272] __nla_validate_parse: 5 callbacks suppressed [ 615.390970][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 615.422174][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 615.683195][T21273] bond5: entered promiscuous mode [ 615.689266][T21273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.748860][T21291] tipc: Enabling of bearer rejected, failed to enable media [ 615.904676][T21298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3667'. [ 615.921885][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 615.935532][T21302] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3669'. [ 616.147588][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3667'. [ 616.187485][T21261] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.230620][T21298] nbd: socks must be embedded in a SOCK_ITEM attr [ 616.288692][T21276] block nbd64: NBD_DISCONNECT [ 616.352794][T21305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3667'. [ 616.362134][T21305] nbd: device at index 64 is going down [ 616.641515][T21329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 616.655120][T21329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 616.743331][T21333] veth0_macvtap: left promiscuous mode [ 616.772814][T21333] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3677'. [ 616.944065][T21336] syzkaller0: entered promiscuous mode [ 616.952164][T21336] syzkaller0: entered allmulticast mode [ 617.022365][T21338] rdma_rxe: rxe_newlink: failed to add lo [ 617.173146][T21341] veth1_to_hsr: entered allmulticast mode [ 617.187132][T21348] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 617.200802][T21348] netlink: 'syz.4.3682': attribute type 2 has an invalid length. [ 617.211570][T21344] netlink: 'syz.1.3681': attribute type 83 has an invalid length. [ 617.261968][T21348] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 617.421072][T21363] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 617.662685][T21370] netlink: 'syz.4.3689': attribute type 9 has an invalid length. [ 617.861343][T21379] wg1 speed is unknown, defaulting to 1000 [ 618.174740][T21394] netlink: 'syz.1.3692': attribute type 6 has an invalid length. [ 618.213770][T21394] netlink: 'syz.1.3692': attribute type 7 has an invalid length. [ 618.222378][T21394] netlink: 'syz.1.3692': attribute type 8 has an invalid length. [ 618.231763][T21394] netlink: 'syz.1.3692': attribute type 15 has an invalid length. [ 618.282934][T21395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.303984][T21396] syzkaller0: entered promiscuous mode [ 618.309728][T21396] syzkaller0: entered allmulticast mode [ 618.421303][T21379] virt_wifi0 speed is unknown, defaulting to 1000 [ 618.733513][T21418] bridge_slave_0: left allmulticast mode [ 618.739623][T21418] bridge_slave_0: left promiscuous mode [ 618.745578][T21418] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.795064][T21418] bridge_slave_1: left allmulticast mode [ 618.814298][T21418] bridge_slave_1: left promiscuous mode [ 618.836372][T21418] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.878889][T21418] bond0: (slave bond_slave_0): Releasing backup interface [ 618.962704][T21418] bond0: (slave bond_slave_1): Releasing backup interface [ 618.975161][T21418] team0: Port device team_slave_1 removed [ 618.986064][T21418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.995281][T21418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.055170][T21418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 619.130448][T21426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.180193][T21428] bond2: (slave gretap1): making interface the new active one [ 619.190207][T21428] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 619.394855][T21432] x_tables: ip_tables: ah match: only valid for protocol 51 [ 619.737793][T21449] hsr0: entered promiscuous mode [ 619.765590][T21449] macvlan3: entered allmulticast mode [ 619.772417][T21449] hsr0: entered allmulticast mode [ 619.777629][T21449] hsr_slave_0: entered allmulticast mode [ 619.783606][T21449] hsr_slave_1: entered allmulticast mode [ 620.005768][T21458] nbd: socks must be embedded in a SOCK_ITEM attr [ 620.023997][T21258] block nbd64: NBD_DISCONNECT [ 620.051632][T21463] nbd: socks must be embedded in a SOCK_ITEM attr [ 620.071755][T21258] block nbd64: NBD_DISCONNECT [ 620.410057][T21258] udevd[21258]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 620.432449][T21484] __nla_validate_parse: 33 callbacks suppressed [ 620.432474][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'. [ 620.478456][T21484] openvswitch: netlink: Flow actions attr not present in new flow. [ 620.552175][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 620.616778][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 620.710712][T21492] xt_TCPMSS: Only works on TCP SYN packets [ 620.757537][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3716'. [ 621.000062][T21495] ipvlan3: entered allmulticast mode [ 621.005572][T21495] syz_tun: entered allmulticast mode [ 621.332165][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3721'. [ 621.359997][T21508] tipc: Enabled bearer , priority 0 [ 621.517308][T21511] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 621.658133][T21521] "syz.4.3725" (21521) uses obsolete ecb(arc4) skcipher [ 621.669183][T21506] tipc: Disabling bearer [ 621.800547][T21526] sock: sock_timestamping_bind_phc: sock not bind to device [ 621.994350][T21536] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3730'. [ 622.507827][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3730'. [ 622.867674][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 622.894991][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 623.012414][T21581] Cannot find del_set index 49151 as target [ 623.463223][T21603] syz.1.3750 uses old SIOCAX25GETINFO [ 623.475241][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3750'. [ 623.493481][T21607] mac80211_hwsim hwsim43 ;: renamed from wlan0 (while UP) [ 623.527094][T21607] validate_nla: 4 callbacks suppressed [ 623.527115][T21607] netlink: 'syz.2.3751': attribute type 1 has an invalid length. [ 623.571275][T21607] bond3: entered promiscuous mode [ 623.577047][T21607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.632448][T21607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.643474][T21607] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 623.655266][T21607] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 623.675190][T21607] bond3: (slave wireguard0): making interface the new active one [ 623.683980][T21607] wireguard0: entered promiscuous mode [ 623.691709][T21607] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 623.722076][T21613] pim6reg: entered allmulticast mode [ 624.037862][T21613] netlink: 'syz.1.3753': attribute type 4 has an invalid length. [ 624.088595][T21620] netlink: 'syz.1.3753': attribute type 4 has an invalid length. [ 624.118830][T21624] netlink: 'syz.2.3756': attribute type 1 has an invalid length. [ 624.127213][T21624] netlink: 'syz.2.3756': attribute type 1 has an invalid length. [ 624.451797][T21644] gretap0: entered promiscuous mode [ 624.465480][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.525983][T21644] gretap0: left promiscuous mode [ 624.746688][T21662] wg1 speed is unknown, defaulting to 1000 [ 624.849731][T21667] TC_ACT_REPEAT abuse ? [ 624.874727][T21671] No such timeout policy "syz1" [ 625.456403][T21662] virt_wifi0 speed is unknown, defaulting to 1000 [ 625.829403][T21709] netlink: 'syz.1.3777': attribute type 30 has an invalid length. [ 629.978474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.986642][ C1] lec:lec_tx_timeout: lec0 [ 631.658859][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 634.066601][ T5890] IPVS: starting estimator thread 0... [ 634.106774][T21754] wg1 speed is unknown, defaulting to 1000 [ 634.128800][T21759] netlink: 'syz.4.3785': attribute type 8 has an invalid length. [ 634.149512][T21758] netlink: 'syz.3.3784': attribute type 3 has an invalid length. [ 634.179836][T21756] IPVS: using max 25 ests per chain, 60000 per kthread [ 634.198888][T21758] netlink: 'syz.3.3784': attribute type 3 has an invalid length. [ 634.237369][T21758] __nla_validate_parse: 4 callbacks suppressed [ 634.237388][T21758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3784'. [ 634.255685][T21760] geneve2: entered promiscuous mode [ 634.272745][ T8559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.298542][ T8559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.335369][ T8559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.358685][ T8559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.555034][T21754] virt_wifi0 speed is unknown, defaulting to 1000 [ 634.746210][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 634.976274][T21782] ip6tnl1: entered promiscuous mode [ 634.998074][T21782] ip6tnl1: entered allmulticast mode [ 635.792490][T21824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'. [ 635.850190][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'. [ 635.868782][T21824] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3799'. [ 635.930056][T21824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'. [ 636.003631][T21824] bridge0: entered promiscuous mode [ 636.029826][T21831] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3800'. [ 636.080643][T21838] bridge0: entered allmulticast mode [ 636.086341][T21838] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 636.219804][T21842] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 636.531273][ T30] audit: type=1107 audit(1776245806.226:15): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 636.682058][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 636.719528][T21865] veth1_macvtap: left promiscuous mode [ 637.207960][T21875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3812'. [ 637.770478][T21894] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3816'. [ 637.885607][T21904] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 638.395459][T21930] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 638.404121][T21930] netlink: 'syz.3.3831': attribute type 2 has an invalid length. [ 638.413324][T21930] netlink: 'syz.3.3831': attribute type 2 has an invalid length. [ 638.443711][T21916] netlink: 'syz.2.3815': attribute type 2 has an invalid length. [ 638.849560][T21953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.126457][T21970] netlink: 'syz.2.3843': attribute type 1 has an invalid length. [ 639.162083][T21970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.272548][T21974] bond4: (slave veth3): Enslaving as an active interface with a down link [ 639.344248][T21975] bond4: (slave veth5): Enslaving as an active interface with a down link [ 639.408162][T21987] __nla_validate_parse: 5 callbacks suppressed [ 639.408183][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 639.446205][T21986] delete_channel: no stack [ 639.523229][T21993] syzkaller0: entered allmulticast mode [ 639.659020][T22003] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 639.690631][T22003] bond5: entered promiscuous mode [ 639.696599][T22003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 639.824154][T22015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3855'. [ 639.942660][T22018] wg1 speed is unknown, defaulting to 1000 [ 640.110914][T22018] virt_wifi0 speed is unknown, defaulting to 1000 [ 640.651830][T22031] ip6tnl1: entered promiscuous mode [ 640.679405][T22031] ip6tnl1: entered allmulticast mode [ 640.811831][T22040] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 640.817606][T22040] pim6reg0: persist disabled [ 640.952055][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3865'. [ 640.968803][T22054] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3866'. [ 640.979975][T22053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3866'. [ 641.091570][T22060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3868'. [ 641.192828][T22063] wg1 speed is unknown, defaulting to 1000 [ 641.235778][T22069] syzkaller0: entered promiscuous mode [ 641.241968][T22069] syzkaller0: entered allmulticast mode [ 641.577695][T22063] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.586954][T22068] wg1 speed is unknown, defaulting to 1000 [ 642.002940][T22097] netlink: 'syz.3.3880': attribute type 10 has an invalid length. [ 642.014448][T22097] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3880'. [ 642.038651][T22096] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.3879'. [ 642.083409][T22097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.127872][T22097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.139143][T22097] hsr0: entered promiscuous mode [ 642.146013][T22097] bridge0: port 3(hsr0) entered blocking state [ 642.162226][T22097] bridge0: port 3(hsr0) entered disabled state [ 642.168889][T22097] hsr0: entered allmulticast mode [ 642.174286][T22097] hsr_slave_0: entered allmulticast mode [ 642.185907][T22097] hsr_slave_1: entered allmulticast mode [ 642.287133][T22101] netlink: 'syz.3.3880': attribute type 27 has an invalid length. [ 642.381118][T22068] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.393839][T22099] wg1 speed is unknown, defaulting to 1000 [ 642.561565][T22108] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 642.660131][T22110] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 642.820269][T22116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.842164][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'. [ 642.854001][T22115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.910374][T22099] virt_wifi0 speed is unknown, defaulting to 1000 [ 643.128340][ T30] audit: type=1804 audit(1776245812.816:16): pid=22124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3884" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=780 res=1 errno=0 [ 643.208361][ T30] audit: type=1800 audit(1776245812.816:17): pid=22124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3884" name="cgroup.controllers" dev="tmpfs" ino=780 res=0 errno=0 [ 643.265467][T22124] ip_vti0: left promiscuous mode [ 643.338699][T22124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.754311][T22136] netlink: 'syz.0.3887': attribute type 1 has an invalid length. [ 643.880095][T22136] bond6: entered promiscuous mode [ 643.885214][T22136] bond6: entered allmulticast mode [ 643.899151][T22136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 643.951029][T22138] erspan1: entered allmulticast mode [ 643.975360][T22138] bond6: (slave erspan1): making interface the new active one [ 644.004644][T22138] erspan1: entered promiscuous mode [ 644.033639][T22138] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 644.556031][T11318] IPVS: starting estimator thread 0... [ 644.580280][T22168] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20265 [ 644.784617][T22174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3893'. [ 644.908477][T22167] IPVS: using max 24 ests per chain, 57600 per kthread [ 644.965582][T22153] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.973182][T22153] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.258162][T22153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.301700][T22153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.336002][T22153] veth1_to_hsr: left allmulticast mode [ 645.654921][T22153] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 645.662399][T22153] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 645.704732][T22153] ipip0: left promiscuous mode [ 645.717305][T22153] ip6tnl1: left allmulticast mode [ 645.772871][T22153] bond3: left promiscuous mode [ 645.777813][T22153] wireguard0: left promiscuous mode [ 645.801055][T22153] bond5: left promiscuous mode [ 645.831573][ T150] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.859111][ T150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.900436][ T150] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.919092][ T150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.030391][ T150] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.049915][ T150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.088447][ T1104] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.100039][ T1104] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.564244][T22221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3898'. [ 651.590388][T22221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3898'. [ 652.082390][T22251] netlink: 'syz.3.3905': attribute type 5 has an invalid length. [ 652.114454][T22251] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 652.134468][T22251] ip6gretap1: entered promiscuous mode [ 652.155781][T22251] ip6gretap1: entered allmulticast mode [ 652.627010][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 652.644372][T22276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3909'. [ 652.668862][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 652.682305][T22276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3909'. [ 652.737278][T22281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 652.808604][T11348] IPVS: starting estimator thread 0... [ 652.828128][T22288] wg1 speed is unknown, defaulting to 1000 [ 652.908381][T22293] IPVS: using max 28 ests per chain, 67200 per kthread [ 653.182793][T22288] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.315836][T22314] can: request_module (can-proto-5) failed. [ 653.809550][T22339] bond3: option arp_interval: invalid value (18446744073709551615) [ 653.817547][T22339] bond3: option arp_interval: allowed values 0 - 2147483647 [ 653.836647][T22339] bond3 (unregistering): Released all slaves [ 653.938745][T22341] wg1 speed is unknown, defaulting to 1000 [ 654.199473][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 654.222744][T22364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.471832][T22374] veth5: entered promiscuous mode [ 654.648469][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3935'. [ 654.951030][T22341] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.968873][T22351] wg1 speed is unknown, defaulting to 1000 [ 655.554727][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3940'. [ 655.619635][T22411] vlan3: entered promiscuous mode [ 655.624903][T22411] bridge0: entered promiscuous mode [ 655.727374][T22351] virt_wifi0 speed is unknown, defaulting to 1000 [ 656.196086][T22422] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 656.431630][T22433] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 662.955426][T22475] __nla_validate_parse: 1 callbacks suppressed [ 662.955446][T22475] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3952'. [ 662.980562][T22471] macvlan0: entered promiscuous mode [ 662.988660][T22471] macvlan0: entered allmulticast mode [ 662.994121][T22471] veth1_vlan: entered allmulticast mode [ 663.008356][T22475] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3952'. [ 663.034537][T22471] syzkaller0: entered promiscuous mode [ 663.040545][T22471] syzkaller0: entered allmulticast mode [ 663.500996][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 663.529086][T22506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.612503][T22514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3960'. [ 663.647543][T22514] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3960'. [ 663.668764][T22514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3960'. [ 663.817796][T22523] wg1 speed is unknown, defaulting to 1000 [ 664.038932][T22530] syzkaller1: entered promiscuous mode [ 664.048692][T22530] syzkaller1: entered allmulticast mode [ 664.089893][T22505] netlink: 'syz.0.3957': attribute type 4 has an invalid length. [ 664.098712][T22505] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3957'. [ 664.262817][T22534] xfrm0: entered promiscuous mode [ 664.281245][T22534] xfrm0: entered allmulticast mode [ 664.704651][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 664.724031][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3969'. [ 664.758640][T22546] netlink: 'syz.0.3969': attribute type 18 has an invalid length. [ 664.826604][T22523] virt_wifi0 speed is unknown, defaulting to 1000 [ 664.826614][T22536] wg1 speed is unknown, defaulting to 1000 [ 665.270708][T22554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3972'. [ 665.382558][T22551] wg1 speed is unknown, defaulting to 1000 [ 665.399149][T22536] virt_wifi0 speed is unknown, defaulting to 1000 [ 665.928563][T22551] virt_wifi0 speed is unknown, defaulting to 1000 [ 665.983563][T22586] IPv6: NLM_F_REPLACE set, but no existing node found! [ 666.019951][T22584] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 666.030008][T22584] vlan2: entered promiscuous mode [ 666.088358][T22584] bond0: entered promiscuous mode [ 666.093586][T22584] bond_slave_0: entered promiscuous mode [ 666.118628][T22584] bond_slave_1: entered promiscuous mode [ 667.463982][T22627] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 667.490503][T22627] syzkaller0: entered promiscuous mode [ 667.496063][T22627] syzkaller0: entered allmulticast mode [ 667.641260][T22641] netlink: 'syz.3.3998': attribute type 16 has an invalid length. [ 667.650946][T22641] netlink: 'syz.3.3998': attribute type 17 has an invalid length. [ 667.692720][T22641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.783557][T22645] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 667.809848][T22645] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 667.824594][T22645] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 668.034387][T22659] netlink: 'syz.4.4002': attribute type 2 has an invalid length. [ 668.084862][T22659] __nla_validate_parse: 2 callbacks suppressed [ 668.084881][T22659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4002'. [ 668.262649][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 668.302182][T22668] netlink: 'syz.1.4007': attribute type 3 has an invalid length. [ 668.315317][T22668] netlink: 'syz.1.4007': attribute type 1 has an invalid length. [ 668.368443][T22668] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4007'. [ 668.385450][T22668] NCSI netlink: No device for ifindex 813332851 [ 668.400904][T22673] syzkaller0: entered promiscuous mode [ 668.407522][T22673] syzkaller0: entered allmulticast mode [ 668.751162][T13876] lec:lec_start_xmit: lec0:No lecd attached [ 668.878500][T22692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4016'. [ 669.825859][T22737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.918076][T22739] bond3: option min_links: invalid value (18446744073709551612) [ 669.939667][T22739] bond3: option min_links: allowed values 0 - 2147483647 [ 669.950989][T22739] bond3 (unregistering): Released all slaves [ 669.993546][T22744] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 670.216363][T22734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.242252][T22734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.421487][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 670.796840][T22779] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4037'. [ 670.923955][T22791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4039'. [ 671.156829][T22799] bridge3: entered promiscuous mode [ 671.196988][T22799] bridge3: entered allmulticast mode [ 671.226311][T22799] team0: Port device bridge3 added [ 671.501285][T22828] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 671.572510][T22828] bond1 (unregistering): Released all slaves [ 671.667135][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 671.715197][T22827] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 671.850669][T22852] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 671.945682][T22852] bond7 (unregistering): Released all slaves [ 672.040157][T22862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4050'. [ 672.715686][T22905] syzkaller1: entered promiscuous mode [ 672.724082][T22905] syzkaller1: entered allmulticast mode [ 672.836824][T22912] netlink: 'syz.1.4063': attribute type 39 has an invalid length. [ 673.157101][T22932] tipc: Started in network mode [ 673.162525][T22932] tipc: Node identity 5eed8fc0c00e, cluster identity 4711 [ 673.189154][T22932] tipc: Enabled bearer , priority 0 [ 673.206553][T22932] syzkaller0: entered promiscuous mode [ 673.216070][T22932] syzkaller0: entered allmulticast mode [ 673.267282][T22932] vlan3: entered allmulticast mode [ 673.278556][T22932] vlan0: entered allmulticast mode [ 673.295578][T22932] veth0_vlan: entered allmulticast mode [ 673.310946][T22935] macsec0: entered allmulticast mode [ 673.352150][T22935] veth1_macvtap: entered allmulticast mode [ 673.368824][T22935] macsec0: left allmulticast mode [ 673.374039][T22935] veth1_macvtap: left allmulticast mode [ 673.399574][T22932] tipc: Resetting bearer [ 673.425916][T22929] tipc: Resetting bearer [ 673.529716][T22929] tipc: Disabling bearer [ 673.978282][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 673.986653][ C1] lec:lec_tx_timeout: lec0 [ 674.002266][T22959] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 677.741037][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 682.413654][T22992] netlink: 'syz.3.4080': attribute type 24 has an invalid length. [ 682.450558][T22997] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 682.460226][ T10] IPVS: starting estimator thread 0... [ 682.529169][T23001] netlink: 'syz.2.4079': attribute type 2 has an invalid length. [ 682.560575][T23000] IPVS: using max 28 ests per chain, 67200 per kthread [ 682.617804][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 682.653079][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 683.490045][T23046] tipc: Enabled bearer , priority 0 [ 683.813188][T23044] tipc: Disabling bearer [ 683.897705][T23066] netlink: 'syz.4.4095': attribute type 2 has an invalid length. [ 683.920352][T23066] netlink: 'syz.4.4095': attribute type 2 has an invalid length. [ 683.928193][T23066] netlink: 'syz.4.4095': attribute type 2 has an invalid length. [ 684.667353][T23093] bond7: option lacp_active: invalid value (8) [ 684.721967][T23093] bond7 (unregistering): Released all slaves [ 685.000493][T23111] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4105'. [ 685.204809][T23123] netlink: 'syz.2.4111': attribute type 2 has an invalid length. [ 685.228375][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4111'. [ 685.294890][T23122] gre0: left promiscuous mode [ 685.514406][T23122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.593541][T23123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4111'. [ 685.761718][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4113'. [ 685.906837][T23151] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 685.909006][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 686.394308][T23182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4120'. [ 686.544657][T23192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4115'. [ 687.123944][T23222] wg1 speed is unknown, defaulting to 1000 [ 687.312635][T23234] sit2: entered promiscuous mode [ 687.505753][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 687.736920][T23265] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4142'. [ 687.828481][T23273] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4144'. [ 687.839773][T23273] xt_time: unknown flags 0xf4 [ 687.900576][T23222] virt_wifi0 speed is unknown, defaulting to 1000 [ 687.911069][T23217] wg1 speed is unknown, defaulting to 1000 [ 688.175189][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'. [ 688.186807][T23279] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4146'. [ 688.197906][T23276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4145'. [ 688.208949][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'. [ 688.365067][T23284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4148'. [ 688.395920][T23265] wg1 speed is unknown, defaulting to 1000 [ 688.592669][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 688.644767][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'. [ 688.655439][T23300] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4152'. [ 688.688551][T23267] wg1 speed is unknown, defaulting to 1000 [ 688.852335][T23267] virt_wifi0 speed is unknown, defaulting to 1000 [ 688.880262][T23217] virt_wifi0 speed is unknown, defaulting to 1000 [ 688.975332][T23265] virt_wifi0 speed is unknown, defaulting to 1000 [ 689.484556][T23304] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 689.664706][T23309] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 689.782502][T23309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 689.881010][T23313] bond6: (slave gretap2): making interface the new active one [ 689.889995][T23313] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 689.913813][T23309] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 690.166704][T23326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.613188][T23336] syzkaller0: entered promiscuous mode [ 690.620376][T23336] syzkaller0: entered allmulticast mode [ 690.939380][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.947502][ C1] lec:lec_tx_timeout: lec0 [ 691.205952][T23353] bond7: entered promiscuous mode [ 691.228384][T23353] bond7: entered allmulticast mode [ 691.449533][T23366] syzkaller0: entered promiscuous mode [ 691.458464][T23366] syzkaller0: entered allmulticast mode [ 691.738730][T23376] wg1 speed is unknown, defaulting to 1000 [ 692.182139][T23376] virt_wifi0 speed is unknown, defaulting to 1000 [ 697.808980][T23430] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 697.839401][T23430] __nla_validate_parse: 11 callbacks suppressed [ 697.839421][T23430] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4178'. [ 697.871140][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4178'. [ 697.899914][T23430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4178'. [ 697.951674][T23439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4181'. [ 698.104048][T23444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4183'. [ 698.163277][T23446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4184'. [ 699.417971][T23508] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4200'. [ 699.955186][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4209'. [ 700.007483][T23550] netlink: 'syz.2.4209': attribute type 4 has an invalid length. [ 700.051555][T23541] netlink: 'syz.2.4209': attribute type 4 has an invalid length. [ 700.940724][T23597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4219'. [ 701.009018][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4219'. [ 701.573768][T23630] IPVS: Unknown mcast interface: dummy0 [ 701.593403][T23631] openvswitch: netlink: Flow actions attr not present in new flow. [ 701.788961][T23647] syzkaller1: entered promiscuous mode [ 701.823290][T23647] syzkaller1: entered allmulticast mode [ 702.052746][T23654] syzkaller0: entered promiscuous mode [ 702.059111][T23654] syzkaller0: entered allmulticast mode [ 707.000371][T23685] __nla_validate_parse: 6 callbacks suppressed [ 707.000393][T23685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4242'. [ 707.058644][T23684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4242'. [ 707.155602][T23692] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4244'. [ 707.241914][T23695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.364800][T23699] bond3: (slave ip6gretap0): making interface the new active one [ 707.387418][T23699] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 707.759375][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'. [ 707.809429][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'. [ 708.409491][T23723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4254'. [ 708.510909][T23725] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 708.519068][T23725] CPU: 0 UID: 0 PID: 23725 Comm: syz.1.4255 Not tainted syzkaller #0 PREEMPT(full) [ 708.519125][T23725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.519141][T23725] Call Trace: [ 708.519152][T23725] [ 708.519162][T23725] dump_stack_lvl+0xe8/0x150 [ 708.519204][T23725] sysfs_warn_dup+0x8e/0xa0 [ 708.519239][T23725] sysfs_do_create_link_sd+0xc0/0x110 [ 708.519277][T23725] device_add_class_symlinks+0x1cf/0x240 [ 708.519314][T23725] device_add+0x475/0xb70 [ 708.519350][T23725] wiphy_register+0x1dc5/0x2dc0 [ 708.519396][T23725] ? __pfx_wiphy_register+0x10/0x10 [ 708.519423][T23725] ? __pfx_netdev_run_todo+0x10/0x10 [ 708.519446][T23725] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 708.519487][T23725] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 708.519519][T23725] ieee80211_register_hw+0x3d82/0x4a70 [ 708.519546][T23725] ? __lock_acquire+0x6b5/0x2cf0 [ 708.519593][T23725] ? ieee80211_register_hw+0x1911/0x4a70 [ 708.519649][T23725] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 708.519686][T23725] ? __hrtimer_setup+0x181/0x200 [ 708.519717][T23725] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 708.519745][T23725] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 708.519815][T23725] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 708.519847][T23725] ? kstrndup+0xbf/0x160 [ 708.519889][T23725] hwsim_new_radio_nl+0xf6a/0x1c00 [ 708.519949][T23725] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 708.519995][T23725] ? rcu_is_watching+0x15/0xb0 [ 708.520028][T23725] ? trace_kmalloc+0x2a/0x110 [ 708.520061][T23725] ? __nla_parse+0x40/0x60 [ 708.520091][T23725] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 708.520125][T23725] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 708.520160][T23725] genl_family_rcv_msg_doit+0x22a/0x330 [ 708.520192][T23725] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 708.520234][T23725] ? bpf_lsm_capable+0x9/0x20 [ 708.520266][T23725] ? security_capable+0x7e/0x2c0 [ 708.520308][T23725] genl_rcv_msg+0x61c/0x7a0 [ 708.520341][T23725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.520365][T23725] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 708.520418][T23725] netlink_rcv_skb+0x232/0x4b0 [ 708.520452][T23725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.520479][T23725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.520531][T23725] ? down_read+0x272/0x2e0 [ 708.520559][T23725] ? genl_rcv+0xd/0x40 [ 708.520585][T23725] genl_rcv+0x28/0x40 [ 708.520607][T23725] netlink_unicast+0x75c/0x8e0 [ 708.520651][T23725] netlink_sendmsg+0x813/0xb40 [ 708.520696][T23725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.520734][T23725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.520759][T23725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.520790][T23725] ____sys_sendmsg+0x972/0x9f0 [ 708.520837][T23725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.520883][T23725] ? import_iovec+0x73/0xa0 [ 708.520916][T23725] ___sys_sendmsg+0x2a5/0x360 [ 708.520958][T23725] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.520997][T23725] ? futex_wake+0x4ac/0x580 [ 708.521048][T23725] ? __fget_files+0x2a/0x420 [ 708.521064][T23725] ? __fget_files+0x3a0/0x420 [ 708.521090][T23725] __x64_sys_sendmsg+0x1bd/0x2a0 [ 708.521130][T23725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.521168][T23725] ? rcu_is_watching+0x15/0xb0 [ 708.521207][T23725] do_syscall_64+0x14d/0xf80 [ 708.521228][T23725] ? trace_irq_disable+0x3b/0x150 [ 708.521243][T23725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.521262][T23725] ? clear_bhb_loop+0x40/0x90 [ 708.521284][T23725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.521302][T23725] RIP: 0033:0x7fd4b079c819 [ 708.521320][T23725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.521337][T23725] RSP: 002b:00007fd4b15ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.521357][T23725] RAX: ffffffffffffffda RBX: 00007fd4b0a16090 RCX: 00007fd4b079c819 [ 708.521372][T23725] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e [ 708.521383][T23725] RBP: 00007fd4b0832c91 R08: 0000000000000000 R09: 0000000000000000 [ 708.521394][T23725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.521404][T23725] R13: 00007fd4b0a16128 R14: 00007fd4b0a16090 R15: 00007ffc2f8690d8 [ 708.521433][T23725] [ 709.606826][T23751] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4258'. [ 709.954251][T23766] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 709.963387][T23766] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4262'. [ 709.973047][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 710.079403][T23777] netlink: 'syz.2.4265': attribute type 1 has an invalid length. [ 710.103098][T23766] bond7: option primary_reselect: invalid value (4) [ 710.118789][T23778] netlink: 'syz.1.4264': attribute type 1 has an invalid length. [ 710.126598][T23778] netlink: 'syz.1.4264': attribute type 3 has an invalid length. [ 710.161661][T23766] bond7 (unregistering): Released all slaves [ 710.180447][T23777] netlink: 'syz.2.4265': attribute type 2 has an invalid length. [ 710.222677][T23778] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4264'. [ 710.256191][T23773] netlink: 'syz.2.4265': attribute type 1 has an invalid length. [ 711.499452][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 718.729976][T23813] sctp: [Deprecated]: syz.2.4269 (pid 23813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.729976][T23813] Use struct sctp_sack_info instead [ 718.740070][T23815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4271'. [ 719.526654][T23851] wg1 speed is unknown, defaulting to 1000 [ 719.738046][T23857] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4279'. [ 719.769075][T23857] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4279'. [ 719.793893][T23851] virt_wifi0 speed is unknown, defaulting to 1000 [ 719.977757][T23866] gretap2: entered promiscuous mode [ 719.986995][T23868] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4282'. [ 720.001525][T23866] gretap2: entered allmulticast mode [ 720.212891][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 720.292281][T23880] netlink: 'syz.4.4287': attribute type 2 has an invalid length. [ 720.508440][T23890] x_tables: duplicate underflow at hook 2 [ 720.721409][T23901] pimreg: entered allmulticast mode [ 720.741706][T23901] pimreg: left allmulticast mode [ 720.977999][T23919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4302'. [ 721.075322][T23910] tipc: Resetting bearer [ 721.345095][T23940] netlink: 'syz.2.4306': attribute type 1 has an invalid length. [ 721.669556][T23940] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.731485][T23948] netlink: 'syz.0.4309': attribute type 10 has an invalid length. [ 721.779219][T23948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4309'. [ 721.802377][T23954] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4307'. [ 721.816543][T23948] batadv0: entered promiscuous mode [ 721.848953][T23948] batadv0: entered allmulticast mode [ 721.854571][T23948] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 722.000190][T23966] netlink: 'syz.2.4313': attribute type 1 has an invalid length. [ 722.018388][T23966] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4313'. [ 722.124194][T23973] netlink: 'syz.3.4315': attribute type 1 has an invalid length. [ 722.158128][T23977] x_tables: duplicate underflow at hook 1 [ 722.196131][T23983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4318'. [ 723.852532][T24061] tipc: Enabling not permitted [ 723.859353][T24061] tipc: Enabling of bearer rejected, failed to enable media [ 723.890806][T24063] tipc: Enabled bearer , priority 0 [ 723.918861][T24066] syzkaller0: entered promiscuous mode [ 723.944797][T24066] syzkaller0: entered allmulticast mode [ 724.060796][T24066] tipc: Resetting bearer [ 724.106745][T24071] __nla_validate_parse: 5 callbacks suppressed [ 724.106765][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 724.122784][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 724.149142][T24066] tipc: Disabling bearer [ 724.293435][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4348'. [ 724.311609][T24075] macvtap1: entered promiscuous mode [ 724.343524][T24075] dummy0: entered promiscuous mode [ 724.359771][T24075] macvtap1: entered allmulticast mode [ 724.363095][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 724.365222][T24075] dummy0: entered allmulticast mode [ 724.444891][T24079] dummy0: left allmulticast mode [ 724.476012][T24079] dummy0: left promiscuous mode [ 724.672504][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4354'. [ 724.818615][T24099] netlink: 'syz.1.4356': attribute type 2 has an invalid length. [ 724.826556][T24099] netlink: 'syz.1.4356': attribute type 9 has an invalid length. [ 724.834870][T24099] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4356'. [ 724.945995][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 724.966302][T24108] netlink: 'syz.4.4357': attribute type 29 has an invalid length. [ 724.990126][T24109] netlink: 'syz.4.4357': attribute type 29 has an invalid length. [ 725.032456][T24109] tipc: Started in network mode [ 725.037692][T24109] tipc: Node identity bbbbbb01, cluster identity 4711 [ 725.045791][T24109] tipc: Enabled bearer , priority 10 [ 725.112528][T24115] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 725.197419][T24118] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 725.662643][T24118] bond8 (unregistering): Released all slaves [ 725.844334][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4370'. [ 725.899901][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4368'. [ 725.915921][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4369'. [ 726.158328][ T10] tipc: Node number set to 3149642497 [ 726.315269][T24176] wg1 speed is unknown, defaulting to 1000 [ 726.793085][T24192] IPv6: Can't replace route, no match found [ 726.824381][T24192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.872490][T24192] netlink: 'syz.0.4378': attribute type 10 has an invalid length. [ 726.900549][T24192] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 726.919830][T24176] virt_wifi0 speed is unknown, defaulting to 1000 [ 727.393349][T24214] pim6reg99999991: entered allmulticast mode [ 733.444441][T13876] lec:lec_start_xmit: lec0:No lecd attached [ 735.911178][T24268] netlink: 'syz.0.4390': attribute type 10 has an invalid length. [ 735.962637][T24267] vlan3: left allmulticast mode [ 735.967559][T24267] vlan0: left allmulticast mode [ 735.974425][T24267] veth0_vlan: left allmulticast mode [ 736.029834][T24267] macvtap1: left promiscuous mode [ 736.034957][T24267] macvtap1: left allmulticast mode [ 736.094788][T24268] bond0: (slave dummy0): Releasing backup interface [ 736.520542][T24298] netlink: 'syz.4.4401': attribute type 8 has an invalid length. [ 736.676639][T24308] __nla_validate_parse: 4 callbacks suppressed [ 736.676659][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4404'. [ 736.693845][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4404'. [ 736.720691][T24308] netlink: 'syz.4.4404': attribute type 10 has an invalid length. [ 736.728884][T24308] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4404'. [ 737.030486][T24327] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 737.098472][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.399719][T24340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4414'. [ 737.440432][T24340] IPVS: set_ctl: invalid protocol: 58 172.20.20.41:20001 [ 737.450809][T24340] syzkaller0: entered promiscuous mode [ 737.456350][T24340] syzkaller0: entered allmulticast mode [ 738.938305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 738.946437][ C1] lec:lec_tx_timeout: lec0 [ 739.033619][T24385] netlink: 'syz.0.4425': attribute type 64 has an invalid length. [ 739.153570][T24394] siw: device registration error -23 [ 739.245984][T24398] bridge0: port 3(syz_tun) entered blocking state [ 739.258594][T24398] bridge0: port 3(syz_tun) entered disabled state [ 739.269450][T24398] syz_tun: entered allmulticast mode [ 739.282143][T24398] syz_tun: entered promiscuous mode [ 739.362567][T24406] geneve0: entered promiscuous mode [ 739.378382][T24406] geneve0: entered allmulticast mode [ 739.390935][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.415419][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.434897][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.468693][ T1104] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.618996][T24412] netlink: 'syz.0.4432': attribute type 21 has an invalid length. [ 739.627263][T24412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4432'. [ 739.642329][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4432'. [ 739.659870][T24414] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 740.252930][T24430] syzkaller0: entered promiscuous mode [ 740.260209][T24430] syzkaller0: entered allmulticast mode [ 740.441064][T24440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4440'. [ 740.873446][T24453] netlink: 'syz.4.4443': attribute type 11 has an invalid length. [ 740.972300][T24455] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4444'. [ 741.093131][T24461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.110717][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4446'. [ 741.252878][T24463] bond0: Error: Cannot enslave bond to itself. [ 741.461892][T24478] macvtap2: entered promiscuous mode [ 741.467552][T24478] syz_tun: entered promiscuous mode [ 741.473278][T24478] macvtap2: entered allmulticast mode [ 741.479113][T24478] syz_tun: entered allmulticast mode [ 741.494992][T24478] syz_tun: left allmulticast mode [ 741.501154][T24478] syz_tun: left promiscuous mode [ 741.537805][T24475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4449'. [ 741.551653][T24475] tc_dump_action: action bad kind [ 741.787567][T24494] __nla_validate_parse: 1 callbacks suppressed [ 741.787582][T24494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4454'. [ 741.966969][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 742.236145][T24515] sctp: [Deprecated]: syz.0.4460 (pid 24515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.236145][T24515] Use struct sctp_sack_info instead [ 742.270973][T24515] sctp: [Deprecated]: syz.0.4460 (pid 24515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.270973][T24515] Use struct sctp_sack_info instead [ 742.301358][T24515] sctp: [Deprecated]: syz.0.4460 (pid 24515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.301358][T24515] Use struct sctp_sack_info instead [ 742.331335][T24515] sctp: [Deprecated]: syz.0.4460 (pid 24515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.331335][T24515] Use struct sctp_sack_info instead [ 742.370156][T24515] sctp: [Deprecated]: syz.0.4460 (pid 24515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.370156][T24515] Use struct sctp_sack_info instead [ 742.444642][T24526] netlink: 'syz.3.4462': attribute type 1 has an invalid length. [ 742.529399][T24526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4462'. [ 742.562769][T24527] bond1: (slave geneve2): making interface the new active one [ 742.572591][T24527] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 742.587206][T24526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.595931][T24531] hsr0: entered promiscuous mode [ 742.603282][T16345] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 742.620503][T16345] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 742.638131][T16345] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 742.661181][T16345] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 742.673872][T24532] hsr0: left promiscuous mode [ 742.742939][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4466'. [ 742.949221][T24557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4470'. [ 742.959883][T24557] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4470'. [ 743.310226][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 743.320940][T24576] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 743.656699][T24594] netlink: 'syz.3.4481': attribute type 2 has an invalid length. [ 743.745408][T24599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.790204][T24599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4483'. [ 744.261684][T24626] openvswitch: netlink: IP tunnel TTL not specified. [ 744.582971][T24642] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4498'. [ 744.671122][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4499'. [ 745.319817][T24669] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 745.681311][T24689] netlink: 'syz.4.4509': attribute type 1 has an invalid length. [ 745.732706][T24689] bond8: entered promiscuous mode [ 745.739985][T24689] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.823075][T24689] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.834414][T24689] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 745.845532][T24689] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 745.858811][T24689] bond8: (slave ip6gre1): making interface the new active one [ 745.866341][T24689] ip6gre1: entered promiscuous mode [ 745.873823][T24689] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 747.344629][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 752.236525][T24731] syzkaller0: entered promiscuous mode [ 752.242526][T24731] syzkaller0: entered allmulticast mode [ 752.290048][T24731] tipc: Enabled bearer , priority 0 [ 752.334053][T24742] bridge1: entered promiscuous mode [ 752.348439][T24742] bridge1: entered allmulticast mode [ 752.382435][T24730] tipc: Resetting bearer [ 752.407027][T24747] __nla_validate_parse: 2 callbacks suppressed [ 752.407049][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4517'. [ 752.479102][T24730] tipc: Disabling bearer [ 752.501763][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4518'. [ 752.515862][T24749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4516'. [ 752.557546][T24751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4518'. [ 752.575139][T24751] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4518'. [ 752.587458][T24749] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4516'. [ 752.614214][T24751] tc_dump_action: action bad kind [ 752.707420][T24762] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4521'. [ 752.723591][T24762] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4521'. [ 752.745621][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4522'. [ 752.807829][T24766] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 752.837237][T24766] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4523'. [ 752.938323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.946435][ C1] lec:lec_tx_timeout: lec0 [ 753.166186][T24790] SET target dimension over the limit! [ 753.427140][T24793] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 753.493143][T24793] bond2 (unregistering): Released all slaves [ 753.634768][T24787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.905566][T24806] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 754.300583][T24781] pimreg0: tun_chr_ioctl cmd 1074025681 [ 754.424718][T24831] syzkaller0: entered promiscuous mode [ 754.448307][T24831] syzkaller0: entered allmulticast mode [ 754.500786][T24831] netlink: 'syz.3.4538': attribute type 49 has an invalid length. [ 754.549740][T24831] netlink: 'syz.3.4538': attribute type 2 has an invalid length. [ 754.580887][T24831] netlink: 'syz.3.4538': attribute type 11 has an invalid length. [ 754.971255][T24861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.372862][T24856] syzkaller0: entered promiscuous mode [ 755.388788][T24856] syzkaller0: entered allmulticast mode [ 755.406634][T24888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.592834][T24896] syzkaller1: entered promiscuous mode [ 755.611417][T24896] syzkaller1: entered allmulticast mode [ 755.878839][T24902] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 756.301472][T24923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 758.198003][T24936] __nla_validate_parse: 9 callbacks suppressed [ 758.198025][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'. [ 758.348081][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4561'. [ 758.357333][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4561'. [ 758.367002][T24939] netlink: 'syz.2.4561': attribute type 18 has an invalid length. [ 758.664823][T24905] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 758.776007][T24931] team1: entered promiscuous mode [ 758.786997][T24931] team1: entered allmulticast mode [ 758.796984][T24931] 8021q: adding VLAN 0 to HW filter on device team1 [ 758.960904][T24951] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4563'. [ 758.972502][T24951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4563'. [ 759.029571][T24951] wg1 speed is unknown, defaulting to 1000 [ 759.308164][T24951] virt_wifi0 speed is unknown, defaulting to 1000 [ 759.573330][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4569'. [ 759.581382][T24982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4569'. [ 759.592059][T24980] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 759.765301][T24989] FAULT_INJECTION: forcing a failure. [ 759.765301][T24989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.788632][T24989] CPU: 0 UID: 0 PID: 24989 Comm: syz.0.4571 Not tainted syzkaller #0 PREEMPT(full) [ 759.788663][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 759.788678][T24989] Call Trace: [ 759.788686][T24989] [ 759.788696][T24989] dump_stack_lvl+0xe8/0x150 [ 759.788735][T24989] should_fail_ex+0x412/0x560 [ 759.788776][T24989] _copy_from_iter+0x1d3/0x1670 [ 759.788804][T24989] ? rcu_is_watching+0x15/0xb0 [ 759.788842][T24989] ? __pfx__copy_from_iter+0x10/0x10 [ 759.788875][T24989] ? netlink_sendmsg+0x650/0xb40 [ 759.788907][T24989] ? skb_put+0x11b/0x210 [ 759.788941][T24989] netlink_sendmsg+0x6c0/0xb40 [ 759.788984][T24989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.789020][T24989] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.789044][T24989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.789074][T24989] ____sys_sendmsg+0x972/0x9f0 [ 759.789118][T24989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.789162][T24989] ? import_iovec+0x73/0xa0 [ 759.789192][T24989] ___sys_sendmsg+0x2a5/0x360 [ 759.789233][T24989] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.789316][T24989] ? __fget_files+0x2a/0x420 [ 759.789335][T24989] ? __fget_files+0x3a0/0x420 [ 759.789367][T24989] __x64_sys_sendmsg+0x1bd/0x2a0 [ 759.789405][T24989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.789450][T24989] ? __pfx_ksys_write+0x10/0x10 [ 759.789488][T24989] do_syscall_64+0x14d/0xf80 [ 759.789514][T24989] ? trace_irq_disable+0x3b/0x150 [ 759.789534][T24989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.789556][T24989] ? clear_bhb_loop+0x40/0x90 [ 759.789583][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.789605][T24989] RIP: 0033:0x7fc90419c819 [ 759.789626][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.789645][T24989] RSP: 002b:00007fc904fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.789668][T24989] RAX: ffffffffffffffda RBX: 00007fc904415fa0 RCX: 00007fc90419c819 [ 759.789684][T24989] RDX: 0000000060040010 RSI: 0000200000000040 RDI: 0000000000000003 [ 759.789698][T24989] RBP: 00007fc904fce090 R08: 0000000000000000 R09: 0000000000000000 [ 759.789712][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.789724][T24989] R13: 00007fc904416038 R14: 00007fc904415fa0 R15: 00007ffc5f69e7b8 [ 759.789758][T24989] [ 760.182760][T24993] bond7: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 760.193718][T24993] bond7: entered promiscuous mode [ 760.199980][T24993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 760.488914][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4575'. [ 760.509414][T25011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4575'. [ 760.580057][T25016] netlink: 'syz.0.4580': attribute type 29 has an invalid length. [ 760.587996][T25016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4580'. [ 760.617500][T25016] netlink: 'syz.0.4580': attribute type 29 has an invalid length. [ 760.704974][T25021] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 760.743139][T25021] bond8: (slave geneve3): making interface the new active one [ 760.752395][T25021] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 760.761588][T16342] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.771831][T25021] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 760.781256][T16342] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.790463][T16342] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.800682][T16342] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.942415][T25027] syzkaller0: entered promiscuous mode [ 760.947948][T25027] syzkaller0: entered allmulticast mode [ 762.120821][T24967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.414942][T25041] netlink: 'syz.3.4586': attribute type 13 has an invalid length. [ 763.830763][T25038] geneve2: entered promiscuous mode [ 764.006367][T25051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.040095][T25051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.095174][T25049] tap0: tun_chr_ioctl cmd 1074025677 [ 764.101046][T25049] tap0: linktype set to 778 [ 764.148486][T25059] netlink: 'syz.3.4591': attribute type 8 has an invalid length. [ 764.385816][T25074] __nla_validate_parse: 1 callbacks suppressed [ 764.385927][T25074] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4595'. [ 764.428629][T25074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4595'. [ 764.476595][T25078] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4596'. [ 764.486306][T25078] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4596'. [ 771.030266][T25131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4601'. [ 771.140676][T25147] netlink: 'syz.0.4607': attribute type 30 has an invalid length. [ 771.232756][T25156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4602'. [ 771.411630][T25164] netlink: 'syz.0.4609': attribute type 1 has an invalid length. [ 771.477872][T25164] bond10: entered promiscuous mode [ 771.483906][T25164] 8021q: adding VLAN 0 to HW filter on device bond10 [ 771.491950][T25155] wg1 speed is unknown, defaulting to 1000 [ 771.823608][T25155] virt_wifi0 speed is unknown, defaulting to 1000 [ 771.971898][T25183] netlink: 'syz.1.4614': attribute type 33 has an invalid length. [ 772.007485][T25183] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4614'. [ 772.275027][T25189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.371825][T25200] ipvlan2: entered promiscuous mode [ 772.534585][T25215] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4621'. [ 772.789483][T25189] wg1 speed is unknown, defaulting to 1000 [ 772.896733][T25230] netlink: 'syz.2.4624': attribute type 11 has an invalid length. [ 773.086578][T25235] netlink: 'syz.3.4626': attribute type 62 has an invalid length. [ 773.159519][T25235] bond0: Error: Cannot enslave bond to itself. [ 773.197331][T25189] virt_wifi0 speed is unknown, defaulting to 1000 [ 773.356403][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'. [ 773.386139][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'. [ 774.090726][T25272] nbd: must specify a device to reconfigure [ 774.431852][T25297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4642'. [ 774.456348][T25301] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4644'. [ 774.544222][T25297] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 774.553482][T25301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 774.579392][T25301] openvswitch: netlink: Invalid VLAN frame [ 774.625154][T25305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.632612][T25305] IPv6: NLM_F_CREATE should be set when creating new route [ 774.640002][T25305] IPv6: NLM_F_CREATE should be set when creating new route [ 774.647278][T25305] IPv6: NLM_F_CREATE should be set when creating new route [ 774.657380][T25305] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4645'. [ 774.902929][T25319] netlink: 'syz.4.4647': attribute type 4 has an invalid length. [ 774.979329][T25325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.806992][T25358] netlink: 'syz.3.4656': attribute type 8 has an invalid length. [ 776.202428][T25368] netlink: 'syz.3.4659': attribute type 4 has an invalid length. [ 776.245627][T25370] IPVS: length: 84 != 8 [ 776.374050][T25375] syzkaller0: entered promiscuous mode [ 776.384779][T25375] syzkaller0: entered allmulticast mode [ 776.506581][T25384] __nla_validate_parse: 4 callbacks suppressed [ 776.506605][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.522785][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.533131][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.542392][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.551492][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.560650][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.574525][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.584194][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.593407][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.603726][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 776.634252][T25385] wg1 speed is unknown, defaulting to 1000 [ 776.671816][T25384] set match dimension is over the limit! [ 776.849296][T25385] virt_wifi0 speed is unknown, defaulting to 1000 [ 777.603747][T25420] openvswitch: netlink: IP tunnel dst address not specified [ 777.665085][T25421] netlink: 'syz.1.4672': attribute type 6 has an invalid length. [ 777.673277][T25421] netlink: 'syz.1.4672': attribute type 5 has an invalid length. [ 778.689482][T25352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.952063][T25437] netlink: 'syz.0.4678': attribute type 1 has an invalid length. [ 778.971005][T25435] netlink: 'syz.3.4677': attribute type 4 has an invalid length. [ 779.032684][T25437] bond11: entered promiscuous mode [ 779.038380][T25437] 8021q: adding VLAN 0 to HW filter on device bond11 [ 779.047486][T25435] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 779.059138][T25434] netlink: 'syz.3.4677': attribute type 1 has an invalid length. [ 779.352221][T25442] bond11: (slave bridge2): making interface the new active one [ 779.364922][T25442] bridge2: entered promiscuous mode [ 779.388134][T25442] bridge2: left promiscuous mode [ 779.551710][T25462] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 779.551710][T25462] 3UH5rBn [ 779.944879][T25487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.983269][T25487] netlink: 'syz.4.4685': attribute type 10 has an invalid length. [ 780.348111][T25475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.411306][T25478] wg1 speed is unknown, defaulting to 1000 [ 780.541868][T25508] xt_TCPMSS: Only works on TCP SYN packets [ 780.688057][T25478] virt_wifi0 speed is unknown, defaulting to 1000 [ 781.181708][T25520] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 781.309258][T25526] netlink: 'syz.2.4698': attribute type 1 has an invalid length. [ 781.365075][T25526] netlink: 'syz.2.4698': attribute type 4 has an invalid length. [ 781.465212][ T8559] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.482607][ T8559] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.515545][ T8559] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.599025][ T8559] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.616499][T25573] netlink: 'syz.2.4708': attribute type 2 has an invalid length. [ 788.627454][T25577] __nla_validate_parse: 124 callbacks suppressed [ 788.627475][T25577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4706'. [ 788.647918][T25576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4707'. [ 788.664481][T25573] !: entered promiscuous mode [ 788.675138][T25576] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 788.700316][T25579] netlink: 'syz.2.4708': attribute type 2 has an invalid length. [ 788.766940][T25577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4706'. [ 788.781437][T25577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4706'. [ 788.830554][T25579] !: left promiscuous mode [ 788.905103][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 789.038738][T25594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4715'. [ 789.047772][T25594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4715'. [ 789.066136][T25596] tipc: Failed to remove unknown binding: 66,0,0/2365265523:1664685481/1664685482 [ 789.087658][T25596] tipc: Failed to remove unknown binding: 66,0,0/2365265523:1664685481/1664685482 [ 789.173140][T25602] bond9: option miimon: invalid value (18446744073709551607) [ 789.186277][T25602] bond9: option miimon: allowed values 0 - 2147483647 [ 789.202666][T25602] bond9 (unregistering): Released all slaves [ 789.318938][T25603] : option downdelay: invalid value (18446744073709547007) [ 789.351881][T25603] : option downdelay: allowed values 0 - 2147483647 [ 789.372748][T25615] netlink: 'syz.2.4723': attribute type 1 has an invalid length. [ 789.383902][T25603]  (unregistering): Released all slaves [ 789.399428][T25616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4722'. [ 789.469789][T25615] bond9: entered promiscuous mode [ 789.475403][T25615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 789.552585][T25623] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4724'. [ 789.602744][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4725'. [ 789.683191][T25629] netlink: Conntrack attr has 4 unknown bytes [ 789.868796][T25638] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 789.989536][T25615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 790.014759][T25615] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 790.028687][T25615] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 790.044337][T25615] bond9: (slave ip6gre1): making interface the new active one [ 790.088331][T25615] ip6gre1: entered promiscuous mode [ 790.095780][T25615] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 790.332939][T25634] wg1 speed is unknown, defaulting to 1000 [ 790.342473][T25649] netlink: 'syz.1.4729': attribute type 4 has an invalid length. [ 790.876466][T25634] virt_wifi0 speed is unknown, defaulting to 1000 [ 791.272427][T25685] wg1 speed is unknown, defaulting to 1000 [ 791.596087][T25685] virt_wifi0 speed is unknown, defaulting to 1000 [ 791.606629][T25703] smc: removing ib device syz0 [ 794.045638][T25679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.250108][T25735] pim6reg: entered allmulticast mode [ 794.257908][T25735] pim6reg: left allmulticast mode [ 794.326942][T25739] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 794.541812][T25754] __nla_validate_parse: 9 callbacks suppressed [ 794.541833][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4752'. [ 794.688480][T25754] netlink: 'syz.3.4752': attribute type 4 has an invalid length. [ 794.877781][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4756'. [ 794.919452][T25763] netlink: 211280 bytes leftover after parsing attributes in process `syz.4.4756'. [ 795.008351][T25767] veth1_to_bond: entered allmulticast mode [ 795.014863][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4757'. [ 795.035934][T25767] veth1_to_bond (unregistering): left allmulticast mode [ 795.087423][T25773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4759'. [ 795.096779][T25773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4759'. [ 795.116294][T25773] dummy0: entered promiscuous mode [ 795.126417][T25773] bond0: entered promiscuous mode [ 795.132096][T25773] bond_slave_0: entered promiscuous mode [ 795.139862][T25773] bond_slave_1: entered promiscuous mode [ 795.147352][T25773] debugfs: 'hsr1' already exists in 'hsr' [ 795.153788][T25773] Cannot create hsr debugfs directory [ 795.350703][T25780] virt_wifi0 speed is unknown, defaulting to 1000 [ 795.505096][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4761'. [ 795.653089][T25804] netlink: 'syz.2.4768': attribute type 8 has an invalid length. [ 796.127332][T25831] bridge0: port 3(syz_tun) entered blocking state [ 796.134009][T25831] bridge0: port 3(syz_tun) entered forwarding state [ 796.146366][T25831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.156106][T25831] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.166039][T25831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.433294][T25820] virt_wifi0 speed is unknown, defaulting to 1000 [ 796.625055][T25851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.683501][T25851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.707576][T25851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 796.730867][T13876] lec:lec_start_xmit: lec0:No lecd attached [ 796.809584][T25855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.821584][T25855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.846261][T25857] bond0: Caught tx_queue_len zero misconfig [ 796.881125][T25851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.891861][T25851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 797.049906][T25851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.065176][T25851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 797.171527][T25855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.203100][T25855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.235542][T25870] netlink: 'syz.4.4786': attribute type 10 has an invalid length. [ 797.288102][T25851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.299119][T25851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 797.404688][T25855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.447776][T25873] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 797.466941][T25855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.504210][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4787'. [ 797.557748][T25873] team1: entered promiscuous mode [ 797.564632][T25873] team1: entered allmulticast mode [ 797.571065][T25873] 8021q: adding VLAN 0 to HW filter on device team1 [ 797.645619][T25855] netdevsim netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.656062][T25855] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.792409][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 797.801097][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 798.013030][T16342] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.037464][T16342] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 798.087396][ T8557] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.095947][ T8557] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 798.161896][ T8557] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.180083][ T8557] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.198001][ T8557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.218407][ T8557] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 798.308997][ T150] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.317536][ T150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.330092][ T150] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.340115][ T150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.423471][ T150] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.447996][ T150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.457807][T25897] virt_wifi0 speed is unknown, defaulting to 1000 [ 798.474665][T25901] virt_wifi0 speed is unknown, defaulting to 1000 [ 798.864263][T25918] netlink: 'syz.1.4800': attribute type 10 has an invalid length. [ 798.924738][T25918] veth0: entered promiscuous mode [ 799.026968][T25923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4801'. [ 799.079681][T25917] veth0: left promiscuous mode [ 799.193066][T25928] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 799.502698][T25940] team_slave_0: tun_chr_ioctl cmd 35108 [ 799.819924][T25962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4809'. [ 799.830283][T25963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4809'. [ 801.978308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 801.986427][ C1] lec:lec_tx_timeout: lec0 [ 808.100679][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4814'. [ 808.225669][T26010] openvswitch: netlink: EtherType 50a is less than min 600 [ 808.299349][T26016] tipc: Started in network mode [ 808.322068][T26016] tipc: Node identity ac14140f, cluster identity 4711 [ 808.348631][T26016] tipc: New replicast peer: 255.255.255.255 [ 808.369893][T26016] tipc: Enabled bearer , priority 26 [ 808.456001][T26029] syzkaller0: entered promiscuous mode [ 808.474110][T26029] syzkaller0: entered allmulticast mode [ 808.502854][T26029] netlink: 'syz.1.4821': attribute type 5 has an invalid length. [ 808.785817][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 808.844214][T26039] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 808.879545][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4827'. [ 808.925468][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4827'. [ 809.212318][T26066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4834'. [ 809.353188][T26071] netlink: 548 bytes leftover after parsing attributes in process `syz.2.4835'. [ 809.390579][T26074] syzkaller0: entered promiscuous mode [ 809.406006][T26074] syzkaller0: entered allmulticast mode [ 809.428017][ T796] tipc: Node number set to 2886997007 [ 809.437699][T26074] 0: reclassify loop, rule prio 0, protocol 800 [ 809.533848][T26079] virt_wifi0 speed is unknown, defaulting to 1000 [ 809.678033][T26090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4840'. [ 809.894886][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 809.995781][T26099] syzkaller1: entered promiscuous mode [ 810.013541][T26099] syzkaller1: entered allmulticast mode [ 810.107371][T26099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4844'. [ 810.122610][T26099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.596930][T26121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.955735][T26136] netlink: 'syz.2.4854': attribute type 1 has an invalid length. [ 810.973514][T26136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4854'. [ 811.390747][T26155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4860'. [ 811.404417][T26155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.609362][T26166] virt_wifi0 speed is unknown, defaulting to 1000 [ 812.011762][T26183] gtp0: entered promiscuous mode [ 812.016972][T26183] gtp0: entered allmulticast mode [ 812.034063][T26175] syzkaller1: entered promiscuous mode [ 812.063947][T26175] syzkaller1: entered allmulticast mode [ 812.144790][T26183] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 812.176053][T26183] bond11 (unregistering): Released all slaves [ 813.057121][T26195] hsr0: left allmulticast mode [ 813.064800][T26195] hsr_slave_0: left allmulticast mode [ 813.071104][T26195] hsr_slave_1: left allmulticast mode [ 813.305110][T26201] syzkaller0: entered promiscuous mode [ 813.314992][T26201] syzkaller0: entered allmulticast mode [ 813.405882][T16342] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.429911][T16342] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.588546][T16342] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.607424][T16342] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.624778][T16342] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.634843][T16342] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.658809][T16342] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.670067][T16342] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.932323][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4874'. [ 813.959377][T26236] syzkaller1: entered promiscuous mode [ 813.978239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.980177][T26236] syzkaller1: entered allmulticast mode [ 813.986487][ C1] lec:lec_tx_timeout: lec0 [ 814.035618][T26240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4878'. [ 814.045783][T26240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4878'. [ 814.055155][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 814.268740][T26251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4880'. [ 814.291794][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'. [ 814.396110][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4881'. [ 814.405604][T26257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4881'. [ 814.467736][T26262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4884'. [ 814.579876][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4884'. [ 814.765579][T26272] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 814.815744][T26272] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 816.068566][T26334] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 816.153577][T26328] netlink: 'syz.0.4902': attribute type 3 has an invalid length. [ 816.163045][T26328] openvswitch: netlink: Key type 29 is not supported [ 816.187907][T26337] openvswitch: netlink: Flow key attr not present in new flow. [ 816.197533][T26339] netlink: 'syz.2.4905': attribute type 14 has an invalid length. [ 816.212050][T26339] netlink: 'syz.2.4905': attribute type 3 has an invalid length. [ 817.126053][T26375] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 817.147121][T26375] bridge3: entered allmulticast mode [ 817.344177][T26379] virt_wifi0 speed is unknown, defaulting to 1000 [ 817.358637][T26391] bridge0: port 1(syz_tun) entered blocking state [ 817.365318][T26391] bridge0: port 1(syz_tun) entered disabled state [ 817.398862][T26391] syz_tun: entered promiscuous mode [ 824.221072][T26436] __nla_validate_parse: 18 callbacks suppressed [ 824.221095][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 824.375110][T26447] netlink: 'syz.4.4928': attribute type 1 has an invalid length. [ 824.761723][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4935'. [ 824.783555][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 824.795917][ T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 824.819156][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 824.837881][ T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 824.879671][T26458] syzkaller0: entered promiscuous mode [ 824.888936][T26458] syzkaller0: entered allmulticast mode [ 824.920854][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 824.931456][ T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 824.943706][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 824.953318][ T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 824.977052][T26481] FAULT_INJECTION: forcing a failure. [ 824.977052][T26481] name failslab, interval 1, probability 0, space 0, times 0 [ 824.992251][T26481] CPU: 1 UID: 0 PID: 26481 Comm: syz.2.4936 Not tainted syzkaller #0 PREEMPT(full) [ 824.992292][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 824.992313][T26481] Call Trace: [ 824.992321][T26481] [ 824.992331][T26481] dump_stack_lvl+0xe8/0x150 [ 824.992379][T26481] should_fail_ex+0x412/0x560 [ 824.992421][T26481] should_failslab+0xa8/0x100 [ 824.992454][T26481] __kmalloc_noprof+0xe8/0x760 [ 824.992477][T26481] ? __pfx_nsim_set_coalesce+0x10/0x10 [ 824.992505][T26481] ? ethnl_default_notify+0x1b2/0xbe0 [ 824.992532][T26481] ethnl_default_notify+0x1b2/0xbe0 [ 824.992554][T26481] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 824.992587][T26481] ? do_raw_spin_lock+0x12b/0x2f0 [ 824.992613][T26481] ? __pfx_ethnl_default_notify+0x10/0x10 [ 824.992653][T26481] ? mutex_is_locked+0x17/0x50 [ 824.992683][T26481] ? rtnl_is_locked+0x15/0x20 [ 824.992708][T26481] ethnl_default_set_doit+0x6ad/0xad0 [ 824.992743][T26481] genl_family_rcv_msg_doit+0x22a/0x330 [ 824.992770][T26481] ? __asan_memcpy+0x40/0x70 [ 824.992796][T26481] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 824.992836][T26481] ? bpf_lsm_capable+0x9/0x20 [ 824.992867][T26481] ? security_capable+0x7e/0x2c0 [ 824.992908][T26481] genl_rcv_msg+0x61c/0x7a0 [ 824.992940][T26481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.992963][T26481] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 824.993003][T26481] netlink_rcv_skb+0x232/0x4b0 [ 824.993036][T26481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.993063][T26481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.993111][T26481] ? down_read+0x272/0x2e0 [ 824.993140][T26481] ? genl_rcv+0xd/0x40 [ 824.993165][T26481] genl_rcv+0x28/0x40 [ 824.993186][T26481] netlink_unicast+0x75c/0x8e0 [ 824.993227][T26481] netlink_sendmsg+0x813/0xb40 [ 824.993275][T26481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.993310][T26481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 824.993334][T26481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 824.993370][T26481] ____sys_sendmsg+0x972/0x9f0 [ 824.993415][T26481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.993460][T26481] ? import_iovec+0x73/0xa0 [ 824.993491][T26481] ___sys_sendmsg+0x2a5/0x360 [ 824.993531][T26481] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.993606][T26481] ? __fget_files+0x2a/0x420 [ 824.993626][T26481] ? __fget_files+0x3a0/0x420 [ 824.993659][T26481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 824.993695][T26481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.993741][T26481] ? __pfx_ksys_write+0x10/0x10 [ 824.993781][T26481] do_syscall_64+0x14d/0xf80 [ 824.993808][T26481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.993831][T26481] ? clear_bhb_loop+0x40/0x90 [ 824.993858][T26481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.993881][T26481] RIP: 0033:0x7fbaf7b9c819 [ 824.993901][T26481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.993921][T26481] RSP: 002b:00007fbaf89d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.993944][T26481] RAX: ffffffffffffffda RBX: 00007fbaf7e16090 RCX: 00007fbaf7b9c819 [ 824.993961][T26481] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 824.993974][T26481] RBP: 00007fbaf89d7090 R08: 0000000000000000 R09: 0000000000000000 [ 824.993988][T26481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.994000][T26481] R13: 00007fbaf7e16128 R14: 00007fbaf7e16090 R15: 00007fff1c79b078 [ 824.994037][T26481] [ 825.498539][T26497] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4940'. [ 825.549795][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 825.673192][T26504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 825.772262][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4943'. [ 825.820596][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4943'. [ 825.845089][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4946'. [ 825.854600][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4946'. [ 825.878956][T26508] tipc: Resetting bearer [ 825.891661][T26515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4946'. [ 826.013676][T26525] tun0: tun_chr_ioctl cmd 35111 [ 826.023677][T26525] tun0: tun_chr_ioctl cmd 1074812117 [ 826.134504][T26525] virt_wifi0 speed is unknown, defaulting to 1000 [ 826.274273][T26547] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 826.903656][T26575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.948115][T26575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.038721][T26583] netlink: 'syz.2.4965': attribute type 1 has an invalid length. [ 827.229905][T26595] IPVS: stopping master sync thread 21144 ... [ 827.314807][T26600] IPv6: Can't replace route, no match found [ 827.459197][T26608] syzkaller0: entered promiscuous mode [ 827.464976][T26608] syzkaller0: entered allmulticast mode [ 827.687278][T26608] veth1_vlan: left allmulticast mode [ 827.711048][T26614] netlink: 'syz.0.4973': attribute type 1 has an invalid length. [ 827.730822][T26614] netlink: 'syz.0.4973': attribute type 3 has an invalid length. [ 827.749532][T26615] netlink: 'syz.0.4973': attribute type 1 has an invalid length. [ 827.765676][T26615] netlink: 'syz.0.4973': attribute type 3 has an invalid length. [ 827.886268][T16343] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 827.895571][T16343] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 827.904857][T16343] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 827.931857][T16343] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 828.366591][T26631] bond12: option resend_igmp: invalid value (511) [ 828.373439][T26631] bond12: option resend_igmp: allowed values 0 - 255 [ 828.392886][T26631] bond12 (unregistering): Released all slaves [ 828.401801][T26638] netlink: 'syz.1.4980': attribute type 10 has an invalid length. [ 828.552881][T26641] netlink: 'syz.2.4982': attribute type 10 has an invalid length. [ 828.575434][T26641] veth1_vlan: entered allmulticast mode [ 828.581673][T26641] veth1_vlan: left promiscuous mode [ 828.587987][T26641] team0: Device veth1_vlan failed to register rx_handler [ 829.010859][T26671] netlink: 'syz.1.4989': attribute type 16 has an invalid length. [ 829.020690][T26671] netlink: 'syz.1.4989': attribute type 17 has an invalid length. [ 829.034720][T26671] gre0: left allmulticast mode [ 829.140584][T26671] bridge0: port 1(syz_tun) entered blocking state [ 829.147229][T26671] bridge0: port 1(syz_tun) entered forwarding state [ 829.167506][T26671] bridge0: left promiscuous mode [ 829.175830][T26671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.185405][T26671] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.202088][T26671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.240583][T26677] __nla_validate_parse: 19 callbacks suppressed [ 829.240602][T26677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 829.289981][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 829.454947][T26685] syzkaller1: entered promiscuous mode [ 829.464304][T26693] netlink: 'syz.2.4995': attribute type 1 has an invalid length. [ 829.481430][T26685] syzkaller1: entered allmulticast mode [ 829.511025][T26693] sit1: entered promiscuous mode [ 829.650070][T26698] openvswitch: netlink: IP tunnel dst address not specified [ 829.713608][T26703] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4998'. [ 829.729545][T26703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4998'. [ 829.745764][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4998'. [ 837.557945][T26729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5000'. [ 837.665029][T26737] ip6erspan0: entered allmulticast mode [ 837.914059][T26754] syzkaller0: entered promiscuous mode [ 837.926460][T26754] syzkaller0: entered allmulticast mode [ 838.023517][T26760] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5007'. [ 838.151581][T26766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5010'. [ 838.165432][T26771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 838.333415][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5013'. [ 838.342899][T26778] openvswitch: netlink: Unknown nsh attribute 0 [ 838.490062][T26786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5015'. [ 838.524462][T26784] syzkaller0: entered promiscuous mode [ 838.530172][T26784] syzkaller0: entered allmulticast mode [ 838.544499][T26784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5014'. [ 838.870329][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5016'. [ 838.879538][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5016'. [ 839.203213][T26802] netlink: 'syz.1.5019': attribute type 5 has an invalid length. [ 839.212605][T26802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'. [ 840.121216][T26808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.178741][T26810] bond3: option mode: unable to set because the bond device has slaves [ 841.457539][T26784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.480804][T26823] netlink: 'syz.4.5025': attribute type 1 has an invalid length. [ 841.834131][T26855] netlink: 'syz.3.5032': attribute type 2 has an invalid length. [ 841.842216][T26855] netlink: 'syz.3.5032': attribute type 9 has an invalid length. [ 843.696738][T26853] virt_wifi0 speed is unknown, defaulting to 1000 [ 846.669195][T26884] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 846.716314][T26887] syzkaller1: entered promiscuous mode [ 846.729709][T26894] __nla_validate_parse: 19 callbacks suppressed [ 846.729729][T26894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5037'. [ 846.745421][T26887] syzkaller1: entered allmulticast mode [ 846.989758][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5041'. [ 847.300188][T26920] netlink: 'syz.3.5047': attribute type 4 has an invalid length. [ 847.308003][T26920] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5047'. [ 847.429723][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 847.454976][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 847.497325][T26931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5049'. [ 847.582996][T26940] 8021q: VLANs not supported on caif0 [ 847.669731][T26937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5051'. [ 847.683618][T26943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5052'. [ 847.813794][T26951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5053'. [ 847.952016][T26959] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5056'. [ 848.346257][T26975] sctp: [Deprecated]: syz.4.5061 (pid 26975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.346257][T26975] Use struct sctp_sack_info instead [ 848.653355][T26990] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 848.667143][T26990] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 848.687142][T26996] netlink: 'syz.1.5067': attribute type 4 has an invalid length. [ 848.701214][T26990] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 848.739748][T26997] netlink: 'syz.1.5067': attribute type 4 has an invalid length. [ 848.990203][T27005] netlink: 'syz.0.5069': attribute type 2 has an invalid length. [ 849.700271][T27055] bond4: option all_slaves_active: invalid value (5) [ 849.710831][T27055] bond4 (unregistering): Released all slaves [ 849.872068][T27060] virt_wifi0 speed is unknown, defaulting to 1000 [ 850.466524][T27074] virt_wifi0 speed is unknown, defaulting to 1000 [ 851.045939][T27094] virt_wifi0 speed is unknown, defaulting to 1000 [ 851.073019][T27096] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 852.401730][T27040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.623763][T27119] virt_wifi0 speed is unknown, defaulting to 1000 [ 853.163643][T27138] __nla_validate_parse: 7 callbacks suppressed [ 853.163664][T27138] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5099'. [ 853.426207][T27155] 8021q: adding VLAN 0 to HW filter on device bond11 [ 853.449783][T27159] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 853.549097][ T150] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 853.571091][T27169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5102'. [ 853.603736][T27169] netlink: 'syz.4.5102': attribute type 1 has an invalid length. [ 853.668340][ T8557] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 854.103527][T27189] netlink: 'syz.4.5107': attribute type 2 has an invalid length. [ 854.111797][T27189] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 860.057876][T13876] lec:lec_start_xmit: lec0:No lecd attached [ 860.125108][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 860.353247][T27248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5116'. [ 860.549506][T27262] veth0: entered promiscuous mode [ 860.763109][T27266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.774152][T27266] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.786081][T27266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 860.803219][T27259] veth0: left promiscuous mode [ 861.173434][T27290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5126'. [ 861.210449][T27290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5126'. [ 861.223515][T27289] x_tables: duplicate underflow at hook 1 [ 861.270554][T27290] netlink: 'syz.4.5126': attribute type 12 has an invalid length. [ 861.298481][T27290] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5126'. [ 861.322297][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5127'. [ 861.344479][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5127'. [ 861.366821][T27291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5127'. [ 861.697129][T27316] netlink: 'syz.2.5132': attribute type 1 has an invalid length. [ 861.745394][T27316] bond12: (slave geneve3): making interface the new active one [ 861.754316][T27316] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 861.763522][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 861.779451][T27316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5132'. [ 861.800052][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 861.828644][T27322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5134'. [ 861.838953][T27316] 8021q: adding VLAN 0 to HW filter on device bond12 [ 861.858918][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 861.879199][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 862.088835][T27336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.509146][ T8559] bond11: (slave ip6gretap1): link status up again after 0 ms [ 862.538896][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 862.586548][T27343] ip6gre2: entered promiscuous mode [ 862.606148][T27343] ip6gre2: entered allmulticast mode [ 862.616875][ T8559] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 862.625448][ T8559] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 862.638490][T12448] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 862.668385][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 862.790342][T16343] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 862.898280][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 862.928654][T12448] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 862.942099][T27362] netlink: 'syz.2.5143': attribute type 7 has an invalid length. [ 862.954756][T27362] netlink: 'syz.2.5143': attribute type 8 has an invalid length. [ 862.992630][T27357] netlink: 'syz.1.5142': attribute type 1 has an invalid length. [ 863.049993][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 863.063193][T27357] netlink: 'syz.1.5142': attribute type 1 has an invalid length. [ 863.083548][T27357] syzkaller0: entered promiscuous mode [ 863.091491][T27357] syzkaller0: entered allmulticast mode [ 863.218245][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 863.347666][ T5918] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 863.348566][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 863.483906][T16343] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 863.651633][T27382] udevd[27382]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 863.672885][T27382] udevd[27382]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 863.965492][T27395] xt_TCPMSS: Only works on TCP SYN packets [ 865.068250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 865.076544][ C1] lec:lec_tx_timeout: lec0 [ 865.782336][T27422] bond12: Unable to set up delay as MII monitoring is disabled [ 865.824416][T27422] bond12 (unregistering): Released all slaves [ 865.928321][T16345] net_ratelimit: 11 callbacks suppressed [ 865.928345][T16345] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 866.128705][T27428] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 866.145303][T27428] syzkaller1: linktype set to 805 [ 866.217772][T27434] __nla_validate_parse: 11 callbacks suppressed [ 866.217796][T27434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5167'. [ 866.245705][T16343] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 866.375320][T27437] pim6reg1: entered promiscuous mode [ 866.382144][T27437] pim6reg1: entered allmulticast mode [ 866.428698][T16345] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 866.562769][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 866.682147][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5169'. [ 866.702488][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 866.767347][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5172'. [ 866.794699][T27449] bond2 (unregistering): Released all slaves [ 866.871090][T27456] netlink: 'syz.0.5173': attribute type 83 has an invalid length. [ 866.937202][T27454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 866.958714][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 867.488278][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 867.902436][T27489] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5180'. [ 867.922166][T27489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5180'. [ 867.943041][T27489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5180'. [ 868.096153][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 868.162708][T27475] virt_wifi0 speed is unknown, defaulting to 1000 [ 868.184753][T27493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5176'. [ 868.417010][T27496] netlink: 'syz.2.5182': attribute type 12 has an invalid length. [ 868.439883][T27504] netlink: 'syz.2.5182': attribute type 1 has an invalid length. [ 868.447829][T27496] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5182'. [ 868.638545][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 868.758361][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 868.868436][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 869.305816][T27525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5188'. [ 869.448873][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 869.603572][T27538] sctp: [Deprecated]: syz.4.5192 (pid 27538) Use of int in maxseg socket option. [ 869.603572][T27538] Use struct sctp_assoc_value instead [ 870.131271][T27537] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 870.142949][T27537] syzkaller1: linktype set to 780 [ 870.265488][T27549] tipc: Resetting bearer [ 870.941209][ T8559] net_ratelimit: 6 callbacks suppressed [ 870.941233][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 871.169887][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 871.219338][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 871.378477][ T8557] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 871.553933][T27596] __nla_validate_parse: 4 callbacks suppressed [ 871.553954][T27596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5200'. [ 871.611169][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 871.694949][T27585] nbd4: detected capacity change from 0 to 63 [ 871.719769][T27598] batman_adv: batadv0: Adding interface: gretap1 [ 871.752790][T27589] block nbd4: NBD_DISCONNECT [ 871.760246][T27598] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.813587][T27589] block nbd4: Disconnected due to user request. [ 871.843804][T27589] block nbd4: shutting down sockets [ 871.884354][T27382] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.919363][T27598] batman_adv: batadv0: Interface activated: gretap1 [ 871.965246][T27382] Buffer I/O error on dev nbd4, logical block 0, async page read [ 872.121260][ T11] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 872.134362][ T11] Buffer I/O error on dev nbd4, logical block 1, async page read [ 872.143663][ T11] Buffer I/O error on dev nbd4, logical block 2, async page read [ 872.158637][ T11] Buffer I/O error on dev nbd4, logical block 3, async page read [ 872.168825][T27382] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.235706][T27382] Buffer I/O error on dev nbd4, logical block 0, async page read [ 872.298063][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 872.338584][T27382] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.406574][T27382] Buffer I/O error on dev nbd4, logical block 1, async page read [ 872.460970][T27382] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.482141][T16345] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 872.595973][T27382] Buffer I/O error on dev nbd4, logical block 2, async page read [ 872.615382][T27627] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5207'. [ 872.651728][T27382] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.700144][T27382] Buffer I/O error on dev nbd4, logical block 3, async page read [ 872.708029][T27382] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.738428][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 872.759225][T27382] Buffer I/O error on dev nbd4, logical block 0, async page read [ 872.790031][T27382] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.828852][T27382] Buffer I/O error on dev nbd4, logical block 1, async page read [ 872.836759][T27382] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.875331][T27382] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.888642][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 872.922657][T27382] ldm_validate_partition_table(): Disk read failed. [ 872.950124][T27382] Dev nbd4: unable to read RDB block 0 [ 872.956351][T27382] nbd4: unable to read partition table [ 872.995800][T27382] ldm_validate_partition_table(): Disk read failed. [ 873.002901][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 873.026111][T27382] Dev nbd4: unable to read RDB block 0 [ 873.045527][T27382] nbd4: unable to read partition table [ 873.088011][T27382] [ 873.090419][T27382] ====================================================== [ 873.097573][T27382] WARNING: possible circular locking dependency detected [ 873.104646][T27382] syzkaller #0 Not tainted [ 873.109099][T27382] ------------------------------------------------------ [ 873.116159][T27382] udevd/27382 is trying to acquire lock: [ 873.121912][T27382] ffff88801bae5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 873.132506][T27382] [ 873.132506][T27382] but task is already holding lock: [ 873.139917][T27382] ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 873.150261][T27382] [ 873.150261][T27382] which lock already depends on the new lock. [ 873.150261][T27382] [ 873.160702][T27382] [ 873.160702][T27382] the existing dependency chain (in reverse order) is: [ 873.169758][T27382] [ 873.169758][T27382] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 873.177908][T27382] down_write+0x96/0x200 [ 873.182786][T27382] kernfs_add_one+0x41/0x5c0 [ 873.187953][T27382] kernfs_create_dir_ns+0xde/0x130 [ 873.193681][T27382] internal_create_group+0x425/0x1180 [ 873.199627][T27382] cpuhp_invoke_callback+0x445/0x860 [ 873.205499][T27382] cpuhp_issue_call+0x430/0x7a0 [ 873.210941][T27382] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 873.217661][T27382] __cpuhp_setup_state+0x3f/0x60 [ 873.223276][T27382] do_one_initcall+0x250/0x8d0 [ 873.228665][T27382] do_initcall_level+0x104/0x190 [ 873.234305][T27382] do_initcalls+0x59/0xa0 [ 873.239208][T27382] kernel_init_freeable+0x2a6/0x3e0 [ 873.244987][T27382] kernel_init+0x1d/0x1d0 [ 873.249897][T27382] ret_from_fork+0x51e/0xb90 [ 873.255061][T27382] ret_from_fork_asm+0x1a/0x30 [ 873.260572][T27382] [ 873.260572][T27382] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 873.268452][T27382] [ 873.268452][T27382] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 873.276252][T27382] cpus_read_lock+0x42/0x160 [ 873.281413][T27382] static_key_slow_inc+0x12/0x30 [ 873.286918][T27382] setup_udp_tunnel_sock+0x2fd/0x510 [ 873.292780][T27382] l2tp_tunnel_register+0xda0/0x1460 [ 873.298625][T27382] pppol2tp_connect+0x8b7/0x17c0 [ 873.304126][T27382] __sys_connect+0x312/0x450 [ 873.309277][T27382] __x64_sys_connect+0x7a/0x90 [ 873.314699][T27382] do_syscall_64+0x14d/0xf80 [ 873.319954][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.326401][T27382] [ 873.326401][T27382] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 873.334657][T27382] lock_sock_nested+0x41/0x100 [ 873.340078][T27382] inet_shutdown+0x6a/0x390 [ 873.345671][T27382] nbd_mark_nsock_dead+0x2e9/0x560 [ 873.351346][T27382] recv_work+0x1c7f/0x1d90 [ 873.356375][T27382] process_scheduled_works+0xb6e/0x18c0 [ 873.362504][T27382] worker_thread+0xa53/0xfc0 [ 873.367674][T27382] kthread+0x388/0x470 [ 873.372314][T27382] ret_from_fork+0x51e/0xb90 [ 873.377479][T27382] ret_from_fork_asm+0x1a/0x30 [ 873.382817][T27382] [ 873.382817][T27382] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 873.390691][T27382] __mutex_lock+0x19f/0x1300 [ 873.395869][T27382] nbd_queue_rq+0x37b/0x1100 [ 873.401030][T27382] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 873.407133][T27382] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 873.414014][T27382] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 873.420563][T27382] blk_mq_run_hw_queue+0x348/0x4f0 [ 873.426236][T27382] blk_mq_dispatch_list+0xd16/0xe10 [ 873.431987][T27382] blk_mq_flush_plug_list+0x48d/0x570 [ 873.437918][T27382] __blk_flush_plug+0x3ed/0x4d0 [ 873.443333][T27382] __submit_bio+0x28d/0x580 [ 873.448412][T27382] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 873.454609][T27382] block_read_full_folio+0x599/0x830 [ 873.460471][T27382] filemap_read_folio+0x137/0x3b0 [ 873.466094][T27382] do_read_cache_folio+0x358/0x590 [ 873.471777][T27382] read_part_sector+0xb6/0x2b0 [ 873.477101][T27382] adfspart_check_ICS+0xa5/0xa40 [ 873.482607][T27382] bdev_disk_changed+0x7ba/0x1550 [ 873.488196][T27382] blkdev_get_whole+0x380/0x510 [ 873.493622][T27382] bdev_open+0x31e/0xd30 [ 873.498443][T27382] blkdev_open+0x470/0x610 [ 873.503435][T27382] do_dentry_open+0x785/0x14e0 [ 873.508771][T27382] vfs_open+0x3b/0x340 [ 873.513414][T27382] path_openat+0x2e08/0x3860 [ 873.518573][T27382] do_file_open+0x23e/0x4a0 [ 873.523657][T27382] do_sys_openat2+0x113/0x200 [ 873.529185][T27382] __x64_sys_openat+0x138/0x170 [ 873.534620][T27382] do_syscall_64+0x14d/0xf80 [ 873.539826][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.546284][T27382] [ 873.546284][T27382] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 873.553539][T27382] __mutex_lock+0x19f/0x1300 [ 873.558705][T27382] nbd_queue_rq+0xc6/0x1100 [ 873.563779][T27382] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 873.569896][T27382] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 873.576831][T27382] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 873.583387][T27382] blk_mq_run_hw_queue+0x348/0x4f0 [ 873.589063][T27382] blk_mq_dispatch_list+0xd16/0xe10 [ 873.594823][T27382] blk_mq_flush_plug_list+0x48d/0x570 [ 873.600761][T27382] __blk_flush_plug+0x3ed/0x4d0 [ 873.606174][T27382] __submit_bio+0x28d/0x580 [ 873.611234][T27382] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 873.617433][T27382] block_read_full_folio+0x599/0x830 [ 873.623294][T27382] filemap_read_folio+0x137/0x3b0 [ 873.628888][T27382] do_read_cache_folio+0x358/0x590 [ 873.634581][T27382] read_part_sector+0xb6/0x2b0 [ 873.639927][T27382] adfspart_check_ICS+0xa5/0xa40 [ 873.645434][T27382] bdev_disk_changed+0x7ba/0x1550 [ 873.651028][T27382] blkdev_get_whole+0x380/0x510 [ 873.656440][T27382] bdev_open+0x31e/0xd30 [ 873.661258][T27382] blkdev_open+0x470/0x610 [ 873.666251][T27382] do_dentry_open+0x785/0x14e0 [ 873.671581][T27382] vfs_open+0x3b/0x340 [ 873.676227][T27382] path_openat+0x2e08/0x3860 [ 873.681388][T27382] do_file_open+0x23e/0x4a0 [ 873.686447][T27382] do_sys_openat2+0x113/0x200 [ 873.691690][T27382] __x64_sys_openat+0x138/0x170 [ 873.697120][T27382] do_syscall_64+0x14d/0xf80 [ 873.702276][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.708742][T27382] [ 873.708742][T27382] -> #4 (set->srcu){.+.+}-{0:0}: [ 873.715928][T27382] __synchronize_srcu+0xca/0x300 [ 873.721438][T27382] elevator_switch+0x1e8/0x7a0 [ 873.726783][T27382] elevator_change+0x2cc/0x450 [ 873.732132][T27382] elevator_set_default+0x36c/0x430 [ 873.737917][T27382] blk_register_queue+0x366/0x430 [ 873.743522][T27382] __add_disk+0x677/0xd50 [ 873.748422][T27382] add_disk_fwnode+0xfb/0x480 [ 873.753680][T27382] nbd_dev_add+0x72c/0xb50 [ 873.758772][T27382] nbd_init+0x168/0x1f0 [ 873.763529][T27382] do_one_initcall+0x250/0x8d0 [ 873.768860][T27382] do_initcall_level+0x104/0x190 [ 873.774365][T27382] do_initcalls+0x59/0xa0 [ 873.779267][T27382] kernel_init_freeable+0x2a6/0x3e0 [ 873.785072][T27382] kernel_init+0x1d/0x1d0 [ 873.789970][T27382] ret_from_fork+0x51e/0xb90 [ 873.795212][T27382] ret_from_fork_asm+0x1a/0x30 [ 873.800558][T27382] [ 873.800558][T27382] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 873.808429][T27382] __mutex_lock+0x19f/0x1300 [ 873.813591][T27382] elevator_change+0x1b3/0x450 [ 873.819004][T27382] elevator_set_none+0xb5/0x140 [ 873.824421][T27382] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 873.830901][T27382] nbd_start_device+0x17f/0xb10 [ 873.836360][T27382] nbd_genl_connect+0x165b/0x1cf0 [ 873.841961][T27382] genl_family_rcv_msg_doit+0x22a/0x330 [ 873.848080][T27382] genl_rcv_msg+0x61c/0x7a0 [ 873.853143][T27382] netlink_rcv_skb+0x232/0x4b0 [ 873.858493][T27382] genl_rcv+0x28/0x40 [ 873.863031][T27382] netlink_unicast+0x75c/0x8e0 [ 873.868349][T27382] netlink_sendmsg+0x813/0xb40 [ 873.873680][T27382] ____sys_sendmsg+0x972/0x9f0 [ 873.879012][T27382] ___sys_sendmsg+0x2a5/0x360 [ 873.884257][T27382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 873.889760][T27382] do_syscall_64+0x14d/0xf80 [ 873.894927][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.901372][T27382] [ 873.901372][T27382] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 873.910029][T27382] blk_alloc_queue+0x546/0x680 [ 873.915350][T27382] __blk_mq_alloc_disk+0x197/0x390 [ 873.921029][T27382] nbd_dev_add+0x499/0xb50 [ 873.926005][T27382] nbd_init+0x168/0x1f0 [ 873.930713][T27382] do_one_initcall+0x250/0x8d0 [ 873.936214][T27382] do_initcall_level+0x104/0x190 [ 873.941722][T27382] do_initcalls+0x59/0xa0 [ 873.946617][T27382] kernel_init_freeable+0x2a6/0x3e0 [ 873.952377][T27382] kernel_init+0x1d/0x1d0 [ 873.957282][T27382] ret_from_fork+0x51e/0xb90 [ 873.962454][T27382] ret_from_fork_asm+0x1a/0x30 [ 873.967800][T27382] [ 873.967800][T27382] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 873.975044][T27382] fs_reclaim_acquire+0x71/0x100 [ 873.980549][T27382] kmem_cache_alloc_noprof+0x40/0x650 [ 873.986488][T27382] __kernfs_iattrs+0xdf/0x340 [ 873.991726][T27382] kernfs_iop_setattr+0xea/0x3f0 [ 873.997228][T27382] notify_change+0xc1a/0xf40 [ 874.002383][T27382] do_truncate+0x1c2/0x250 [ 874.007359][T27382] path_openat+0x2f89/0x3860 [ 874.012501][T27382] do_file_open+0x23e/0x4a0 [ 874.017568][T27382] do_sys_openat2+0x113/0x200 [ 874.022812][T27382] __x64_sys_openat+0x138/0x170 [ 874.028321][T27382] do_syscall_64+0x14d/0xf80 [ 874.033474][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.040074][T27382] [ 874.040074][T27382] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 874.048732][T27382] __lock_acquire+0x15a5/0x2cf0 [ 874.054167][T27382] lock_acquire+0xf0/0x2e0 [ 874.059150][T27382] down_write+0x96/0x200 [ 874.063971][T27382] kernfs_unlink_sibling+0x71/0x180 [ 874.069827][T27382] __kernfs_remove+0x3e7/0x660 [ 874.075155][T27382] kernfs_remove_by_name_ns+0xaf/0x130 [ 874.081173][T27382] nbd_config_put+0x1e6/0x580 [ 874.086415][T27382] nbd_release+0xfe/0x140 [ 874.091299][T27382] bdev_release+0x536/0x650 [ 874.096369][T27382] blkdev_release+0x15/0x20 [ 874.101436][T27382] __fput+0x44f/0xa70 [ 874.105989][T27382] fput_close_sync+0x11f/0x240 [ 874.111314][T27382] __x64_sys_close+0x7e/0x110 [ 874.116579][T27382] do_syscall_64+0x14d/0xf80 [ 874.121738][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.128191][T27382] [ 874.128191][T27382] other info that might help us debug this: [ 874.128191][T27382] [ 874.138448][T27382] Chain exists of: [ 874.138448][T27382] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 874.138448][T27382] [ 874.152940][T27382] Possible unsafe locking scenario: [ 874.152940][T27382] [ 874.160424][T27382] CPU0 CPU1 [ 874.165842][T27382] ---- ---- [ 874.171231][T27382] lock(&root->kernfs_rwsem); [ 874.176041][T27382] lock(cpuhp_state_mutex); [ 874.183185][T27382] lock(&root->kernfs_rwsem); [ 874.190504][T27382] lock(&root->kernfs_iattr_rwsem); [ 874.195827][T27382] [ 874.195827][T27382] *** DEADLOCK *** [ 874.195827][T27382] [ 874.203994][T27382] 3 locks held by udevd/27382: [ 874.208785][T27382] #0: ffff8880266fd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 874.218419][T27382] #1: ffff8880267caa78 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 874.229189][T27382] #2: ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 874.239952][T27382] [ 874.239952][T27382] stack backtrace: [ 874.245891][T27382] CPU: 0 UID: 0 PID: 27382 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 874.245914][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.245925][T27382] Call Trace: [ 874.245932][T27382] [ 874.245941][T27382] dump_stack_lvl+0xe8/0x150 [ 874.245970][T27382] print_circular_bug+0x2e1/0x300 [ 874.246001][T27382] check_noncircular+0x12e/0x150 [ 874.246030][T27382] __lock_acquire+0x15a5/0x2cf0 [ 874.246057][T27382] ? __lock_acquire+0x6b5/0x2cf0 [ 874.246086][T27382] lock_acquire+0xf0/0x2e0 [ 874.246107][T27382] ? kernfs_unlink_sibling+0x71/0x180 [ 874.246131][T27382] down_write+0x96/0x200 [ 874.246154][T27382] ? kernfs_unlink_sibling+0x71/0x180 [ 874.246173][T27382] ? __pfx_down_write+0x10/0x10 [ 874.246196][T27382] ? kernfs_root+0x1c/0x230 [ 874.246221][T27382] ? kernfs_root+0x1c/0x230 [ 874.246247][T27382] ? kernfs_root+0x1ea/0x230 [ 874.246273][T27382] kernfs_unlink_sibling+0x71/0x180 [ 874.246293][T27382] __kernfs_remove+0x3e7/0x660 [ 874.246312][T27382] kernfs_remove_by_name_ns+0xaf/0x130 [ 874.246332][T27382] nbd_config_put+0x1e6/0x580 [ 874.246358][T27382] nbd_release+0xfe/0x140 [ 874.246379][T27382] ? __pfx_nbd_release+0x10/0x10 [ 874.246400][T27382] bdev_release+0x536/0x650 [ 874.246426][T27382] ? __pfx_blkdev_release+0x10/0x10 [ 874.246451][T27382] blkdev_release+0x15/0x20 [ 874.246475][T27382] __fput+0x44f/0xa70 [ 874.246505][T27382] fput_close_sync+0x11f/0x240 [ 874.246532][T27382] ? __pfx_fput_close_sync+0x10/0x10 [ 874.246564][T27382] __x64_sys_close+0x7e/0x110 [ 874.246580][T27382] do_syscall_64+0x14d/0xf80 [ 874.246601][T27382] ? trace_irq_disable+0x3b/0x150 [ 874.246616][T27382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.246633][T27382] ? clear_bhb_loop+0x40/0x90 [ 874.246653][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.246670][T27382] RIP: 0033:0x7f218b0a7407 [ 874.246686][T27382] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 874.246708][T27382] RSP: 002b:00007fff1c9d7020 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 874.246726][T27382] RAX: ffffffffffffffda RBX: 00007f218b841880 RCX: 00007f218b0a7407 [ 874.246740][T27382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 874.246750][T27382] RBP: 00007f218b8416e8 R08: 0000000000000000 R09: 0000000000000000 [ 874.246761][T27382] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 874.246771][T27382] R13: 000055faffbe3190 R14: 0000000000000008 R15: 000055faffd313d0 [ 874.246790][T27382] [ 874.510725][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 874.698319][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 875.948920][ T36] net_ratelimit: 12 callbacks suppressed [ 875.948946][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.068637][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.178387][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.288322][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.398646][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.508345][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.619594][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.728669][T27190] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.838330][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 876.942774][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 876.950862][ C1] lec:lec_tx_timeout: lec0 [ 876.958563][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.028766][ T8559] net_ratelimit: 36 callbacks suppressed [ 881.028791][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.148621][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.258371][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.368349][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.478656][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.588325][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.698420][ T93] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.808641][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 881.918358][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 882.028306][ T8559] bond11: (slave ip6gretap1): failed to get link speed/duplex