last executing test programs: 6.297834801s ago: executing program 3 (id=7970): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvfrom$inet6(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x10140, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xffffffffffffff9f, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fcdb3b0000004e0000004102c76fecd225584cec9e0c605eaf1a828854d5156cb1d30440e134a50a075e4c19766d0a9d57fc56a5274ab83a1880c4e5"], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000340)=0xd, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="39cba3b5e5d5d8", @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x1dc, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x5}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x403}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0x2, 0x7, 0x0, 0x7, 0x3, 0x5}}, {0xe, 0x2, [0x3, 0x2d5, 0x5, 0xaa58, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x2, 0x7, 0x2, 0x6, 0x350c, 0x4}}, {0xc, 0x2, [0x0, 0x2, 0x387, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x5, 0x44d, 0x5, 0x2, 0x6, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x1000, 0xfff9, 0x5, 0x8001, 0x4]}}, {{0x1c, 0x1, {0x3, 0x3, 0x8000, 0x570a, 0x2, 0x348, 0x4, 0x1}}, {0x6, 0x2, [0x365]}}, {{0x1c, 0x1, {0x9, 0x9, 0x4, 0x6e, 0x3, 0x7, 0xfff}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x1, 0x2, 0x3, 0x0, 0xffffffff, 0xa, 0xd}}, {0x1e, 0x2, [0x30, 0x5, 0x17, 0x8, 0x6, 0x5, 0x9, 0x1, 0x4c7b, 0x2, 0xd, 0x56a, 0x6]}}, {{0x1c, 0x1, {0xfb, 0x0, 0x7, 0x14, 0x0, 0x5, 0x8f75, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xdb, 0xff, 0x0, 0x7fff, 0x3, 0xffffff2a, 0x2, 0x8}}, {0x14, 0x2, [0x1, 0xb, 0x4, 0xff, 0x4, 0x9, 0x8, 0x9]}}, {{0x1c, 0x1, {0x1, 0xe, 0x81, 0xfffffffd, 0x0, 0x6, 0x40, 0x3}}, {0xa, 0x2, [0x5, 0x1002, 0xa6e]}}, {{0xfffffffffffffe68, 0x1, {0x8, 0xfc, 0xc1, 0xffff, 0x0, 0x1, 0x101, 0x4}}, {0xc, 0x2, [0xc800, 0x8, 0x1eb9, 0x5020]}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) 6.22711662s ago: executing program 4 (id=7972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0xee, &(0x7f0000000180)=""/238, 0x0, 0x8}, 0x94) 6.08661301s ago: executing program 4 (id=7974): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x200000, 0x2, 0x0, 0x0, 0x98, 0x100}, 0x20) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601edffffff00000000000000000005000100"], 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000027c0)=""/4111, 0x100f}], 0x3}, 0x2}], 0x1, 0x20, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000400)={r8}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={r8}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) 5.861202985s ago: executing program 3 (id=7976): r0 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}}}}]}, 0x4c}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b8aca04}, @TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x58}}, 0x4040) 5.664740755s ago: executing program 1 (id=7978): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000740)) unshare(0x4020000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000017c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, r1, 0x3, 0x5}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000003f00)={{r1, &(0x7f00000007c0)='memory.events\x00', 0x1, &(0x7f0000000800)={@_ha_fsid={[0x5, 0x2]}, {0x2, 0x0, 0x8, 0xc0}}, 0x800, &(0x7f0000000840), &(0x7f0000000880)=0x1ff}, 0x7, &(0x7f0000003e00)=[{0x3, 0x4, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="ee618c10f9b3146f9f852a23972338c89513cd914d7200b17e4830bd92af5e97d3977ef092f4a625", 0x28, 0x2}, {0x2, 0x7bf, &(0x7f0000000940)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000980)="fc989c38b40e6e0cbb9e76c98f8126645f83c5fdb7e973a00dfdfff6ba3527bacf8ec2409537343e13558a85f4f3e6c92c62e11890c8870d598247cd59abff85d033c0144edbbb2c9d58252b7e1eea8a5017a958e5e0c57d76b6f17998bc837b271fa4cb6b7b08c94172559c89bf91df9cc232d1131449761ffdf12cc6c254a7b3bacbe33863c95983c6605e4ffb722b18cb1ae7aed60ebd17759c610666f2700db92d84260451e2c24ce69949c23ec9880abc17487743d125ec5fa9921c615e883d4692bc0f43fc92c3be22d2cf4e39b6e84494ba51", 0xd6, 0x32}, {0x1, 0x3, &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)="83dc45e77f749f041d4787d04f6c692c121708785bb4d6926957d103f30eee1dda871490c4fa5bf47d134860a2", 0x2d, 0x8}, {0x3, 0x400, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="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", 0xff, 0x2}, {0x3, 0x89, &(0x7f0000000c40)='#\x00', &(0x7f0000000c80)="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", 0x1000, 0x39}, {0x3, 0xf20, &(0x7f0000001c80)='}[\\\x00', &(0x7f0000001cc0)="199ec598a30e254893f8bc9703ff09f67ef223e630d6294fc1cdeca06b781014de9c0890cfea9cfbbf0d71879d5f84d0fc0e500385478bdb9ba2cbbc92386654474f6431dc9b09fe31bfae630dd3f1997f5c8efb4f1fec8c9f18e5d511b8bc12a10cc53b0fb1836e4c68d363139ba9a4c02fa30ceea46db9b2541eb3c3c1df711d65270e03c26ff0c8da593b", 0x8c, 0x28}, {0x2, 0x2799, &(0x7f0000001d80)='f#@\\+\x00', &(0x7f0000002e00)="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", 0x1000}]}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="1b00000000000000000000000000020000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000002305600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000500"/28], 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004000)={0x0, 0x4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004080)={0x18, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d9e25bf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x49f2515a77b891a2, 0x3, 0x3, 0x80, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=[r5, r6, r7, r8, r9, r10, r11, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) bind$llc(r1, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@generic={0x3, 0x6, 0x5, 0xb5d2, 0x3b4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 5.611447349s ago: executing program 3 (id=7979): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x12a, 0x2a, [@cf={0x4, 0x6, {0xdf, 0x6a, 0xb8, 0x4}}, @cf={0x4, 0x6, {0x2, 0x8, 0x5, 0x5}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x10, {0xe96, "1cd57758147d", @short="d5757792e5248b1f"}}, @ibss={0x6, 0x2, 0x157}, @random={0x1, 0xe7, "372cda92b1ee79393e9f8dff080f7aaa81c9a1280e7af543032b68d9799c73550908c0b3decef15d9c0f6dd5516b83652e0098ba972e9609cfadeb954e39b2f7ade8d0d8e575ef04576b2e7efe5d61965fb6eab957ad94a5a8541fb2808e3173257bc5a2500f84f7404103d425476961cb5129ec1b6340ee4c052a5a12f457decdd253c2f03fa45f2d071b5a7e36cf6a4b9f5a0e11aa6736ae8a3e97e5cec0d03fc019bcb4f56d84f612f48c1eb97d6421c802d2962ebb514649010b6af30b73bf06be0d3fc3633a171e24acaddaf727bb4239cc993a65ac9f65f898827d3cd7021b2d7ae31f41"}, @dsss={0x3, 0x1, 0x74}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf8, 0x8}}, @dsss={0x3, 0x1, 0x1}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@dsss={0x3, 0x1, 0xb6}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates={0x1, 0x5, [{0x48, 0x1}, {0x60}, {0x48}, {0x24, 0x1}, {0x2, 0x1}]}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4004884) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x20, 0x700, 0x400, 0x387, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x64, 0x0, 0xfa, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp={0x44, 0x10, 0x78, 0x0, 0x6, [0x95, 0xd, 0x5]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'gretap0\x00', &(0x7f0000000c40)={'syztnl0\x00', 0x0, 0x0, 0x80, 0xd937, 0x1, {{0x2d, 0x4, 0x3, 0x2, 0xb4, 0x64, 0x0, 0xb, 0x2f, 0x0, @local, @empty, {[@cipso={0x86, 0x3a, 0x3, [{0x2, 0xd, "b97f5b1d092da1aa027ebc"}, {0x2, 0x4, 'yA'}, {0x6, 0xc, "369ca4b47b77420b1089"}, {0x7, 0x11, "7085bd12f79e94567a1aab2f7cd18f"}, {0x7, 0x6, "8daf2432"}]}, @cipso={0x86, 0x41, 0x1, [{0x6, 0x8, "414a9192dc13"}, {0x2, 0x9, "6fadb2590026ec"}, {0x5, 0x4, "a870"}, {0x2, 0x6, "2bd625f1"}, {0x5, 0x9, "7574d1d7fafdd3"}, {0x6, 0x5, "c9016f"}, {0x6, 0x4, "9499"}, {0x0, 0xe, "eadbc5f56367c31a9d6b4456"}]}, @rr={0x7, 0x1b, 0xc9, [@remote, @rand_addr=0x64010101, @loopback, @private=0xa010102, @multicast2, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x36, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e00)={'ip6_vti0\x00', &(0x7f0000000d80)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4b, 0x6, 0x2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0xffff, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x3, 0x7, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10, 0x10, 0xff, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f00)={0x0, @initdev, @local}, &(0x7f0000000f40)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x3, 0xde5, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x20, 0x4, 0x1000}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001240)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001040)={0x1a0, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}}, 0x8800) r15 = socket$igmp(0x2, 0x3, 0x2) r16 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) tee(r15, r16, 0xf8, 0x8) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000001280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r17, 0x89f0, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'syztnl0\x00', r18, 0x29, 0x3, 0x7, 0x396, 0x2, @local, @mcast2, 0x20, 0x7800, 0x4, 0x2}}) 5.414642921s ago: executing program 1 (id=7980): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140d, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = getpid() r6 = gettid() sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@RTM_GETNSID={0x44, 0x5a, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000002c0)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000400)={r9, 0x8}, 0x8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000000480)=0xc1d1) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000004c0)="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", 0xfc, 0x40, &(0x7f00000005c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) listen(r1, 0x80000001) bind$netlink(r8, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e20, 0x6b, @mcast1, 0x3}}, 0x0, 0x0, 0x1, 0x0, "5eb495a73e100a680c08606b56e546d93779d3030a3a2b547a7d7548984533beacdb635fa87863dbe0090dda19cd72c74047e49b671c98dbb9ae098ad579f5c55df8ff173ffc2d02c0f6ab613bf9812c"}, 0xd8) recvfrom(r8, &(0x7f0000000840)=""/76, 0x4c, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000940)={0xffffffffffffffff, 0x1, 0x0, 0x5}) bind$inet6(r12, &(0x7f0000000980)={0xa, 0x4e24, 0x80, @empty, 0x5}, 0x1c) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000009c0)={'syz_tun\x00', 0x400}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a00)={'veth0_to_hsr\x00', 0x2000}) 5.35914351s ago: executing program 1 (id=7982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000580)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x19}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="240000001200010100000000fe05000000000000080000ffff0000000800e88004004380"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r9, r3, 0x4, r5}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xaa}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6010}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xaa}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x20000004}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6010}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xcc}}, 0x0) 2.894847973s ago: executing program 1 (id=7991): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xa, 0x4, @private2, @loopback, 0x700, 0x10, 0x9, 0x2}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804040000000060000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 2.85877177s ago: executing program 4 (id=7994): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="2800000012000100"/17], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x802) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r4, 0x5170c560dce29b81, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x87) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) 2.836888563s ago: executing program 3 (id=7995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x6, 0x9, 0x8, 0x571c29c6, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x3ff, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@local, 0x4d3, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in=@loopback, 0x4d4, 0x2b}, 0x0, @in=@remote, 0x3505}, {{@in=@remote, 0x0, 0x2b}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x5, 0x0, 0xfc, 0x1, 0x40000}]}]}, 0x23c}}, 0x4080) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x3, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5040a5}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xab, 0xa8, @random="5e7a4dfc4aaa2e8e1e12e00835dd823797a31c7db64c1ecba2793521c01f3a0d13d07d30123d7389fd44b73d48c67809a0f98690067db17c82fec474a96e8de2eb1ba8846118c6477019a65f49a8f81cff18bbfb7357c5ab5cb016856b9e752da5ef13bd6fbdf78a65d5d1d56e4ca467f733335fb7b8b447c771562e1ba371297cca063c08a355e599970d037b9e4a5c4f66e7e116e3be32d3c2a6f2909c37acb1f87ac174e411"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x200}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x37b8b1f6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x4000005) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x15a8, 0xd0, 0x0, 0x12e0, 0x0, 0xd0, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x5, {0x31b}}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1608) 2.006711924s ago: executing program 1 (id=7997): sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000080)=@ax25={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)="016814c7c905159e01b8fcae04c75cb67b5ac0cd7801215686124257dbae0422f7fd1c49e984cdafdbf5cfcfb8e417783ca43cc0dd454d65af9645a1ef9aa34ebce9c19907f242e4ebcd7ad981561c43da66f3b6371ceaf5710f21655205d8ce34682e14ac5f14815e93b45c97c621b0bce49565193b2b5dc88e1677f0aca7b3bfa8f6c9db589cba473300503d719909b3f68d9d99a9be6c6a629f18f82914e3cef8266eb2ac473b02c7ee1543c93c6637487289326e75ca5b78972478c73a68a4f5f835cc698e649c9c8745f3df8d4d8f2eb583a752b5bd6658a2b4a6127368070e3e", 0xe3}, {&(0x7f0000000380)="144ae5ba0638319d41a92754d632a28bfed35e9b06c65ac98040f6a2add7e90cf288dcd865b11889cea1ce5b0ee1370a56e46f3932a361c7f646ad9984d89b73fe7801cb9911d906d9c160beb5d5a340bb693a317680538d7532105d4cb0aa85f7aafbe817a1ee5d699da228e415c287ffa1a1a902b5f6515dbda24d8c5576b80716aef9c337244dc6893e43ba5c6f16137d52b968cee8247a9d45c85a4c2578c6af5acb5bcd43b7", 0xa8}, {&(0x7f0000000440)="4f3a9c77123e5796e778a2315f9ca364db2eaf9b3e55c1fe40322358dd71d46f0c3950aef79b9ab50bf1e23170f096cea5008026351642457350f7841d632163640fd4954374cae186db49b96597d8036cf564ed82b1191b61d8bf80d80ac2c5d46c087d6d", 0x65}, {&(0x7f0000000500)="edf2b26218ce095f28b01c1a2637ec1622be1560a682896c9effde380b53d21284ebf3681c4edde7ed03c8cec5de3f5c3b8a8609ef2ff626dbb98b74b1c5d2ebad80e8d0a48b1c0a1e2ed8bd1e6865a9e799e610afaef1f69483", 0x5a}, {&(0x7f0000000580)="c25cf7017ab4586a416b05b7efad1bd72601", 0x12}], 0x5}}], 0x1, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r0 = socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a428122ab40400602000001400350073793f5f74756e00000000000000000008", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000070290780a010100ac1414aa11ff10780000000033bcbdfee5029b"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660000070290780a010100ac1414aa11ff10780000000033bcbdfee5029b"], 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x4000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$unix(r1, &(0x7f0000000b40)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000040)}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000800)=""/129, 0x81}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000980)=""/46, 0x2e}], 0x5, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) unshare(0x6a040000) (async) unshare(0x6a040000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000e0ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 1.941641783s ago: executing program 3 (id=8000): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket(0x18, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x7, r3, 0x1, 0x3, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xbe2, 0xd, 0x7}) setsockopt$inet_opts(r5, 0x0, 0x12, &(0x7f0000000240)="c4a2eefb04c5b891f8d082c94668685fa6fb75fd34d74ae181581be5c8cf8646203d58e368fa209dd62d02fbb2ff69d0fbc45463fc81bbd2ed72c65de3055dadd3e2775f254dc3f44c39f147f356455cf5a5415cee31c47e7a45b9882e492e4022556a198985069227e5521f29361f4d5aa1ee02376e4bebebf15d274c901377db96bd9a5d696624a92e961c74dc6aabcdaf06ed2e379a31d7e80b46c41a0d985a21044b6bb55439ec3f97fdb76d024d03b78ffcabf33ea29b5edce26deecc29ec395fb63d9b1068efa7a61bbb539f4bcbe3dd25d06eb81491623e74cec226850d92c18884bf811a2389cc413a1e60900e5d", 0xf2) socketpair(0x21, 0x80000, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x400) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000a80)={&(0x7f0000000000)=0x4, 0x4, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a40)}) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000580)="8907040400", 0x5) close(r2) connect$inet(r7, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 1.938331395s ago: executing program 0 (id=8002): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b119e000000000085100000020000008500000000000000a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.9305429s ago: executing program 2 (id=8003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRESDEC=r3, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) listen(0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @local, 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000000)='b', 0x1}], 0x1}}], 0x2, 0x40090) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.927321431s ago: executing program 0 (id=8004): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x4000}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x48, r4, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8008804}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x3e8}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8054) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x2d, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xb, 0x0, @opaque="aeda3d"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.868119226s ago: executing program 2 (id=8005): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, 0x0}}, 0x10) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{0x0, 0xdd12}], 0x1}, 0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r7, 0xffffff7d, 0x2a3c, 0xe}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x8000, 0x8, 0xe5, r7}, 0x10) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) 1.317354339s ago: executing program 4 (id=8006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000e00)={{r3}, r5, 0x2, @inherit={0x58, &(0x7f0000003440)=ANY=[@ANYBLOB="00000000000000000200000000000000010000000000000085740000000000002000000000000000000000000000000009000000000068b94e270c57a4c05748d93deb8f4000000100000000000000bcdd00000000000007000000000000000b00ae03e4642b00"]}, @devid}) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) bind$phonet(r6, &(0x7f0000003180)={0x23, 0x6, 0xfd, 0x8}, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002180)={{r1}, r5, 0xa, @unused=[0x1000, 0x3, 0x2, 0x1ff], @name="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"}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/40, 0x28}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/166, 0xa6}, {&(0x7f0000000880)=""/169, 0xa9}], 0xa, &(0x7f0000000a00)=""/75, 0x4b}}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/173, 0xad}, {&(0x7f0000000bc0)=""/31, 0x1f}, {&(0x7f0000000c00)=""/35, 0x23}, {&(0x7f0000000c40)=""/226, 0xe2}], 0x4, &(0x7f0000000d80)=""/198, 0xc6}, 0x8}, {{&(0x7f0000000e80)=@x25, 0x80, &(0x7f0000002000)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/253, 0xfd}], 0x2}, 0x8}], 0x4, 0x20, &(0x7f0000002140)={0x77359400}) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003300)={0x0, r1}, 0x8) ioctl$XFS_IOC_FSGEOMETRY(r8, 0x8100587e, &(0x7f0000003340)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000032c0)={r2, &(0x7f00000031c0)='\x00', 0x1030c1, &(0x7f0000003200)={@align=0x4, {0x7, 0x5, 0x2f44, 0x1}}, 0x800, &(0x7f0000003240)={@_ha_fsid}, &(0x7f0000003280)=0x9a}) 1.225390672s ago: executing program 2 (id=8007): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) (async) close(0x3) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) (async) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.175147234s ago: executing program 0 (id=8008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0x70bd2b, 0x104, {{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x64, 0x192, 0x2, 0xffff, 0x9, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, 0x0}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}], 0x5}}], 0x1, 0x2040000, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r1, r0, r0, r1, r1, r1, r0], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) r7 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0600060004000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000000ffffffff00000000010000809c7630000100000095000071db0eb9ac8486678307cc23967e0000000000185500000800"/62], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r6, 0x9, &(0x7f0000000b40)=[r0, r0, r1, r1, r1], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0x1}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x9874, 0x4, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r11], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', r10, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) 1.025042603s ago: executing program 2 (id=8009): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000006c0)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d00000000000100000000000000019a97fdb8026c3ce0000000000000006574683a73797a6b616c6c657230ad6558249bdea9d573e08d95acc29631a66f6f2f95d84fb591d4c94c21802601f70fc57878af7e62"], 0x38}, 0x1, 0x0, 0x0, 0x20004094}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$key(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)={0x2, 0x14, 0xff, 0x0, 0xb, 0x0, 0x70bf2a, 0x25dfdbff, [@sadb_ident={0x2, 0xa, 0x2, 0x0, 0x68}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x49d8}, @in={0x2, 0x4e20, @private=0xa010102}}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="185b000010000000000000000000000008e20700c80000001096d8ff0800000005300068010000001800000012000000000000004f00000085100000f9ffc7ff"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x8e53, r6, 0xa, &(0x7f0000000c00)=[r5, r8, 0xffffffffffffffff, 0xffffffffffffffff, r8], &(0x7f0000000c40)=[{0x4, 0x5, 0xc}, {0x5, 0x1, 0xc, 0x366e221e17c7f84b}, {0x4, 0x3, 0xf, 0x5}, {0x0, 0x3, 0xc, 0xb}, {0x3, 0x5, 0xc, 0x4}, {0x4, 0x1, 0x4}, {0x4, 0x1, 0x8, 0xa}, {0x4, 0x3, 0x7, 0x7}, {0x3, 0x1, 0x8, 0xa}, {0x5, 0x2, 0x5, 0x7}], 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000001500000000001000000000", @ANYRES32=0x0, @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r7, 0x0, 0x3, 0x3) vmsplice(r12, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r11, &(0x7f00000002c0)="8ef82f", 0x3) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000880)=0x5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000580)=""/221, &(0x7f0000000680)=0xdd) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 834.976656ms ago: executing program 2 (id=8010): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 32) listen(r5, 0xfffffffc) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) (async, rerun: 64) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x4443fde33fec5456, 0x0) (async, rerun: 32) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 650.754499ms ago: executing program 2 (id=8011): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0xb, 0x5, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0xfffffffd, 0x0, 0x80c, 0x8, 0x0, 0x43b4, 0x40000002]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000920000442f00fe800000000000000000000000000013ff0100000000000000000000000000012421880b0000000000000057000086dd080088be00000008100200000100000000000000080022eb00000000200000000200000000000400000000000800655800000000"], 0x0) 377.658618ms ago: executing program 4 (id=8012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$packet(0x11, 0xa, 0x300) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0000f7000000000180c209000000000000001c0000e0000211907800000000000000000000000000089078"], 0x0) (async, rerun: 64) bind$bt_sco(r1, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r1, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x1c}}, 0x40094) r3 = socket$netlink(0x10, 0x3, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x9, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r13 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600101000011072b519bcc21754b0000000000000000bbfe8000000000000000000000000000aa4e1f0e2200119078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083079cf6b7931c9b400"], 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x4070bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x3, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000804) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x12c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0xfff2, 0x1}}, [@TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x80, 0x8000005, 0x0, 0x80000000, 0x4cb, 0x3}}, {0xa, 0x2, [0xd, 0x6, 0x1]}}, {{0x1c, 0x1, {0xb, 0x2, 0x0, 0x0, 0x0, 0x100, 0x911, 0x9}}, {0x16, 0x2, [0x7, 0x1, 0xffff, 0xf80, 0xf1d, 0x200, 0x4, 0x8, 0x7]}}, {{0x1c, 0x1, {0x4, 0x0, 0x1, 0x6, 0x1, 0xffc, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0xf7b9, 0x8]}}, {{0x1c, 0x1, {0xa, 0x9, 0x7, 0x6, 0x0, 0x0, 0x5f, 0x9}}, {0x16, 0x2, [0xb82e, 0x4, 0x7, 0x3, 0x1, 0x1000, 0x101, 0xd1ce, 0xc]}}, {{0x1c, 0x1, {0x6b, 0xe, 0xfff, 0xffffffff, 0x2, 0x2, 0x4, 0x3}}, {0xa, 0x2, [0x5bf4, 0xff, 0x1]}}, {{0x1c, 0x1, {0x2, 0x40, 0xa4, 0x3, 0x0, 0x0, 0x80000000, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x480d8}, 0x4040044) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2200325b0300053a0000030301030000000000000000010000000c0002000000000000000000a94283cd72c5ba1b22eece1c6b327b5f987df86a4cbde5efb1e5bed48b4bf6b224b0be6f0cc631ff573c08560d4634c309aa60eade42792485e823579cf399a5d0a700"/114], 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) ioctl(r3, 0x5, &(0x7f0000000440)="8bbe98372999dddfe55989ffe7868c00f6884fccd07ab01759e6ed186b67b88d3b59e341447c392cef77d7515586234be5ec8aa08287b2dfdfb03db221df9e059a4f014bc7a73ef60723156c1d0e6de01b91886a94424a1886b1545eb7d8af5d3e277d2580bacf413c019bd84f3863123d7e3c844412a8ab50558b4b8d15fca5dfeb642b0ed0f0f27ce75445533a99db78d573ddd28e65f6e9481844b40d75b4631706c1da07a1d87c1a497c46341f1c43335680c0937524f7d9b697fcea4ea23908e3735c7fbd49585f81f8942ad014be5892fc8166648da548f5b4062065e263c44e22a964ef5e91302f860fd42aae241c58d6") 272.547234ms ago: executing program 0 (id=8013): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}, [@alu={0x4, 0x0, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x88, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x1, 0x3, 0x200000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x4, 0x8, 0xe, 0x2}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x88}}, 0x0) (async) sendto$packet(r6, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000001c0)=0x2, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000e055440cf63bb341000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000001900feffffffff7f4000020000000000000801800000000000000100060157b7000044000500fc000000000000000000000000000001000000003c0000000a000000ac1414aa000000000000000000000000060000000003000000000000000000000000000082ae5adf494713930a0b116d8e65dde15eba30c76c791d88ffe6ffd9f0a23dbfbb43f4c0f74b37a1da8ad3cc6a523f060c90a57de404770fdf3c77721b9caaec755fe5f99047f105061115415f9a656346294c11988a53a78d317c4948e0befe67825e4e08b92cb288c1376a22314b335a19cc10edf380c50c4ec9e11d402515"], 0xfc}}, 0x0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r12, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@bridge_delneigh={0x78, 0x1d, 0x200, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x20, 0x10, 0x3}, [@NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_IFINDEX={0x8, 0x8, r10}, @NDA_SRC_VNI={0x8, 0xb, 0x2}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_MASTER={0x8}, @NDA_PROBES={0x8, 0x4, 0xd2ac}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 115.25796ms ago: executing program 0 (id=8014): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xf2, &(0x7f00000000c0)={@local, @multicast, @void, {@x25={0x805, {0x2, 0x5d, 0x0, "c2f049afc066942b1dff10ba5c19f408d870fd4622174ed5eac7794d38491043a59df309a41b53d7376769c052628806f04ab079101ed86af8abbb4de1157354275a796034d58d6d8e5a7b7e75157423ba03a85d867f119e27f41be07e7383e0f4e8ed405763fa1ca927f7e351ab546d581ce3223ac3eecaeac1a7c31c9a7029c650d137c94edf1fb623d76b455bd73cd695ec7550be9fa71dd1112f90706b448ac0f4fd0cfb90102d7ba6aa83e0f8c2bcdd71df11d02442b6859eee60afe623764c55de4ecad3b49b61552180140fdf7c3b99e5b584e788daf4763b57621a71f2"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0xb23, 0xa91, 0xea7, 0x943]}) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x10, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x4004084) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xf2, &(0x7f00000000c0)={@local, @multicast, @void, {@x25={0x805, {0x2, 0x5d, 0x0, "c2f049afc066942b1dff10ba5c19f408d870fd4622174ed5eac7794d38491043a59df309a41b53d7376769c052628806f04ab079101ed86af8abbb4de1157354275a796034d58d6d8e5a7b7e75157423ba03a85d867f119e27f41be07e7383e0f4e8ed405763fa1ca927f7e351ab546d581ce3223ac3eecaeac1a7c31c9a7029c650d137c94edf1fb623d76b455bd73cd695ec7550be9fa71dd1112f90706b448ac0f4fd0cfb90102d7ba6aa83e0f8c2bcdd71df11d02442b6859eee60afe623764c55de4ecad3b49b61552180140fdf7c3b99e5b584e788daf4763b57621a71f2"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0xb23, 0xa91, 0xea7, 0x943]}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x10, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x4004084) (async) 92.389007ms ago: executing program 1 (id=8015): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000020601020000000000005966da1e7c100eca07800800124000060000080008400000003714000300686173683a69702c706f72742c697000050000ae35000000050004f172566c0c148fd70073797a31000000000500556cc15cacad5ac98b2631d15e4e9cf7d65fa2fd0ab9"], 0x60}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000280)=0x7, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x8045) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x2010, r6, 0x80000000) 71.659365ms ago: executing program 0 (id=8016): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe000000008500000087000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29ce1f378ab3d790ec8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee8a1d4046930548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589eec11969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e279595ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73f01dd1f9033c8aea8734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada6b3e62557174b6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x2, 0x1}, 0x0, 0x2, 0x0, 0x0, "d54ba1b1453da2a5"}, 0x10}, 0x1, 0x0, 0x0, 0xc050}, 0x4028006) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.924332ms ago: executing program 4 (id=8017): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, 0x0, 0x0) 0s ago: executing program 3 (id=8018): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x51, 0x7, 0x2}}) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xfffffffe}, 0x8) sendmmsg$alg(r2, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d00)=ANY=[@ANYBLOB="000100057c00000800028004001480"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nicvf0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x6, 0x6, 0xc7d9, 0x8002, r4, 0x3, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) socket(0x2b, 0x80801, 0x1) socket$kcm(0x29, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000039000100fcff0700ffdadf25fe000000ddfc83bcf216172d8abde490df547393d7c073724b78c6c612bf98e551171b044446dc5938a8786553e1209662df062d041563d2c1f81bb7fbedbc0b086cfbb68b874f12f113e664d15e2ad1c80da798b837d843b71f94ddede674e7c92cc4c1155e7d19d30213f1426d47fc6acd458311f5bea14d343df4c538b1030000004faf9e1393d3a55cf4c05d82d515f4b28a762c2b0cae06d47c37dd4b428b2bcce800a5f1"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x140, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xd, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffe3f2}, {0xc, 0x4, 0xffffffffffff0001}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2800000000000000}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x8000}]}]}}}]}, 0x11c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000000000900030073797a310000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f787900001400028008000240ffffffff08000140000000020900010073797a30"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 5] netlink: 'syz.2.6464': attribute type 6 has an invalid length. [ 958.975016][ T435] netlink: 'syz.2.6464': attribute type 7 has an invalid length. [ 958.982828][ T435] netlink: 'syz.2.6464': attribute type 8 has an invalid length. [ 961.661858][ T407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 962.214717][ T485] netlink: 'syz.4.6475': attribute type 10 has an invalid length. [ 962.252340][ T485] team0: Port device dummy0 added [ 962.270780][ T485] netlink: 'syz.4.6475': attribute type 10 has an invalid length. [ 962.313336][ T485] team0: Port device dummy0 removed [ 962.342891][ T485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 962.636570][ T501] ip6gre1: entered promiscuous mode [ 962.646106][ T501] ip6gre1: entered allmulticast mode [ 962.707726][ T509] netlink: 'syz.1.6483': attribute type 1 has an invalid length. [ 962.736104][ T509] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6483'. [ 962.737190][ T512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6484'. [ 962.968194][ T525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6487'. [ 964.048351][ T553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6495'. [ 964.080066][ T556] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6496'. [ 964.198135][ T559] netlink: 'syz.0.6494': attribute type 15 has an invalid length. [ 964.224398][ T558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6495'. [ 964.267586][ T559] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6494'. [ 964.299886][ T564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6498'. [ 964.345273][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6498'. [ 964.402700][ T562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6497'. [ 964.519957][ T576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6497'. [ 964.763477][ T582] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6502'. [ 964.818459][ T587] netlink: 'syz.1.6504': attribute type 1 has an invalid length. [ 964.848484][ T590] netlink: 'syz.1.6504': attribute type 1 has an invalid length. [ 964.930256][ T598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6505'. [ 964.966450][ T587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.192608][T12002] IPVS: starting estimator thread 0... [ 965.195100][ T606] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 965.297514][ T615] IPVS: using max 40 ests per chain, 96000 per kthread [ 965.395567][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 965.650633][ T629] netlink: 'syz.4.6512': attribute type 1 has an invalid length. [ 965.685427][ T629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.748973][ T627] veth2: entered promiscuous mode [ 965.817488][ T627] veth3: entered allmulticast mode [ 965.841656][ T627] bond2: (slave veth3): Enslaving as an active interface with an up link [ 965.878303][ T629] bond2 (unregistering): (slave veth3): Releasing backup interface [ 965.899563][ T629] bond2 (unregistering): Released all slaves [ 966.189259][ T667] IPVS: Scheduler module ip_vs_ not found [ 966.384051][ T677] netlink: 'syz.4.6526': attribute type 2 has an invalid length. [ 966.426612][ T675] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 966.755650][ T698] openvswitch: netlink: Missing key (keys=40, expected=100) [ 966.871748][ T706] xt_hashlimit: invalid rate [ 966.911106][ T710] netlink: 'syz.0.6537': attribute type 1 has an invalid length. [ 967.027371][ T714] FAULT_INJECTION: forcing a failure. [ 967.027371][ T714] name failslab, interval 1, probability 0, space 0, times 0 [ 967.040115][ T714] CPU: 1 UID: 0 PID: 714 Comm: syz.2.6539 Not tainted syzkaller #0 PREEMPT(full) [ 967.040139][ T714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.040151][ T714] Call Trace: [ 967.040159][ T714] [ 967.040168][ T714] dump_stack_lvl+0xe8/0x150 [ 967.040195][ T714] should_fail_ex+0x412/0x560 [ 967.040223][ T714] should_failslab+0xa8/0x100 [ 967.040250][ T714] ? skb_clone+0x212/0x3a0 [ 967.040273][ T714] kmem_cache_alloc_noprof+0x87/0x650 [ 967.040297][ T714] ? __bpf_redirect+0x9b4/0x12a0 [ 967.040323][ T714] skb_clone+0x212/0x3a0 [ 967.040350][ T714] bpf_clone_redirect+0x16a/0x4b0 [ 967.040370][ T714] ? bpf_test_run+0x1d1/0x830 [ 967.040399][ T714] ? bpf_test_run+0x1d1/0x830 [ 967.040438][ T714] bpf_prog_4653d16e8163849f+0x22/0x2a [ 967.040457][ T714] bpf_test_run+0x354/0x830 [ 967.040486][ T714] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.040520][ T714] ? __pfx_bpf_test_run+0x10/0x10 [ 967.040554][ T714] ? csum_partial+0x239/0x2c0 [ 967.040590][ T714] ? skb_checksum+0x7c0/0x8c0 [ 967.040622][ T714] ? skb_dst_set+0x72/0x140 [ 967.040644][ T714] bpf_prog_test_run_skb+0xe2c/0x2260 [ 967.040687][ T714] ? __fget_files+0x3a0/0x420 [ 967.040708][ T714] ? __fget_files+0x2a/0x420 [ 967.040734][ T714] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 967.040758][ T714] bpf_prog_test_run+0x2c7/0x340 [ 967.040781][ T714] __sys_bpf+0x643/0x950 [ 967.040809][ T714] ? __pfx___sys_bpf+0x10/0x10 [ 967.040851][ T714] ? ksys_write+0x242/0x270 [ 967.040879][ T714] ? __pfx_ksys_write+0x10/0x10 [ 967.040909][ T714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.040930][ T714] __x64_sys_bpf+0x7c/0x90 [ 967.040955][ T714] do_syscall_64+0x15f/0xf80 [ 967.040976][ T714] ? trace_irq_disable+0x3b/0x140 [ 967.041001][ T714] ? clear_bhb_loop+0x40/0x90 [ 967.041025][ T714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.041043][ T714] RIP: 0033:0x7ffa8e99cdd9 [ 967.041061][ T714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.041077][ T714] RSP: 002b:00007ffa8f84d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.041097][ T714] RAX: ffffffffffffffda RBX: 00007ffa8ec15fa0 RCX: 00007ffa8e99cdd9 [ 967.041110][ T714] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 967.041122][ T714] RBP: 00007ffa8f84d090 R08: 0000000000000000 R09: 0000000000000000 [ 967.041134][ T714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.041146][ T714] R13: 00007ffa8ec16038 R14: 00007ffa8ec15fa0 R15: 00007ffe03588bd8 [ 967.041177][ T714] [ 967.526346][ T699] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 967.695935][ T733] syzkaller0: entered promiscuous mode [ 967.705913][ T733] syzkaller0: entered allmulticast mode [ 967.785371][ T745] netlink: 'syz.4.6547': attribute type 42 has an invalid length. [ 968.223690][ T759] netlink: 'syz.4.6552': attribute type 1 has an invalid length. [ 968.405959][ T739] 8021q: adding VLAN 0 to HW filter on device eth0 [ 968.432531][ T739] 8021q: adding VLAN 0 to HW filter on device eth1 [ 968.468199][ T739] 8021q: adding VLAN 0 to HW filter on device eth2 [ 968.502916][ T739] 8021q: adding VLAN 0 to HW filter on device eth3 [ 968.551798][ T751] vlan0: entered promiscuous mode [ 968.697338][ T780] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 968.846561][T17333] Bluetooth: hci0: command 0x0401 tx timeout [ 969.447152][ T831] netlink: 'syz.4.6571': attribute type 16 has an invalid length. [ 969.473672][ T831] __nla_validate_parse: 19 callbacks suppressed [ 969.473688][ T831] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6571'. [ 969.753296][ T844] netlink: 'syz.4.6576': attribute type 2 has an invalid length. [ 969.773774][ T845] netlink: 'syz.1.6575': attribute type 27 has an invalid length. [ 969.949501][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.957233][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.128553][ T866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6575'. [ 970.170630][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.192982][ T845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.298224][ T845] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 970.354013][ T845] erspan0: left allmulticast mode [ 970.363489][ T845] macvlan2: left promiscuous mode [ 970.368766][ T845] macvlan2: left allmulticast mode [ 970.377713][ T845] vlan2: left promiscuous mode [ 970.382540][ T845] bridge0: left promiscuous mode [ 970.388383][ T845] virt_wifi0: left promiscuous mode [ 970.393786][ T845] macsec1: left promiscuous mode [ 970.432325][ T465] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.467503][ T465] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.498127][ T465] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.546010][ T465] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.582588][ T861] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 971.039337][ T902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6590'. [ 971.208333][ T914] netlink: 'syz.0.6595': attribute type 1 has an invalid length. [ 971.678173][ T945] netlink: 'syz.3.6598': attribute type 27 has an invalid length. [ 971.933957][ T945] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.941418][ T945] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.169369][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.193779][ T945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.346804][ T945] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 972.390660][ T945] bond1: left promiscuous mode [ 972.456420][ T948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.464165][ T948] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.475698][ T948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.500852][ T948] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.508087][ T948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.518539][ T948] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.525738][ T948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.543052][ T948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.552731][ T948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.568727][ T948] veth1_macvtap: left promiscuous mode [ 972.576142][ T948] veth0_macvtap: left promiscuous mode [ 972.582837][ T948] veth0_macvtap: entered promiscuous mode [ 972.590504][ T948] veth1_macvtap: entered promiscuous mode [ 972.606128][ T948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.613954][ T948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.622136][ T948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.630722][ T948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.640901][ T948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.664686][ T948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 972.827881][ T968] hmó3)ó: entered promiscuous mode [ 972.957921][ T979] netlink: 'syz.1.6607': attribute type 1 has an invalid length. [ 972.967380][ T979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 972.990411][ T981] xt_hashlimit: size too large, truncated to 1048576 [ 973.084805][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.119595][ T986] bridge_slave_0 (unregistering): left allmulticast mode [ 973.137886][ T986] bridge_slave_0 (unregistering): left promiscuous mode [ 973.147811][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.310059][ T923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 974.515792][T17333] Bluetooth: hci3: command 0x0406 tx timeout [ 974.987965][ T1023] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6617'. [ 975.012516][ T1024] veth7: entered promiscuous mode [ 975.062221][ T1031] netlink: 'syz.1.6618': attribute type 1 has an invalid length. [ 975.159893][ T1031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.297850][ T1034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6620'. [ 975.301206][ T1051] netlink: 'syz.1.6623': attribute type 61 has an invalid length. [ 975.324835][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'. [ 975.347512][ T1051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6623'. [ 975.473672][ T1057] sctp: [Deprecated]: syz.1.6624 (pid 1057) Use of int in max_burst socket option deprecated. [ 975.473672][ T1057] Use struct sctp_assoc_value instead [ 975.965890][ T1078] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6627'. [ 975.995927][ T1078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6627'. [ 976.024269][ T1078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6627'. [ 976.814335][ T1130] netlink: 'syz.0.6642': attribute type 61 has an invalid length. [ 976.819284][ T1121] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 977.679466][ T1168] FAULT_INJECTION: forcing a failure. [ 977.679466][ T1168] name failslab, interval 1, probability 0, space 0, times 0 [ 977.692193][ T1168] CPU: 0 UID: 0 PID: 1168 Comm: syz.3.6653 Not tainted syzkaller #0 PREEMPT(full) [ 977.692217][ T1168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.692227][ T1168] Call Trace: [ 977.692235][ T1168] [ 977.692243][ T1168] dump_stack_lvl+0xe8/0x150 [ 977.692270][ T1168] should_fail_ex+0x412/0x560 [ 977.692299][ T1168] should_failslab+0xa8/0x100 [ 977.692325][ T1168] ? skb_clone+0x212/0x3a0 [ 977.692349][ T1168] kmem_cache_alloc_noprof+0x87/0x650 [ 977.692374][ T1168] ? __bpf_redirect+0x9b4/0x12a0 [ 977.692395][ T1168] skb_clone+0x212/0x3a0 [ 977.692422][ T1168] bpf_clone_redirect+0x16a/0x4b0 [ 977.692442][ T1168] ? bpf_test_run+0x1d1/0x830 [ 977.692470][ T1168] ? bpf_test_run+0x1d1/0x830 [ 977.692491][ T1168] bpf_prog_4653d16e8163849f+0x22/0x2a [ 977.692510][ T1168] bpf_test_run+0x354/0x830 [ 977.692552][ T1168] ? __pfx_bpf_test_run+0x10/0x10 [ 977.692585][ T1168] ? csum_partial+0x239/0x2c0 [ 977.692616][ T1168] ? skb_checksum+0x7c0/0x8c0 [ 977.692653][ T1168] ? skb_dst_set+0x72/0x140 [ 977.692675][ T1168] bpf_prog_test_run_skb+0xe2c/0x2260 [ 977.692712][ T1168] ? __fget_files+0x3a0/0x420 [ 977.692730][ T1168] ? __fget_files+0x2a/0x420 [ 977.692752][ T1168] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 977.692770][ T1168] bpf_prog_test_run+0x2c7/0x340 [ 977.692790][ T1168] __sys_bpf+0x643/0x950 [ 977.692816][ T1168] ? __pfx___sys_bpf+0x10/0x10 [ 977.692850][ T1168] ? ksys_write+0x242/0x270 [ 977.692874][ T1168] ? __pfx_ksys_write+0x10/0x10 [ 977.692901][ T1168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.692920][ T1168] __x64_sys_bpf+0x7c/0x90 [ 977.692942][ T1168] do_syscall_64+0x15f/0xf80 [ 977.692961][ T1168] ? trace_irq_disable+0x3b/0x140 [ 977.692983][ T1168] ? clear_bhb_loop+0x40/0x90 [ 977.693005][ T1168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.693022][ T1168] RIP: 0033:0x7f1494f9cdd9 [ 977.693038][ T1168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.693053][ T1168] RSP: 002b:00007f1495e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 977.693072][ T1168] RAX: ffffffffffffffda RBX: 00007f1495215fa0 RCX: 00007f1494f9cdd9 [ 977.693084][ T1168] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 977.693095][ T1168] RBP: 00007f1495e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 977.693106][ T1168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 977.693117][ T1168] R13: 00007f1495216038 R14: 00007f1495215fa0 R15: 00007fff3fd2dd18 [ 977.693148][ T1168] [ 978.424808][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6659'. [ 978.478402][ T469] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.488918][ T1196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6659'. [ 978.498332][ T469] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.527010][ T469] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.558108][ T469] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.772625][ T1200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6660'. [ 979.168366][ T1214] netlink: 'syz.4.6664': attribute type 1 has an invalid length. [ 979.184811][ T1215] netlink: 'syz.4.6664': attribute type 1 has an invalid length. [ 982.039701][ T1214] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 982.068762][ T1215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.123513][ T1216] bond2: (slave veth5): Enslaving as an active interface with a down link [ 982.281338][ T1235] netlink: 'syz.0.6667': attribute type 28 has an invalid length. [ 982.558430][ T1251] netlink: 'syz.0.6672': attribute type 11 has an invalid length. [ 982.790131][ T1257] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6674'. [ 983.108781][ T1234] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 983.469151][ T1288] veth1_to_team: entered promiscuous mode [ 983.477944][ T1288] veth1_to_team: entered allmulticast mode [ 983.563719][ T1270] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 984.515394][T26271] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 784 sec [ 985.110704][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 985.129986][ T1345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 985.295196][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6698'. [ 985.378789][ T1355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6699'. [ 985.462314][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6700'. [ 985.498364][ T1361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6700'. [ 985.622052][ T1364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6701'. [ 985.629917][ T1369] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6702'. [ 985.649274][ T1366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6701'. [ 985.999350][ T1379] FAULT_INJECTION: forcing a failure. [ 985.999350][ T1379] name failslab, interval 1, probability 0, space 0, times 0 [ 986.012063][ T1379] CPU: 0 UID: 0 PID: 1379 Comm: syz.0.6706 Not tainted syzkaller #0 PREEMPT(full) [ 986.012087][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.012097][ T1379] Call Trace: [ 986.012105][ T1379] [ 986.012113][ T1379] dump_stack_lvl+0xe8/0x150 [ 986.012140][ T1379] should_fail_ex+0x412/0x560 [ 986.012168][ T1379] should_failslab+0xa8/0x100 [ 986.012195][ T1379] ? skb_clone+0x212/0x3a0 [ 986.012219][ T1379] kmem_cache_alloc_noprof+0x87/0x650 [ 986.012244][ T1379] ? __bpf_redirect+0x9b4/0x12a0 [ 986.012269][ T1379] skb_clone+0x212/0x3a0 [ 986.012296][ T1379] bpf_clone_redirect+0x16a/0x4b0 [ 986.012317][ T1379] ? bpf_test_run+0x1d1/0x830 [ 986.012345][ T1379] ? bpf_test_run+0x1d1/0x830 [ 986.012367][ T1379] bpf_prog_4653d16e8163849f+0x22/0x2a [ 986.012386][ T1379] bpf_test_run+0x354/0x830 [ 986.012430][ T1379] ? __pfx_bpf_test_run+0x10/0x10 [ 986.012471][ T1379] ? csum_partial+0x239/0x2c0 [ 986.012502][ T1379] ? skb_checksum+0x7c0/0x8c0 [ 986.012534][ T1379] ? skb_dst_set+0x72/0x140 [ 986.012559][ T1379] bpf_prog_test_run_skb+0xe2c/0x2260 [ 986.012604][ T1379] ? __fget_files+0x3a0/0x420 [ 986.012625][ T1379] ? __fget_files+0x2a/0x420 [ 986.012652][ T1379] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 986.012676][ T1379] bpf_prog_test_run+0x2c7/0x340 [ 986.012699][ T1379] __sys_bpf+0x643/0x950 [ 986.012727][ T1379] ? __pfx___sys_bpf+0x10/0x10 [ 986.012769][ T1379] ? ksys_write+0x242/0x270 [ 986.012797][ T1379] ? __pfx_ksys_write+0x10/0x10 [ 986.012827][ T1379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.012848][ T1379] __x64_sys_bpf+0x7c/0x90 [ 986.012873][ T1379] do_syscall_64+0x15f/0xf80 [ 986.012894][ T1379] ? trace_irq_disable+0x3b/0x140 [ 986.012920][ T1379] ? clear_bhb_loop+0x40/0x90 [ 986.012943][ T1379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.012961][ T1379] RIP: 0033:0x7f883a19cdd9 [ 986.012978][ T1379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.012994][ T1379] RSP: 002b:00007f883afff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 986.013014][ T1379] RAX: ffffffffffffffda RBX: 00007f883a415fa0 RCX: 00007f883a19cdd9 [ 986.013027][ T1379] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 986.013039][ T1379] RBP: 00007f883afff090 R08: 0000000000000000 R09: 0000000000000000 [ 986.013050][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 986.013060][ T1379] R13: 00007f883a416038 R14: 00007f883a415fa0 R15: 00007ffe0226a8c8 [ 986.013092][ T1379] [ 986.032901][ T1380] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 986.596890][ T1396] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 987.247399][ T1455] netlink: 'syz.2.6726': attribute type 28 has an invalid length. [ 987.310980][ T1445] netlink: 'syz.0.6724': attribute type 4 has an invalid length. [ 987.362524][ T1445] bond_slave_1: mtu greater than device maximum [ 987.486706][ T1468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.623627][ T1470] bond1: invalid ARP target 0.0.0.0 specified for addition [ 987.631424][ T1470] bond1: option arp_ip_target: invalid value (0) [ 987.644083][ T1470] bond1 (unregistering): Released all slaves [ 987.974812][ T1497] bridge2: entered promiscuous mode [ 987.990734][ T1497] bridge2: entered allmulticast mode [ 988.010671][ T1497] team0: Port device bridge2 added [ 988.016299][ T1499] bridge0: port 1(team0) entered blocking state [ 988.027744][ T1499] bridge0: port 1(team0) entered disabled state [ 988.036738][ T1499] team0: entered allmulticast mode [ 988.042234][ T1499] team_slave_0: entered allmulticast mode [ 988.054692][ T1499] team_slave_1: entered allmulticast mode [ 988.088091][ T1499] team0: entered promiscuous mode [ 988.102927][ T1499] team_slave_0: entered promiscuous mode [ 988.116115][ T1499] team_slave_1: entered promiscuous mode [ 988.124929][ T1499] bridge0: port 1(team0) entered blocking state [ 988.131330][ T1499] bridge0: port 1(team0) entered forwarding state [ 988.141199][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 988.214597][ T1510] __nla_validate_parse: 3 callbacks suppressed [ 988.214615][ T1510] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6738'. [ 988.237171][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 988.251876][ T1502] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 988.295982][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 988.330761][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6740'. [ 988.691921][ T1522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6744'. [ 988.747723][ T1507] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 989.232095][ T1534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6747'. [ 989.296826][ T1489] infiniband syz0: set active [ 989.297451][ T1531] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 989.301610][ T5819] dummy0 speed is unknown, defaulting to 1000 [ 989.327152][ T1489] infiniband syz0: added dummy0 [ 989.349574][ T1489] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 989.354870][ T1541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6749'. [ 989.355404][ T1489] infiniband syz0: Couldn't open port 1 [ 989.385918][ T1489] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 989.402026][ T1489] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 989.419826][ T1489] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 989.503513][ T1489] RDS/IB: syz0: added [ 989.509026][ T1489] smc: adding ib device syz0 with port count 1 [ 989.535186][ T1489] smc: ib device syz0 port 1 has no pnetid [ 989.576137][T27686] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.586413][T27686] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.606679][ T1553] netlink: 'syz.1.6751': attribute type 7 has an invalid length. [ 989.621682][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6750'. [ 989.653258][ T1548] netem: incorrect ge model size [ 989.668534][ T1548] netem: change failed [ 989.685672][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6750'. [ 989.710801][ T1549] netem: incorrect ge model size [ 989.724138][ T1549] netem: change failed [ 989.734854][ T5819] dummy0 speed is unknown, defaulting to 1000 [ 989.736275][T27686] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.767585][T27686] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.782164][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 989.858924][ T1558] netlink: 'syz.0.6753': attribute type 11 has an invalid length. [ 989.874117][ T1559] netlink: 'syz.0.6753': attribute type 11 has an invalid length. [ 989.885299][T17333] Bluetooth: hci2: command 0x0406 tx timeout [ 990.152790][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 990.196736][ T1575] xt_HMARK: spi-set and port-set can't be combined [ 990.302420][ T1578] syzkaller0: entered promiscuous mode [ 990.308970][ T1578] syzkaller0: entered allmulticast mode [ 990.373435][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 990.573364][ T1588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6760'. [ 990.617887][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 990.868760][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 991.202377][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 991.409169][ T1608] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 991.516597][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 991.574084][ T1612] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6768'. [ 991.747228][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 991.977296][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 992.156393][ T1625] netlink: 'syz.0.6773': attribute type 1 has an invalid length. [ 992.220907][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 992.570021][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 992.779448][ T1656] xt_hashlimit: size too large, truncated to 1048576 [ 992.950355][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 993.056489][ T1663] sctp: [Deprecated]: syz.1.6783 (pid 1663) Use of int in max_burst socket option. [ 993.056489][ T1663] Use struct sctp_assoc_value instead [ 993.183926][ T1667] netlink: 'syz.1.6785': attribute type 1 has an invalid length. [ 993.196729][ T1667] netlink: 'syz.1.6785': attribute type 1 has an invalid length. [ 993.206177][ T1668] netlink: 'syz.1.6785': attribute type 1 has an invalid length. [ 993.214652][ T1668] netlink: 'syz.1.6785': attribute type 1 has an invalid length. [ 993.252943][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 993.409887][ T1676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6788'. [ 993.519186][ T1489] dummy0 speed is unknown, defaulting to 1000 [ 993.545064][ T1682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6790'. [ 993.801378][ T1673] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 994.557390][ T1705] netlink: 'syz.4.6795': attribute type 13 has an invalid length. [ 994.657314][ T1705] gretap0: refused to change device tx_queue_len [ 994.686017][ T1705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 994.862062][ T1713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6796'. [ 994.949794][ T1709] bridge0: port 1(team0) entered disabled state [ 994.957077][ T1709] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.193171][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.209186][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.555624][T27686] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.565667][T27686] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.574135][T27686] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.652174][T27686] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.958703][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6803'. [ 995.968986][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6803'. [ 996.201875][ T1751] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 996.799902][ T1778] bridge0: port 3(vlan2) entered blocking state [ 996.830717][ T1778] bridge0: port 3(vlan2) entered disabled state [ 996.863305][ T1778] vlan2: entered allmulticast mode [ 996.874925][ T1778] bridge0: entered allmulticast mode [ 996.898004][ T1778] vlan2: left allmulticast mode [ 996.928729][ T1778] bridge0: left allmulticast mode [ 997.101545][ T1749] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 997.157978][ T1794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6814'. [ 997.347314][ T1807] ip6tnl3: entered allmulticast mode [ 997.356655][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'. [ 997.383803][ T1807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6819'. [ 997.390731][ T1810] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 997.547695][ T1807] bond3: entered promiscuous mode [ 997.552774][ T1807] bond3: entered allmulticast mode [ 997.586680][ T1749] dummy0 speed is unknown, defaulting to 1000 [ 997.598611][ T1785] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 997.972179][ T1848] netlink: 'syz.3.6829': attribute type 64 has an invalid length. [ 997.998648][ T1850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6830'. [ 998.114038][ T469] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.136888][T12002] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.149829][ T1863] netlink: 272 bytes leftover after parsing attributes in process `syz.2.6832'. [ 998.161086][ T469] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.233842][ T1856] 8021q: VLANs not supported on sit0 [ 998.240084][T12002] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.425421][T12002] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.450724][ T1873] __nla_validate_parse: 1 callbacks suppressed [ 998.450742][ T1873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6835'. [ 998.549497][ T1876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6836'. [ 998.848073][ T1785] dummy0 speed is unknown, defaulting to 1000 [ 999.280265][ T1908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6846'. [ 999.760833][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6850'. [ 999.792507][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1000.153704][ T1941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1000.571628][ T1967] geneve2: entered promiscuous mode [ 1000.590667][ T1967] geneve2: entered allmulticast mode [ 1000.610267][ T1976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1000.621999][ T1971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.650684][ T1971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.676307][ T1978] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1000.688591][ T1978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1000.698325][ T1978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1001.666934][ T2018] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1001.716979][ T2018] pim6reg1: entered promiscuous mode [ 1001.733639][ T2018] pim6reg1: entered allmulticast mode [ 1001.794637][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 1001.850757][ T2020] bond4: entered promiscuous mode [ 1001.872106][ T2020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1001.943156][ T2022] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1002.037128][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1002.045120][ T2032] netlink: 'syz.0.6877': attribute type 1 has an invalid length. [ 1002.209585][ T2048] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.239398][ T2045] bond1 (unregistering): Released all slaves [ 1002.245336][ T2048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.252700][ T2048] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.260033][ T2048] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.267372][ T2048] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.328804][ T2042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.383554][ T2054] netlink: 'syz.3.6882': attribute type 29 has an invalid length. [ 1002.440757][ T2054] netlink: 'syz.3.6882': attribute type 29 has an invalid length. [ 1002.475426][ T2054] netlink: 'syz.3.6882': attribute type 1 has an invalid length. [ 1002.504786][ T2054] netlink: 'syz.3.6882': attribute type 1 has an invalid length. [ 1002.532293][ T2054] netlink: 'syz.3.6882': attribute type 32 has an invalid length. [ 1002.632986][ T2069] syzkaller0: entered promiscuous mode [ 1002.642019][ T2069] syzkaller0: entered allmulticast mode [ 1002.777660][ T2075] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1002.807155][ T2075] bond1: (slave lo): Enslaving as an active interface with an up link [ 1002.852084][ T2075] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1002.882168][ T2077] netlink: 'syz.3.6889': attribute type 14 has an invalid length. [ 1003.196533][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.204174][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.612248][ T2076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.648984][ T2100] __nla_validate_parse: 10 callbacks suppressed [ 1003.649004][ T2100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6896'. [ 1003.652895][ T2076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.229548][ T456] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.238932][ T456] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.249317][ T456] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.280822][ T456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.290475][ T456] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.308359][ T456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.323810][ T456] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.347568][ T456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.414137][ T2109] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 1004.470308][ T2117] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1004.523918][ T2117] team0: Port device dummy0 removed [ 1004.685840][ T2130] syz_tun: entered allmulticast mode [ 1004.855439][ T2133] dvmrp8: entered allmulticast mode [ 1005.377455][ T2153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6911'. [ 1005.456118][ T2124] syz_tun: left allmulticast mode [ 1005.628830][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1005.719895][ T2170] bond3: option lacp_rate: invalid value (8) [ 1005.739677][ T2170] bond3 (unregistering): Released all slaves [ 1005.832936][ T2169] bridge_slave_1: left allmulticast mode [ 1005.856196][ T2169] bridge_slave_1: left promiscuous mode [ 1005.869321][ T2169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.879743][ T2169] bridge_slave_0: left allmulticast mode [ 1005.887196][ T2169] bridge_slave_0: left promiscuous mode [ 1005.898989][ T2169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.160478][ T2181] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1006.513416][ T2211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1006.532252][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6924'. [ 1006.582453][ T2219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1006.608148][ T2211] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1006.785911][ T2227] netlink: 'syz.1.6926': attribute type 1 has an invalid length. [ 1006.800583][ T2224] syzkaller1: entered promiscuous mode [ 1006.813733][ T2224] syzkaller1: entered allmulticast mode [ 1007.060588][ T2186] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1007.060718][ T2181] dummy0 speed is unknown, defaulting to 1000 [ 1007.270640][ T2239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1007.308554][ T2239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1007.344435][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1007.374571][ T2241] netlink: 'syz.2.6927': attribute type 16 has an invalid length. [ 1007.410804][ T2241] netlink: 'syz.2.6927': attribute type 17 has an invalid length. [ 1007.595159][ T2248] ip6erspan0: entered promiscuous mode [ 1007.830088][ T2255] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1007.867555][ T2186] dummy0 speed is unknown, defaulting to 1000 [ 1008.937209][ T2305] netlink: 'syz.1.6938': attribute type 1 has an invalid length. [ 1008.949395][ T2306] netem: change failed [ 1009.267025][ T2305] bond3: entered promiscuous mode [ 1009.290525][ T2305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.367566][ T2327] __nla_validate_parse: 35 callbacks suppressed [ 1009.367585][ T2327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6941'. [ 1009.594065][ T2343] netlink: 'syz.4.6944': attribute type 1 has an invalid length. [ 1009.624449][ T2312] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.656059][ T2312] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1009.666814][ T2312] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1009.732272][ T2312] bond3: (slave wireguard0): making interface the new active one [ 1009.763160][ T2312] wireguard0: entered promiscuous mode [ 1009.782335][ T2312] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 1009.810821][ T2343] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1010.342454][ T2367] xt_TCPMSS: Only works on TCP SYN packets [ 1010.427572][ T2358] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1011.246600][ T2393] block nbd0: server does not support multiple connections per device. [ 1011.296513][ T2393] block nbd0: shutting down sockets [ 1011.453661][ T2358] dummy0 speed is unknown, defaulting to 1000 [ 1011.692879][ T2418] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6956'. [ 1011.739766][ T2420] netlink: 'syz.3.6955': attribute type 1 has an invalid length. [ 1011.795272][ T2420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1012.039318][ T2427] dvmrp0: entered allmulticast mode [ 1012.279613][ T2452] sch_fq: defrate 53322 ignored. [ 1012.671153][ T2434] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1013.103421][ T2505] bond0: (slave dummy0): Releasing backup interface [ 1013.142528][ T2505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.182665][ T2505] bridge_slave_1: left promiscuous mode [ 1013.196715][ T2505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.204064][ T2516] netlink: 'syz.3.6974': attribute type 1 has an invalid length. [ 1013.225174][ T2516] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1013.239559][ T2516] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1013.259547][ T2516] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1013.270068][ T2505] bond0: (slave bond_slave_0): Releasing backup interface [ 1013.293447][ T2505] bond0: (slave bond_slave_1): Releasing backup interface [ 1013.335424][ T2505] team0: Port device team_slave_0 removed [ 1013.354546][ T2505] team0: Port device team_slave_1 removed [ 1013.366234][ T2505] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.393954][T12002] dummy0 speed is unknown, defaulting to 1000 [ 1013.653812][ T2510] bond1: entered promiscuous mode [ 1013.669030][ T2510] bond1: entered allmulticast mode [ 1013.676631][ T2510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.687537][ T2434] dummy0 speed is unknown, defaulting to 1000 [ 1013.687565][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6977'. [ 1014.541982][ T2566] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1014.559087][ T2548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6980'. [ 1015.480735][ T2626] lo: entered allmulticast mode [ 1015.553537][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.578347][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.606122][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.643246][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.739951][ T2650] netlink: 'syz.3.7005': attribute type 3 has an invalid length. [ 1015.813458][ T2650] nbd: nbd3 already in use [ 1015.842735][ T2650] block nbd3: NBD_DISCONNECT [ 1015.844013][ T2643] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1015.873885][ T2650] block nbd3: Send disconnect failed -32 [ 1015.894488][ T2650] block nbd3: Send disconnect failed -32 [ 1015.903863][ T2650] block nbd3: shutting down sockets [ 1015.995256][ T2665] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1016.024945][ T2665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1016.136911][ T30] audit: type=1804 audit(1777879770.434:34): pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7007" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1235 res=1 errno=0 [ 1016.154346][ T2650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.188897][ T2650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.195945][ T30] audit: type=1800 audit(1777879770.434:35): pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7007" name="cgroup.controllers" dev="tmpfs" ino=1235 res=0 errno=0 [ 1016.195997][ T30] audit: type=1804 audit(1777879770.484:36): pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7007" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1235 res=1 errno=0 [ 1016.299228][ T2650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.762529][ T2650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.774114][ T2650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.787050][ T2650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1018.800663][ T2650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1018.819427][ T2650] veth1_macvtap: left promiscuous mode [ 1018.826580][ T2650] veth0_macvtap: left promiscuous mode [ 1018.839859][ T2650] veth0_macvtap: entered promiscuous mode [ 1018.848258][ T2650] veth1_macvtap: entered promiscuous mode [ 1018.860140][ T2650] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1018.867975][ T2650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.877118][ T2650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.886056][ T2650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.895760][ T2650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.908613][ T2650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.947149][ T2650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1019.025905][ T2667] bond4: entered promiscuous mode [ 1019.051405][ T2667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.127961][ T2690] netlink: 'syz.2.7009': attribute type 3 has an invalid length. [ 1019.166000][T18708] bond9: left allmulticast mode [ 1019.170882][T18708] bond9: left promiscuous mode [ 1019.180432][T18708] bridge14: port 1(bond9) entered disabled state [ 1019.191295][T18708] bond1: left allmulticast mode [ 1019.196353][T18708] ip6gre1: left allmulticast mode [ 1019.312085][ T2690] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1019.510316][ T2707] netlink: 'syz.2.7012': attribute type 1 has an invalid length. [ 1019.527003][T18708] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1019.535624][T18708] ip6gre1 (unregistering): left promiscuous mode [ 1019.698658][T18708] bond2 (unregistering): (slave vti0): Releasing backup interface [ 1019.717667][T18708] vti0 (unregistering): left promiscuous mode [ 1020.688876][T18708] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 1020.808010][T18708] bond5 (unregistering): (slave bridge9): Releasing backup interface [ 1020.816940][T18708] bridge9 (unregistering): left promiscuous mode [ 1020.908260][T18708] bond7 (unregistering): (slave bridge11): Releasing backup interface [ 1020.917735][T18708] bridge11 (unregistering): left allmulticast mode [ 1021.129739][T18708] bond0 (unregistering): Released all slaves [ 1021.140139][T18708] bond1 (unregistering): Released all slaves [ 1021.153857][T18708] bond2 (unregistering): Released all slaves [ 1021.170267][T18708] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1021.181460][T18708] bond3 (unregistering): Released all slaves [ 1021.201046][T18708] bond4 (unregistering): Released all slaves [ 1021.214898][T18708] bond5 (unregistering): Released all slaves [ 1021.228346][T18708] bond6 (unregistering): Released all slaves [ 1021.242401][T18708] bond7 (unregistering): Released all slaves [ 1021.257480][T18708] bond8 (unregistering): (slave lo): Releasing backup interface [ 1021.268315][T18708] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1021.282549][T18708] bond8 (unregistering): Released all slaves [ 1021.297101][T18708] bond9 (unregistering): Released all slaves [ 1021.310284][ T2643] dummy0 speed is unknown, defaulting to 1000 [ 1021.313467][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.323576][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.335115][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.342316][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.386367][ T6777] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.399656][ T6777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.426409][ T6777] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.450422][ T6777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.483488][ T2707] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1021.510608][ T2711] gretap1: entered allmulticast mode [ 1021.596629][ T2725] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 1021.612238][ T6777] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.639579][ T6777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.681314][ T6777] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.700318][ T6777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.761890][T18708] tipc: Disabling bearer [ 1021.789428][T18708] tipc: Left network mode [ 1021.854569][ T2742] x_tables: unsorted underflow at hook 2 [ 1022.109659][ T2748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1022.157748][ T2748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1022.176789][ T2756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1022.368837][ T2756] vlan2: entered allmulticast mode [ 1022.398941][ T2756] bond0: entered allmulticast mode [ 1022.411852][ T2756] bond_slave_0: entered allmulticast mode [ 1022.443896][ T2756] bond_slave_1: entered allmulticast mode [ 1022.494064][ T2766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7021'. [ 1023.014028][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1023.237825][ T2800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1024.093981][ T2814] netlink: 'syz.1.7029': attribute type 1 has an invalid length. [ 1024.141142][ T2814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1024.195041][T17333] Bluetooth: hci1: command 0x0405 tx timeout [ 1024.589597][ T2843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7033'. [ 1024.812998][ T2848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7034'. [ 1025.225906][T18708] hsr_slave_0: left promiscuous mode [ 1025.261570][T18708] hsr_slave_1: left promiscuous mode [ 1025.311495][T18708] veth0_macvtap: left promiscuous mode [ 1026.694757][ T2907] netlink: 'syz.3.7041': attribute type 3 has an invalid length. [ 1026.724816][ T2907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.970210][ T2914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.044065][ T2914] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1027.248940][ T2921] __nla_validate_parse: 4 callbacks suppressed [ 1027.248959][ T2921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1027.251656][ T2920] netlink: 'syz.3.7047': attribute type 3 has an invalid length. [ 1027.412984][T18708] bridge_slave_1: left allmulticast mode [ 1027.440129][T18708] bridge_slave_1: left promiscuous mode [ 1027.478114][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.506057][T18708] bridge_slave_0: left allmulticast mode [ 1027.529653][T18708] bridge_slave_0: left promiscuous mode [ 1027.545861][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.590565][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1027.980647][T18708] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 1028.239012][ T2924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.827077][T18708] bond11 (unregistering): (slave gretap1): Releasing active interface [ 1028.871081][T18708] bond14 (unregistering): (slave geneve0): Releasing active interface [ 1028.978234][T18708] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1029.039199][T18708] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1029.449560][T18708] bond16 (unregistering): (slave bridge12): Releasing backup interface [ 1029.493924][T18708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.505316][T18708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.516266][T18708] bond0 (unregistering): Released all slaves [ 1029.528873][T18708] bond1 (unregistering): Released all slaves [ 1029.542330][T18708] bond2 (unregistering): Released all slaves [ 1029.557640][T18708] bond3 (unregistering): Released all slaves [ 1029.571248][T18708] bond4 (unregistering): Released all slaves [ 1029.587585][T18708] bond5 (unregistering): Released all slaves [ 1029.608986][T18708] bond6 (unregistering): (slave veth3): Releasing backup interface [ 1029.619529][T18708] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 1029.629328][T18708] bond6 (unregistering): Released all slaves [ 1029.642811][T18708] bond7 (unregistering): Released all slaves [ 1029.662391][T18708] bond8 (unregistering): Released all slaves [ 1029.677345][T18708] bond9 (unregistering): Released all slaves [ 1029.691206][T18708] bond10 (unregistering): Released all slaves [ 1029.705533][T18708] bond11 (unregistering): Released all slaves [ 1029.722216][T18708] bond12 (unregistering): (slave veth7): Releasing active interface [ 1029.730457][T18708] batadv2: entered promiscuous mode [ 1029.747300][T18708] bond12 (unregistering): (slave batadv2): Releasing active interface [ 1029.757375][T18708] bond12 (unregistering): Released all slaves [ 1029.772391][T18708] bond13 (unregistering): Released all slaves [ 1029.788092][T18708] bond14 (unregistering): Released all slaves [ 1029.801716][T18708] bond15 (unregistering): Released all slaves [ 1029.827712][T18708] bond16 (unregistering): Released all slaves [ 1029.941033][ T2970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.133001][T18708] : left promiscuous mode [ 1030.240131][T18708] hmac(sh: left promiscuous mode [ 1030.394091][T18708] tipc: Left network mode [ 1030.419676][ T2987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7066'. [ 1030.483550][ T3003] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7069'. [ 1030.579271][ T2992] syzkaller1: entered promiscuous mode [ 1030.597300][ T2992] syzkaller1: entered allmulticast mode [ 1030.748346][ T3014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1030.995554][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1031.181873][ T3029] netlink: 'syz.0.7076': attribute type 4 has an invalid length. [ 1031.244302][ T3029] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1031.365402][ T3030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1031.859990][ T3044] x_tables: duplicate underflow at hook 3 [ 1032.250037][ T3049] netlink: 'syz.4.7083': attribute type 10 has an invalid length. [ 1032.310970][ T3049] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 1032.393263][ T3058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1032.511834][T18708] hsr_slave_0: left promiscuous mode [ 1032.533952][T18708] hsr_slave_1: left promiscuous mode [ 1032.557528][T18708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.560410][ T3062] netlink: 'syz.2.7086': attribute type 1 has an invalid length. [ 1032.568974][T18708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.587900][T18708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.602012][T18708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.623957][T18708] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1032.637927][T18708] batman_adv: batadv0: Removing interface: ipvlan2 [ 1032.651293][T18708] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1032.663136][T18708] batman_adv: batadv0: Removing interface: ipvlan3 [ 1032.695693][T18708] veth1_macvtap: left promiscuous mode [ 1032.706587][T18708] veth0_macvtap: left promiscuous mode [ 1032.719760][T18708] veth1_vlan: left promiscuous mode [ 1032.728671][T18708] veth0_vlan: left promiscuous mode [ 1033.047337][ T3071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1033.196950][ T3079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1033.527122][T18708] team0 (unregistering): Port device team_slave_1 removed [ 1033.568155][T18708] team0 (unregistering): Port device team_slave_0 removed [ 1033.819608][ T458] smc: removing ib device sqz0 [ 1033.860961][ T458] smbdirect: ib_dev[sqz0] removed [ 1034.033740][ T5630] ±ÿŸÂnÖ8î· speed is unknown, defaulting to 1000 [ 1034.066202][ T5630] sqz0: Port: 1 Link DOWN [ 1034.341633][ T3092] netlink: zone id is out of range [ 1034.380067][ T3093] netlink: zone id is out of range [ 1034.391543][ T3093] netlink: get zone limit has 4 unknown bytes [ 1034.412873][ T3092] netlink: get zone limit has 4 unknown bytes [ 1034.538298][ T3096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1034.980260][ T3119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7097'. [ 1035.350717][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.383878][ T3133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.419340][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.459782][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.640956][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.685884][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.704621][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.746578][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1035.775458][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.801993][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.820464][ T3142] netlink: 'syz.1.7103': attribute type 13 has an invalid length. [ 1035.823059][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.858437][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1035.900595][ T3130] netlink: 'syz.0.7100': attribute type 26 has an invalid length. [ 1036.925672][ T3191] geneve0: entered promiscuous mode [ 1036.941921][ T3191] geneve0: entered allmulticast mode [ 1036.958387][ T6777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.979894][ T6777] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.000751][ T6777] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.012623][ T6777] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.473954][ T3210] dummy0 speed is unknown, defaulting to 1000 [ 1037.619450][ T3223] validate_nla: 59 callbacks suppressed [ 1037.619468][ T3223] netlink: 'syz.1.7125': attribute type 13 has an invalid length. [ 1037.666493][ T3223] netlink: 'syz.1.7125': attribute type 17 has an invalid length. [ 1037.702383][ T3231] __nla_validate_parse: 133 callbacks suppressed [ 1037.702402][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1037.848862][ T3226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7126'. [ 1037.859202][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1037.871901][ T3232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7125'. [ 1038.060342][ T3242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1038.506765][T18708] IPVS: stop unused estimator thread 0... [ 1038.582305][ T3251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1038.824399][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7135'. [ 1039.225084][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7142'. [ 1040.319409][ T3331] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7153'. [ 1040.556401][ T3338] openvswitch: netlink: Flow key attr not present in new flow. [ 1040.577729][ T3339] openvswitch: netlink: Flow key attr not present in new flow. [ 1040.659743][ T3349] bond0: (slave ipvlan0): Device is not bonding slave [ 1040.667332][ T3351] netlink: 'syz.3.7157': attribute type 83 has an invalid length. [ 1040.681256][ T3349] bond0: option active_slave: invalid value (ipvlan0) [ 1040.716057][ T3353] x_tables: duplicate underflow at hook 3 [ 1040.742259][ T3351] dummy0 speed is unknown, defaulting to 1000 [ 1040.880631][ T3364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7163'. [ 1040.906717][ T3364] IPVS: Error connecting to the multicast addr [ 1041.065115][ T3364] syzkaller0: entered promiscuous mode [ 1041.084367][ T3364] syzkaller0: entered allmulticast mode [ 1043.867958][ T3388] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7167'. [ 1044.010940][ T3396] erspan1: entered promiscuous mode [ 1044.021687][ T3396] erspan1: entered allmulticast mode [ 1044.515779][ T3430] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1044.517503][ T3429] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1044.551067][ T3433] dummy0 speed is unknown, defaulting to 1000 [ 1044.558649][ T3430] netlink: 'syz.0.7179': attribute type 30 has an invalid length. [ 1044.611814][ T3439] bridge_slave_0: left allmulticast mode [ 1044.644622][ T3439] bridge_slave_0: left promiscuous mode [ 1044.664845][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.692548][ T3439] bridge_slave_1: left allmulticast mode [ 1044.698726][ T3439] bridge_slave_1: left promiscuous mode [ 1044.705116][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.724860][ T3439] bond0: (slave bond_slave_0): Releasing backup interface [ 1044.745126][ T3439] bond0: (slave bond_slave_1): Releasing backup interface [ 1044.798072][ T3439] team0: Port device team_slave_0 removed [ 1044.838111][ T5630] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 845 sec [ 1044.867098][ T3439] team0: Port device team_slave_1 removed [ 1044.916921][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.958611][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.996279][ T3439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.083872][ T3456] macvtap1: entered promiscuous mode [ 1045.097386][ T3456] syz_tun: entered promiscuous mode [ 1045.335407][ T3470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7186'. [ 1045.579937][ T3485] netlink: 'syz.0.7191': attribute type 1 has an invalid length. [ 1045.596636][ T3478] bridge_slave_0: left allmulticast mode [ 1045.602510][ T3478] bridge_slave_0: left promiscuous mode [ 1045.610401][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.657910][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1045.665131][ T3478] bridge_slave_1: left allmulticast mode [ 1045.680077][ T3478] bridge_slave_1: left promiscuous mode [ 1045.699298][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.729296][ T3478] bond0: (slave bond_slave_0): Releasing backup interface [ 1045.756221][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7188'. [ 1045.777770][ T3478] bond0: (slave bond_slave_1): Releasing backup interface [ 1045.800468][ T3478] team0: Port device team_slave_0 removed [ 1045.823654][ T3478] team0: Port device team_slave_1 removed [ 1045.837474][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.845369][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.855135][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.862762][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.872650][ T3478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.924147][ T3500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7193'. [ 1045.949970][ T3485] bond3: entered promiscuous mode [ 1045.964629][ T3485] bond3: entered allmulticast mode [ 1045.970195][ T3485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1046.004389][ T3490] macsec1: entered promiscuous mode [ 1046.010390][ T3490] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1046.018527][ T3493] veth1_to_bond: entered allmulticast mode [ 1046.052507][ T3494] erspan1: entered allmulticast mode [ 1046.106008][ T3494] bond3: (slave erspan1): making interface the new active one [ 1046.114442][ T3494] erspan1: entered promiscuous mode [ 1046.122395][ T3494] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1046.173712][ T3477] veth1_to_bond (unregistering): left allmulticast mode [ 1046.203639][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.322603][ T3505] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7194'. [ 1046.338847][ T3503] netlink: 'syz.1.7195': attribute type 83 has an invalid length. [ 1046.341976][ T3505] netlink: 'syz.0.7194': attribute type 1 has an invalid length. [ 1046.516755][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1046.794327][ T3519] bridge_slave_1: left allmulticast mode [ 1046.814090][ T3519] ip6gre1: left promiscuous mode [ 1046.846901][ T3519] ip6gre1: left allmulticast mode [ 1046.869195][ T3519] veth2: left promiscuous mode [ 1046.883354][ T3519] veth3: left allmulticast mode [ 1046.901805][ T3519] ip6tnl3: left allmulticast mode [ 1046.918811][ T3519] bond3: left promiscuous mode [ 1046.936540][ T3519] bond3: left allmulticast mode [ 1046.944532][ T3519] geneve2: left promiscuous mode [ 1046.962141][ T3519] geneve2: left allmulticast mode [ 1046.981589][ T3519] bond4: left promiscuous mode [ 1046.998213][ T3519] ip6erspan0: left promiscuous mode [ 1047.109731][ T3539] macsec2: entered promiscuous mode [ 1047.173275][ T3545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1047.181375][ T3542] dummy0 speed is unknown, defaulting to 1000 [ 1047.920251][ T30] audit: type=1804 audit(1777879802.214:37): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7211" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=896 res=1 errno=0 [ 1047.980115][ T30] audit: type=1800 audit(1777879802.254:38): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7211" name="cgroup.controllers" dev="tmpfs" ino=896 res=0 errno=0 [ 1048.045760][ T30] audit: type=1804 audit(1777879802.264:39): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7211" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=896 res=1 errno=0 [ 1048.127384][ T3570] netlink: 'syz.3.7213': attribute type 3 has an invalid length. [ 1048.578257][ T3598] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1048.950500][ T3597] dummy0 speed is unknown, defaulting to 1000 [ 1049.231948][ T3622] syzkaller1: entered promiscuous mode [ 1049.247794][ T3622] syzkaller1: entered allmulticast mode [ 1049.605245][ T3642] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1049.629478][ T3642] __nla_validate_parse: 5 callbacks suppressed [ 1049.629498][ T3642] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7224'. [ 1049.699611][ T3645] syzkaller0: entered promiscuous mode [ 1049.705591][ T3645] syzkaller0: entered allmulticast mode [ 1049.712760][ T3648] syzkaller1: tun_chr_ioctl cmd 35108 [ 1049.742682][ T3645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1049.795325][ T3645] netlink: 184900 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1050.582450][ T3700] syzkaller1: entered promiscuous mode [ 1050.592198][ T3700] syzkaller1: entered allmulticast mode [ 1050.823499][ T3718] batadv_slave_1: entered promiscuous mode [ 1050.829973][ T3716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1050.842004][ T3717] batadv_slave_1: left promiscuous mode [ 1051.070522][ T3726] syzkaller0: entered promiscuous mode [ 1051.087770][ T3726] syzkaller0: entered allmulticast mode [ 1051.520298][ T3746] openvswitch: netlink: IP tunnel dst address not specified [ 1054.412367][ T3758] netlink: 'syz.3.7254': attribute type 21 has an invalid length. [ 1054.429951][ T3758] IPv6: NLM_F_CREATE should be specified when creating new route [ 1054.746094][ T3789] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 1055.118164][ T3805] syzkaller1: entered promiscuous mode [ 1055.172135][ T3805] syzkaller1: entered allmulticast mode [ 1055.243786][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.580175][ T3842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7272'. [ 1055.649123][ T3847] netlink: 'syz.3.7271': attribute type 1 has an invalid length. [ 1055.679757][ T3847] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7271'. [ 1055.720288][ T3847] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 1055.799980][ T3849] syzkaller1: entered promiscuous mode [ 1055.841029][ T3849] syzkaller1: entered allmulticast mode [ 1056.021649][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1056.050498][ T3873] netlink: 'syz.3.7279': attribute type 21 has an invalid length. [ 1056.106378][ T3878] No such timeout policy "syz0" [ 1056.202239][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1056.233684][ T3885] ipvlan1: entered promiscuous mode [ 1056.256508][ T3884] ipvlan1: left promiscuous mode [ 1056.263047][ T30] audit: type=1804 audit(1777879810.554:40): pid=3883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7281" name="/newroot/230/cgroup.controllers" dev="tmpfs" ino=1198 res=1 errno=0 [ 1056.308669][ T30] audit: type=1800 audit(1777879810.554:41): pid=3883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7281" name="cgroup.controllers" dev="tmpfs" ino=1198 res=0 errno=0 [ 1056.527176][ T3891] syzkaller0: entered promiscuous mode [ 1056.532791][ T3891] syzkaller0: entered allmulticast mode [ 1056.635396][ T3907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7289'. [ 1056.687400][ T3912] sctp: [Deprecated]: syz.1.7291 (pid 3912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1056.687400][ T3912] Use struct sctp_sack_info instead [ 1056.820108][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7291'. [ 1056.935154][ T455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.945557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.950122][ T3925] netlink: 'syz.1.7291': attribute type 10 has an invalid length. [ 1058.202493][ T463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.212898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.274800][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.816185][ T3924] netlink: 'syz.2.7290': attribute type 12 has an invalid length. [ 1059.826897][ T3925] syz_tun: entered promiscuous mode [ 1059.997105][ T3929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.009904][ T3929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.050711][ T3905] dummy0 speed is unknown, defaulting to 1000 [ 1060.097141][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1060.265621][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7297'. [ 1060.295171][ T3929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.315256][ T3929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.550253][ T3929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.569915][ T3929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.697128][ T3958] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7300'. [ 1060.760713][ T3929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.771708][ T3929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.008866][ T3956] syzkaller0: entered promiscuous mode [ 1061.024567][ T3956] syzkaller0: entered allmulticast mode [ 1061.322977][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.683387][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.691952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.317559][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.326296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.962932][ T3962] syzkaller0: entered promiscuous mode [ 1063.975478][ T3962] syzkaller0: entered allmulticast mode [ 1064.174489][ T3980] netlink: 'syz.0.7305': attribute type 1 has an invalid length. [ 1064.354924][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.370830][ T3988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7305'. [ 1066.929239][ T3980] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1066.953018][ T3988] syz_tun: Device is already in use. [ 1067.079585][ T4007] SET target dimension over the limit! [ 1067.125284][ T455] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.134013][ T455] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.150788][ T455] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.164741][ T4004] netlink: 'syz.4.7306': attribute type 1 has an invalid length. [ 1067.187917][ T455] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.215871][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7306'. [ 1067.286202][T18707] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.301554][ T4017] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7306'. [ 1067.310772][T18707] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.392844][ T455] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.401947][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.411075][ T455] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.484530][ T4022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1067.791476][ T4033] bond3: ARP target 9.0.0.0 is already present [ 1067.798690][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.807092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.855641][ T4033] bond3: option arp_ip_target: invalid value (9) [ 1067.872040][ T4033] bond3 (unregistering): Released all slaves [ 1068.024598][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1068.090512][ T4050] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1068.094971][ T4047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7319'. [ 1068.283217][ T4060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1068.314641][ T4060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1068.405691][ T4063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1068.436657][ T455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.445263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.459901][ T4063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1068.496423][ T4047] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1068.607666][ T4076] syzkaller1: entered promiscuous mode [ 1068.620322][ T4076] syzkaller1: entered allmulticast mode [ 1068.748969][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7329'. [ 1069.062048][ T4099] tipc: Started in network mode [ 1069.077013][ T4099] tipc: Node identity d65f7890b71, cluster identity 4711 [ 1069.092758][ T4099] tipc: Enabled bearer , priority 0 [ 1069.167670][ T4099] syzkaller0: entered promiscuous mode [ 1069.172576][ T4112] netlink: 'syz.0.7338': attribute type 2 has an invalid length. [ 1069.173316][ T4099] syzkaller0: entered allmulticast mode [ 1069.228718][ T4099] ip6t_srh: unknown srh invflags BA61 [ 1069.270003][ T4115] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1069.295782][ T4115] bond0: option arp_ip_target: invalid value (0) [ 1069.305104][ T4099] tipc: Resetting bearer [ 1069.339876][ T4099] tipc: Disabling bearer [ 1069.499699][ T4123] batadv0: entered promiscuous mode [ 1069.519000][ T4123] batadv0: entered allmulticast mode [ 1069.537666][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.634727][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.654678][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.668429][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.715565][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.723943][ T4123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.760825][ T4144] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 1069.808743][ T4126] dummy0 speed is unknown, defaulting to 1000 [ 1069.814845][ T4143] netlink: 'syz.1.7347': attribute type 16 has an invalid length. [ 1069.814868][ T4143] netlink: 'syz.1.7347': attribute type 17 has an invalid length. [ 1069.835978][ T4143] erspan0: left promiscuous mode [ 1069.888011][ T4143] syz_tun: left promiscuous mode [ 1069.928621][ T4143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.968578][ T4143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.000708][ T4143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.120438][ T4143] veth1_to_team: left promiscuous mode [ 1070.133059][ T4143] veth1_to_team: left allmulticast mode [ 1070.141836][ T4159] netlink: 'syz.4.7351': attribute type 1 has an invalid length. [ 1070.165247][ T4159] netlink: 'syz.4.7351': attribute type 1 has an invalid length. [ 1070.170679][ T4143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.191943][ T4159] netlink: 'syz.4.7351': attribute type 8 has an invalid length. [ 1070.209783][ T4143] veth1_vlan: left promiscuous mode [ 1070.223115][ T4143] veth0_vlan: left promiscuous mode [ 1070.236227][ T4143] veth0_vlan: entered promiscuous mode [ 1070.257870][ T4143] veth1_vlan: entered promiscuous mode [ 1070.286989][ T4143] veth0_macvtap: left promiscuous mode [ 1070.302199][ T4143] veth0_macvtap: entered promiscuous mode [ 1070.333923][ T4143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.361991][ T4143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.380276][ T4143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.405283][ T4143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.439396][ T4143] erspan0: entered promiscuous mode [ 1070.449050][ T4143] virt_wifi0: entered promiscuous mode [ 1070.459730][ T4143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1070.472945][ T4143] bond3: left promiscuous mode [ 1070.478972][ T4143] wireguard0: left promiscuous mode [ 1070.487647][ T4143] bond4: left promiscuous mode [ 1070.493375][ T4143] macsec2: left promiscuous mode [ 1070.567308][ T4148] syz_tun: left promiscuous mode [ 1070.702860][ T3315] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.727328][ T3315] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.800635][ T3315] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.827275][ T3315] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.856456][ T4171] netlink: 'syz.0.7356': attribute type 5 has an invalid length. [ 1071.212174][ T4178] bond5: entered promiscuous mode [ 1071.218124][ T4178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1071.272419][ T455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.330456][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.340532][ T455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.514787][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1071.624556][ T5819] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1072.025977][ T4215] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20000 [ 1072.329761][ T4225] __nla_validate_parse: 17 callbacks suppressed [ 1072.329780][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1072.388570][ T4225] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1072.398580][ T4225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1072.411582][ T4225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1072.463975][ T4225] 8021q: adding VLAN 0 to HW filter on device  [ 1072.473637][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.487991][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.552857][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.563310][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.581937][ T4225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.593371][ T4225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.616395][ T4225] veth1_vlan: left promiscuous mode [ 1072.637421][ T4225] veth1_vlan: entered promiscuous mode [ 1072.652510][ T4225] veth1_macvtap: left promiscuous mode [ 1072.669172][ T4225] veth0_macvtap: left promiscuous mode [ 1072.687622][ T4225] veth0_macvtap: entered promiscuous mode [ 1072.706666][ T4225] veth1_macvtap: entered promiscuous mode [ 1072.735585][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.758215][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.784977][ T4225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.803301][ T4225] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 1072.822092][ T4225] net_ratelimit: 192 callbacks suppressed [ 1072.822112][ T4225] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1072.918363][ T3315] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.941925][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.950669][ T4246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.979286][ T3315] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.990807][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.017696][ T3315] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.027964][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.063596][ T3315] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.064921][ T4252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1073.082863][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.118240][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7378'. [ 1073.318733][ T4263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1073.403714][ T4266] sctp: [Deprecated]: syz.3.7382 (pid 4266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1073.403714][ T4266] Use struct sctp_sack_info instead [ 1073.420953][ T4264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1073.422063][ T4268] syzkaller0: entered promiscuous mode [ 1073.438134][ T4268] syzkaller0: entered allmulticast mode [ 1073.477026][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.549497][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7381'. [ 1073.557228][ T3315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.569151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.679009][ T4278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1073.951873][ T4292] dummy0 speed is unknown, defaulting to 1000 [ 1074.196202][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.204673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.225611][ T4305] x_tables: duplicate underflow at hook 3 [ 1074.241486][ T4305] pim6reg1: entered promiscuous mode [ 1074.251061][ T4305] pim6reg1: entered allmulticast mode [ 1074.518206][ T4314] dummy0 speed is unknown, defaulting to 1000 [ 1075.055219][ T4347] netlink: 'syz.2.7400': attribute type 4 has an invalid length. [ 1075.084741][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1076.515855][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.671170][ T4404] geneve3: entered promiscuous mode [ 1076.677110][ T4404] geneve3: entered allmulticast mode [ 1076.690154][ T3347] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1076.709357][ T4400] dummy0 speed is unknown, defaulting to 1000 [ 1076.716004][ T3347] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1076.726026][ T3347] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1076.778169][ T3347] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1077.642933][ T4390] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1077.928216][ T4455] __nla_validate_parse: 11 callbacks suppressed [ 1077.928234][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7430'. [ 1077.945251][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7430'. [ 1077.954376][ T4455] netlink: 58 bytes leftover after parsing attributes in process `syz.3.7430'. [ 1078.031852][ T4459] netlink: 'syz.2.7431': attribute type 1 has an invalid length. [ 1078.059671][ T4459] netlink: 'syz.2.7431': attribute type 1 has an invalid length. [ 1078.194733][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1078.218546][ T4465] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1078.230631][ T4465] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1078.249360][ T4465] veth0_virt_wifi: entered allmulticast mode [ 1078.263976][ T4465] veth0_virt_wifi: entered promiscuous mode [ 1078.293417][ T4465] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1078.300744][ T4465] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 1078.473903][ T4474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7436'. [ 1078.505481][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'. [ 1078.523525][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'. [ 1079.072063][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1079.315826][ T782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.324282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.474970][T17333] Bluetooth: hci1: command 0x0405 tx timeout [ 1079.555133][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.681882][ T4547] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7448'. [ 1079.712661][ T4542] dummy0 speed is unknown, defaulting to 1000 [ 1079.859494][T17333] Bluetooth: hci1: link tx timeout [ 1079.868711][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1079.930542][ T4555] netlink: 'syz.3.7450': attribute type 58 has an invalid length. [ 1079.942006][ T4555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7450'. [ 1079.958500][ T782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.966876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.042940][T17333] Bluetooth: hci1: link tx timeout [ 1080.048405][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1080.097260][T17333] Bluetooth: hci1: link tx timeout [ 1080.103366][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1080.145639][T17333] Bluetooth: hci1: link tx timeout [ 1080.150834][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1080.283057][ T4558] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1080.320487][ T4558] bond6 (unregistering): Released all slaves [ 1080.984484][T17333] Bluetooth: hci1: link tx timeout [ 1080.989678][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.247205][ T4607] dummy0 speed is unknown, defaulting to 1000 [ 1081.328508][ T4615] netlink: 'syz.1.7463': attribute type 22 has an invalid length. [ 1081.491235][T17333] Bluetooth: hci1: link tx timeout [ 1081.496650][T17333] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1081.953234][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.966499][T17333] Bluetooth: hci1: command 0x0405 tx timeout [ 1081.971540][ T4632] lo: entered allmulticast mode [ 1081.978810][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.988162][ T4632] lo: left allmulticast mode [ 1081.994916][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.012074][ T4628] netlink: 'syz.3.7468': attribute type 1 has an invalid length. [ 1082.045955][ T4629] bond5: Removing last ns target with arp_interval on [ 1082.077004][ T4639] tipc: Enabled bearer , priority 0 [ 1082.122333][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.139431][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.292777][ T4658] x_tables: duplicate underflow at hook 2 [ 1082.425102][ T4661] bond4 (unregistering): Released all slaves [ 1082.514712][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1082.960123][ T4698] netlink: 'syz.0.7488': attribute type 4 has an invalid length. [ 1083.005763][ T4698] netlink: 'syz.0.7488': attribute type 4 has an invalid length. [ 1083.233052][T12002] tipc: Node number set to 1632598160 [ 1083.234101][ T4708] netlink: 'syz.3.7490': attribute type 10 has an invalid length. [ 1083.283746][ T4715] __nla_validate_parse: 11 callbacks suppressed [ 1083.283765][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7491'. [ 1083.358004][ T4715] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1083.413061][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7491'. [ 1083.443757][ T4719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1083.460445][ T4719] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1083.466651][ T4725] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7494'. [ 1083.499406][ T4722] netlink: 'syz.0.7494': attribute type 29 has an invalid length. [ 1083.517861][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1083.530900][ T4724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1083.550419][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1083.560612][ T4724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1083.570349][ T4724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1083.587133][ T4715] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1083.612089][ T4737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1083.613857][ T4715] bond6 (unregistering): Released all slaves [ 1083.705090][ T4734] vxcan3: entered promiscuous mode [ 1083.822036][ T4739] dummy0 speed is unknown, defaulting to 1000 [ 1083.908162][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1084.232125][ T4775] netlink: 'syz.4.7508': attribute type 1 has an invalid length. [ 1084.583584][ T4777] bond5: left promiscuous mode [ 1084.593570][ T4777] geneve3: left promiscuous mode [ 1084.600884][T12002] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1084.616264][ T4777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1084.921220][T12002] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1085.076842][T18707] net_ratelimit: 5 callbacks suppressed [ 1085.076859][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.091062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.131847][ T4809] netlink: 'syz.3.7517': attribute type 10 has an invalid length. [ 1085.392061][ T4826] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1085.423287][ T4820] dummy0 speed is unknown, defaulting to 1000 [ 1085.635248][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.719527][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.727958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.823267][ T4842] netlink: 'syz.2.7527': attribute type 12 has an invalid length. [ 1085.847964][ T4843] netlink: 'syz.2.7527': attribute type 12 has an invalid length. [ 1086.218888][ T4862] sctp: [Deprecated]: syz.4.7533 (pid 4862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1086.218888][ T4862] Use struct sctp_sack_info instead [ 1086.292296][ T4865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1086.646239][ T4881] ip6gre2: entered promiscuous mode [ 1086.667107][ T4881] ip6gre2: entered allmulticast mode [ 1086.789292][ T4884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.682783][ T4940] x_tables: duplicate entry at hook 3 [ 1087.698644][ T4944] x_tables: duplicate entry at hook 3 [ 1088.275523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.320191][ T4994] tipc: Enabling of bearer rejected, failed to enable media [ 1088.681490][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.851086][ T5015] __nla_validate_parse: 18 callbacks suppressed [ 1088.851105][ T5015] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1088.956551][ T5019] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 1088.964075][ T5019] mac80211_hwsim hwsim74 syzkaller0: entered allmulticast mode [ 1089.193030][ T5029] ipip0: entered promiscuous mode [ 1089.206269][ T5027] syzkaller0: entered promiscuous mode [ 1089.217211][ T5027] syzkaller0: entered allmulticast mode [ 1089.240860][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1089.265423][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1089.281405][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1089.291513][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1089.323637][ T3347] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.337416][ T3347] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.347913][ T3347] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.356472][ T3347] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.484766][ T5043] x_tables: unsorted entry at hook 3 [ 1089.499973][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1089.511227][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1089.652685][ T5055] dummy0 speed is unknown, defaulting to 1000 [ 1089.838324][ T5067] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7591'. [ 1089.987133][ T5071] netlink: 'syz.1.7591': attribute type 8 has an invalid length. [ 1090.007253][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7591'. [ 1090.383560][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7594'. [ 1090.753164][ T5090] netlink: 'syz.0.7595': attribute type 13 has an invalid length. [ 1090.836501][ T3315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.844891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.853862][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.862290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.009594][ T3347] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.026941][ T3347] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.101140][ T3347] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.112649][ T3347] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.714734][T12002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.772597][ T5115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.780963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.753241][ T5172] ip6erspan0: entered allmulticast mode [ 1092.951477][ T5186] netlink: 'syz.3.7618': attribute type 1 has an invalid length. [ 1093.193340][ T5186] bond3: entered promiscuous mode [ 1093.220648][ T5186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1093.526612][ T5630] dummy0 speed is unknown, defaulting to 1000 [ 1094.009731][ T5231] __nla_validate_parse: 3 callbacks suppressed [ 1094.009754][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1094.050861][ T5231] openvswitch: netlink: Unknown nsh attribute 0 [ 1094.096347][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1094.126346][ T5235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1094.200515][ T5243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7628'. [ 1094.245213][ T5236] dummy0 speed is unknown, defaulting to 1000 [ 1094.258515][ T5247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1094.328618][ T5248] netlink: 'syz.1.7630': attribute type 1 has an invalid length. [ 1094.376679][ T5248] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1094.400312][ T5248] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1094.410220][ T5248] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1094.413834][ T5255] tc_dump_action: action bad kind [ 1094.612565][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7633'. [ 1094.628857][ T5260] netlink: 'syz.1.7632': attribute type 1 has an invalid length. [ 1094.719959][ T5260] bond8: (slave bridge8): making interface the new active one [ 1094.729310][ T5260] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1094.750376][ T5264] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 1094.760900][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.773827][ T5264] bond4: (slave vti0): Error -95 calling set_mac_address [ 1094.808181][ T5258] bond4: (slave vlan0): Opening slave failed [ 1095.649306][ T5317] netlink: 'syz.0.7645': attribute type 1 has an invalid length. [ 1095.688208][ T5317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1095.706958][ T5317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1095.717957][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1096.531564][ T5367] dummy0 speed is unknown, defaulting to 1000 [ 1096.685465][ T5388] ip6erspan0: entered promiscuous mode [ 1096.691388][ T5388] ip6erspan0: entered allmulticast mode [ 1097.234662][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.240082][ T5415] netlink: 'syz.3.7670': attribute type 1 has an invalid length. [ 1097.355437][ T5415] netlink: 'syz.3.7670': attribute type 62 has an invalid length. [ 1097.933878][ T5463] sctp: [Deprecated]: syz.4.7682 (pid 5463) Use of int in max_burst socket option. [ 1097.933878][ T5463] Use struct sctp_assoc_value instead [ 1098.051962][ T5466] dummy0 speed is unknown, defaulting to 1000 [ 1098.143847][ T5474] netlink: 'syz.2.7684': attribute type 4 has an invalid length. [ 1098.229040][ T5477] syzkaller0: entered promiscuous mode [ 1098.259991][ T5477] syzkaller0: entered allmulticast mode [ 1098.471024][ T5490] netlink: 'syz.2.7684': attribute type 4 has an invalid length. [ 1098.555597][ T5486] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1098.685855][ T5488] dummy0 speed is unknown, defaulting to 1000 [ 1099.360899][ T5527] nbd: must specify at least one socket [ 1099.779949][ T5543] __nla_validate_parse: 6 callbacks suppressed [ 1099.779967][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7699'. [ 1099.887285][ T5543] vlan3: entered allmulticast mode [ 1099.896821][ T5543] macvtap0: entered allmulticast mode [ 1100.182100][ T5558] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1100.538625][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1100.701978][ T5588] netem: change failed [ 1100.760368][ T5590] tipc: Started in network mode [ 1100.777156][ T5590] tipc: Node identity ac14140f, cluster identity 4711 [ 1100.796348][ T5590] tipc: New replicast peer: 255.255.255.255 [ 1100.807405][ T5590] tipc: Enabled bearer , priority 5 [ 1100.829194][ T5588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7714'. [ 1100.998092][ T5606] pim6reg: entered allmulticast mode [ 1101.031387][ T5606] pim6reg: left allmulticast mode [ 1101.268786][ T5624] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7722'. [ 1101.518617][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7726'. [ 1101.521191][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1101.593007][ T5645] IPVS: set_ctl: invalid protocol: 166 127.0.0.1:20004 [ 1101.614890][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7728'. [ 1101.648391][ T5651] syzkaller0: entered promiscuous mode [ 1101.653987][ T5651] syzkaller0: entered allmulticast mode [ 1101.740079][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7730'. [ 1101.744908][ T5657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7731'. [ 1101.774379][ T5651] dummy0 speed is unknown, defaulting to 1000 [ 1101.791381][ T5654] vlan2: entered allmulticast mode [ 1101.804278][ T5654] bridge2: entered allmulticast mode [ 1101.832224][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7732'. [ 1101.857489][ T5654] bridge2: port 1(bond3) entered blocking state [ 1101.864647][ T5654] bridge2: port 1(bond3) entered disabled state [ 1101.882005][ T5654] bond3: entered allmulticast mode [ 1101.892166][ T5654] bond3: entered promiscuous mode [ 1101.925627][ T5630] tipc: Node number set to 2886997007 [ 1103.008453][ T5734] xt_cgroup: invalid path, errno=-2 [ 1103.311824][ T5740] geneve3: left allmulticast mode [ 1103.325775][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1103.334783][ T5740] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1103.350606][ T5740] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1103.444444][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1103.695076][ T5779] 8021q: VLANs not supported on ip_vti0 [ 1103.775378][ T5783] netlink: 'syz.2.7758': attribute type 4 has an invalid length. [ 1103.826318][ T5788] netlink: 'syz.2.7758': attribute type 4 has an invalid length. [ 1104.139405][ T5815] 8021q: VLANs not supported on ip6_vti0 [ 1104.698314][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1104.705189][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1104.712600][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1104.755440][ T5847] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1104.791409][ T5847] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1104.850900][ T5847] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1104.885138][ T5847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1104.946719][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1104.981496][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.015915][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.030660][ T5866] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1105.157955][ T5630] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 905 sec [ 1105.198452][ T5873] netlink: 'syz.1.7781': attribute type 1 has an invalid length. [ 1105.269698][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.296637][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.321037][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.380145][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.396903][ T5847] syzkaller0 speed is unknown, defaulting to 1000 [ 1105.694784][ T5885] dummy0 speed is unknown, defaulting to 1000 [ 1105.843109][ T5895] __nla_validate_parse: 12 callbacks suppressed [ 1105.843127][ T5895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1106.062223][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7792'. [ 1106.173477][ T5908] bond4: entered promiscuous mode [ 1106.179089][ T5908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1106.187216][ T5885] syzkaller0 speed is unknown, defaulting to 1000 [ 1106.465071][ T5928] bond9: entered promiscuous mode [ 1106.470600][ T5928] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1106.602308][ T5938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7800'. [ 1106.640015][ T5940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.953364][ T5951] netlink: 'syz.4.7804': attribute type 1 has an invalid length. [ 1107.030916][ T5956] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1107.161019][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7809'. [ 1107.228934][ T5965] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1107.448857][ T5975] tipc: Enabled bearer , priority 0 [ 1107.467110][ T5975] syzkaller0: entered promiscuous mode [ 1107.489589][ T5975] syzkaller0: entered allmulticast mode [ 1107.520540][ T5975] netem: change failed [ 1107.593148][ T5975] netlink: 'syz.0.7813': attribute type 1 has an invalid length. [ 1107.606973][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1107.617933][ T5975] netlink: 'syz.0.7813': attribute type 2 has an invalid length. [ 1107.635652][ T5975] netlink: 'syz.0.7813': attribute type 2 has an invalid length. [ 1107.654308][ T5983] openvswitch: netlink: Flow actions attr not present in new flow. [ 1107.657148][ T5975] netlink: 'syz.0.7813': attribute type 2 has an invalid length. [ 1107.722399][ T5975] netlink: 'syz.0.7813': attribute type 1 has an invalid length. [ 1107.749805][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1107.754922][ T5975] netlink: 'syz.0.7813': attribute type 2 has an invalid length. [ 1107.829681][ T5974] tipc: Resetting bearer [ 1107.938455][ T5974] tipc: Disabling bearer [ 1108.325454][ T6012] syzkaller0: entered promiscuous mode [ 1108.344563][ T6012] syzkaller0: entered allmulticast mode [ 1108.457635][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1109.027518][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7834'. [ 1110.155458][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7838'. [ 1110.173898][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7838'. [ 1111.695900][ T6036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1111.861114][ T6100] __nla_validate_parse: 1 callbacks suppressed [ 1111.861134][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1112.180391][ T6122] dummy0 speed is unknown, defaulting to 1000 [ 1112.298430][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7850'. [ 1112.339457][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7850'. [ 1112.380965][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7850'. [ 1112.409672][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7850'. [ 1112.712225][ T6122] syzkaller0 speed is unknown, defaulting to 1000 [ 1113.226049][ T6160] dummy0 speed is unknown, defaulting to 1000 [ 1113.336724][ T6171] IPv6: NLM_F_CREATE should be specified when creating new route [ 1113.386081][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7861'. [ 1113.523282][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7861'. [ 1113.848941][ T6160] syzkaller0 speed is unknown, defaulting to 1000 [ 1113.936317][ T6188] syzkaller0: entered promiscuous mode [ 1113.943891][ T6188] syzkaller0: entered allmulticast mode [ 1114.089219][ T6206] validate_nla: 3 callbacks suppressed [ 1114.089240][ T6206] netlink: 'syz.2.7870': attribute type 62 has an invalid length. [ 1114.108990][ T6201] 8021q: VLANs not supported on ip6_vti0 [ 1114.160849][ T6206] bond5: option lacp_rate: invalid value (128) [ 1114.179768][ T6206] bond5 (unregistering): Released all slaves [ 1114.193036][ T6212] netlink: 'syz.0.7872': attribute type 1 has an invalid length. [ 1114.202006][ T6212] netlink: 'syz.0.7872': attribute type 2 has an invalid length. [ 1114.401665][ T6219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7873'. [ 1114.476626][ T6224] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7874'. [ 1114.541305][ T6224] netlink: 320 bytes leftover after parsing attributes in process `syz.2.7874'. [ 1114.792302][T12002] IPVS: starting estimator thread 0... [ 1114.894563][ T6235] IPVS: using max 34 ests per chain, 81600 per kthread [ 1115.292054][ T6249] netlink: 'syz.0.7883': attribute type 13 has an invalid length. [ 1115.315502][ T6249] netlink: 'syz.0.7883': attribute type 17 has an invalid length. [ 1115.439638][ T6261] sctp: [Deprecated]: syz.1.7882 (pid 6261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1115.439638][ T6261] Use struct sctp_sack_info instead [ 1115.642832][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.682415][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.747078][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.766261][ T6249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1115.776930][ T6249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1115.819883][ T6249] veth1_vlan: left promiscuous mode [ 1115.827743][ T6249] veth0_vlan: left promiscuous mode [ 1115.835002][ T6249] veth0_vlan: entered promiscuous mode [ 1115.845434][ T6249] veth1_vlan: entered promiscuous mode [ 1115.858588][ T6249] veth1_macvtap: left promiscuous mode [ 1115.867569][ T6249] veth0_macvtap: left promiscuous mode [ 1115.874965][ T6249] veth0_macvtap: entered promiscuous mode [ 1115.880797][ T6249] veth0_macvtap: entered allmulticast mode [ 1115.911077][ T6249] veth1_macvtap: entered promiscuous mode [ 1115.919059][ T6249] geneve0: left promiscuous mode [ 1115.924069][ T6249] geneve0: left allmulticast mode [ 1115.938046][ T6249] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1115.955825][ T6249] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1115.977255][ T6249] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1115.996237][ T6249] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1116.023350][ T6249] bond1: left promiscuous mode [ 1116.028297][ T6249] bond1: left allmulticast mode [ 1116.033406][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.041393][ T6249] vlan2: left allmulticast mode [ 1116.047334][ T6249] bond0: left allmulticast mode [ 1116.052220][ T6249] bond_slave_0: left allmulticast mode [ 1116.058023][ T6249] bond_slave_1: left allmulticast mode [ 1116.076697][ T6249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1116.086627][ T6249] syz_tun: entered promiscuous mode [ 1116.091935][ T6249] macvtap1: left promiscuous mode [ 1116.105651][ T6249] bond3: left promiscuous mode [ 1116.110456][ T6249] erspan1: left promiscuous mode [ 1116.115718][ T6249] bond3: left allmulticast mode [ 1116.121615][ T6249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1116.131487][ T6249] bond3: entered promiscuous mode [ 1116.136608][ T6249] erspan1: entered promiscuous mode [ 1116.142214][ T6249] macsec1: left promiscuous mode [ 1116.147246][ T6249] bond3: left promiscuous mode [ 1116.152013][ T6249] erspan1: left promiscuous mode [ 1116.157978][ T6249] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1116.165855][ T6249] erspan1: entered promiscuous mode [ 1116.171065][ T6249] erspan1: left allmulticast mode [ 1116.190336][ T6249] ip6gre2: left promiscuous mode [ 1116.195480][ T6249] ip6gre2: left allmulticast mode [ 1116.203560][ T6249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1116.213313][ T6249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1116.220982][ T6249] ip6erspan0: left promiscuous mode [ 1116.226290][ T6249] ip6erspan0: left allmulticast mode [ 1116.242758][ T6249] vlan3: left allmulticast mode [ 1116.247857][ T6249] macvtap0: left allmulticast mode [ 1116.252989][ T6249] veth0_macvtap: left allmulticast mode [ 1116.263878][T18707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.271192][T18707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.405940][T18707] bridge0: port 1(team0) entered blocking state [ 1116.412363][T18707] bridge0: port 1(team0) entered forwarding state [ 1116.448640][ T3347] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.464218][ T3347] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.481397][ T3347] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.520378][ T3347] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.570592][ T3347] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.604994][ T3347] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.632399][ T3347] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.684272][ T3347] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.956248][ T782] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1117.053796][ T782] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1117.152828][ T6315] openvswitch: netlink: IP tunnel dst address not specified [ 1117.286472][ T6319] TC_ACT_REPEAT abuse ? [ 1117.325187][ T6321] __nla_validate_parse: 9 callbacks suppressed [ 1117.325206][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1117.720373][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7904'. [ 1117.757543][ T6340] netlink: 492 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1117.899182][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.918551][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.967793][ T6331] vlan0: left promiscuous mode [ 1118.084684][ T6331] bond0: left promiscuous mode [ 1118.093155][ T6331] veth3: left promiscuous mode [ 1118.116743][ T6331] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode [ 1118.128831][ T6331] mac80211_hwsim hwsim74 syzkaller0: left allmulticast mode [ 1118.144022][ T6331] veth7: left promiscuous mode [ 1118.169117][ T6331] erspan1: left promiscuous mode [ 1118.174679][ T6331] erspan1: left allmulticast mode [ 1118.185266][ T6331] ipip0: left promiscuous mode [ 1118.197161][ T6331] vlan2: left allmulticast mode [ 1118.202265][ T6331] bridge2: left allmulticast mode [ 1118.208683][ T6331] bond4: left promiscuous mode [ 1118.220877][ T6332] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1118.230428][ T6334] syzkaller1: entered promiscuous mode [ 1118.239762][ T6334] syzkaller1: entered allmulticast mode [ 1118.248428][ T6336] veth1_to_batadv: entered allmulticast mode [ 1118.265841][ T3315] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.286510][ T3315] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.306597][ T3315] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.317432][ T3315] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.331354][ T3315] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.344600][ T3315] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.370349][ T3315] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.389125][ T6354] netlink: 'syz.1.7910': attribute type 11 has an invalid length. [ 1118.397453][ T3315] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.406860][ T6354] netlink: 154668 bytes leftover after parsing attributes in process `syz.1.7910'. [ 1118.482400][ T6356] netlink: 'syz.0.7911': attribute type 1 has an invalid length. [ 1118.513827][ T6358] xt_hashlimit: size too large, truncated to 1048576 [ 1118.555502][ T6356] bond6: entered promiscuous mode [ 1118.561056][ T6356] bond6: entered allmulticast mode [ 1118.567565][ T6356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1118.575345][ T6361] netlink: 'syz.3.7913': attribute type 6 has an invalid length. [ 1118.583311][ T6361] netlink: 'syz.3.7913': attribute type 7 has an invalid length. [ 1118.592722][ T6361] netlink: 'syz.3.7913': attribute type 8 has an invalid length. [ 1118.606409][ T6361] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1118.627275][ T6363] bridge_slave_0: entered promiscuous mode [ 1118.673412][ T6369] netlink: 'syz.3.7913': attribute type 6 has an invalid length. [ 1118.776603][ T6372] team0: Device veth1_virt_wifi failed to register rx_handler [ 1119.121940][ T6405] tun0: tun_chr_ioctl cmd 2147767507 [ 1119.557561][ T6437] validate_nla: 3 callbacks suppressed [ 1119.557580][ T6437] netlink: 'syz.1.7925': attribute type 1 has an invalid length. [ 1119.598103][ T6437] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7925'. [ 1119.810220][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7929'. [ 1119.829968][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1119.831520][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1119.934048][ T6454] netlink: 'syz.2.7931': attribute type 13 has an invalid length. [ 1120.017676][ T6459] mac80211_hwsim hwsim74 syzkaller0: Caught tx_queue_len zero misconfig [ 1120.199951][ T6467] syzkaller1: entered promiscuous mode [ 1120.212395][ T6467] syzkaller1: entered allmulticast mode [ 1120.262590][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7936'. [ 1120.588132][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.618614][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.805168][ T6515] dummy0 speed is unknown, defaulting to 1000 [ 1121.075361][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.136672][ T6528] netlink: 'syz.2.7946': attribute type 6 has an invalid length. [ 1121.170561][ T24] IPVS: starting estimator thread 0... [ 1121.229051][ T6515] syzkaller0 speed is unknown, defaulting to 1000 [ 1121.235802][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1121.284826][ T6531] IPVS: using max 30 ests per chain, 72000 per kthread [ 1121.542349][ T6547] bond5: option xmit_hash_policy: invalid value (10) [ 1121.552655][ T6547] bond5 (unregistering): Released all slaves [ 1122.387046][ T6586] __nla_validate_parse: 3 callbacks suppressed [ 1122.387115][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7963'. [ 1122.551481][ T6598] netlink: 'syz.3.7966': attribute type 1 has an invalid length. [ 1122.789152][ T6598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1123.164081][ T6618] netlink: 'syz.3.7970': attribute type 13 has an invalid length. [ 1123.203516][ T6618] netlink: 428 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1123.412291][ T6649] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1123.897206][ T6672] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1124.199625][ T6687] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1124.209719][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7984'. [ 1124.369804][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7987'. [ 1126.140473][ T6642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1126.358860][ T6717] x_tables: unsorted entry at hook 3 [ 1126.416497][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7994'. [ 1126.418634][ T6726] xt_cgroup: xt_cgroup: no path or classid specified [ 1126.505000][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7997'. [ 1126.618743][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1126.647787][ T6743] bond0: entered promiscuous mode [ 1126.654757][ T6743] veth3: entered promiscuous mode [ 1126.662112][ T6743] team_slave_1: entered promiscuous mode [ 1126.670140][ T6743] team_slave_1: left promiscuous mode [ 1126.693564][ T6743] bond0: left promiscuous mode [ 1126.699843][ T6743] veth3: left promiscuous mode [ 1126.852059][ T6740] dummy0 speed is unknown, defaulting to 1000 [ 1126.964109][ T6751] 8021q: adding VLAN 0 to HW filter on device  [ 1126.973024][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.984919][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.033181][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.043398][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.058105][ T6751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1127.069305][ T6751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1127.083660][ T6751] veth1_vlan: left promiscuous mode [ 1127.090820][ T6751] veth0_vlan: left promiscuous mode [ 1127.097235][ T6751] veth0_vlan: entered promiscuous mode [ 1127.106825][ T6751] veth1_vlan: entered promiscuous mode [ 1127.116225][ T6751] veth1_macvtap: left promiscuous mode [ 1127.122831][ T6751] veth0_macvtap: left promiscuous mode [ 1127.129407][ T6751] veth0_macvtap: entered promiscuous mode [ 1127.136744][ T6751] veth1_macvtap: entered promiscuous mode [ 1127.148491][ T6751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1127.157072][ T6751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1127.166134][ T6751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1127.174797][ T6751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.182494][ T6751] mac80211_hwsim hwsim74 wlan0: left promiscuous mode [ 1127.193515][ T6751] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 1127.208121][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.217681][ T6751] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1127.238010][ T6756] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1127.314566][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1127.353652][ T6732] dummy0 speed is unknown, defaulting to 1000 [ 1127.362170][ T6740] syzkaller0 speed is unknown, defaulting to 1000 [ 1127.369161][T18707] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.384214][T18707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.403150][T18707] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.412101][T18707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.471913][T18707] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.493192][T18707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.523946][T18707] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.532791][T18707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.632454][ T6732] syzkaller0 speed is unknown, defaulting to 1000 [ 1127.639478][ T6744] dummy0 speed is unknown, defaulting to 1000 [ 1128.097254][ T6769] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1128.108827][ T6744] syzkaller0 speed is unknown, defaulting to 1000 [ 1128.263070][ T6783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.163389][ T6810] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8015'. [ 1129.236913][ C0] [ 1129.239293][ C0] ============================================ [ 1129.245447][ C0] WARNING: possible recursive locking detected [ 1129.251613][ C0] syzkaller #0 Not tainted [ 1129.256038][ C0] -------------------------------------------- [ 1129.262189][ C0] syz.1.8015/6810 is trying to acquire lock: [ 1129.268171][ C0] ffff88807c3a4558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1129.278003][ C0] [ 1129.278003][ C0] but task is already holding lock: [ 1129.285360][ C0] ffff88808b671158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1129.295227][ C0] [ 1129.295227][ C0] other info that might help us debug this: [ 1129.303278][ C0] Possible unsafe locking scenario: [ 1129.303278][ C0] [ 1129.310717][ C0] CPU0 [ 1129.313987][ C0] ---- [ 1129.317250][ C0] lock(&qdisc_xmit_lock_key#4); [ 1129.322273][ C0] lock(&qdisc_xmit_lock_key#4); [ 1129.327292][ C0] [ 1129.327292][ C0] *** DEADLOCK *** [ 1129.327292][ C0] [ 1129.335433][ C0] May be due to missing lock nesting notation [ 1129.335433][ C0] [ 1129.343732][ C0] 14 locks held by syz.1.8015/6810: [ 1129.348911][ C0] #0: ffff888032aed6e8 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1129.359529][ C0] #1: ffff8880a317cc60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sock_dump+0xb8/0x870 [ 1129.369100][ C0] #2: ffffc90000007cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1129.378672][ C0] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 1129.388156][ C0] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1129.397198][ C0] #5: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1129.407115][ C0] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 1129.416597][ C0] #7: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1129.426512][ C0] #8: ffff88805e3aa228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1129.439125][ C0] #9: ffff88808b671158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1129.449386][ C0] #10: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1129.458344][ C0] #11: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1129.468176][ C0] #12: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1129.478179][ C0] #13: ffff8880b0596228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 1129.490880][ C0] [ 1129.490880][ C0] stack backtrace: [ 1129.496840][ C0] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.8015 Not tainted syzkaller #0 PREEMPT(full) [ 1129.496859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1129.496871][ C0] Call Trace: [ 1129.496878][ C0] [ 1129.496886][ C0] dump_stack_lvl+0xe8/0x150 [ 1129.496906][ C0] print_deadlock_bug+0x279/0x290 [ 1129.496929][ C0] __lock_acquire+0x253f/0x2cf0 [ 1129.496950][ C0] ? fib_table_lookup+0x11ba/0x16e0 [ 1129.496980][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 1129.496996][ C0] lock_acquire+0x106/0x350 [ 1129.497013][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 1129.497035][ C0] _raw_spin_lock+0x2e/0x40 [ 1129.497051][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 1129.497067][ C0] sch_direct_xmit+0x15f/0x4c0 [ 1129.497087][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1129.497108][ C0] __dev_queue_xmit+0x180f/0x3950 [ 1129.497146][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1129.497174][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1129.497197][ C0] ? neigh_resolve_output+0x438/0x750 [ 1129.497216][ C0] ? eth_header+0x11b/0x200 [ 1129.497238][ C0] ? __asan_memcpy+0x40/0x70 [ 1129.497270][ C0] ? ip_finish_output2+0x3c2/0x1070 [ 1129.497294][ C0] ip_finish_output2+0xca9/0x1070 [ 1129.497318][ C0] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1129.497342][ C0] ? ip_finish_output+0x40e/0x530 [ 1129.497365][ C0] ip_output+0x29f/0x450 [ 1129.497387][ C0] ? ip_output+0x5b/0x450 [ 1129.497410][ C0] iptunnel_xmit+0x621/0xd10 [ 1129.497441][ C0] ip_tunnel_xmit+0x193a/0x1f20 [ 1129.497464][ C0] ? netlink_dump+0x702/0xe10 [ 1129.497482][ C0] ? __netlink_dump_start+0x5cb/0x7e0 [ 1129.497508][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1129.497531][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 1129.497552][ C0] ? kfree+0x1c5/0x640 [ 1129.497571][ C0] ? pskb_expand_head+0x458/0x1390 [ 1129.497595][ C0] __gre_xmit+0x19e/0x240 [ 1129.497615][ C0] ? __pfx___gre_xmit+0x10/0x10 [ 1129.497637][ C0] erspan_xmit+0xa41/0x14d0 [ 1129.497663][ C0] ? __pfx_erspan_xmit+0x10/0x10 [ 1129.497687][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1129.497717][ C0] sch_direct_xmit+0x251/0x4c0 [ 1129.497736][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1129.497757][ C0] __dev_queue_xmit+0x180f/0x3950 [ 1129.497783][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1129.497809][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1129.497827][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1129.497850][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1129.497868][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1129.497888][ C0] ? lock_acquire+0x106/0x350 [ 1129.497914][ C0] ? bond_do_alb_xmit+0x600/0x820 [ 1129.497934][ C0] ? bond_dev_queue_xmit+0x9c/0x150 [ 1129.497953][ C0] bond_start_xmit+0x766/0x1900 [ 1129.497984][ C0] ? bond_start_xmit+0xb4/0x1900 [ 1129.498007][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 1129.498032][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1129.498059][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1129.498087][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1129.498113][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1129.498138][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 1129.498163][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1129.498188][ C0] ? ip6_output+0x340/0x550 [ 1129.498204][ C0] ? lock_acquire+0x106/0x350 [ 1129.498221][ C0] ? ip6_output+0x340/0x550 [ 1129.498243][ C0] ? ip6_finish_output2+0xd39/0x13e0 [ 1129.498267][ C0] ? ip6_output+0x126/0x550 [ 1129.498284][ C0] ip6_output+0x340/0x550 [ 1129.498302][ C0] ? __pfx_ip6_output+0x10/0x10 [ 1129.498319][ C0] ndisc_send_skb+0xd0b/0x1670 [ 1129.498343][ C0] ? ndisc_send_skb+0x215/0x1670 [ 1129.498369][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1129.498393][ C0] ? __pfx_dst_output+0x10/0x10 [ 1129.498425][ C0] addrconf_rs_timer+0x395/0x6d0 [ 1129.498449][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1129.498469][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1129.498497][ C0] call_timer_fn+0x192/0x5e0 [ 1129.498515][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1129.498535][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1129.498553][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1129.498576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1129.498592][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1129.498613][ C0] __run_timer_base+0x652/0x8b0 [ 1129.498629][ C0] ? ktime_get+0x45/0x220 [ 1129.498657][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1129.498680][ C0] run_timer_softirq+0xb7/0x170 [ 1129.498697][ C0] handle_softirqs+0x22a/0x840 [ 1129.498716][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1129.498735][ C0] __irq_exit_rcu+0xca/0x220 [ 1129.498752][ C0] irq_exit_rcu+0x9/0x30 [ 1129.498766][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1129.498786][ C0] [ 1129.498791][ C0] [ 1129.498798][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1129.498817][ C0] RIP: 0010:kasan_check_range+0x1c8/0x2c0 [ 1129.498844][ C0] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 8a 36 7a 09 cc 45 84 ff 0f 85 a1 00 [ 1129.498859][ C0] RSP: 0018:ffffc9000e3dec48 EFLAGS: 00000256 [ 1129.498874][ C0] RAX: ffff888031184001 RBX: 0000000000000001 RCX: ffffffff84ed9d90 [ 1129.498886][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88803118405c [ 1129.498897][ C0] RBP: 0000000000000008 R08: ffff88803118405c R09: 1ffff1100623080b [ 1129.498909][ C0] R10: dffffc0000000000 R11: ffffed100623080c R12: 0000000000000001 [ 1129.498921][ C0] R13: 0000000000000008 R14: ffffed100623080c R15: 1ffff1100623080b [ 1129.498936][ C0] ? nla_put+0xd0/0x150 [ 1129.498968][ C0] ? nla_put+0xd0/0x150 [ 1129.498992][ C0] __asan_memcpy+0x40/0x70 [ 1129.499012][ C0] nla_put+0xd0/0x150 [ 1129.499037][ C0] inet_diag_msg_attrs_fill+0x103/0xbf0 [ 1129.499062][ C0] ? __pfx_inet_diag_msg_attrs_fill+0x10/0x10 [ 1129.499085][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1129.499105][ C0] ? __sock_gen_cookie+0x161/0x200 [ 1129.499121][ C0] ? inet_diag_msg_common_fill+0x16a/0x380 [ 1129.499144][ C0] ? __asan_memcpy+0x40/0x70 [ 1129.499163][ C0] ? inet_diag_msg_common_fill+0x16a/0x380 [ 1129.499187][ C0] inet_sctp_diag_fill+0x803/0x1b50 [ 1129.499217][ C0] ? __pfx_inet_sctp_diag_fill+0x10/0x10 [ 1129.499240][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1129.499267][ C0] ? sctp_sock_dump+0xb8/0x870 [ 1129.499292][ C0] sctp_sock_dump+0x461/0x870 [ 1129.499323][ C0] sctp_transport_traverse_process+0x377/0x490 [ 1129.499349][ C0] ? __pfx_sctp_sock_filter+0x10/0x10 [ 1129.499371][ C0] ? __pfx_sctp_sock_dump+0x10/0x10 [ 1129.499393][ C0] ? __pfx_sctp_transport_traverse_process+0x10/0x10 [ 1129.499416][ C0] ? sctp_for_each_endpoint+0x157/0x1f0 [ 1129.499440][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1129.499458][ C0] ? sctp_for_each_endpoint+0x157/0x1f0 [ 1129.499480][ C0] ? __pfx_sctp_ep_dump+0x10/0x10 [ 1129.499501][ C0] ? sctp_for_each_endpoint+0x1ab/0x1f0 [ 1129.499525][ C0] sctp_diag_dump+0x308/0x3f0 [ 1129.499549][ C0] ? __pfx_sctp_diag_dump+0x10/0x10 [ 1129.499574][ C0] ? inet_diag_lock_handler+0x8b/0x2c0 [ 1129.499597][ C0] ? inet_diag_lock_handler+0x8b/0x2c0 [ 1129.499622][ C0] inet_diag_dump+0x16d/0x2f0 [ 1129.499647][ C0] netlink_dump+0x702/0xe10 [ 1129.499671][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 1129.499695][ C0] ? netlink_lookup+0x30/0x200 [ 1129.499712][ C0] ? netlink_lookup+0x30/0x200 [ 1129.499733][ C0] __netlink_dump_start+0x5cb/0x7e0 [ 1129.499756][ C0] inet_diag_handler_cmd+0x1e0/0x2c0 [ 1129.499779][ C0] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1129.499802][ C0] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 1129.499823][ C0] ? __pfx_inet_diag_dump+0x10/0x10 [ 1129.499845][ C0] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1129.499867][ C0] ? sock_diag_lock_handler+0x19/0x290 [ 1129.499885][ C0] ? sock_diag_lock_handler+0x19/0x290 [ 1129.499904][ C0] sock_diag_rcv_msg+0x4cc/0x600 [ 1129.499922][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1129.499943][ C0] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1129.499965][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1129.499990][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.500009][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.500031][ C0] netlink_unicast+0x75c/0x8e0 [ 1129.500053][ C0] netlink_sendmsg+0x813/0xb40 [ 1129.500077][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.500099][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1129.500120][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1129.500143][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1129.500163][ C0] sock_write_iter+0x49b/0x4f0 [ 1129.500188][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 1129.500211][ C0] ? __futex_wait+0x371/0x420 [ 1129.500238][ C0] ? __pfx___futex_wait+0x10/0x10 [ 1129.500265][ C0] do_iter_readv_writev+0x619/0x8c0 [ 1129.500291][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1129.500318][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 1129.500342][ C0] ? security_file_permission+0x75/0x260 [ 1129.500358][ C0] ? rw_verify_area+0x255/0x4d0 [ 1129.500382][ C0] vfs_writev+0x33c/0x990 [ 1129.500402][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 1129.500425][ C0] ? __fget_files+0x2a/0x420 [ 1129.500446][ C0] ? __fget_files+0x3a0/0x420 [ 1129.500464][ C0] ? __fget_files+0x2a/0x420 [ 1129.500486][ C0] do_writev+0x154/0x2e0 [ 1129.500504][ C0] ? __pfx_do_writev+0x10/0x10 [ 1129.500524][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.500541][ C0] do_syscall_64+0x15f/0xf80 [ 1129.500560][ C0] ? trace_irq_disable+0x3b/0x140 [ 1129.500584][ C0] ? clear_bhb_loop+0x40/0x90 [ 1129.500603][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.500619][ C0] RIP: 0033:0x7fe3f199cdd9 [ 1129.500634][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.500648][ C0] RSP: 002b:00007fe3f277a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1129.500663][ C0] RAX: ffffffffffffffda RBX: 00007fe3f1c15fa0 RCX: 00007fe3f199cdd9 [ 1129.500676][ C0] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 1129.500686][ C0] RBP: 00007fe3f1a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1129.500697][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.500707][ C0] R13: 00007fe3f1c16038 R14: 00007fe3f1c15fa0 R15: 00007fff2ca91e18 [ 1129.500726][ C0] [ 1130.487778][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1130.496349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1130.626368][ T6811] bridge0: port 1(team0) entered disabled state [ 1130.632802][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.831985][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.183012][ T6811] erspan1: left promiscuous mode [ 1131.323959][ T6820] netlink: 236 bytes leftover after parsing attributes in process `syz.3.8018'. [ 1131.344901][ T463] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.360499][ T463] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.372369][ T463] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.381277][ T463] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.390409][ T463] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.399110][ T463] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.407782][ T463] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.416720][ T463] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0