last executing test programs: 9.721195443s ago: executing program 4 (id=3113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x801c, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048841}, 0x2c020004) 8.841100256s ago: executing program 4 (id=3119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x13, 0x4, 0x70bd27, 0x25dfdbfb, {0x1e}, [@generic="da5306736d52b3a37e248970a0ed97d54f36933137314abfda3d821cda658d822daba44adeb81b927541cf976cb91dbb49b46bcf84b5337feff28cd08c30a123b763dd6228824ef99eb0bbae94f0637096c475a21149b8fe532a5986b30c205f25dbe2bf9e01cb83a8356afd291b9a7b8b2821069ac18253a517f9e655a0398c4c4bc856ff5a3a0ffd8cff44f542b2f669d02d8b3c4a04030b142766070a9cdd3dccc7fa2992950a7ebd94867cacab9cd543411f4788d0d29f475722a351c9fbd76451ace062aa49d8745329ccf932e573bb0d"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040041}, 0x20004004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000005010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) unshare(0x4020600) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) getsockopt$inet_tcp_int(r3, 0x11e, 0x5, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000200)={'batadv_slave_0\x00', {0x2, 0x0, @multicast1}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x1e8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x140}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @loopback, @loopback, @icmp_id=0x68, @gre_key}}}}, {{@ip={@private, @local, 0xffffff00, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x62, 0x0, 0x7}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610444000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8.725298214s ago: executing program 4 (id=3120): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8.452541755s ago: executing program 4 (id=3122): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x3, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') unshare(0x8000400) unshare(0x40040200) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdadb}, 0x14}, 0x1, 0x0, 0x0, 0x44005}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, '\x00', "56df2295bfda5c4f9fecff61beaa8bb4", "a28265eb", "7f1f1c2ab4421d27"}, 0x28) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) socket$alg(0x26, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @link_local}) 7.071300895s ago: executing program 4 (id=3132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r6, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff"], 0x110) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 6.33328198s ago: executing program 4 (id=3137): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x1c, r7, 0x1, 0xffa5, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000340), 0x0}, 0x20) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xfdef) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d6163ff0f00000d000000000000638cf16214a55f1bcf0a4ec75b31ce58cfd82d1e0e7b387f3c1d4437dd1dbf2dc597ca16b2bffc58b3a8e0588edecd521efcf4747f846dd6fcf7f6f4b7d93d37f5f7fd40d9895e22d7573df13cf6033ed5ac189b488e73d7fbb9999d55a768f7ec83af440000000000000000000000fd264a81d33e2ccca07c726ffd84c305522c8c6eba07f0f77044cacab40fdf3bd2232f6d11feca9016ad5faefcf4014f2fa6fdd7ed176d82e36b96593a995376791bf91c52d5294047b4a616f908e843179c6a631ff8371739683d6503b6692de9e21c366aedb569db69f755ed53f68a4c6c0a75e33810f595c868fbdde4bf5994fdf404104c44c04f89f268bfdc04244ec4282d59220b30137663b5f394354b66e40d0b0b4e87f7ca"], 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420004d9c000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085252583"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.068035462s ago: executing program 2 (id=3140): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r1, &(0x7f0000000040)=':+{,**\\*\x00', 0x10002, &(0x7f0000000080)={@align=0x8fe4, {0x0, 0x6, 0x1000, 0x561b68b8}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'pim6reg\x00', 0x200}) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x7, @any, 0x7}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) bind$xdp(r5, &(0x7f00000002c0)={0x2c, 0x9, r6, 0x3c, r2}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1d, 0x3, 0x9, 0x2, 0x40000, r7, 0x7b00000, '\x00', 0x0, r8, 0x4, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x7b, 0x7, 0x5, r1, 0x7, '\x00', r6, r8, 0x5, 0x4, 0x3, 0xc}, 0x50) ioctl$FITHAW(r4, 0xc0045878) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000840)={&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000500)="9a153d6c89aa350060a6bac28fe893696423ce5c5cb3f6a64e7b2f172b8675cb58112d9e0e56794da6393f709dc85280cb51d975fb3d9acde53cf3b240f20e0d338dfdd83f", 0x45}], 0x1, &(0x7f00000005c0)=[@hoplimit={{0x14}}, @rthdrdstopts={{0x158, 0x29, 0x37, {0x67, 0x27, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x3, [0x4, 0x0]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @empty}, @generic={0x2, 0xfc, "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"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0x2, 0x0, [@private1, @remote, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}], 0x260}, 0x2000c885) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000880)) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000008c0)={0x0, "59eb619bd46430db565f94f7e4ac635f"}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000018c0)={r10, "a345a0b67c2aedb0d66ee44ac63ba9d1"}) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r7) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x98, r11, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1fdb2db9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1cb1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8001}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x600c000}, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002a80), &(0x7f0000002ac0)=0x30) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000002b00)={'ip6gretap0\x00', 0x400}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002b40)=0x0) sendmsg$nfc_llcp(r7, &(0x7f0000003d40)={&(0x7f0000002b80)={0x27, r12, 0x0, 0x4, 0x0, 0x8, "f6ad56b835b72158193fe8b105a628459fb31da6b8ed8f68ac80426868ba51e9d2236869b003a17dd708b2d7eddf7b3d7b34b09e26a346c5b5c52be0dfc5cf", 0x3}, 0x60, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="20433aa840c004363659583b9c12ae54e2c54956a74d1bfb4757b833d1e0d21d0b28d4289a3a5343e3de01d5f96f6ae02633932a743184dfb89aa47078bc5df3c11f67829609078c4ea535cf6bcb3f900ab1cce15646c2a80fbc3aa45a8e0382e80e5710e99f162ca397cd030dc060dba7606fdae9db84d732b91f1faf20f5de7f1335a46ebe3c64433bd520128010", 0x8f}], 0x1, &(0x7f0000002d00)={0x1010, 0x107, 0x1000, "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"}, 0x1010, 0x92dc8938e0780e}, 0x49c00) socket(0xa, 0x800, 0x9) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003dc0), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x30, r13, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x2000) 5.800499919s ago: executing program 0 (id=3142): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x5, 0x0, 0x4, 0x1, 0x5640, 0x0, 0x10000101}, 0x20) (async, rerun: 64) r1 = accept(r0, &(0x7f00000002c0)=@can, &(0x7f0000000340)=0x80) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0x2004e805) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000006c0)={r1, &(0x7f0000000200)=':-)\x00', 0x12800, &(0x7f00000003c0)={@_ha_fsid={[0x7ff, 0x9]}, {0x7b, 0x3ff, 0x7, 0x2}}, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000000c0)=0x6) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0xa283, r2}, 0x38) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r2}, 0xc) 5.502053932s ago: executing program 2 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async, rerun: 32) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000003000000000000000000000018430000fdffffff000000000000100095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e24}, 0x94) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x40}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x79, @loopback, 0x81}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x6}], 0xb0) (rerun: 64) 5.384668499s ago: executing program 0 (id=3145): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000340)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x7d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x458}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 5.139966278s ago: executing program 1 (id=3147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250200000008000100000001"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x3, 0x0, &(0x7f0000006880)) readv(r2, &(0x7f0000000400)=[{0x0}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="1400000016000b63d25a80648c25940121048205", 0x14}], 0x1}, 0x40050) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000a91000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unshare(0x26020480) (async) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl(r8, 0x40047438, &(0x7f0000000040)) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) sendmsg$unix(r5, &(0x7f0000000f00)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000340)="44c641e87c8b09637bc3621b8b35e2baae26cec024", 0x15}, {&(0x7f0000000480)="ea00baa71c592396678ff711a01809c23f4a18906d089eabc9d462df80ce6ab41a89d870e3171d12db15f76ba60c4a08c02aa03dd97f3cfcac8341be57d128e35a3395f64bb2ac27c7e5784903c5ca6d969eb8659e59beba4fe8770ffb315061ce0082bf282943b0efcf3d8c2bcc77373276169bc780dd1b25673c10f5d92cc6618fda20ad324ba41280ac6611b831928edf38ed124114db10644ae648182b45a41b0a2d0101490e1d8eab48d4376c0aff6f23a2ae6f425f", 0xb8}, {&(0x7f0000000bc0)="ec9a6c9aea0f472908560c3974b7ca6e719cf2485ddb0fd68436f1e536d05d532ad2ba8d69d02fccf0eabfe98b0e34b7bef4a5dd261fa46aad9506a3891f1ee6b52aa1cc87cd6fff9da79591d1346f542d1e78151013fffee5e567b7aeb23ae57144697708e9392a40d7d2c91f65b28decd5d3f95bc841d4ec92b32f4d46ffc01a611592950f7b9bbf7de42e076ab6bc8f6f1b750359e1e52256cd95965b87dd28c0be83d1f3bb18fdb1f375f82615db58e7773aded910da1e637f895ec6d5b2951310d9dc9c176a98304bf5992ad04fdc3f87d3", 0xd4}, {&(0x7f0000000cc0)="e8074c3f591fc8da79c16718ab1130743795dc9582ad53976d349f9b7e", 0x1d}, {&(0x7f0000000d00)="5e2f378d867974ea7a060f64163cec00c06279c9f760fed2a825f1f5091772f21245cfbce58c03239126d33327651df3afe081f937da24d6afe798f2ba29f017c0996637c03427ea30f12f37e7375a5e03eb878d06246c874d79", 0x5a}, {&(0x7f0000000d80)="4899dc150e7dc567bceb02171645b885e1cfd00a74b27b89583f691a04209b8eec391d750b9e3219c7b4abfd9e5cc485d9ca15a323e358c9741488e83da56a790d59719726f45f9edc2d3876e155fbd460031488027b7a63fc2552987e41ca80c21c0c4c85064f9f3ecd89f45b27522b5468b180be3581926574bd4159a25d199a063d5444186d48a21c6c8ea7ae686b2d5e741334b9f967200440247c87328541afe8dad6ee9a50d296cba76865effd4d457e1a86587b3e7549b277a5d3879b48b3029b87e357e41cc83ae39dff1dbc6aa64c12c0781b60f70caf89a2de05c5b64555e1c12295d5473f6ebcf8ffc4385f44fb44c29b", 0xf6}], 0x6, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000007c0)={0x0, 0x10000, 0x2}) (async, rerun: 32) socket$pptp(0x18, 0x1, 0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f00000001c0)='%pK \x00'}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 4.806303561s ago: executing program 0 (id=3149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6c, 0xfffffffffffffffd}}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1008, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r7, 0x5) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r6, 0x5) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x60, '\x00', r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, r9}, 0x4) 4.63854682s ago: executing program 0 (id=3150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x8f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x64) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000040)='\x00', 0x90001, &(0x7f0000000140)={@align=0x7, {0xc, 0x10, 0x5, 0x800}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x8}, {[0x1, 0x5, 0x7, 0x7]}, 0x10001, 0xfe, &(0x7f0000000200)=""/254}) r2 = socket(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711041000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000d5}, 0xa890) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r10, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xfffffffffffffff7, 0x81, 0x7ff}, 0x46}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r7) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4001, 0x0) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="270302009c0f14000e0003feff14c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004005) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0x0, 0x5}, {0xfff2, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 4.556717406s ago: executing program 1 (id=3151): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x86b87}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 4.158838208s ago: executing program 3 (id=3152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x102b, &(0x7f0000000a00)={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x8001, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "c1f2", "84befb", 0x8809, "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"}}}}}}, 0x0) (async) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) (async) shutdown(r8, 0x0) (async) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e0}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="36757d4f71fc47448383b7cfa4a80083b695e6eb990e8b9ca1a07bc29e", 0x1d}, {&(0x7f0000000140)="1eed681884b5230ffaaa8b917a33007590ff2dadf08555e6769307a8c039b32adfbf7c75623aa06f9bd15069d032e16ac996ce90b782f77042ff0345758e327c3cd3750d321bd15e9bd726d65e080a2284f77e07a15bed07dea149f3ac4288d3f9d82219297967b9f2711b0405ef253302ee217ff33409321bcdcc5594bf5071dba45521c2a9b127ef92d3d1fca4f86bb1752bcf693c21ec73013f98342244bc85b2947e3f86ec2343ceb3af4711a1a59a979a5ab1d0b8b9a77726cc6a2635dd189cead5909703ffb86ae9287409d8cee0fb6411c17d958337db937b3b1d185f810150cab4b08ddffcb2341efa5d497790c1dd50fcb8cc2c8d", 0xf9}, {&(0x7f0000000240)="797ef4a6229f725d7c2d1c5ee5065639179e19e7bd643ea224e91eda1c03e32e8e8ebc4630dadb36cee65db11d3fcf6530074cd0bd38014641de34d5", 0x3c}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000340)=[@iv={0xd8, 0x117, 0x2, 0xbe, "7bb5bbe880fe80e822238df4ea759d66baca622ad6c3225e9e4811114a65c710cf91b471e20a07442ed4cb42bf79789b825302f4ed9de1cdb11b332760fd3f50883fa9ac5c44468d176472822e8fb9eb080519187e39047adbf47d245b80aa39f8b5490b8fe9a961dc316114253a98d95c50d28d8e10a5037ab6867a082cddc0d458ae41a57e74e1c1c6a04ae63d8cdd7ede15160f251774fc0e547d1f42be8ca1c14f5145134da999dbf564adff4735bd8185c302c0618568bf22899268"}], 0xd8, 0x80}, 0xc000) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000280)={r9, 0x16, 0x1000, 0x80}) 3.819289424s ago: executing program 3 (id=3153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x800000, @mcast1, 0x7}], 0x3c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 1.44444195s ago: executing program 3 (id=3154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc011}, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x8, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8000) r6 = socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0xfffffffe, 0x7, 0x5646, 0x151, 0x10000101}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r7) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0x13, 0x0, &(0x7f00000005c0)="07ec0c191cd2749bf8ffc2c4257f078b3909d0", 0xfffffffffffffffd, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a1c010200000000000000e4adb933222c38334eebe696650007000000020002400000000214000000100001"], 0x44}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) (async) sendmsg$inet(r6, 0x0, 0x40008) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000160a010300000000000000000a000804040003800900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a80c69a6293b93dbf03ef3d8e3cd2f442d7b58c1f09ab84505641a80325279a7efae9eaad5368fe157d80fd83c3140e2f5b34bbebb22e7e3249d809cd77ee3ccfd9fe01b25b1e761408ee4460034b6e9a6d7ccc44dbfed7e9c586bac2420d73a42b45efdef1d07923b63455fac768755d287520f5c7b6d6bda376fb17c240cc09c174160da9deb376e98d0f20fec8a489615f6217f2530d48d24b479ab5188bd3"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a000a005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.443802194s ago: executing program 0 (id=3155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x100001, 0xc0000000}, 0x100, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = epoll_create1(0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.440322343s ago: executing program 2 (id=3156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r0, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r2) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) (async) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) 1.416344207s ago: executing program 1 (id=3157): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$rds(0x15, 0x5, 0x0) unshare(0x8000400) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 1.24613391s ago: executing program 2 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0xc}, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r3, 0x10, 0x7}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r8, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 1.093374131s ago: executing program 1 (id=3159): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg(r0, &(0x7f0000000b00)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x8001}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="71f0d84acb8a7e7e6e87bde9a335f362f824a041b27289b59f55abe87d4845a36a2514686a2bff3898a8bcad3e5ef00506364d2af5888699e5c47922233af31b7fb2a3669ec3e86d0db9bded21ef8f9f2569684adb790b2e6bc2d733a12ba10a50123b270d9bc75677b7110816bccd2d61edc1f8d8eba5ed3920a5f149f7088eb68a6cff03be205e091a2501a5dfc5d52b24f5a3305cc4e8df228ca6a1d99f5ff0ad734902eeff3bdce023520f763bf047685e18c6018490f0e9defefcdbd5b45dfd5d828f452a167860ec0c284c2cc2a92757a4f677", 0xd6}], 0x1, &(0x7f0000000780)=[{0x78, 0x10f, 0x5, "de009de38fd224c7cd3535967de29139f3ffaa57b4ab43cf432bdc89eeee60ccfcbd2c536fdbb3d9776a0e95d17bd8b9ba525cc6171ed04cea39c7f7c1949f48e4cd1e86801c30a1e6694f6623062b3ed9c6905da0b452796d0b648c9c8e21c47ae2f0"}, {0x80, 0x10b, 0x7, "0dc5c1e678e0b92b826297c5fa69ddab0552b99d119a0680bf12476c3723d477adc1b1e9c0a4ae1726c2a95783839b8dbb484a8695e7795c5ea9903511b9bde672ec3e32f381e86fbf477b1b81161647aca05ad74673f3e208ed5af2ad4320cc0da0a1124a50662602b3"}, {0xf8, 0x138, 0xffffffff, "9a3cc821952d57b8c96915561f43fc2ae85e3af01011977055ae7832e28016f16629d77783855027cfccf4ebc81df03684f8028723126b4b2eaaed83f4562e0ad0551c854e6e7618246da49fd33a562c8578f6f5cc968f5ed8d677968596b25d15b4c5cb6f7cd83f3bd867ed7e6e08f5aaf57afc64a0fadc56c2d0f90cd9201fee584abd67c653595c049519aac871395b29ef10b2b5d94f3f64e767771526988a27f38e7eedb7c54253b1f0b2693c5a8d0fa148e9e017edb121594c6bc564209a5d8ab9e9b7b1d0d11f7aabf37e82e38451906c614c11b0269f003aa65de1360abaa77f7f"}, {0xc0, 0xff, 0x6, "18fbfdfd555bf41b3c6969c208782f19708a376819abcbe7be2f97acdc1dfa6ff1ed29f3538d953115d92773307b21e9dcf0bd895fe5b442f4353e8d9bbe8922ef91c51985eacd883e260ba9d40e1b2c6672753f6ae63bd86cd0bf9ad761f35209df85b219e3d0fdbc423be5048ce062a25948211e4d708c067abde66b68603eaba7775d622e4d7d7522caaa8cb54ba33e8b27d80b36579fa5340a6e14c95005fda9dd46ab8a64847fac"}, {0xb8, 0x10c, 0x0, "c7c96c0835165783b7b4624eee8f4cbb93d762bad54bc36fe29199d28cc0b015cd86c2a7a84a51d6acc6d8d1c9ac37ecab7e649aa2725b8620ddfa2ad561a32bfb7a260df72907592cbd08f4a63174985384d24b262b010c32f5dd5c16501ed175021da604fd0d18d92f3ad970f40ed3f5d5f3166e541610083bc68ba503a7e6d9c67ad363095a10e2efc39d045d06d4d00c850e1a3aa9316fa3abe3159dd4e5e6928b6f9b"}], 0x368}, 0x40) 1.087023028s ago: executing program 3 (id=3160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x60, r2, 0x2, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40084}, 0x240208c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240080d0}, 0x20040000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdafc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) (async) write$tun(r1, 0x0, 0x22) close(r1) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000196c0)={&(0x7f0000019480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000019680)={&(0x7f00000194c0)={0x188, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32=r0, @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket(0x40000000015, 0x805, 0x0) (async) getsockopt(r1, 0x114, 0x2717, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, r1}, 0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = gettid() sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0022000018430000140012800900010076657468000000000500000008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) 1.005394034s ago: executing program 1 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r2], 0x24}}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x18, r5, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x702, 0x3b, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab50", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x0, 0x9, 0x0, 0xa, 0xff}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200}}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x7, 0x0, 0xc0000, 0x1, 0x4}}, {0xc, 0x2, [0x2, 0x27e1, 0x5, 0x3e]}}, {{0x1c, 0x1, {0x6, 0x80, 0x6, 0x1000, 0x1, 0x81, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x8, 0x3, 0x3, 0x0, 0x0, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0x2, 0x400, 0x2, 0x7, 0x0, 0x7fff, 0xb, 0x7]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x44, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000002c0000001d2bffc1264d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r8, 0x4, 0x9, 0x7, 0x3, 0x40, @remote, @mcast2, 0x8000, 0x8, 0x771}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003340)={&(0x7f0000000b00)=ANY=[@ANYBLOB='4(\x00\x00', @ANYRES16=r5, @ANYBLOB="000325bd7000fbdbdf250a0000000c0002800800020059ad00007b000300852af9412a259ee224acc62676992bd4acbdb90be6fd7d7e814224f85cb64eb82f63c0eb5673c01d07b79d3d14d53fb21b94fff3e5ca1e5127731ff6ebf5e3dd9b667ddf6d9a9a56392b4ce63da88bb9303781b78462bcacfeb94ebc7b28e93ee642462bc7cbd519e9df82b02e8742664da847fc6bcc0f00e0000300c9edb18e467bc529fd48c8b2ae5139cc5db0c3296dc9aa3dde5ca07088c784cff13fe962d588fcc29bd382b09257a312929ac6e99e43d1e8175f6124171d89807e73f44a5aa7d8a388edd7beaeda11b2bccca2a5bafc6cd3b48f66be19369279e424ac5523537cd5ce6cd4932c81fb42ff17c0b1e72f2b4211fddbd1ae4822ec95fdb5eb93ada9934dd5c201cf5ddf88bf5ac28fe779afa17ab3983f518d3612582971d81698c426c8f9950fee3f8ccd874b218179601bf35488e43f89d81c7ad48a1cf63faf07b823a93f6c99107995612fd3218a211003565ea29f940002808e0005006a303fa3d0b6f0b1d9619b806490a28530f636d112d91418afc47226c06abc38e034ab0cf70c4428f1dd2c6d61e09dc746421e869d6b8c945ed220d1e0dd34cccfc71ac947c6da591810e7e0c491c33022315800d664bed9ac03c1b02bf3657db8000a740a419782c750715c3fc18cb154f9c1a59d81ab05d7210db22b39f6dbbba04d9b6a38c221ce0f000058210280f80005007e147519e2fbc8d0e422a94429f75f3e0f44f9f8c990a5491d2c847000c3e6c906a6100a92cff18f89bef6208663aa386897d44d2f8754dd9e42fa37f203ebafc9d538251be324e8601528ca9adec5c48474bc888cea9969d4de8cebaae599e7fc97307b19957af5d9b4fd1bcb4b35a239824e651a653dbd002bee4475173c214e3733d6d2bd52ce1dc006451b4ca99130e0cbb5ecd8476573865037d31a752a4833b748e8c821503e7b034426b0b821f4a4b8e0440fc95d990d6b4d874c7c86f3c594a8d58b10ca027805774df924d6ef4e9e5c5c3249f292410ec5b46bd684293d34ca832c3b49f150d22d1a23beee6534595704000100080002000400000004100500d6c48191cd1f5d762fa6ccbcf58d6297cdc1ec15110ebf9f345c1682490f183d68872b48a44bd4a0c555ea1c448bbe322e79f28d5a17399e26b10ae0a86b7889f3654db4c8d158835c02b9205de23ca812fc57f6ddf0c29f552204aa7980961ebf7139943e336faafd668e5aa155d5b7689b77ca6dc6e93b79d4db9b2dbd672ed84286089ce035b65e2572639f449df09e3966600fa13176706aa4d267add1816ac5ff3f8c3d1f6ab5ccc8c27d2a5024600524542a0716c39399a785d63b488e24789b8c2a1c3277a59ff54455f0a06c87a8fcad1e0bfdea07fd63cf82f3b3aecb214270c163e3c9512f11f6f08d1be6b896144ba0c1297af9922c78e3ce4797bb322bbf2f26f2d365c15ad033a4031efef8f6d992a3841c50dbaa8e6c2181c81585c1f78a1b4f5622fbac87de89d0a4efbc81edee41cd7fa69c76f7cf70c4b40eea1a4028c450fcbff5c18afc8cdf68828970d13ebc4f6cf876e4b4e82ec75f5156254f551bff06984eec954fc29dc3a23072fd7b073915ba08f95d4b31de93ad8822da75a52e800fc70363f00a5ba929103589f34ba90bee8341568888a5b21968d44526d325a533f8f68e6bd182af0e556fe5d87339b69a30e65e3c730305227bd0708acc409912f9b30cc3933b737c68eeb3c94c6b6aab7c71b296240d6072cdc34957af3cdeb6bdea3b16e86639ff02f55ce6ebac16809a18da1841cc96eafdbdc503c1b5ce33d9d73c424068550209b9783bb51ab8670d96e6e0fda67b247545effe6893d2baad38dcd85fb3c2d6db3a2dcd0f458d8bec7ed8c2287a21761cd6a4abdca602d9feae646132602718b34ff96c21cff846a748a1fc575ab52c041b3ef19c337f13c532da424ac694203e6c365d15bb3462afd136a46800054bce78164950a8ff6aa4243ee90a640d0d9f157cf2ae4355311aa7acce69944f0f76c5fd5b4bcf050da8a49e39c531b8af705fb135e8737bc837a36f0e02ef422148eaad19481d371d298a87b3112a6ba199463d367308ba6ded95e1c92ac214b502718a93fe03c9901ddf11f73315ab9ad92ed2ea8926ac485b8f52e9e869d1ffff41829a055561e3485c960469652c9c0e51e7cd1a844967da5fad788ace8dcd9e96e4946e2dbf575c51ecd680692e24212363fbfb539ad01d7cbacf8b0e7fe4194bfb90b0d896bd9de36f66de0f33b88b677765d5579f9406769133a8c91b5a44737e1f5ff434baa1777c45007658ad22deade275b8845abe549ffbc313db1ae235f752ad6cdd2f0f36b0bf750defc2ccbb665817d04f9be19cf3afaebe72f727df3e4143aa034bf2a4a338aed116d87f4803baabb8c77bf25d8ccd0024830fd4c0b5cd35ef0bcab4cdf332acc59272934665b5535ed83f1787d6b991a5d7f4c374bbe365f41881715185ec25d4eb25eb8c65d53d0af24cd17467999de62e146e1e54a5102e59a53fe9fb236c9778266ee51af6d3bcf092c9a69809086e87a86d7fdcb40db396421ae72240b4fe4af5bb525f31ffd9d83bc80fe711e3e1dcfce76a7a1337d90a57bb5993a336c50e81da7532e73dc75830d578fbb03374f93075516a381ba38a796b42b9d19cfdcc2514bcaf3439175b425188587aec7c9bcef212dc1675487232929a2cffaf86e9b7550f0306973bf7caaee8f9d93a96830c98706743fe19a94d4a46fd260fd6d72646214c60103bf1ab9393a1fb9363fd1bf3be3a9fed2acc8daecc9fd7939545c17b0b1dca886952ba9cea715b32b11060ebaa8fb65d52c87c645570e01d9eb3770a40676a27bb2532281d20ee8074e462eae8e8b1a442179af170ad2cca55969f7320543d198bf79048aff8fd13aeb9c1111cfe63140bda1a1c515aaa33730f21efabb54fbcc82184d7fcb14d03c8b34d6745e55e34c86af61bd9071b268e7bb52aba540339e32265e70d437b0d07c40dc35c0f383d9eaba18c6c7c6416601108825c1e84bd640b65d819bb43a029cb6abbf9501e61f96eb8943d5ed9e31ba0bcf1560dd7690f1990af4d6ab80e2e6b020250a0b4de2ef895ae1e4ed7e86d4e0f7310d63d9a9eadafc4db79a6ef2b301c9ac540ab5445f6932310d9a171eb1020f9a1a0b05872858ae24ec763ea6fb027f6735eca36669961f14caae7682273dd1c5202a786adeeaa1858041e9f9095db574981aa152a0618d7cc56cebf974d64abeda293696cbe09f77d3ead514d646b5f28ee892d2456ac5e3be1a4c3a5214d0777d151c1ec4bf1a1f30aeb500b68d396ab8e1a43d54992d55de8d621eeee9ed9cc1b226826153b6a8273a50255a3ead37f6065329289624fe331af13852e32f2dd53e3f42d307548257585d39e097e875e102c3854a6254cfb596f41eb1f86bd1b2a50f73a3436c87c4f41bac01787276c6a44b17367d4e942f0a07d1caf45783538dd7c375fce0daace824ce29ec360de48f1e0241819f27dad15a4bc5145d949fa7ac2b087471b7b8ac51d0db90332d5b815f9cba417250e4e77e9d4260537f97af6062e314849eb25e47dec2e0c4e839501c02ffa38f0167e14f577b7dcfca3a991e607d59aac78c7e931bdb24122e58d90be36fa6cd69755d243960fe0777cf277f37fdff297cf971456d4060cf7972d2fa48a68af4711d4278903827313fd16b5d6690772b0f54b694b0650d887c27dc0657fc106ac18af3dfa99f4160b27bc79f02a23d11147e1445ecc463f4ff14067efcf484dc7a2d0a9f8e3bff8293daecdf459d97e22fd485c38f53886cca2795e1862304f10cf9875d0367641427c6fa328d4d94fe12dbdfda8412a73a2886d757c27d9ec3a8a0fe5e25deb20207e630655eb89f032aec14d3f6f270c3e2a675c7331691b847a546ee0bdcaab5a3fad2125125b53658fc65ca554d72955d7ad5925fec3e06698c30e52ccfca21c24c02f9f6edfbf1369bd6e40269351a13d4ffed7dc9bf9aa861939d541ddace3c295e60243c0dcbb9efa4042f3be0554d64729de8de1d13e41b60037cab2225ffa3eb3dc923481084c3074b81fdfdabc95a82be0dc82df3e07c30b01986afbc62956e72d2389b884eac6018b5f04533ff9b1ea9e47d6810df3eca5ea7f1a4eb6214202533ac0e941d18e20b461b656a4b858f2a23debafdb0bd46a4b26941252e8c5e1842e9d9bd283749bca732049c1a3e1a236b236283213dcd183d6741c50f56c62a3ad9d2212b00fe283ebdc737e31ab9b5bfc11d6ec8c1d02395ef6e428687a5f96a8683197d3bb0f2ef745f117c4845f958ce64596552f4379559a505e8db42a9085cdd08a351a0ff1f08f5c806516a154b788d23cc17f612b916b6d9a9bb711ae5e23b674354b37468e450f819bd88fb1a75be5eb0915e41569f8f6ffcecc4d570fd62bbd642634ed66d700a6f4fbffe3d7ca2498876026eb6ffbdb7d66278e33b6762f5705f0f5c8b4da8ce154ba141d27905f50d9bc09989a407cd03271a56a7e396d51a4084379f08c11e5e351e78cbcea08fb15f9182437d4ca54ba6d2e5caaaf9ca527741f709cfe1bd4d0a82b6145354ab382c16f34bf8a2c717e1cd2cc5983487013583a9ec915c30d915d5b31ebfa64c5e25908c543e305b02dfe9ff4347a34d334e955f871e4c387a2c693c1c6f878002f498c45a439886d8767ad336edcc8725353d785a3c83dd8cc0331516a71075b991bfd6ddc11b0dbe36c6b8ddea8ba80fd0fbed1529ea99702f82a43177aa831c9a32cf410399f4f2fbdfda10dfac075b266bb39ec924ecdad27f24c1af03cc480737900e908f32567249b6dc396de8e55f6a04c7fc09d18cc64fe6bceaf21b5713fc637a560bd4e773abd58de044cfe4a1afefd57a09552185b4f334b5078af08a5400d2c13eb0b24972d79c03ef2542c89b1370311915ffce64d0ade89eea3683275b8da98c4452ab8d54febfeb9347a834ccf3912ca262368bb19a3db903c5cb842bab817cce45093b095f2d43b3553030e697b9987bd081fa1dde0e3563fa79f357b8c8437ab4d834bc15f62cafc75ca140065eefb2b4e299e5f6a970edb4f25d6aef9c01933452ea6deef8c83b76a7b9ee8494f90e1877fc7689fb494479e00481dc736c61211628ed2ab48127cecd8d2243a015063d48e538a87539016a5f6e010d43cf1dc82d7b87719eb7a72df8f646a904689593b097952f696d39f0eb72131b7ec5b39cfde125d8f85245601a885547cb5e2582706ec64b3c4f056132f2f67f54d9f631f66b35f09770ddcd63d93a6e52cbae007237a0544e4d67ab452752032df8ff7868b1904810ee1f4945efa2a92677918003fd6fde04a4f93f1831be710b5e3fd97c8d23952112d3544a0323346c9fdaf3637206d80fad0512f6b28453e45ed422b367b4b8d7d887db3c70fd179a858085378e591f6a9164dbde4ffd38b9260794821f6f8e3b207223489c3a0c3bdceab90a05f91d8535166117341e1cc4f00bde02673fbe2d387c931f3f8b9018abe68d9a42455ca234942c5791e775ec26fd8cb82c1c1664fc5e4697d7b84d91115bddfb32922e92146138ddcfc417b41226cc5a69757fbb116d0aecd8973cf61835d31fa222ad737b6edfa2d9d958e1c05111624a7f95f7339a2bdce681cfa441a4d8b11b2cd4f463b8d4f503d7cafd8512205a2913d9c22732c70559ef4e1d0f75c5c84f6e7b3a3c352335a959f8a50b6f053bd97b4012c4999adf0807287a507fc58e6fc1e89cbc035db84ae5e4731d5214764b1e0ab734efcdbe1a32c57d0a5e92879415ad57b20f1af297fea693eee83c028c8d090b0de90d10ab338e655b883e1033a99d374ee64da76437bb890a21e3f413652661489a46a1fddbd7b540c08dc820354df39132f68666e853d39350bec246683b79520be0dd979836559edbe016ae22c59752b1509402b7444f2445aec859118ae6dd8b18f2cc446900c22a9eb8c0e370b90f8b4d1f6ea50aa967395c0bfcccd72eab3a3c6cc51d797df7fd99f69af2f4cf08ade989ddf3c58ec209d254389ccb9cab81a1cb4bacec338318c2b7ef587d36fc281e4918755e13c09c73a6ee1866dd8f9c4fbb8af11556ca9ddf73f224b79f1825cc9dd5876c0270826620c46059596a797726e2b938a0112dd45c169f5c582ed034e5001d50be6c82b75417dc268b66fb44faa531251e257eec29626a81bdf43cf13edf1c3edc9534f4cb43d8daa00aa33040daa8a45b540d8565faeb64c3666b81092641b036896383f58ce91d268b7c6f67837e82e96418984d2b65d2dcde3dda20cad0516c6d236dff862c5df6097609ecde0ef31139dd5fb4c176a6cffd4ea24d10e909590c903d05f88f10a935a29a8c9b0ebdb68ff4c3ae41497f1bc2c791ce443b09a06b74b5c612b167f12d5f35c1421b84d6eaa00504e6672edffdd46f619f5360fe5a5f733c3d5f038ea3f714e6d0557b6649a3ac15c99b9bd23c6f4f2984e3d2d5a7dbf029e3881bfb3943f2b31f953bbda75943814d9954bd123f7e7b0ebda6cdc23177fd6ff051838af5d59ec45e3a6034224af6c2931662b09a20ee449de6207d3aaac5a4b27d56479f0bf94607969f5c5ab3648d2c7586b3685b8b36cf1bc1bd7873c073f59299b334199b3bfbbeca852beb180b2a30cf25a66f07663a0271c1a01b24ca2460d0b5db4e85645935ace49b4391991363acdc472d6e248997fd331dc16319e7e7ef5a43e09018e89e4a299a685d4b4682b1dc2c38f174fee241174eb71a067cc2c117a39539668a90988c5b9b53e8d848baa27df33878866aa92c89786e26614dfc6b06d73bb5f854232040001000800020063df0000380003800c0001800800020047504c002800018008000200403a21000800010010030000080001000500000007000200212d00000400030004100500cea5c41957c142ce170b20a1721b28b77d4e685eff03a9f4e346f7f3cef81c48a5fd04dc179f81919b89caa2b4d3c7002f431b5a7ba7a9104488b4837f0bdd97d8f4be2550da71a1d91a325cae1e966977a63c37e401c980816d8d4fbfac883bc4e8ebb5e5aeb4d16e1c91f17bdad8fe546586d0e2e4b93bc7007d84659bf8bd27fe94990fef1d46009b7e6fdcbea4b118046ce4230ac6ac1476ba794867c4e39e4cd314b3b0d53e814cf4160c365ff10c330474db5a47db18249a19ed77343e0e251bc8d0ebe37103f40aedd4f9907d53c74c98473cee41ffc2bcc0eadcc8e83e33ce933d4be35aa0d98f94b8959c126a6596bdb44c0901f538f98bb9e98cda2c4aafb9cf54e29daafb24f9c7cae669234f6577ad97ec73c76ac6fa1606543d9113993a82f7eb5adfbeb2d316e677f348ab163d8b74f96ed77e2fcde4d883332960a946641eb58e5a22ebbc562ab737e200c9229e419a0601538328225955df3b3efea86d69b97cec7229a82646e88f7b1e1287e82648689029093944398c59b1f771792a49d52f9e6727999f674d44606e0ba0f7c4d7748b93f64db991f8be434e3e3aa995e1a9f4adf68eab257ef6811ccbc8b9f2b9d6cd0a3097b0b2bc33a6745e22379eea5f2a0649ac8dd8e8d5a5db522d43093f79daadfd92b28eafce0bd752f7bf267075ca666d4e898163aa4f52139443abbe9eb9261cc2244a18de0c4ce6c75dc5b342bfa526238513e31a0438ee21805c14260d9018d12de4f39837a9c2ae09da75f7e219aaa272b0de151e24739e26c2a38dd98ed1503c667beb511b1ff1f81f64dab0fd9ede98616b1426bf6a0937687a7385f96cf6a1211485dda71921e4e00fb21122f4f5444b11d22da49dfeab175e9dc3e366f7a0438f8d8d80fa292669b8e3f15bcbbd0d0c3abb9ccc52ed20d45a19b753eaa6a57cfe25391e935b7a6865b18fbef0a46c4ffa6f647f85223c7215631682fcb53a336142de6cd1b0766ec327f35efcac7189b110992d454107f0dab15fa78baf47859610d33a74621c60503f15591cda51563fc7d278bc750286d285ec85e0b6b64d6401f72267c74419ea3feaae3d28f8833b241111c0c222a4a0cb6759bf139aba52f2402001be0d64ce181a187eedcbbd62475f844109ebf71b74ba9ed9957f3b981c49ecb8b1e9091c436768228ae5d878e651e7d8d43d01215913a98858c8243c985fd5793a5d1906256fa9f234c1878a37d5421fc7b9d154d61cd81d0afc9888a3e5c7de1ff596713d5b76b67cdd1736d738a3be869e20d88f622129b095903f631c4613b60cd663b53ba20f41d15cb4e1260241329d156f670413e613fec12f36ae6328f38cf5ef02d63f2a23fc22c3dc61f1f3b9d6bed65451fc9840e5fee263080aa6708adc1f791986412a1794c9f67ededa6c26f3d5dbd30ba6d56b4914831511b3650be42fc733e2138bdb3543e61dc2eb20bafeefb74a1b45eedbb5b7e1997033f7610c03cbd2b1064cec838ff7cd924d44c84cdda8c517ab307b7a8c6e1eb27c01305c6de6da28ed6216e2e5e86f5c80fb5ca8a7d66a832b46d5feb6843238ae3599f143e0ff39cd0d6cac3f40d04df7fa96723f13b6877a2019b420c1e097f128a22ec936efc77b8fbbdaada6c8586605e298244acb2dc6f3e3590387f25895b6a602fa898c01ffc21201a46523874f4a1f874ae8aea799b162e5e291893f242513adc78089f9082a5e10935dda4b61d30aea93b2e53c37cb668cb0515d5c1b1a238fa2c8b01db9a54c1fba7f305af8c644e4f5d7cd042de7a615ba0214123a55d58ca4649ac4af122566b979039b33efd82147464930984ebf3d782252ef73618e7e25e21546c7b7778dc5510edeb23be83bbe63735d614dd18293633242f46aa4188bf202e2f2fc87bb415fe6db287e8703e1596bbadea3af7be3dc0bd624c51547e79285a8ac23ca1023c895f2fad0da3abdaa3abe4d68c8be9f7f60d10b045e648a592c347545dd7bfb7f4622a1dc20bea283d4c95cfaca54f7f69380094f0effdc8bb3eeb8accc5b3f556ecb2cd2b7c75c0d331559c8e74e99043b9dc1ad6425acb991a1dc5b38ed1db7d4a807ddf76783e459a60405c3e7b37925b96b576a7b28ef289cb915e29d63e9f51be2ba3afc1e05e9d9cd4f368c83d6c54411059da899307add46fe435af7e0055644d86a44f3a97780d8aed4559c68dc2b8ec0e4c7231d8574539471831ad91346a94a2064d277deae87adb55af1ce5bb54e3c1707b5d8eab48778e29b7812410dae1b5d79f45ffea9b75d469b3e577099413463b7ca143c7f46bad9f261019ff6f7dec304fe32adcb9688d982f2bc39c9ea5bddde058f5c400a39eb57b66c12ae15d4503c0d5071d764f1c069ea1a32c223d1388da47dabc22b73ddb03c6753137c66f7b6d5470fde358eab83e0728d1d01c6c4fba85b470023c675268e6a513397571fa33963410cc1f51059affd4fc5d1a90bc09e73abd436bfe0708d7cd18bbe4df08ec5f41def8f9c6ee62456418ad188bd3585ab07e99bdf50dbf2a75e148e308ce79048d8148ea9e425ec8020297c588531c57da280ab37be68b277b43eff98aa787a095abc3fba2022d477352f61cdd9c32c82949853d4cd6fd92129547c93210cdf82dd179b2d8d9c9e8d247c6284a702dd8e24adbcddc3ff1542f2a4881955aafd1444d4cd06f75114b4f11258855ce9e6147975820e159ed3019aeb04d2979c4178ecbd8edcbc7ebae8af0618baecdc2f0f3263d4ebac01c8d0f65a40abd419e70f388a65daeec08d483e77d991addf485bf0bb02ff9ece4c766587eedc0081a6e2199568eb8414a6ef3b5d38f6bcaafd6597b6529f710cd8f51ff0a2f167ae43733c08cf0114d86621fddbdacd4ccd1a78e2d59c5bf8ae3b93216d5d88501942b8c060b1822eeadf2e441fc1f35639a022eab46fc79601ddc029270773bf08161e23a6856e1e72e1d7301f956913d267a3a513d22258840bc99318e99bc9f8c9165c62e78a6150469e653a59193bba3d5a5f2316df87857da4e46954cdc89bab550ffc5b90336068f16d80646de179c8838898693f89122a28fa9a5c78ea2f60c5c201223868076d2fb6e8281bda4c742b2d733570783591fcf55e217634e13c2db8eac11a87eb583969378fa4629e2e238e7e443fcd4fc22d3e35569c96ac11f6268743db82918b853f4fe2ccba0610022324cf53423a80b89e51318832cafa6f3dfca712095b270bb743c1da7f0b2bef35687bacb2513fba347a41d28322142957176347dfd820c8b123342184f8758ab8e42626a9bd543062dc77e1978f9ce22eacaa7f2045ff2c86fad013345e7cc2f25a6665deacefb362ef6d85f8d9c6849335af40087cdb4c5464a1a7d14ea3d0fff742386554f7a4b2f46be600cc03156eedccfb0573069ece60c1d9ff8d184ed5ba331af8e5d71c2f6c180ee55c822240c7538a615e8a5f585c67363c17b1f45d16d5efa841289684327c4928bace5243c9a1c30d16c3b67858e2c978126f60da74c8851a9d2d4addf251e44f60b372f85c853c90e203b33f96bbb2857cc08a6ba895597a5592267144227a68fc7ffdbfb1018bd2fd2330bfb60b1e6561da2cd311e85413d12c1d66f8ee95f4671a64799b436a6d3f997d310e0befb2cc7e05e5591702162b4e85509fff35a22adb8f1f21cfab3a4fac8f8d9ad2338b94f53498814b1c8bf93a1f1d28ec38c178d1b9cac25b7a3d45cdec8e3dbcb9521252a95a2f91a7ee4410fcbab2edf1c013066431b17a702244833bc474e7c120a1eeedcaddb562fce2342fc6d5d481e215ab3cf55a29528cd9bd083bc5d52ce14cff283612e9ab0e6c281d7842f8312e052d0e5745a0373fefdf8ed1dd4bb70365142e755aa929488abaa720cd25aa6423677e5d3605fbe5828f9acb4160335e17e43b0b619b0e4eba0bfe4d9c0fa5e1e542838b8de1fe60e785480f9960fcc6dd28ac70f42179c163fa198ee12d40ffa18e9217942b703f6c0b9654f59c5134228ba9e3bdda10b92f6cd7b388aaa29bc4c2a48c29349a94a1b08ed5336bb93bb32cfeb3ef7412e5bb074be1bf2305fe8504323040935477b204f262de026c43ed670721466e0dcb7d000266d0103fdc673ca9c1be7770800f0dc120efd371e9369ebf4858d7232d7675e5183b557e51bd831d99745dd5a8fc0fba2a96e808e05fd79e965bc008fe7b8c20f8a84bce05a8d1925de552f227e9b97c8219e9c97fd1d52c05997d068c379392833cc44c83077a821c4255ae9d4f298808e1a724377c723c399050fde1bd9ebe07e450458fe13a24035eecfd6dd91a635ab5d24bbc93daa09a617d893f897d097b8be389b6952f6b7612b82f90841a737170aaa5526f026907df1a450d6db7e888a6daebb2e895830568fa6af3bde3ac6e6e3a2f1e5c4f2e4d2283aff026c822d3f8add4b6bab0ecb0b57a471009ecc601eddd8867d8b2d7431994a726a4d06aea5174f7d45e51e1a264b0db4d64fa321072bfc30c5a6c2203d9c08e9bce955e601f24769bc4c5bee018031272da06037feb6fe11346f11c9ee591e9cee31b2ce317cfaa81b218a260f2d6fe4ecc671b5eb4629de158522bc2ee8d413738e6742e6f0aaadc863606dd7f099f4a0f7358076afee5ee72f44560d1a45291d17fef5edd63893ae3b9679762e3ddd79fc6da84dd1032928f097036ed09fb6a95f692a552e60051eaa231e53a99bc781f184fe7c742e7eecbc3a5c61f3b01b94a2c3a40971b0ec9b9ee5fa00ddaffc79c088329e8d938039623a0e5a1774925febc31497d131c1561dfdabc2e20e496756fd7bc33f574b2de6721e0d22e3cab0a227aa72e2ddd2af66bc96c6e89d413313a255f87a3a91a5f08349f7d756a0bba3cadbaba145a87cffef84b377354304c5d6b91ccd95f29c8c379ad552be9ce7a25e7c2a2f06d671878225d323a099cd3d57e0be6831297e8b93ae8cf00a27b4ececeeb6ff43f051d0113e9395e0d5145f9076302e1f3e07b467f5eb5a23715bff48b935de94fa272908ebabea64d4fa08ca98646e544e9128250c3586ae25864bfbe83cfab16db6322675689df31e5231178ac8f1b66d22617a7cb624025f40cb19b8bab14c6ee694ee0e71ccdd850e3d3341ce7bc538b3bf627f0f10abcbd665b0f67792e691a3eba26ffd19ee422406216e61cc9d0b0f001793c39b85f6e147eea629fbcac09e14add339901bec0c57d94eb52d47f4c2d6073a987b49742cb1ac2cb39735591afe30d9c99e86927ef67aa1bf5ea33b6d6fd4c1bcfe7637bf86e30633ea08f1adab4742e289d3bf2ba4127d49f2b584519f0bb3cf2d961ad6c3dbfd07fdd5871e8c95c9f99ab4e077680df41aa32009a713f04ecaac7fadce6a35a2688797db8a639279861c815111bc37376023efd96948f2f734ba775306acd70c155f066f601b4e2429956b9aec07f1e72e56d8c6e2d8fe556e4cb1769cc9840e8b639f8ed092df427d5018b346764b9068a900239e2aeafb18c6f5eaacfd232117f71f63644a28d8ad3cee25b8340dfed78abc1f923aff11309cc087918d30869cd1d1aba5222e6b4d6f6317f866365b2a486ab77cd8610fc6e9abb09edffbe2c06609d383a8c018084867b334b4e43aba57276ecb450c8af14e20e68e320b0272f12009496b1ba7a3bb37dd8ebcf2b6458b3536e81fb95465d6448461435e856027d564fb1e35c2ac5c7ed93e7919d477328f7b7791d68d91503b70843243b9a5505b9d0996a8b3c60fff8463a52340400010080030280380003800c00018008000100375300001c0001800800020047504c000e0002002f2e2c232b7b23282f0000000c00018008000100ff0700007d000400f7c45a08b99565e6f5b627461a41c3af988e86251c8a067bf33bb12c8b917f978534ef40d1faed49f5fbea3e3022ef11c66b7415c5ad6e2dca47ea9edd211ba5e85aecd82f617df28b4044e18e5bb5bdd90e8cb5a7db509a4df8044ecafa07ccf0ffc2f09610eef3339a219257d531ca2104bc34b85f2f2e48000000a4000380300001800800020047504c000800010009000000040003000b000200c22f3f89282700000400030005000200000000002400018006000200b50000000800020047504c0005000200000000000800020047504c000c000180080001000008000040000180080001000300000004000300080001000600000004000300050002000000000005000200000000000800020047504c00040003000800020047504c0004000100a7000400ea287aa2c8a457c3745ffa9c28f1ba710f339b17df91317bbdec51c16d9bc7226e482e699a08b06498ef596756711d22d264d5e90bba15137dc5c4ea641aa7f6bd88d651cd7c8abbc95b9ec80425120d81d5279cc8ba0310b0a4106a5a905406f155024930b56ff86336cee5d0e60fc621166f42851e53408860c10da19c65bfe0cf0e261afe83788e37ab7362455287b9b4daa2990f67a262f5b8a627a1e841230c2c0086000500e6f13a149a876cc3f6261b7838584f75b18e22dff5095634e4fa6c5f8bdfe094d7e439096f553794b4d06afa037f7ef159910858160f13a5fd8016f2ae6a995b4e1b3b0fb5e17830c61cce8ecf6df52d2095dd63670851c10f42e0ebf25582fa71eccf62cc59449b001954d53d6dc82ce2b8d35b282934ca882b5f72e84ac6e0a3e10000e90005001de1bdf0bf243b6a14e3941982fcaea16aea09d94c8c1000c6bac0d4a34bcae6ce4e41c6e2413829f626e5b3a303342927bd8288a1e9658ea33051af3b1fafbcae2f11d5e65c4b48fe84c6ea1fb10acdee076f0576b4632e7b935c2f34f33bf0abf113e34fb6e3a7bc7fc7987008fba8f4de5c6b1cbe8b2f46d315afe04f939ef9c6f53bd3efdb4985a86f66ba0a76acf37aafd808063dd5d0d5519dcfab740ba8ab8a6fdc85cf2fa3f1e3765b40b30fb9f69120b9094a70cf94a009089cd4ccfd311df063c7767492abac7f583e3d484685858e72bae223510745ac6767c54b46cc8843ac000000df000300f7ad965406c49c4266ace0f786dd84f5d06f78f28a19cea5e69edfe08f6cd17aefbe8f3907baa474251c555bee399747c927d73b682cd3ba5332c3113cf0264635f2607117e51da5b69723934ed76e141367c43e9d13b91ca651e0649eec775d8df8eb18ca19854af53ba165da380741836ea3d712291a893128f366f876d72ab1c4c7fcbe8f6d0a7f3e458583edaa7d8ad1cf90a7176f2d6f3040b12ea504e740e9a042f7abaacb5312176a795675812c8c1c3600cd2b498e9d96de76ee038e8b441acfc688f2551306db165429c9e3fa67ea5b8fa0885c6c3f29006c00018014000200677265746170300000000000000000000800030000000000140002006c6f0000000000000000000000000000140002006e69637666300000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030009000000140002006970766c0700ff010000000002000000"], 0x2834}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={r11, 0x80000001, 0x2, 0x8000}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 912.721942ms ago: executing program 2 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x22b7b6683ba65fec, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffff7}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000040)={@mcast2, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 547.235217ms ago: executing program 0 (id=3163): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a"], 0xe0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xe, 0x0, 0xff3b}, 0x24042084) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETNOCSUM(r1, 0xc040ff0b, 0x200000000013) 145.020287ms ago: executing program 1 (id=3164): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000035be", @ANYRES16=r3, @ANYBLOB="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"], 0x194}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410001, 0x41, 0x5, 0xffffffff, 0x6, 0x7, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f00}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x29, 0x2, 0xfffffffd) socket$inet6(0xa, 0x805, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 56.414918ms ago: executing program 3 (id=3165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESOCT=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c004010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x10, 0x96f23147092a967e, 0x33}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x70ca}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x71}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x59}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4035) 19.748375ms ago: executing program 2 (id=3166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="ffe274a422217bee56d5d14842bef6f2a1320e7213c3be84f282032a074787eda863efdbfa6789ce5ce0f838d9f58396c04f9bd04927bc9b2fded04f35564a3402073e3482ad803e3d72f20ecd38158ed3841a2ba1b0b880658a17ae1a8276456cb9e08f81bee2f80939491ca9fcfd5dcc8c1ae7b020cd09ed8355c9e26016f0c7f1d6a6158c660031bad6e10d1efe282045e6ab0aa6086e96000b1e77379cf8f0fe76be2f9d0564d2a9687525008f4e31073f632817c4c9f409d427546bceff9b81b3dae0cd1c71e5aca96b6a6e9e475e2792248223908d6bbe3403"}, {&(0x7f0000000000)="298245997dfe9c6185e1a0988e643ff86c031a0dc0a4c2b8726bed2265f3f5d13d5aa1c116"}], 0x2, 0x0, 0xffffffffffffff34}, 0x12) close(r3) 0s ago: executing program 3 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111c1000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x600}}, {0xc}}}]}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): gs=0x400008 [ 287.150549][T14103] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.239863][T14103] wg2 speed is unknown, defaulting to 1000 [ 287.241886][T14103] wg2 speed is unknown, defaulting to 1000 [ 287.244995][T14103] wg2 speed is unknown, defaulting to 1000 [ 287.246963][T14103] wg2 speed is unknown, defaulting to 1000 [ 287.274169][T14103] wg2 speed is unknown, defaulting to 1000 [ 287.291412][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 287.292946][T14114] ipt_REJECT: TCP_RESET invalid for non-tcp [ 287.456069][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 287.671462][T14130] x_tables: duplicate entry at hook 3 [ 287.712597][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1905'. [ 287.745572][T14096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.753081][T14130] veth1_to_team: entered promiscuous mode [ 287.757177][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 287.807299][T14130] veth1_to_team: left promiscuous mode [ 288.009686][ T50] net_ratelimit: 4 callbacks suppressed [ 288.009704][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.060611][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 288.159519][T14152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1909'. [ 288.340549][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.686196][T14184] syzkaller1: entered promiscuous mode [ 288.686220][T14184] syzkaller1: entered allmulticast mode [ 288.694572][T14184] raw_sendmsg: syz.1.1915 forgot to set AF_INET. Fix it! [ 288.809294][T14186] wg2 speed is unknown, defaulting to 1000 [ 289.044870][T14188] wg2 speed is unknown, defaulting to 1000 [ 289.144306][ T640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.242257][T14203] netlink: 3136 bytes leftover after parsing attributes in process `syz.2.1921'. [ 289.320311][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 289.355134][T14192] wg2 speed is unknown, defaulting to 1000 [ 289.431963][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 289.613559][T14205] wg2 speed is unknown, defaulting to 1000 [ 289.628340][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.637527][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.004759][T14219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1922'. [ 290.227396][T14249] xt_l2tp: unknown flags: e7 [ 290.238504][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.433811][T14254] ip_tables: iptables: counters copy to user failed while replacing table [ 290.576014][T14252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.100905][T14284] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.173527][T14284] xt_CT: No such helper "netbios-ns" [ 291.341619][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.461123][ T6664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.086708][T14340] netlink: 'syz.1.1953': attribute type 22 has an invalid length. [ 292.120654][T14348] netlink: 'syz.1.1953': attribute type 22 has an invalid length. [ 292.232062][T14354] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 292.269408][T14355] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 292.297728][T14354] dummy0: entered promiscuous mode [ 292.314577][T14354] team0: Port device dummy0 added [ 292.363600][T14355] dummy0 (unregistering): left promiscuous mode [ 292.371272][T14355] team0: Port device dummy0 removed [ 293.004004][T14380] bond1: option mode: unable to set because the bond device is up [ 293.034427][T14380] __nla_validate_parse: 18 callbacks suppressed [ 293.034448][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 293.097293][T14380] bond1: (slave macvlan5): Error -22 calling dev_set_mtu [ 293.167676][T14385] ip6tnl0: Caught tx_queue_len zero misconfig [ 293.398640][T14396] x_tables: duplicate underflow at hook 2 [ 293.459982][ T640] net_ratelimit: 19 callbacks suppressed [ 293.460000][ T640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.541794][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.582543][T14409] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1970'. [ 293.582576][T14409] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1970'. [ 293.915838][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 293.941202][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'. [ 293.942241][T14428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'. [ 293.946096][T14424] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 293.946209][T14424] syzkaller1: linktype set to 823 [ 293.997138][T14430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1977'. [ 294.098166][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.422294][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1984'. [ 294.650170][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.719418][T14425] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 295.356136][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 295.363229][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 295.382690][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.383203][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.395848][T14511] netlink: 'syz.1.1996': attribute type 5 has an invalid length. [ 295.759201][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.337247][T14549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.589281][ T6664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.591074][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.618930][T14561] syzkaller0: entered promiscuous mode [ 296.618950][T14561] syzkaller0: entered allmulticast mode [ 296.858226][ T6664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.393932][T14589] netlink: 'syz.3.2020': attribute type 8 has an invalid length. [ 297.648972][T14597] bridge3: entered promiscuous mode [ 297.648996][T14597] bridge3: entered allmulticast mode [ 297.658646][T14597] team0: Port device bridge3 added [ 297.680100][T14597] bridge0: port 1(team0) entered blocking state [ 297.680255][T14597] bridge0: port 1(team0) entered disabled state [ 297.680431][T14597] team0: entered allmulticast mode [ 297.680446][T14597] žÿ: entered allmulticast mode [ 297.680506][T14597] bond2: entered allmulticast mode [ 297.702249][T14597] bond3: entered allmulticast mode [ 297.702641][T14597] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 297.729991][T14597] team0: entered promiscuous mode [ 297.730013][T14597] žÿ: entered promiscuous mode [ 297.730188][T14597] bond2: entered promiscuous mode [ 297.731144][T14597] bond3: entered promiscuous mode [ 297.731301][T14597] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 297.766135][T14597] bridge0: port 1(team0) entered blocking state [ 297.766265][T14597] bridge0: port 1(team0) entered forwarding state [ 297.802252][T14605] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 297.820268][T14603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 297.847469][T14605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 298.803645][T14652] __nla_validate_parse: 6 callbacks suppressed [ 298.803663][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2036'. [ 298.957113][T14645] bridge0: port 1(team0) entered disabled state [ 299.082990][ T6664] net_ratelimit: 4 callbacks suppressed [ 299.083016][ T6664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.155133][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.192438][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.227337][ T6664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.240231][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 299.584016][T14674] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 299.584038][T14674] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2042'. [ 299.950665][T14640] netlink: 'syz.4.2034': attribute type 29 has an invalid length. [ 299.950686][T14640] netlink: 'syz.4.2034': attribute type 5 has an invalid length. [ 299.952195][T14655] hsr0: entered promiscuous mode [ 299.952400][T14655] hsr0: left promiscuous mode [ 300.088720][ T640] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.088753][ T640] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.089882][ T640] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.089914][ T640] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.089948][ T640] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.089971][ T640] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.090003][ T640] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.090026][ T640] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.180559][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.319803][T14680] IPVS: Error connecting to the multicast addr [ 300.419649][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.422565][T14687] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 300.422582][T14687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2046'. [ 300.490165][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 300.831502][T14714] netlink: zone id is out of range [ 300.831547][T14714] netlink: zone id is out of range [ 300.831671][T14714] netlink: zone id is out of range [ 300.831710][T14714] netlink: zone id is out of range [ 300.831717][T14714] netlink: zone id is out of range [ 300.831724][T14714] netlink: zone id is out of range [ 301.284514][T14739] netlink: 'syz.4.2060': attribute type 62 has an invalid length. [ 301.653263][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 301.672667][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 301.716835][T14762] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 301.717298][T14762] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 301.811593][ T5278] veth0_macvtap: left promiscuous mode [ 301.886732][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 302.001650][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 302.035173][T14781] bond9: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 302.035821][T14781] bond9: (slave ip6tnl1): Error -95 calling set_mac_address [ 302.117513][T14788] netlink: 'syz.2.2074': attribute type 4 has an invalid length. [ 302.467358][T14801] pim6reg1: entered allmulticast mode [ 302.531836][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 302.594748][T14817] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 302.728968][T14817] bond7: entered promiscuous mode [ 302.752016][T14817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.039840][T14841] veth1_to_hsr: entered allmulticast mode [ 303.142290][T14840] tcf_pedit_act: 7 callbacks suppressed [ 303.142308][T14840] tc action pedit 'at' offset -2147483645 out of bounds [ 303.620436][T14874] netlink: 'syz.0.2096': attribute type 2 has an invalid length. [ 303.771507][T14833] veth1_to_hsr: left allmulticast mode [ 303.918636][T14886] netlink: 'syz.4.2100': attribute type 12 has an invalid length. [ 304.054410][T14899] __nla_validate_parse: 48 callbacks suppressed [ 304.054429][T14899] netlink: 3596 bytes leftover after parsing attributes in process `syz.1.2104'. [ 304.064055][T14896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 304.065140][T14901] netlink: 'syz.3.2101': attribute type 16 has an invalid length. [ 304.065168][T14901] netlink: 'syz.3.2101': attribute type 17 has an invalid length. [ 304.104775][T14901] bond7: (slave syz_tun): speed changed to 0 on port 1 [ 304.183335][ T640] net_ratelimit: 73 callbacks suppressed [ 304.183357][ T640] bond7: (slave syz_tun): link status up again after 0 ms [ 304.199542][ T6664] bond7: (slave syz_tun): link status up again after 0 ms [ 304.219330][ T6664] bond7: (slave syz_tun): link status up again after 0 ms [ 304.239726][ T12] bond7: (slave syz_tun): link status up again after 0 ms [ 304.259444][ T50] bond7: (slave syz_tun): link status up again after 0 ms [ 304.278717][ T6661] bond7: (slave syz_tun): link status up again after 0 ms [ 304.285869][T14903] sctp: [Deprecated]: syz.1.2105 (pid 14903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.285869][T14903] Use struct sctp_sack_info instead [ 304.298199][ T6661] bond7: (slave syz_tun): link status up again after 0 ms [ 304.302244][T14903] netlink: 'syz.1.2105': attribute type 11 has an invalid length. [ 304.318303][ T50] bond7: (slave syz_tun): link status up again after 0 ms [ 304.338400][ T6661] bond7: (slave syz_tun): link status up again after 0 ms [ 304.358374][ T50] bond7: (slave syz_tun): link status up again after 0 ms [ 304.360671][T14901] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 304.367289][T14901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.387828][T14901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.413138][T14901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.415724][T14901] bond4: entered allmulticast mode [ 304.415746][T14901] bond4: entered promiscuous mode [ 304.415933][T14901] macvtap0: left promiscuous mode [ 304.415940][T14901] bond4: left promiscuous mode [ 304.416040][T14901] macvtap0: left allmulticast mode [ 304.416047][T14901] bond4: left allmulticast mode [ 304.416322][T14901] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 304.428710][T14901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.437409][T14901] geneve2: left promiscuous mode [ 304.440923][T14901] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 304.442971][T14901] hsr1: left promiscuous mode [ 304.452099][T14901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.453034][ T7493] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 304.509887][ T6663] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 304.510130][ T6663] bond3: (slave veth0_to_bond): making interface the new active one [ 304.519657][ T6663] bond3: active interface up! [ 305.192059][T14950] syzkaller0: entered promiscuous mode [ 305.192081][T14950] syzkaller0: entered allmulticast mode [ 305.314301][T14953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 305.319210][ T6664] syzkaller0: tun_net_xmit 76 [ 305.319923][ T6664] syzkaller0: tun_net_xmit 48 [ 305.337785][T14953] syzkaller0: create flow: hash 471853184 index 0 [ 305.449887][T14951] syzkaller0 (unregistered): delete flow: hash 471853184 index 0 [ 305.543629][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 305.617544][T14964] 8021q: VLANs not supported on ip6gre0 [ 305.636540][T14964] 8021q: VLANs not supported on ip6gre0 [ 305.799469][T14976] IPVS: set_ctl: invalid protocol: 1 172.20.20.47:20000 [ 306.022584][T14996] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2127'. [ 306.505727][T15053] IPVS: set_ctl: invalid protocol: 184 172.20.20.25:20004 [ 306.549485][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 306.742161][T15074] syzkaller0: entered promiscuous mode [ 306.742182][T15074] syzkaller0: entered allmulticast mode [ 306.926086][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 306.926543][T15084] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 306.986519][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 307.042992][T15081] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 307.172436][T15081] xt_CT: No such helper "netbios-ns" [ 307.376383][T15086] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2141'. [ 307.420031][T15086] syzkaller1: entered promiscuous mode [ 307.420061][T15086] syzkaller1: entered allmulticast mode [ 307.718274][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 308.161503][T15141] bond0: (slave bond_slave_0): Releasing backup interface [ 308.954508][T15179] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 309.027004][T15183] veth1_to_bond: entered allmulticast mode [ 309.031997][T15183] veth1_to_bond: entered promiscuous mode [ 309.343032][T15183] veth1_to_bond (unregistering): left allmulticast mode [ 309.343073][T15183] veth1_to_bond (unregistering): left promiscuous mode [ 309.434230][T15183] bond0: (slave bond_slave_1): Releasing backup interface [ 309.614415][T15180] veth5: entered allmulticast mode [ 309.708184][T15041] net_ratelimit: 53 callbacks suppressed [ 309.708204][T15041] bond7: (slave syz_tun): failed to get link speed/duplex [ 309.820099][T15016] bond7: (slave syz_tun): failed to get link speed/duplex [ 309.856059][T15223] __nla_validate_parse: 11 callbacks suppressed [ 309.856076][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2171'. [ 309.856277][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2171'. [ 309.929278][T15016] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.038992][T15016] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.152019][T15035] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.241716][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 310.306207][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.344475][T15239] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2174'. [ 310.438059][T15041] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.551054][T15043] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.582392][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2179'. [ 310.582421][T15255] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 310.608638][T15257] tipc: Bearer : already 2 bearers with priority 0 [ 310.608657][T15257] tipc: Enabling of bearer rejected, cannot adjust to lower [ 310.609466][T15257] syzkaller0: entered promiscuous mode [ 310.609483][T15257] syzkaller0: entered allmulticast mode [ 310.769342][T15041] bond7: (slave syz_tun): failed to get link speed/duplex [ 310.997154][T15274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2182'. [ 310.997190][T15274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2182'. [ 311.353174][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 311.355385][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 311.355715][T15293] netlink: 'syz.2.2188': attribute type 4 has an invalid length. [ 311.355730][T15293] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2188'. [ 311.355753][T15293] .`: renamed from bond0 (while UP) [ 311.712858][T15309] netlink: 'syz.3.2193': attribute type 1 has an invalid length. [ 311.723843][T15311] tipc: Enabling of bearer rejected, failed to enable media [ 311.827357][T15316] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 312.453229][T15352] syzkaller1: entered promiscuous mode [ 312.453251][T15352] syzkaller1: entered allmulticast mode [ 313.197336][T15386] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 313.351162][T15386] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.399518][T15396] bond7: (slave syz_tun): Removing an active aggregator [ 313.406568][T15396] bond7: (slave syz_tun): Releasing backup interface [ 313.460424][T15396] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 314.419517][T15452] 0·: renamed from hsr0 [ 314.439472][T15452] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.439495][T15452] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.441760][T15452] 0·: entered allmulticast mode [ 314.441778][T15452] hsr_slave_0: entered allmulticast mode [ 314.441793][T15452] hsr_slave_1: entered allmulticast mode [ 314.797341][T15036] net_ratelimit: 33 callbacks suppressed [ 314.797358][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.125060][T15483] bond0: Removing last arp target with arp_interval on [ 315.183868][T15491] __nla_validate_parse: 15 callbacks suppressed [ 315.183887][T15491] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2231'. [ 315.342234][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 315.401171][T15499] netlink: 'syz.4.2232': attribute type 1 has an invalid length. [ 315.686450][T15526] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2237'. [ 315.690213][T15526] netlink: zone id is out of range [ 315.690226][T15526] netlink: zone id is out of range [ 315.690233][T15526] netlink: zone id is out of range [ 315.690241][T15526] netlink: zone id is out of range [ 315.690248][T15526] netlink: zone id is out of range [ 315.690255][T15526] netlink: zone id is out of range [ 315.690265][T15526] netlink: zone id is out of range [ 315.690272][T15526] netlink: zone id is out of range [ 315.690279][T15526] netlink: zone id is out of range [ 315.728146][T15530] x_tables: duplicate underflow at hook 1 [ 316.071957][T15548] netlink: 3136 bytes leftover after parsing attributes in process `syz.4.2240'. [ 316.463680][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 316.485336][T15572] netlink: 'syz.3.2246': attribute type 3 has an invalid length. [ 316.485356][T15572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2246'. [ 316.944380][T15594] netlink: 'syz.4.2250': attribute type 1 has an invalid length. [ 316.944400][T15594] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.2250'. [ 316.967160][T15595] netlink: 'syz.4.2250': attribute type 1 has an invalid length. [ 316.967179][T15595] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.2250'. [ 317.396025][T15609] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.2253'. [ 317.656332][T15616] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2257'. [ 317.955400][T15636] tc_dump_action: action bad kind [ 318.650072][T15656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.657596][T15656] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.673417][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.883616][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.907216][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.926885][T15656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.926908][T15656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.954993][T15656] veth1_vlan: left promiscuous mode [ 318.956112][T15656] veth0_vlan: left promiscuous mode [ 318.957638][T15656] veth0_vlan: entered promiscuous mode [ 318.964293][T15656] veth1_vlan: entered promiscuous mode [ 318.972999][T15656] veth0_macvtap: left promiscuous mode [ 318.974292][T15656] veth0_macvtap: entered promiscuous mode [ 318.983517][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.984667][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 318.986008][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 318.987126][T15656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.993394][T15656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.996963][T15656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.998989][T15656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.000114][T15656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.000790][T15656] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 319.000847][T15656] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 319.194792][T15677] xt_hashlimit: size too large, truncated to 1048576 [ 319.209712][T15035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.210794][T15035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.210839][T15035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.210870][T15035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.416420][T15684] block nbd3: server does not support multiple connections per device. [ 319.416719][T15684] block nbd3: shutting down sockets [ 319.881846][T15712] netlink: 'syz.4.2277': attribute type 39 has an invalid length. [ 320.232276][T15727] tipc: Bearer : already 2 bearers with priority 0 [ 320.232296][T15727] tipc: Enabling of bearer rejected, cannot adjust to lower [ 320.232693][T15730] syzkaller0: entered promiscuous mode [ 320.232708][T15730] syzkaller0: entered allmulticast mode [ 320.341685][T15037] net_ratelimit: 508 callbacks suppressed [ 320.341704][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.424501][T15733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.424518][T15733] IPv6: NLM_F_CREATE should be set when creating new route [ 320.424750][T15733] IPv6: NLM_F_CREATE should be set when creating new route [ 320.541102][T15733] bond7: option arp_interval: invalid value (18446744073709551615) [ 320.541126][T15733] bond7: option arp_interval: allowed values 0 - 2147483647 [ 320.546667][T15733] bond7 (unregistering): Released all slaves [ 320.757582][T15749] __nla_validate_parse: 71 callbacks suppressed [ 320.757601][T15749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2285'. [ 320.888140][T15759] geneve1: entered promiscuous mode [ 321.242655][T15769] netlink: 'syz.4.2293': attribute type 10 has an invalid length. [ 321.450340][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.654720][T15769] veth0_to_bond: mtu greater than device maximum [ 321.654741][T15769] bond0: (slave veth0_to_bond): Error -22 calling dev_set_mtu [ 321.840585][T15775] sctp: [Deprecated]: syz.3.2294 (pid 15775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.840585][T15775] Use struct sctp_sack_info instead [ 321.849589][T15776] sctp: [Deprecated]: syz.3.2294 (pid 15776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.849589][T15776] Use struct sctp_sack_info instead [ 322.559627][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.846720][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 322.879200][T15818] netlink: zone id is out of range [ 322.879215][T15818] netlink: zone id is out of range [ 322.879223][T15818] netlink: zone id is out of range [ 322.879229][T15818] netlink: zone id is out of range [ 322.879237][T15818] netlink: zone id is out of range [ 322.879243][T15818] netlink: zone id is out of range [ 323.203516][T15825] block nbd0: reconnected socket [ 323.223713][T15827] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2309'. [ 323.225309][ T5618] block nbd0: Receive control failed (result -32) [ 323.552824][T15837] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2311'. [ 323.602493][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2310'. [ 324.566057][T15841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.623212][T15841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.770070][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2313'. [ 325.501337][T15841] bond5: left promiscuous mode [ 325.511410][T15841] veth3: left allmulticast mode [ 325.511562][T15841] vlan2: left promiscuous mode [ 325.511574][T15841] ip6gretap0: left promiscuous mode [ 325.517596][T15841] ip6gre2: left promiscuous mode [ 325.517613][T15841] ip6gre2: left allmulticast mode [ 325.538605][T15841] bond7: left promiscuous mode [ 325.722164][T15043] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.722212][T15043] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.722245][T15043] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.747191][T15043] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.788365][T15871] batman_adv: batadv0: Adding interface: veth0 [ 325.788382][T15871] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.788408][T15871] batman_adv: batadv0: Interface activated: veth0 [ 325.841711][T15871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.853854][T15871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.866745][T15871] batman_adv: batadv0: Interface deactivated: veth0 [ 325.866766][T15871] batman_adv: batadv0: Removing interface: veth0 [ 325.890020][T15038] net_ratelimit: 506 callbacks suppressed [ 325.890037][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.961058][T15875] 8021q: VLANs not supported on ip6gre0 [ 326.057605][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 326.396414][T15036] IPVS: starting estimator thread 0... [ 326.404391][T15904] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 326.495047][T15907] IPVS: using max 30 ests per chain, 72000 per kthread [ 326.542272][T15904] bond7: (slave geneve5): making interface the new active one [ 326.542869][T15904] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 326.551850][T15036] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.551903][T15036] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.551934][T15036] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.561113][T15043] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 326.601516][T15904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'. [ 326.602532][T15904] bond7: entered promiscuous mode [ 326.602550][T15904] geneve5: entered promiscuous mode [ 326.606073][T15904] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.008183][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.190602][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2335'. [ 327.277888][T15944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.326831][ T31] audit: type=1800 audit(1790536119.362:8): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2335" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2371 res=0 errno=0 [ 327.365693][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 327.416781][T15944] tipc: Enabling of bearer rejected, failed to enable media [ 327.427589][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 327.524573][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2340'. [ 328.129027][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.380867][ T5618] block nbd3: Receive control failed (result -32) [ 328.382317][ T5619] block nbd3: Receive control failed (result -32) [ 328.731816][T15995] netlink: 'syz.0.2351': attribute type 30 has an invalid length. [ 328.736351][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 328.945565][T16004] Bluetooth: MGMT ver 1.23 [ 328.949220][T16005] netlink: 3136 bytes leftover after parsing attributes in process `syz.3.2354'. [ 329.250055][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.257249][T16012] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 329.305650][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.347914][T16010] wg2 speed is unknown, defaulting to 1000 [ 329.383780][T15993] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 329.429698][T15993] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 329.754581][T16014] netlink: 'syz.0.2358': attribute type 23 has an invalid length. [ 329.864400][T15016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.938483][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.966479][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 330.085933][T16037] bridge0: port 4(vlan3) entered blocking state [ 330.105122][T16037] bridge0: port 4(vlan3) entered disabled state [ 330.105299][T16037] vlan3: entered allmulticast mode [ 330.146240][T16037] vlan3: entered promiscuous mode [ 330.239976][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 330.359852][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.393424][T16041] syzkaller0: entered promiscuous mode [ 330.393444][T16041] syzkaller0: entered allmulticast mode [ 330.582965][T15016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.613279][T16056] syzkaller0: entered promiscuous mode [ 330.613300][T16056] syzkaller0: entered allmulticast mode [ 330.630671][T16050] syzkaller1: entered promiscuous mode [ 330.630696][T16050] syzkaller1: entered allmulticast mode [ 331.409020][T16089] __nla_validate_parse: 2 callbacks suppressed [ 331.409039][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'. [ 331.468529][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.471140][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 331.672558][T16093] netlink: 'syz.3.2375': attribute type 13 has an invalid length. [ 331.672574][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2375'. [ 332.569100][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.087831][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 333.090922][T16084] ip6tnl0: Caught tx_queue_len zero misconfig [ 333.615394][T16111] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.2379'. [ 333.642709][T16117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.668981][T15040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.124079][T16141] IPVS: set_ctl: invalid protocol: 115 172.30.1.4:20000 [ 334.401081][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 334.419592][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.441115][T16156] veth1_to_team: entered promiscuous mode [ 334.442935][T16156] veth0_to_team: entered promiscuous mode [ 334.445590][T16156] hsr0: entered promiscuous mode [ 334.445873][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 334.510960][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 334.582369][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2390'. [ 334.641004][T16170] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.2392'. [ 334.770025][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.774065][T16177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.862106][T16183] bridge_slave_0: left allmulticast mode [ 334.862123][T16183] bridge_slave_0: left promiscuous mode [ 334.862254][T16183] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.944740][T16183] bridge_slave_1: left allmulticast mode [ 334.944764][T16183] bridge_slave_1: left promiscuous mode [ 334.944944][T16183] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.006552][T16183] bond0: (slave bond_slave_0): Releasing backup interface [ 335.073807][T16183] bond0: (slave bond_slave_1): Releasing backup interface [ 335.153526][T16183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.153549][T16183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.203985][T16183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.212585][T16183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.699574][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.701337][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.898977][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.219829][T16220] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 336.219896][T16220] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 336.283754][T16223] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 336.522006][T16228] bond11: option ad_user_port_key: invalid value (65535) [ 336.522029][T16228] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 336.523175][ T31] audit: type=1804 audit(1790536128.562:9): pid=16237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2405" name="/newroot/476/cgroup.controllers" dev="tmpfs" ino=2464 res=1 errno=0 [ 336.523383][ T31] audit: type=1800 audit(1790536128.562:10): pid=16237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2405" name="cgroup.controllers" dev="tmpfs" ino=2464 res=0 errno=0 [ 336.527031][T16228] bond11 (unregistering): Released all slaves [ 336.602424][T16235] __nla_validate_parse: 5 callbacks suppressed [ 336.602443][T16235] netlink: 3136 bytes leftover after parsing attributes in process `syz.2.2404'. [ 336.645333][T16230] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 336.647752][T16230] batman_adv: batadv0: Adding interface: gretap2 [ 336.647767][T16230] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.647793][T16230] batman_adv: batadv0: Interface activated: gretap2 [ 336.659328][ C1] net_ratelimit: 2 callbacks suppressed [ 336.659345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.687234][T16237] syzkaller0: entered promiscuous mode [ 336.687254][T16237] syzkaller0: entered allmulticast mode [ 336.835624][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 336.903106][T16245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.913389][T16246] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 336.915103][T16246] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 336.952551][T16247] bond6 (unregistering): (slave batadv1): Releasing backup interface [ 336.957057][T16247] bond6 (unregistering): Released all slaves [ 337.000490][T15040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.004908][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.277058][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2409'. [ 337.288830][T16258] netlink: 'syz.2.2410': attribute type 2 has an invalid length. [ 337.365916][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2410'. [ 337.397711][T16263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2412'. [ 337.687641][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 337.872174][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 338.101384][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.151998][T16298] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2417'. [ 338.232409][T16302] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 338.371132][T16308] netlink: 'syz.3.2419': attribute type 21 has an invalid length. [ 338.371152][T16308] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2419'. [ 338.371196][T16308] netlink: 'syz.3.2419': attribute type 4 has an invalid length. [ 338.371207][T16308] netlink: 'syz.3.2419': attribute type 3 has an invalid length. [ 338.371218][T16308] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2419'. [ 338.497655][T16309] tipc: Resetting bearer [ 338.515985][T16309] tipc: Resetting bearer [ 338.610653][T15036] bond10: (slave syz_tun): link status up again after 0 ms [ 338.629322][T15036] bond10: (slave syz_tun): link status up again after 0 ms [ 338.649705][T15036] bond10: (slave syz_tun): link status up again after 0 ms [ 338.669708][T15036] bond10: (slave syz_tun): link status up again after 0 ms [ 338.688871][T15040] bond10: (slave syz_tun): link status up again after 0 ms [ 338.688898][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 339.134515][T16339] geneve4: entered promiscuous mode [ 339.420993][T16357] netlink: 'syz.4.2431': attribute type 29 has an invalid length. [ 339.576666][T16367] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 339.733992][T16363] bond3: (slave veth0_to_bond): Releasing active interface [ 339.754809][T16363] bond11: (slave veth0_to_bond): making interface the new active one [ 339.755868][T16363] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 340.057326][T16390] netlink: 'syz.3.2441': attribute type 2 has an invalid length. [ 340.101112][T16390] : entered promiscuous mode [ 341.018402][T16411] dvmrp0: entered allmulticast mode [ 341.027018][T16414] dvmrp1: entered allmulticast mode [ 341.074489][T16421] nbd: couldn't find a device at index 64 [ 341.417493][T16450] gretap0: entered allmulticast mode [ 341.767171][T16473] net_ratelimit: 31 callbacks suppressed [ 341.767191][T16473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 341.810543][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 341.837162][T16467] wg2 speed is unknown, defaulting to 1000 [ 341.939513][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.071293][T15016] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.100545][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.219922][T15016] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.250425][T16493] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 342.353117][T16496] netlink: 'syz.4.2468': attribute type 3 has an invalid length. [ 342.441692][T16504] __nla_validate_parse: 76 callbacks suppressed [ 342.441711][T16504] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2469'. [ 342.520739][T15037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.606291][T16506] IPVS: Scheduler module ip_vs_ not found [ 342.638581][T16503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.641213][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 342.643211][T16514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2470'. [ 342.729166][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 342.839091][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 343.330378][T16539] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2476'. [ 343.571680][T16546] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.2479'. [ 344.146295][T16580] netlink: 'syz.2.2489': attribute type 7 has an invalid length. [ 344.146317][T16580] netlink: 'syz.2.2489': attribute type 8 has an invalid length. [ 344.161039][T16580] xt_LOG: level 115 >= 8 [ 344.173309][T16574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2486'. [ 344.207478][T16574] netlink: 'syz.3.2486': attribute type 12 has an invalid length. [ 344.207501][T16574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2486'. [ 344.819723][T16612] netlink: 'syz.4.2498': attribute type 2 has an invalid length. [ 344.854625][T16612] : entered promiscuous mode [ 345.074387][T16622] x_tables: duplicate underflow at hook 2 [ 345.361727][T16631] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2504'. [ 345.362347][T16631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2504'. [ 345.482062][T16631] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 345.482912][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.673093][T16640] xt_TCPMSS: Only works on TCP SYN packets [ 345.673389][T16640] tc_dump_action: action bad kind [ 345.801288][T16647] syzkaller0: entered promiscuous mode [ 345.801309][T16647] syzkaller0: entered allmulticast mode [ 346.080865][T16656] macvtap0: entered promiscuous mode [ 346.104536][T16656] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2509'. [ 346.230166][T16666] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 346.263918][T16668] netlink: 'syz.0.2512': attribute type 83 has an invalid length. [ 346.338923][ T5711] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.704956][T16689] Bluetooth: hci0: unsupported parameter 5135 [ 346.704978][T16689] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 346.750289][T16689] xt_policy: too many policy elements [ 346.831183][T16690] syzkaller0: renamed from gre1 [ 346.849386][T16695] netlink: 'syz.4.2520': attribute type 2 has an invalid length. [ 346.952225][T15036] net_ratelimit: 38 callbacks suppressed [ 346.952244][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.998938][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.109441][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.222326][T15040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.227127][T15037] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.287510][T16713] netlink: 'syz.2.2526': attribute type 2 has an invalid length. [ 347.331146][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.438630][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.512303][T16723] __nla_validate_parse: 3 callbacks suppressed [ 347.512317][T16723] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2528'. [ 347.548645][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.658159][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.768011][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 347.858066][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.939211][T16731] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2532'. [ 349.111702][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 350.126214][T16812] syzkaller0: entered promiscuous mode [ 350.126238][T16812] syzkaller0: entered allmulticast mode [ 350.250074][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 352.509972][T15017] net_ratelimit: 29 callbacks suppressed [ 352.509994][T15017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.570959][T16822] bond8: option broadcast_neighbor: invalid value (3) [ 352.571892][T16822] bond8 (unregistering): Released all slaves [ 352.604644][T16834] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 352.650647][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.703983][T16837] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 352.760287][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.868634][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 352.974493][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 352.979750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.981873][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.988717][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.090029][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.154234][T16865] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 353.154262][T16865] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 353.199067][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.308899][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 353.370535][T16874] PKCS7: Unknown OID: [4] (bad) [ 353.370553][T16874] PKCS7: Only support pkcs7_signedData type [ 353.537328][T16871] syzkaller1: entered promiscuous mode [ 353.537350][T16871] syzkaller1: entered allmulticast mode [ 353.540254][T16887] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2576'. [ 353.542396][T16887] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 353.583695][T16887] 0ªX¹¦Dö»: entered allmulticast mode [ 353.602435][T16887] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2576'. [ 353.783645][T16885] bridge0: port 3(syz_tun) entered blocking state [ 353.783773][T16885] bridge0: port 3(syz_tun) entered forwarding state [ 353.812664][T16885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.815987][T16885] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.835251][T16885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.863093][T16885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.864557][T16885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.883388][T16885] veth1_vlan: left promiscuous mode [ 353.894126][T16885] veth1_vlan: entered promiscuous mode [ 353.909868][T16885] veth0_macvtap: entered promiscuous mode [ 353.910985][T16885] veth1_macvtap: entered promiscuous mode [ 353.914808][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.915852][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.916905][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.957375][T16885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.968541][T16885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.032310][T16885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.036327][T16874] wg2 speed is unknown, defaulting to 1000 [ 354.102858][T15035] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.104904][T15035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.107181][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.107991][T15035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.179827][T16896] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 354.182200][T10970] wg2 speed is unknown, defaulting to 1000 [ 354.209181][T10970] syz2: Port: 1 Link ACTIVE [ 354.215898][T16902] syzkaller1: entered promiscuous mode [ 354.215917][T16902] syzkaller1: entered allmulticast mode [ 354.306269][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 354.914097][T16924] syzkaller0: entered promiscuous mode [ 354.914121][T16924] syzkaller0: entered allmulticast mode [ 357.212100][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 357.212199][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.247789][T16962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'. [ 357.270172][T16954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.422034][T16962] bridge0: port 1(vlan2) entered blocking state [ 357.422142][T16962] bridge0: port 1(vlan2) entered disabled state [ 357.422305][T16962] vlan2: entered allmulticast mode [ 357.422320][T16962] geneve0: entered allmulticast mode [ 357.433046][T16962] vlan2: entered promiscuous mode [ 357.433064][T16962] geneve0: entered promiscuous mode [ 357.460555][T16966] vlan2: left promiscuous mode [ 357.460574][T16966] geneve0: left promiscuous mode [ 357.591170][T16983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'. [ 357.618702][T15035] net_ratelimit: 16 callbacks suppressed [ 357.618721][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 357.695503][T16989] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 357.842899][T16994] block nbd4: server does not support multiple connections per device. [ 357.843205][T16994] block nbd4: shutting down sockets [ 357.945363][T16998] block nbd5: server does not support multiple connections per device. [ 357.945648][T16998] block nbd5: shutting down sockets [ 358.058230][T15017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.738802][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.739682][T15036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.169763][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.432200][T16983] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 359.514740][T17003] netlink: 3136 bytes leftover after parsing attributes in process `syz.3.2601'. [ 359.520425][ T6661] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.520456][ T6661] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.520517][ T6661] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.520542][ T6661] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.520577][ T6661] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.520601][ T6661] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.520636][ T6661] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.520660][ T6661] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.578198][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 359.581960][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 359.655926][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'. [ 359.655945][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 359.655969][T17038] netlink: 'syz.3.2604': attribute type 12 has an invalid length. [ 359.655981][T17038] netlink: 'syz.3.2604': attribute type 11 has an invalid length. [ 359.694778][T17012] syzkaller0: entered promiscuous mode [ 359.694801][T17012] syzkaller0: entered allmulticast mode [ 360.269851][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.309415][T15043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.398377][T15012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.870494][T17058] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2609'. [ 361.942136][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.021426][T17055] can: request_module (can-proto-0) failed. [ 362.108811][T17066] sit0: entered promiscuous mode [ 362.121502][T17066] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2612'. [ 362.149172][T17066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2612'. [ 362.285875][T17072] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2615'. [ 362.373924][T17075] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.2614'. [ 362.437594][T17079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2617'. [ 363.483031][T17127] netlink: 'syz.2.2623': attribute type 83 has an invalid length. [ 363.530070][T15043] net_ratelimit: 6 callbacks suppressed [ 363.530090][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.606362][T17122] nbd: must specify an index to disconnect [ 363.630980][T15012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.646186][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.748670][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.789583][ T6661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.821329][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.851245][T17135] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 363.864178][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 363.905323][T17135] xt_nfacct: accounting object `syz0' does not exist [ 363.970289][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 364.100556][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 364.151244][T17155] netlink: 'syz.0.2633': attribute type 4 has an invalid length. [ 364.654796][T17169] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 364.662932][T17169] bond8 (unregistering): Released all slaves [ 364.979220][T17188] __nla_validate_parse: 6 callbacks suppressed [ 364.979254][T17188] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.2643'. [ 365.101856][T17184] wg2 speed is unknown, defaulting to 1000 [ 365.157223][T17191] netlink: 'syz.2.2646': attribute type 11 has an invalid length. [ 365.279220][T17205] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 365.348935][T17205] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.393795][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2644'. [ 365.393826][T17194] netlink: 'syz.1.2644': attribute type 7 has an invalid length. [ 365.393838][T17194] netlink: 'syz.1.2644': attribute type 8 has an invalid length. [ 365.393849][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 366.552316][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2660'. [ 366.795119][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2662'. [ 366.813008][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2662'. [ 366.896693][T17277] bridge0: port 1(syzkaller0) entered blocking state [ 366.897141][T17277] bridge0: port 1(syzkaller0) entered disabled state [ 366.897286][T17277] syzkaller0: entered allmulticast mode [ 366.924369][T17277] syzkaller0: entered promiscuous mode [ 367.137253][T17273] syzkaller0 (unregistering): left allmulticast mode [ 367.137277][T17273] syzkaller0 (unregistering): left promiscuous mode [ 367.137355][T17273] bridge0: port 1(syzkaller0) entered disabled state [ 367.219768][T17296] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 367.289236][T17296] tipc: Started in network mode [ 367.289274][T17296] tipc: Node identity 1001001, cluster identity 4711 [ 367.289287][T17296] tipc: Node number set to 16781313 [ 367.290358][T17296] tipc: Enabled bearer , priority 0 [ 367.424688][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 367.424886][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 367.425097][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 367.425345][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 367.905541][T17326] netlink: 'syz.0.2679': attribute type 4 has an invalid length. [ 367.919195][T17326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.927417][T17320] syzkaller0: entered promiscuous mode [ 367.927437][T17320] syzkaller0: entered allmulticast mode [ 368.575924][T17361] netlink: 'syz.4.2687': attribute type 12 has an invalid length. [ 368.575944][T17361] netlink: 'syz.4.2687': attribute type 29 has an invalid length. [ 368.575976][T17361] netlink: 'syz.4.2687': attribute type 3 has an invalid length. [ 368.575989][T17361] netlink: 'syz.4.2687': attribute type 2 has an invalid length. [ 368.629582][T15012] net_ratelimit: 39 callbacks suppressed [ 368.629601][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.742317][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.849464][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 368.958863][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 369.072579][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 369.169194][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.195156][T17403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.238858][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 369.282210][T17407] gtp10: entered promiscuous mode [ 369.282233][T17407] gtp10: entered allmulticast mode [ 369.348887][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 369.620328][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.883969][T17433] tunl0: Caught tx_queue_len zero misconfig [ 369.981431][T17438] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 369.981456][T17438] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 370.019093][T17436] __nla_validate_parse: 144 callbacks suppressed [ 370.019111][T17436] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2705'. [ 370.041302][T17442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2707'. [ 370.041330][T17442] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2707'. [ 370.042151][T17442] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 370.105694][T17442] bond13: (slave geneve4): making interface the new active one [ 370.106283][T17442] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 370.111618][T17442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2707'. [ 370.113876][T17442] bond13: entered promiscuous mode [ 370.113893][T17442] geneve4: entered promiscuous mode [ 370.115269][T17442] 8021q: adding VLAN 0 to HW filter on device bond13 [ 370.127413][T17442] tipc: Resetting bearer [ 370.136599][T17442] tipc: Resetting bearer [ 370.235901][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 370.282387][T15012] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.283930][T15012] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.283971][T15012] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.284005][T15012] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 370.513574][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 371.047816][T17495] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2718'. [ 371.209151][T17505] syzkaller0: entered promiscuous mode [ 371.209173][T17505] syzkaller0: entered allmulticast mode [ 371.253392][T17505] syzkaller0: left promiscuous mode [ 371.253414][T17505] syzkaller0: left allmulticast mode [ 371.604097][T17525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2725'. [ 371.742783][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 371.919646][T17537] netlink: 'syz.2.2730': attribute type 12 has an invalid length. [ 371.921487][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 372.064431][T17548] sctp: [Deprecated]: syz.1.2733 (pid 17548) Use of int in max_burst socket option. [ 372.064431][T17548] Use struct sctp_assoc_value instead [ 372.441692][T17556] bond6: option ad_select: invalid value (34) [ 372.564389][T17556] bond6 (unregistering): Released all slaves [ 373.228584][T17585] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 373.236468][T17580] wg2 speed is unknown, defaulting to 1000 [ 373.332472][T17595] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 373.332622][T17596] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 373.439934][T17598] gretap1: entered allmulticast mode [ 373.446749][T17598] bond8: (slave gretap1): making interface the new active one [ 373.447572][T17598] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 373.507404][T17590] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 373.507433][T17590] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 373.606802][T17606] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 373.689456][T15017] net_ratelimit: 39 callbacks suppressed [ 373.689477][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 373.818261][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 374.108874][T17636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.469215][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 374.578695][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 374.690426][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 374.708168][T15012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.798876][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 375.379889][T15012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.619198][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 376.127213][T17721] __nla_validate_parse: 4 callbacks suppressed [ 376.127231][T17721] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2767'. [ 376.175788][T17727] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 376.271362][T17720] bond4: (slave lo): Releasing backup interface [ 376.273502][T17720] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 376.315343][T17720] syz_tun: left allmulticast mode [ 376.315365][T17720] syz_tun: left promiscuous mode [ 376.315574][T17720] bridge0: port 3(syz_tun) entered disabled state [ 376.324813][T17720] bridge_slave_0: left allmulticast mode [ 376.324833][T17720] bridge_slave_0: left promiscuous mode [ 376.325020][T17720] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.362555][T17720] bridge_slave_1: left allmulticast mode [ 376.363804][T17720] bridge_slave_1: left promiscuous mode [ 376.364000][T17720] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.411310][T17720] bond0: (slave bond_slave_0): Releasing backup interface [ 376.432675][T17720] bond0: (slave bond_slave_1): Releasing backup interface [ 376.508738][T17738] xt_hashlimit: size too large, truncated to 1048576 [ 376.732276][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2772'. [ 376.992804][T17761] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 376.992832][T17761] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 377.514563][T17787] netlink: 'syz.3.2783': attribute type 5 has an invalid length. [ 377.516149][T17789] netlink: 'syz.3.2783': attribute type 5 has an invalid length. [ 377.582413][T17791] syzkaller0: entered promiscuous mode [ 377.582427][T17791] syzkaller0: entered allmulticast mode [ 377.585851][T17791] tipc: Bearer : already 2 bearers with priority 0 [ 377.585862][T17791] tipc: Enabling of bearer rejected, cannot adjust to lower [ 378.067255][T17806] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 378.067280][T17806] bridge6: entered allmulticast mode [ 378.136838][T17808] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 378.325392][T17821] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2795'. [ 378.325415][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2795'. [ 378.453568][T17819] tipc: Enabled bearer , priority 0 [ 378.590274][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2797'. [ 378.595528][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2797'. [ 378.708503][ T6661] net_ratelimit: 31 callbacks suppressed [ 378.708524][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 378.738031][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 378.746524][T17835] macvtap2: entered allmulticast mode [ 378.746538][T17835] dummy0: entered allmulticast mode [ 378.763490][T17835] dummy0: left allmulticast mode [ 378.804475][T17837] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2798'. [ 378.804496][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 378.838460][T17837] macvtap2: entered allmulticast mode [ 378.838481][T17837] dummy0: entered allmulticast mode [ 378.844124][T17837] dummy0: left allmulticast mode [ 378.948763][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.061608][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.138706][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.170768][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.244741][T17855] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 379.247169][T17855] .`: (slave netdevsim1): Releasing backup interface [ 379.261988][T17855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.270911][T17855] team0: Port device netdevsim1 added [ 379.277708][T17855] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 379.279958][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.371241][T17860] xt_l2tp: unknown flags: e7 [ 379.389677][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.505382][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.589177][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'. [ 379.592602][T17866] bridge0: port 1(veth0) entered blocking state [ 379.592759][T17866] bridge0: port 1(veth0) entered disabled state [ 379.592931][T17866] veth0: entered allmulticast mode [ 379.594871][T17866] veth0: entered promiscuous mode [ 379.595515][T17866] bridge0: port 1(veth0) entered blocking state [ 379.595648][T17866] bridge0: port 1(veth0) entered forwarding state [ 379.609202][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 379.719986][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 380.429880][T17895] syzkaller1: entered promiscuous mode [ 380.429902][T17895] syzkaller1: entered allmulticast mode [ 380.751092][T17918] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 380.826598][T17918] 8021q: adding VLAN 0 to HW filter on device bond14 [ 380.989252][T17924] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 381.032522][T17927] tipc: Enabling of bearer rejected, failed to enable media [ 381.337190][T17934] __nla_validate_parse: 8 callbacks suppressed [ 381.337209][T17934] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2827'. [ 381.721238][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 381.817426][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2829'. [ 382.326140][T17972] gre0: entered promiscuous mode [ 382.326161][T17972] gre0: entered allmulticast mode [ 382.763091][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 382.763113][T17991] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2840'. [ 382.763125][T17991] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2840'. [ 382.888884][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 382.897467][T17991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.293257][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 383.325796][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 383.615720][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.622475][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.629658][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.645136][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.645828][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.760430][ T6661] net_ratelimit: 36 callbacks suppressed [ 383.760448][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.868551][T15036] bond10: (slave syz_tun): failed to get link speed/duplex [ 383.906864][T18035] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2849'. [ 383.980933][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.090074][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.278243][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.283092][T18060] tipc: Enabled bearer , priority 0 [ 384.285953][T18060] syzkaller0: mtu less than device minimum [ 384.389394][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.498293][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.608041][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 384.678580][T15038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.700149][T18028] wg2 speed is unknown, defaulting to 1000 [ 384.881595][T15038] tipc: Subscription rejected, illegal request [ 384.916917][T18090] batadv_slave_1: Caught tx_queue_len zero misconfig [ 385.331151][T18107] sctp: [Deprecated]: syz.2.2861 (pid 18107) Use of int in max_burst socket option deprecated. [ 385.331151][T18107] Use struct sctp_assoc_value instead [ 385.337221][T18107] sctp: [Deprecated]: syz.2.2861 (pid 18107) Use of int in max_burst socket option deprecated. [ 385.337221][T18107] Use struct sctp_assoc_value instead [ 385.490381][T18101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.699217][ T5618] Bluetooth: hci5: command tx timeout [ 385.880247][T18028] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.880424][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.880549][T18028] bridge_slave_0: entered allmulticast mode [ 385.882897][T18028] bridge_slave_0: entered promiscuous mode [ 385.885625][T18028] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.885779][T18028] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.885907][T18028] bridge_slave_1: entered allmulticast mode [ 385.887552][T18028] bridge_slave_1: entered promiscuous mode [ 385.920142][T18028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.923361][T18028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.163249][T18133] IPVS: Scheduler module ip_vs_sip not found [ 386.182028][T18028] team0: Port device team_slave_0 added [ 386.184605][T18028] team0: Port device team_slave_1 added [ 386.395142][T18028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.395159][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.395181][T18028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.457142][T18028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.457163][T18028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.457182][T18028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.592761][T18028] hsr_slave_0: entered promiscuous mode [ 386.593857][T18028] hsr_slave_1: entered promiscuous mode [ 386.594545][T18028] debugfs: 'hsr0' already exists in 'hsr' [ 386.594563][T18028] Cannot create hsr debugfs directory [ 386.918014][T18175] __nla_validate_parse: 8 callbacks suppressed [ 386.918034][T18175] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2870'. [ 387.012089][T18177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2871'. [ 387.054008][T18178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2871'. [ 387.417536][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2872'. [ 387.417569][T18184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2872'. [ 387.606433][T18185] netlink: 'syz.2.2872': attribute type 1 has an invalid length. [ 387.606456][T18185] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2872'. [ 387.790132][ T5618] Bluetooth: hci5: command tx timeout [ 388.016418][T18197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'. [ 388.017642][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 388.017665][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 388.059840][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2875'. [ 388.066270][T18196] ipip1: entered promiscuous mode [ 388.067155][T18201] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved [ 388.306242][T18028] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 388.306294][T18028] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 388.309962][T18028] team0: Port device netdevsim1 removed [ 388.705617][ T31] audit: type=1804 audit(1790536180.742:11): pid=18231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2884" name="/newroot/521/cgroup.controllers" dev="tmpfs" ino=2703 res=1 errno=0 [ 388.735736][ T31] audit: type=1800 audit(1790536180.782:12): pid=18231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2884" name="cgroup.controllers" dev="tmpfs" ino=2703 res=0 errno=0 [ 388.819657][T15035] net_ratelimit: 21 callbacks suppressed [ 388.819698][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.823685][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.861790][T18231] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 388.953577][T18028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.975376][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.979145][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 388.994386][T18028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.010242][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.083578][T18028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.098838][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.099810][T18028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.107280][T18028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.123958][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 389.149704][T15040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.225626][T18249] smbdirect: ib_dev[syz1] removed [ 389.318813][T18252] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 389.326000][T18252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.337940][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 389.438123][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 389.500783][T18256] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 389.505496][T18256] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 389.549287][T18028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.581917][T18028] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.602180][T15035] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.602278][T15035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.608318][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 389.646664][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.646768][T15035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.685593][T18264] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 389.858646][ T5618] Bluetooth: hci5: command tx timeout [ 389.864437][T18284] netlink: 'syz.4.2896': attribute type 1 has an invalid length. [ 389.895323][T18274] bond7: (slave veth17): Enslaving as an active interface with a down link [ 389.922188][T18278] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 389.990267][T18264] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 390.109797][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 390.221977][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 390.502044][T18303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.890835][T18324] syzkaller0: entered promiscuous mode [ 390.890859][T18324] syzkaller0: entered allmulticast mode [ 391.220264][T18335] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 391.950632][ T5618] Bluetooth: hci5: command tx timeout [ 393.245634][T18335] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 393.246164][T18337] tipc: Resetting bearer [ 393.466836][T18028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.482723][T18364] __nla_validate_parse: 8 callbacks suppressed [ 393.482740][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2912'. [ 393.753313][T18028] veth0_vlan: entered promiscuous mode [ 393.756452][T18375] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2914'. [ 393.765837][T18028] veth1_vlan: entered promiscuous mode [ 393.796315][T18376] nbd: must specify at least one socket [ 393.850815][T18028] veth0_macvtap: entered promiscuous mode [ 393.874489][T18028] veth1_macvtap: entered promiscuous mode [ 393.890483][T15030] net_ratelimit: 15 callbacks suppressed [ 393.890500][T15030] bond10: (slave syz_tun): failed to get link speed/duplex [ 393.913399][T18385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2916'. [ 393.913418][T18385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2916'. [ 394.006798][T18391] netlink: 'syz.2.2918': attribute type 39 has an invalid length. [ 394.040345][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 394.045745][T18028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.050077][T18389] netlink: 'syz.3.2919': attribute type 1 has an invalid length. [ 394.225329][T18387] syzkaller0: entered promiscuous mode [ 394.225346][T18387] syzkaller0: entered allmulticast mode [ 394.243451][T18028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.272589][T18389] veth11: entered allmulticast mode [ 394.276562][T18389] bond15: (slave veth11): Enslaving as an active interface with a down link [ 394.317276][T18399] bond11: (slave veth0_to_bond): Releasing active interface [ 394.333056][T18399] bond15: (slave veth0_to_bond): making interface the new active one [ 394.333876][T18399] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 394.364131][T18387] pim6reg1: entered promiscuous mode [ 394.364150][T18387] pim6reg1: entered allmulticast mode [ 394.475065][T15038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.475736][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 394.476035][T15012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.476814][T15012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.476851][T15012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.510143][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 396.543687][T18427] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.2928'. [ 396.597418][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2928'. [ 396.614069][T15038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.614089][T15038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.664282][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 396.827296][T18436] gretap0: left promiscuous mode [ 396.840248][T18436] sit0: left promiscuous mode [ 396.850768][T18426] openvswitch: netlink: Message has 8 unknown bytes. [ 396.907761][T18436] vlan0: left promiscuous mode [ 396.920196][T18436] geneve1: left promiscuous mode [ 396.970613][T18436] geneve2: left promiscuous mode [ 396.970638][T18436] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 396.992483][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 397.022788][T15012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.022807][T15012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.079704][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 397.119182][T18448] sock: sock_timestamping_bind_phc: sock not bind to device [ 397.183533][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 397.289063][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 397.389574][T18463] netlink: 3136 bytes leftover after parsing attributes in process `syz.2.2932'. [ 397.400013][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 397.544424][T18467] netlink: 'syz.1.2934': attribute type 21 has an invalid length. [ 397.544445][T18467] netlink: 'syz.1.2934': attribute type 20 has an invalid length. [ 398.012297][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.024126][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.041533][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.050971][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.066132][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.233792][T18493] xt_CONNSECMARK: invalid mode: 254 [ 398.306397][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2940'. [ 398.917563][T18513] syzkaller0: entered promiscuous mode [ 398.917586][T18513] syzkaller0: entered allmulticast mode [ 399.224149][T15012] team0: Port device netdevsim1 removed [ 399.242283][T18485] wg2 speed is unknown, defaulting to 1000 [ 399.267632][T18537] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 399.267659][T18537] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 399.305162][T18533] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 399.327727][T18533] tipc: Enabling of bearer rejected, already enabled [ 399.340477][T18539] xt_CONNSECMARK: invalid mode: 254 [ 399.518337][T15043] net_ratelimit: 10 callbacks suppressed [ 399.518356][T15043] bond10: (slave syz_tun): failed to get link speed/duplex [ 399.535025][T18554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2954'. [ 399.731809][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 399.816365][T18563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2957'. [ 400.098331][ T5618] Bluetooth: hci2: command tx timeout [ 400.165606][T15012] batman_adv: batadv0: Removing interface: ip6gretap1 [ 400.320533][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 400.402286][T18593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2962'. [ 400.743070][T15012] bond8 (unregistering): (slave gretap1): Releasing active interface [ 400.846751][T15012] bond7 (unregistering): (slave geneve5): Releasing active interface [ 400.846779][T15012] geneve5 (unregistering): left promiscuous mode [ 400.906090][T15012] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 400.906122][T15012] bridge1 (unregistering): left promiscuous mode [ 400.906140][T15012] bridge1 (unregistering): left allmulticast mode [ 400.956909][T15012] .` (unregistering): Released all slaves [ 400.962986][T15012] bond1 (unregistering): Released all slaves [ 400.973315][T15012] bond2 (unregistering): Released all slaves [ 400.983041][T15012] bond3 (unregistering): Released all slaves [ 401.006142][T15012] bond4 (unregistering): Released all slaves [ 401.020628][T15012] bond5 (unregistering): Released all slaves [ 401.027767][T15012] bond6 (unregistering): Released all slaves [ 401.042763][T15012] bond0 (unregistering): Released all slaves [ 401.052959][T15012] bond7 (unregistering): Released all slaves [ 401.074450][T15012] bond8 (unregistering): Released all slaves [ 401.110937][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 401.111805][T18598] bond0: Master is either lo or non-ether device [ 401.158240][T18600] bond0: Master is either lo or non-ether device [ 401.264635][T18579] syzkaller0: entered promiscuous mode [ 401.264658][T18579] syzkaller0: entered allmulticast mode [ 401.285515][T18610] bond0: Master is either lo or non-ether device [ 401.296849][T18611] bond0: Master is either lo or non-ether device [ 401.307442][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 401.364556][T18619] xt_CONNSECMARK: invalid mode: 254 [ 402.184108][ T5618] Bluetooth: hci2: command tx timeout [ 403.202476][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 403.253794][T18631] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2966'. [ 403.253815][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 403.340956][T15012] tipc: Disabling bearer [ 403.341196][T15012] tipc: Left network mode [ 403.369308][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.534533][T18634] block nbd0: reconnected socket [ 403.535746][T18634] netlink: 'syz.3.2967': attribute type 9 has an invalid length. [ 403.556652][T18630] macvtap2: entered allmulticast mode [ 403.556665][T18630] dummy0: entered allmulticast mode [ 403.601525][T18630] dummy0: left allmulticast mode [ 403.708652][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 403.723292][T18640] x_tables: duplicate underflow at hook 1 [ 403.767058][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 403.833017][T18631] macvtap2: entered allmulticast mode [ 403.833033][T18631] dummy0: entered allmulticast mode [ 403.863008][T18631] dummy0: left allmulticast mode [ 404.013047][T18637] bond6: option arp_validate: invalid value (1048579) [ 404.015512][T18637] bond6 (unregistering): Released all slaves [ 404.022285][ T5618] block nbd0: Receive control failed (result -32) [ 404.236044][T18641] bond6: option arp_validate: invalid value (1048579) [ 404.241903][T18641] bond6 (unregistering): Released all slaves [ 404.258392][ T5618] Bluetooth: hci2: command tx timeout [ 404.329264][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 404.463290][T18485] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.463463][T18485] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.463610][T18485] bridge_slave_0: entered allmulticast mode [ 404.467188][T18485] bridge_slave_0: entered promiscuous mode [ 404.624007][T18485] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.624155][T18485] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.624296][T18485] bridge_slave_1: entered allmulticast mode [ 404.667369][T18485] bridge_slave_1: entered promiscuous mode [ 404.821839][T15030] bond10: (slave syz_tun): failed to get link speed/duplex [ 404.990620][T18695] FAULT_INJECTION: forcing a failure. [ 404.990620][T18695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.990656][T18695] CPU: 0 UID: 0 PID: 18695 Comm: syz.1.2979 Not tainted syzkaller #0 PREEMPT(full) [ 404.990676][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.990693][T18695] Call Trace: [ 404.990705][T18695] [ 404.990713][T18695] dump_stack_lvl+0xe8/0x150 [ 404.990746][T18695] should_fail_ex+0x410/0x560 [ 404.990772][T18695] _copy_from_user+0x2d/0xb0 [ 404.990798][T18695] __sys_bpf+0x2e7/0xd90 [ 404.990828][T18695] ? __pfx___sys_bpf+0x10/0x10 [ 404.990861][T18695] ? __fget_files+0x2a/0x420 [ 404.990905][T18695] ? ksys_write+0x242/0x270 [ 404.990933][T18695] ? __pfx_ksys_write+0x10/0x10 [ 404.990966][T18695] __x64_sys_bpf+0xba/0xd0 [ 404.990988][T18695] do_syscall_64+0x166/0x520 [ 404.991013][T18695] ? trace_irq_disable+0x3b/0x140 [ 404.991031][T18695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.991050][T18695] ? clear_bhb_loop+0x70/0xc0 [ 404.991073][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.991094][T18695] RIP: 0033:0x7f6fe559e159 [ 404.991111][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.991127][T18695] RSP: 002b:00007f6fe37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.991147][T18695] RAX: ffffffffffffffda RBX: 00007f6fe5825fa0 RCX: 00007f6fe559e159 [ 404.991161][T18695] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 404.991172][T18695] RBP: 00007f6fe37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.991184][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.991200][T18695] R13: 00007f6fe5826038 R14: 00007f6fe5825fa0 R15: 00007ffcfd131ef8 [ 404.991232][T18695] [ 405.226978][T18689] syzkaller0: entered promiscuous mode [ 405.227001][T18689] syzkaller0: entered allmulticast mode [ 405.254678][T18485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.322537][T18485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.353911][ T5618] Bluetooth: hci2: command tx timeout [ 407.362532][T18706] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 407.418929][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 407.427198][T18485] team0: Port device team_slave_0 added [ 407.441106][T18485] team0: Port device team_slave_1 added [ 407.610458][T18721] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 407.718239][T15038] bond10: (slave syz_tun): failed to get link speed/duplex [ 407.790376][T18485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.790392][T18485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.790415][T18485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.833137][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 407.835781][T18485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.835794][T18485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.835815][T18485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.119637][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 408.204456][T18751] SET target dimension over the limit! [ 408.231831][T18485] hsr_slave_0: entered promiscuous mode [ 408.266249][T18485] hsr_slave_1: entered promiscuous mode [ 408.267181][T18485] debugfs: 'hsr0' already exists in 'hsr' [ 408.267199][T18485] Cannot create hsr debugfs directory [ 408.381045][T18758] FAULT_INJECTION: forcing a failure. [ 408.381045][T18758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.381077][T18758] CPU: 0 UID: 0 PID: 18758 Comm: syz.1.2990 Not tainted syzkaller #0 PREEMPT(full) [ 408.381097][T18758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.381108][T18758] Call Trace: [ 408.381115][T18758] [ 408.381123][T18758] dump_stack_lvl+0xe8/0x150 [ 408.381154][T18758] should_fail_ex+0x410/0x560 [ 408.381181][T18758] _copy_to_user+0x31/0xb0 [ 408.381207][T18758] bpf_prog_test_run_raw_tp+0x604/0x840 [ 408.381244][T18758] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 408.381275][T18758] ? __fget_files+0x2a/0x420 [ 408.381304][T18758] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 408.381332][T18758] bpf_prog_test_run+0x2c5/0x340 [ 408.381359][T18758] __sys_bpf+0xa22/0xd90 [ 408.381389][T18758] ? __pfx___sys_bpf+0x10/0x10 [ 408.381421][T18758] ? __fget_files+0x2a/0x420 [ 408.381462][T18758] ? ksys_write+0x242/0x270 [ 408.381492][T18758] ? __pfx_ksys_write+0x10/0x10 [ 408.381525][T18758] __x64_sys_bpf+0xba/0xd0 [ 408.381547][T18758] do_syscall_64+0x166/0x520 [ 408.381572][T18758] ? trace_irq_disable+0x3b/0x140 [ 408.381589][T18758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.381609][T18758] ? clear_bhb_loop+0x70/0xc0 [ 408.381632][T18758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.381650][T18758] RIP: 0033:0x7f6fe559e159 [ 408.381668][T18758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.381683][T18758] RSP: 002b:00007f6fe37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.381703][T18758] RAX: ffffffffffffffda RBX: 00007f6fe5825fa0 RCX: 00007f6fe559e159 [ 408.381717][T18758] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 408.381729][T18758] RBP: 00007f6fe37f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.381740][T18758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.381751][T18758] R13: 00007f6fe5826038 R14: 00007f6fe5825fa0 R15: 00007ffcfd131ef8 [ 408.381782][T18758] [ 408.409384][T15040] bond10: (slave syz_tun): failed to get link speed/duplex [ 409.072801][T18773] batadv_slave_1: entered promiscuous mode [ 409.264926][T18796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2996'. [ 409.297553][T18797] netlink: 'syz.4.2995': attribute type 39 has an invalid length. [ 409.300597][T18787] syzkaller0: entered promiscuous mode [ 409.300618][T18787] syzkaller0: entered allmulticast mode [ 409.357702][T18797] tipc: Resetting bearer [ 409.447088][T18797] tipc: Disabling bearer [ 409.505299][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 409.560817][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 411.627208][T15012] hsr_slave_0: left promiscuous mode [ 411.627667][T15012] hsr_slave_1: left promiscuous mode [ 411.915130][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 411.934473][T18819] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 411.972065][T15035] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.328710][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.330510][T18836] netlink: 3136 bytes leftover after parsing attributes in process `syz.3.3005'. [ 412.438072][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.491836][T18844] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3007'. [ 412.588304][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.631384][T15012] IPVS: stop unused estimator thread 0... [ 412.702487][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.810838][T15012] bond10: (slave syz_tun): failed to get link speed/duplex [ 412.954868][T18860] xt_CONNSECMARK: invalid mode: 254 [ 413.089176][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.375464][T18881] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3014'. [ 413.468761][T15017] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.788928][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.905634][ T6661] bond10: (slave syz_tun): failed to get link speed/duplex [ 413.953297][T15017] nci: nci_ntf_packet: unsupported ntf opcode 0xf03 [ 414.138589][T18916] sctp: [Deprecated]: syz.4.3019 (pid 18916) Use of int in max_burst socket option deprecated. [ 414.138589][T18916] Use struct sctp_assoc_value instead [ 414.605783][T18936] xt_CONNSECMARK: invalid mode: 254 [ 416.644289][T18895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.667682][T18485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.717254][T18485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.719523][T18485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.744926][T18485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.747555][T18485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.795346][T18485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.811086][T18485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.847040][T18485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.983406][T19032] net_ratelimit: 37 callbacks suppressed [ 416.983423][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.983803][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.984226][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.984567][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.984929][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.985267][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.985606][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.985954][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.986291][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 416.986629][T19032] IPVS: rr: FWM 3 0x00000003 - no destination available [ 417.066245][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 417.123380][T18485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.156439][T18485] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.186455][T15025] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.186559][T15025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.236009][T15025] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.236113][T15025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.558217][T19049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3033'. [ 417.564397][T19049] 0ªX¹¦Dö»: entered promiscuous mode [ 417.564417][T19049] 0ªX¹¦Dö»: left allmulticast mode [ 417.588632][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 417.588653][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'. [ 417.655247][T19053] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 417.655280][T19053] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 417.655315][T19053] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 417.730773][T19053] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 417.933170][T19073] xt_CONNSECMARK: invalid mode: 254 [ 418.047500][T19074] tipc: Started in network mode [ 418.047522][T19074] tipc: Node identity 1000001, cluster identity 4369 [ 418.047533][T19074] tipc: Node number set to 16777217 [ 418.073225][T19074] tipc: New replicast peer: 127.0.0.1 [ 418.177058][T19074] tipc: Enabled bearer , priority 10 [ 418.440701][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3041'. [ 418.445942][T19082] netlink: 'syz.1.3041': attribute type 4 has an invalid length. [ 418.465889][T19084] netlink: 'syz.1.3041': attribute type 4 has an invalid length. [ 418.621055][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 418.654987][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3045'. [ 418.733075][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3046'. [ 418.782845][T19094] bond1: entered promiscuous mode [ 418.782870][T19094] bond1: entered allmulticast mode [ 418.876817][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 418.887391][T19098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3044'. [ 418.904201][T19098] netlink: 'syz.1.3044': attribute type 2 has an invalid length. [ 419.051984][T18485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.194780][T18485] veth0_vlan: entered promiscuous mode [ 419.223750][T18485] veth1_vlan: entered promiscuous mode [ 419.255189][T18485] veth0_macvtap: entered promiscuous mode [ 419.275453][T18485] veth1_macvtap: entered promiscuous mode [ 419.321038][T18485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.343377][T18485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.382641][T19118] tipc: Resetting bearer [ 419.442373][T15016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.442833][T15016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.442866][T15016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.442892][T15016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.605503][T19118] tipc: Resetting bearer [ 419.872182][T15028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.872203][T15028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.992135][T15034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.992155][T15034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.042277][T19142] netlink: 'syz.0.3057': attribute type 4 has an invalid length. [ 420.095651][T19147] netlink: 'syz.0.3057': attribute type 4 has an invalid length. [ 420.448301][T19142] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.449001][T19142] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.652077][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.654363][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.662695][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.682058][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.684837][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.055043][T19142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.083403][T19142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.345246][ T5611] bond10: (slave syz_tun): Removing an active aggregator [ 421.345809][ T5611] bond10: (slave syz_tun): Releasing backup interface [ 421.386552][T15039] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.387111][T15028] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.387148][T15028] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.387181][T15028] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.235327][T19158] wg2 speed is unknown, defaulting to 1000 [ 422.447793][T19242] netlink: 'syz.1.3072': attribute type 10 has an invalid length. [ 422.504814][T19247] __nla_validate_parse: 2 callbacks suppressed [ 422.504833][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 422.504847][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 422.532357][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3073'. [ 422.532377][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3073'. [ 422.539303][T12561] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.539341][T12561] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.539372][T12561] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.543431][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'. [ 422.554933][T12561] net_ratelimit: 43 callbacks suppressed [ 422.554948][T12561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.568579][T15033] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.626296][T19242] netlink: 'syz.1.3072': attribute type 10 has an invalid length. [ 422.637697][T19242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.692543][T19242] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 422.699829][T10970] syz1: Port: 1 Link ACTIVE [ 422.742659][ T5619] Bluetooth: hci3: command tx timeout [ 423.128334][T19158] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.128437][T19158] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.128564][T19158] bridge_slave_0: entered allmulticast mode [ 423.133728][T19158] bridge_slave_0: entered promiscuous mode [ 423.166082][T19158] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.166178][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.166304][T19158] bridge_slave_1: entered allmulticast mode [ 423.174041][T19274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3081'. [ 423.180559][T19158] bridge_slave_1: entered promiscuous mode [ 423.387346][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.403713][T19281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3083'. [ 423.418986][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.546120][T19283] netlink: 'syz.4.3085': attribute type 21 has an invalid length. [ 423.546143][T19283] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.553770][T19158] team0: Port device team_slave_0 added [ 423.583680][T19158] team0: Port device team_slave_1 added [ 423.584278][T19291] netlink: 'syz.0.3086': attribute type 1 has an invalid length. [ 423.584294][T19291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3086'. [ 423.586364][T19290] netlink: 'syz.0.3086': attribute type 1 has an invalid length. [ 423.586379][T19290] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3086'. [ 423.650610][T15016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.655762][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.655776][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.655797][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.657619][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.657632][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.657650][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.907522][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3088'. [ 423.907545][T19301] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.819692][ T5618] Bluetooth: hci3: command tx timeout [ 426.101196][T19299] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 426.130796][T19299] batman_adv: batadv0: Interface deactivated: gretap2 [ 426.160384][T19158] hsr_slave_0: entered promiscuous mode [ 426.163060][T19158] hsr_slave_1: entered promiscuous mode [ 426.163790][T19158] debugfs: 'hsr0' already exists in 'hsr' [ 426.163807][T19158] Cannot create hsr debugfs directory [ 426.511140][T19323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.609197][T12561] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.609229][T12561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.610287][T15033] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.610312][T15033] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.610342][T15033] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.610364][T15033] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.610393][T15033] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.610414][T15033] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.613854][T19323] netlink: 'syz.1.3092': attribute type 4 has an invalid length. [ 426.636514][T19323] .`: renamed from bond0 [ 426.909654][ T5618] Bluetooth: hci3: command 0x040f tx timeout [ 426.962420][T19158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.962452][T19158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.962476][T19158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.052980][T19355] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 427.119757][T19346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 427.220548][T19158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.220582][T19158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.220606][T19158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.403708][T19365] syzkaller0: entered promiscuous mode [ 427.403730][T19365] syzkaller0: entered allmulticast mode [ 427.483203][T19158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.489849][T19158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.489881][T19158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.762061][T19158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.762094][T19158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.762118][T19158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.853382][T15032] IPVS: starting estimator thread 0... [ 427.940182][T19386] IPVS: using max 32 ests per chain, 76800 per kthread [ 428.035145][T19158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.047407][T19158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.056116][T19158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.069684][T19158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.070890][T19158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.077253][T19158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.093976][T19158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.112278][T19158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.303605][T19158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.340500][T19158] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.360465][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.360577][T12561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.399066][T15016] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.399172][T15016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.512175][T19158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.740583][T19415] __nla_validate_parse: 6 callbacks suppressed [ 428.740603][T19415] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.3114'. [ 428.979072][ T5619] Bluetooth: hci3: command 0x040f tx timeout [ 429.231794][T19428] wg2 speed is unknown, defaulting to 1000 [ 429.399079][T19437] xt_REDIRECT: bad MAP_IPS. [ 429.707389][T19158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.904485][T19158] veth0_vlan: entered promiscuous mode [ 429.936386][T19158] veth1_vlan: entered promiscuous mode [ 430.033301][T19158] veth0_macvtap: entered promiscuous mode [ 430.047358][T19158] veth1_macvtap: entered promiscuous mode [ 430.123865][T19454] wg2 speed is unknown, defaulting to 1000 [ 430.127092][T19158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.195411][T19158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.299955][T12561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.300020][T12561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.300051][T12561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.300081][T12561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.392762][T19463] netlink: 3136 bytes leftover after parsing attributes in process `syz.1.3125'. [ 430.911565][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 430.911585][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3129'. [ 430.958588][T19477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3129'. [ 431.060740][ T5619] Bluetooth: hci3: command 0x040f tx timeout [ 431.193529][T19487] tipc: Started in network mode [ 431.193547][T19487] tipc: Node identity 5250fd8e1468, cluster identity 4711 [ 431.193696][T19487] tipc: Enabled bearer , priority 0 [ 431.195547][T19487] syzkaller0: entered promiscuous mode [ 431.195563][T19487] syzkaller0: entered allmulticast mode [ 431.210807][T15006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.210820][T15006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.256520][T19488] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 431.284452][T19489] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 431.340399][T19499] openvswitch: netlink: Missing key (keys=40, expected=100) [ 431.414391][T19493] lo: left allmulticast mode [ 431.414714][T19493] gre0: left promiscuous mode [ 431.414729][T19493] gre0: left allmulticast mode [ 431.414843][T19493] 0ªX¹¦Dö»: left promiscuous mode [ 431.415440][T19493] sit0: left allmulticast mode [ 431.441176][T19493] macvtap0: left promiscuous mode [ 431.441457][T19493] macsec0: left promiscuous mode [ 431.441891][T19493] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 431.457797][T19493] ip6gretap2: left allmulticast mode [ 431.466327][T19493] bond3: left promiscuous mode [ 431.466451][T19493] ip6erspan1: left allmulticast mode [ 431.475111][T19493] veth5: left allmulticast mode [ 431.490914][T19493] gtp10: left promiscuous mode [ 431.490932][T19493] gtp10: left allmulticast mode [ 431.589627][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 431.591389][T19488] tipc: Resetting bearer [ 431.595378][T19486] tipc: Resetting bearer [ 431.651113][T19486] tipc: Disabling bearer [ 431.721217][T15032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.721237][T15032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.890005][T19508] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.3135'. [ 432.081465][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3059'. [ 432.217604][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.226758][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.238872][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.243694][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.246819][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.383211][T19528] lo: entered allmulticast mode [ 432.450473][T19527] lo: left allmulticast mode [ 432.704583][T19542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3143'. [ 432.723097][T19505] IPVS: rr: FWM 3 0x00000003 - no destination available [ 432.760871][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3143'. [ 433.162699][T19567] nbd: couldn't find device at index 65536 [ 433.455720][T15016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.455752][T15016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.457049][T19568] netlink: Failed to add %pK helper -22 [ 433.457095][T19568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.682337][T15016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.682371][T15016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.987673][T15016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.987707][T15016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.044668][T19521] wg2 speed is unknown, defaulting to 1000 [ 434.195648][T19588] syzkaller0: entered promiscuous mode [ 434.195671][T19588] syzkaller0: entered allmulticast mode [ 434.242167][T15016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.242201][T15016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.264017][T19595] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 434.339132][ T5619] Bluetooth: hci0: command tx timeout [ 436.420774][ T5619] Bluetooth: hci0: command tx timeout [ 436.652272][T19602] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.848139][T19612] netlink: 'syz.1.3157': attribute type 1 has an invalid length. [ 436.851703][T19607] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 436.851736][T19607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.930963][T19612] bond0: entered promiscuous mode [ 436.931026][T19612] bond0: entered allmulticast mode [ 436.931429][T19612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.277027][T15016] veth0: left allmulticast mode [ 437.277050][T15016] veth0: left promiscuous mode [ 437.277240][T15016] bridge0: port 1(veth0) entered disabled state [ 437.294568][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3160'. [ 437.305901][T15016] vlan3: left allmulticast mode [ 437.305926][T15016] vlan3: left promiscuous mode [ 437.306264][T15016] bridge0: port 4(vlan3) entered disabled state [ 437.524879][T15016] bond2 (unregistering): (slave gretap1): Releasing active interface [ 437.676047][T15016] bond3 (unregistering): (slave geneve3): Releasing active interface [ 437.806128][T15016] bond0 (unregistering): Released all slaves [ 437.816567][T15016] bond1 (unregistering): Released all slaves [ 437.840005][T15016] bond2 (unregistering): Released all slaves [ 437.863460][T15016] bond3 (unregistering): Released all slaves [ 437.877053][T15016] bond4 (unregistering): Released all slaves [ 437.891231][T15016] bond5 (unregistering): Released all slaves [ 437.914438][T15016] bond6 (unregistering): Released all slaves [ 437.929362][T15016] bond7 (unregistering): (slave veth17): Releasing active interface [ 437.930919][T15016] bond7 (unregistering): Released all slaves [ 438.013719][T19631] veth3: entered allmulticast mode [ 438.045473][ T7519] wg2 speed is unknown, defaulting to 1000 [ 438.045506][ T7519] syz2: Port: 1 Link DOWN [ 438.124906][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 438.125950][T19646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3165'. [ 438.255804][T15016] : left promiscuous mode [ 438.332561][T19656] nbd4: detected capacity change from 0 to 63 [ 438.352549][ T5619] block nbd4: Receive control failed (result -104) [ 438.367618][ T1983] block nbd4: Dead connection, failed to find a fallback [ 438.367640][ T1983] block nbd4: shutting down sockets [ 438.367731][ T1983] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 438.367945][ T1983] Buffer I/O error on dev nbd4, logical block 1, async page read [ 438.408548][T15016] [ 438.410892][T15016] ====================================================== [ 438.415058][ T4944] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 438.415085][ T4944] Buffer I/O error on dev nbd4, logical block 2, async page read [ 438.415099][ T4944] Buffer I/O error on dev nbd4, logical block 3, async page read [ 438.442700][T15016] WARNING: possible circular locking dependency detected [ 438.449715][T15016] syzkaller #0 Not tainted [ 438.454116][T15016] ------------------------------------------------------ [ 438.461111][T15016] kworker/u8:35/15016 is trying to acquire lock: [ 438.467434][T15016] ffffffff9024ac00 (xps_map_mutex){+.+.}-{4:4}, at: netif_reset_xps_queues_gt+0x6f/0xc0 [ 438.477197][T15016] [ 438.477197][T15016] but task is already holding lock: [ 438.484542][T15016] ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 438.494536][T15016] [ 438.494536][T15016] which lock already depends on the new lock. [ 438.494536][T15016] [ 438.504919][T15016] [ 438.504919][T15016] the existing dependency chain (in reverse order) is: [ 438.513914][T15016] [ 438.513914][T15016] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 438.521630][T15016] cpus_read_lock+0x42/0x160 [ 438.526731][T15016] static_key_slow_inc+0x12/0x30 [ 438.532175][T15016] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 438.538403][T15016] nbd_genl_foreach_sock+0x265/0x450 [ 438.544190][T15016] nbd_genl_reconfigure+0xbbb/0x1040 [ 438.549981][T15016] genl_family_rcv_msg_doit+0x233/0x340 [ 438.556032][T15016] genl_rcv_msg+0x614/0x7a0 [ 438.561039][T15016] netlink_rcv_skb+0x226/0x4a0 [ 438.566309][T15016] genl_rcv+0x28/0x40 [ 438.570796][T15016] netlink_unicast+0x7bd/0x940 [ 438.576065][T15016] netlink_sendmsg+0x813/0xb40 [ 438.581331][T15016] sock_sendmsg_nosec+0x13a/0x180 [ 438.586858][T15016] ____sys_sendmsg+0x54e/0x850 [ 438.592130][T15016] ___sys_sendmsg+0x2a5/0x360 [ 438.597316][T15016] __x64_sys_sendmsg+0x1b1/0x290 [ 438.602760][T15016] do_syscall_64+0x166/0x520 [ 438.607863][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.614265][T15016] [ 438.614265][T15016] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 438.621893][T15016] __mutex_lock+0x19d/0x1550 [ 438.626994][T15016] nbd_queue_rq+0x373/0xff0 [ 438.632008][T15016] blk_mq_dispatch_rq_list+0x499/0x1990 [ 438.638062][T15016] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 438.644904][T15016] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 438.651389][T15016] blk_mq_run_work_fn+0x16c/0x300 [ 438.656924][T15016] process_scheduled_works+0xc3d/0x1630 [ 438.662977][T15016] worker_thread+0xa47/0xfb0 [ 438.668081][T15016] kthread+0x38b/0x480 [ 438.672662][T15016] ret_from_fork+0x514/0xb70 [ 438.677758][T15016] ret_from_fork_asm+0x1a/0x30 [ 438.683035][T15016] [ 438.683035][T15016] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 438.690229][T15016] __mutex_lock+0x19d/0x1550 [ 438.695329][T15016] nbd_queue_rq+0xc1/0xff0 [ 438.700248][T15016] blk_mq_dispatch_rq_list+0x499/0x1990 [ 438.706299][T15016] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 438.713137][T15016] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 438.719624][T15016] blk_mq_run_work_fn+0x16c/0x300 [ 438.725159][T15016] process_scheduled_works+0xc3d/0x1630 [ 438.731213][T15016] worker_thread+0xa47/0xfb0 [ 438.736311][T15016] kthread+0x38b/0x480 [ 438.740885][T15016] ret_from_fork+0x514/0xb70 [ 438.745981][T15016] ret_from_fork_asm+0x1a/0x30 [ 438.751257][T15016] [ 438.751257][T15016] -> #4 (set->srcu){.+.+}-{0:0}: [ 438.758365][T15016] __synchronize_srcu+0xc9/0x2f0 [ 438.763810][T15016] elevator_switch+0x1e8/0x7b0 [ 438.769109][T15016] elevator_change+0x2fa/0x480 [ 438.774378][T15016] elevator_set_default+0x375/0x440 [ 438.780079][T15016] blk_register_queue+0x3f3/0x4e0 [ 438.785612][T15016] __add_disk+0x6b8/0xdb0 [ 438.790451][T15016] add_disk_fwnode+0x100/0x3a0 [ 438.795720][T15016] nbd_dev_add+0x733/0xb60 [ 438.800640][T15016] nbd_init+0x168/0x1f0 [ 438.805310][T15016] do_one_initcall+0x250/0x870 [ 438.810584][T15016] do_initcall_level+0x10a/0x1a0 [ 438.816024][T15016] do_initcalls+0x59/0xa0 [ 438.820857][T15016] kernel_init_freeable+0x29d/0x3e0 [ 438.826561][T15016] kernel_init+0x22/0x1d0 [ 438.831412][T15016] ret_from_fork+0x514/0xb70 [ 438.836505][T15016] ret_from_fork_asm+0x1a/0x30 [ 438.841779][T15016] [ 438.841779][T15016] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 438.849580][T15016] __mutex_lock+0x19d/0x1550 [ 438.854684][T15016] elevator_change+0x1af/0x480 [ 438.859956][T15016] elevator_set_none+0xb5/0x140 [ 438.865314][T15016] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 438.871634][T15016] nbd_start_device+0x189/0xb30 [ 438.876994][T15016] nbd_genl_connect+0x167d/0x1cd0 [ 438.882523][T15016] genl_family_rcv_msg_doit+0x233/0x340 [ 438.888585][T15016] genl_rcv_msg+0x614/0x7a0 [ 438.893618][T15016] netlink_rcv_skb+0x226/0x4a0 [ 438.898886][T15016] genl_rcv+0x28/0x40 [ 438.903416][T15016] netlink_unicast+0x7bd/0x940 [ 438.908728][T15016] netlink_sendmsg+0x813/0xb40 [ 438.913997][T15016] sock_sendmsg_nosec+0x13a/0x180 [ 438.919523][T15016] ____sys_sendmsg+0x54e/0x850 [ 438.924796][T15016] ___sys_sendmsg+0x2a5/0x360 [ 438.929983][T15016] __x64_sys_sendmsg+0x1b1/0x290 [ 438.935438][T15016] do_syscall_64+0x166/0x520 [ 438.940537][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.946933][T15016] [ 438.946933][T15016] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 438.955520][T15016] blk_alloc_queue+0x544/0x690 [ 438.960793][T15016] __blk_mq_alloc_disk+0x194/0x390 [ 438.966412][T15016] nbd_dev_add+0x494/0xb60 [ 438.971334][T15016] nbd_init+0x168/0x1f0 [ 438.975999][T15016] do_one_initcall+0x250/0x870 [ 438.981288][T15016] do_initcall_level+0x10a/0x1a0 [ 438.986743][T15016] do_initcalls+0x59/0xa0 [ 438.991581][T15016] kernel_init_freeable+0x29d/0x3e0 [ 438.997305][T15016] kernel_init+0x22/0x1d0 [ 439.002140][T15016] ret_from_fork+0x514/0xb70 [ 439.007233][T15016] ret_from_fork_asm+0x1a/0x30 [ 439.012508][T15016] [ 439.012508][T15016] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 439.019698][T15016] fs_reclaim_acquire+0x71/0x100 [ 439.025139][T15016] __kmalloc_noprof+0xbc/0x720 [ 439.030408][T15016] __netif_set_xps_queue+0x509/0x1e50 [ 439.036296][T15016] virtnet_set_affinity+0x586/0x6c0 [ 439.042001][T15016] init_vqs+0x1085/0x11c0 [ 439.046838][T15016] virtnet_probe+0x21f1/0x48d0 [ 439.052103][T15016] virtio_dev_probe+0xdf6/0x10c0 [ 439.057551][T15016] really_probe+0x254/0xae0 [ 439.062565][T15016] __driver_probe_device+0x1e8/0x360 [ 439.068397][T15016] driver_probe_device+0x4f/0x240 [ 439.073953][T15016] __driver_attach+0x339/0x600 [ 439.079251][T15016] bus_for_each_dev+0x23b/0x2c0 [ 439.084610][T15016] bus_add_driver+0x345/0x670 [ 439.089797][T15016] driver_register+0x23a/0x320 [ 439.095090][T15016] virtio_net_driver_init+0x71/0xa0 [ 439.100793][T15016] do_one_initcall+0x250/0x870 [ 439.106091][T15016] do_initcall_level+0x10a/0x1a0 [ 439.111532][T15016] do_initcalls+0x59/0xa0 [ 439.116365][T15016] kernel_init_freeable+0x29d/0x3e0 [ 439.122068][T15016] kernel_init+0x22/0x1d0 [ 439.126934][T15016] ret_from_fork+0x514/0xb70 [ 439.132028][T15016] ret_from_fork_asm+0x1a/0x30 [ 439.137308][T15016] [ 439.137308][T15016] -> #0 (xps_map_mutex){+.+.}-{4:4}: [ 439.144760][T15016] __lock_acquire+0x164c/0x2de0 [ 439.150118][T15016] lock_acquire+0x115/0x350 [ 439.155127][T15016] __mutex_lock+0x19d/0x1550 [ 439.160225][T15016] netif_reset_xps_queues_gt+0x6f/0xc0 [ 439.166196][T15016] unregister_netdevice_many_notify+0x1beb/0x2140 [ 439.173200][T15016] unregister_netdevice_queue+0x2f5/0x340 [ 439.179474][T15016] internal_dev_destroy+0x127/0x170 [ 439.185188][T15016] __dp_destroy+0x69f/0x9b0 [ 439.190195][T15016] ovs_exit_net+0x141/0x7a0 [ 439.195223][T15016] ops_undo_list+0x43d/0x8d0 [ 439.200319][T15016] cleanup_net+0x572/0x810 [ 439.205253][T15016] process_scheduled_works+0xc3d/0x1630 [ 439.211304][T15016] worker_thread+0xa47/0xfb0 [ 439.216399][T15016] kthread+0x38b/0x480 [ 439.220971][T15016] ret_from_fork+0x514/0xb70 [ 439.226062][T15016] ret_from_fork_asm+0x1a/0x30 [ 439.231343][T15016] [ 439.231343][T15016] other info that might help us debug this: [ 439.231343][T15016] [ 439.241549][T15016] Chain exists of: [ 439.241549][T15016] xps_map_mutex --> &nsock->tx_lock --> cpu_hotplug_lock [ 439.241549][T15016] [ 439.254490][T15016] Possible unsafe locking scenario: [ 439.254490][T15016] [ 439.261920][T15016] CPU0 CPU1 [ 439.267265][T15016] ---- ---- [ 439.272608][T15016] rlock(cpu_hotplug_lock); [ 439.277187][T15016] lock(&nsock->tx_lock); [ 439.284116][T15016] lock(cpu_hotplug_lock); [ 439.291125][T15016] lock(xps_map_mutex); [ 439.295350][T15016] [ 439.295350][T15016] *** DEADLOCK *** [ 439.295350][T15016] [ 439.303471][T15016] locks held by kworker/u8:35/15016: 6, last CPU#0: [ 439.310040][T15016] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 439.320902][T15016] #1: ffffc9001bc87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 439.331414][T15016] #2: ffffffff902466c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 439.340710][T15016] #3: ffffffff905c5ba0 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 439.349487][T15016] #4: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 439.359046][T15016] #5: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 439.369483][T15016] [ 439.369483][T15016] stack backtrace: [ 439.375355][T15016] CPU: 0 UID: 0 PID: 15016 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT(full) [ 439.384968][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.395008][T15016] Workqueue: netns cleanup_net [ 439.399766][T15016] Call Trace: [ 439.403035][T15016] [ 439.405951][T15016] dump_stack_lvl+0xe8/0x150 [ 439.410536][T15016] print_circular_bug+0x2e2/0x300 [ 439.415552][T15016] check_noncircular+0x12f/0x150 [ 439.420480][T15016] __lock_acquire+0x164c/0x2de0 [ 439.425316][T15016] ? preempt_schedule_common+0x7f/0xd0 [ 439.430762][T15016] ? preempt_schedule_thunk+0x16/0x40 [ 439.436122][T15016] ? __mutex_lock+0x321/0x1550 [ 439.440878][T15016] lock_acquire+0x115/0x350 [ 439.445370][T15016] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 439.451009][T15016] __mutex_lock+0x19d/0x1550 [ 439.455590][T15016] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 439.461214][T15016] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.467186][T15016] ? kobject_put+0x50f/0x550 [ 439.471760][T15016] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 439.477406][T15016] ? __pfx___mutex_lock+0x10/0x10 [ 439.482432][T15016] netif_reset_xps_queues_gt+0x6f/0xc0 [ 439.487924][T15016] unregister_netdevice_many_notify+0x1beb/0x2140 [ 439.494338][T15016] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 439.501087][T15016] ? netdev_work_dequeue+0x225/0x250 [ 439.506363][T15016] unregister_netdevice_queue+0x2f5/0x340 [ 439.512073][T15016] ? __local_bh_enable_ip+0xd6/0x140 [ 439.517346][T15016] ? netdev_work_dequeue+0x225/0x250 [ 439.522616][T15016] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 439.528853][T15016] ? dev_set_promiscuity+0x1cb/0x220 [ 439.534127][T15016] internal_dev_destroy+0x127/0x170 [ 439.539317][T15016] __dp_destroy+0x69f/0x9b0 [ 439.543813][T15016] ovs_exit_net+0x141/0x7a0 [ 439.548310][T15016] ? lockdep_hardirqs_on+0x7b/0x110 [ 439.553509][T15016] ? __pfx_ovs_exit_net+0x10/0x10 [ 439.558522][T15016] ops_undo_list+0x43d/0x8d0 [ 439.563108][T15016] ? __pfx_ops_undo_list+0x10/0x10 [ 439.568214][T15016] ? idr_destroy+0x227/0x290 [ 439.572805][T15016] cleanup_net+0x572/0x810 [ 439.577207][T15016] ? __pfx_cleanup_net+0x10/0x10 [ 439.582134][T15016] ? rcu_is_watching+0x16/0xb0 [ 439.586888][T15016] ? process_scheduled_works+0x97a/0x1630 [ 439.592598][T15016] process_scheduled_works+0xc3d/0x1630 [ 439.598141][T15016] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.604113][T15016] ? assign_work+0x3cf/0x5d0 [ 439.608690][T15016] worker_thread+0xa47/0xfb0 [ 439.613278][T15016] kthread+0x38b/0x480 [ 439.617330][T15016] ? __pfx_worker_thread+0x10/0x10 [ 439.622430][T15016] ? __pfx_kthread+0x10/0x10 [ 439.627007][T15016] ret_from_fork+0x514/0xb70 [ 439.631579][T15016] ? __pfx_ret_from_fork+0x10/0x10 [ 439.636679][T15016] ? __switch_to+0xc89/0x1420 [ 439.641381][T15016] ? __pfx_kthread+0x10/0x10 [ 439.645960][T15016] ret_from_fork_asm+0x1a/0x30 [ 439.650722][T15016] [ 439.659355][ T5619] Bluetooth: hci0: command tx timeout [ 439.855235][T15016] tipc: Disabling bearer [ 439.855372][T15016] tipc: Left network mode [ 439.940215][T19521] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.940324][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.940412][T19521] bridge_slave_0: entered allmulticast mode [ 439.941371][T19521] bridge_slave_0: entered promiscuous mode [ 439.943233][T19521] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.943330][T19521] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.943414][T19521] bridge_slave_1: entered allmulticast mode [ 439.944292][T19521] bridge_slave_1: entered promiscuous mode [ 439.963683][T19521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.969356][T19521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.984244][T19521] team0: Port device team_slave_0 added [ 439.986044][T19521] team0: Port device team_slave_1 added [ 440.001690][T19521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.001703][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.001724][T19521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.002744][T19521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.002755][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.002776][T19521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.099169][T19521] hsr_slave_0: entered promiscuous mode [ 440.101190][T19521] hsr_slave_1: entered promiscuous mode [ 440.101642][T19521] debugfs: 'hsr0' already exists in 'hsr' [ 440.101655][T19521] Cannot create hsr debugfs directory [ 440.174468][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 440.418652][T15016] veth1_to_team: left promiscuous mode [ 440.423225][T15016] veth0_to_team: left promiscuous mode [ 440.426533][T15016] hsr_slave_0: left promiscuous mode [ 440.426932][T15016] hsr_slave_1: left promiscuous mode [ 440.427390][T15016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.427404][T15016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.475193][T15016] veth1_macvtap: left promiscuous mode [ 440.475211][T15016] veth0_macvtap: left promiscuous mode [ 440.475251][T15016] veth1_vlan: left promiscuous mode [ 440.475261][T15016] veth0_vlan: left promiscuous mode [ 440.696436][T15016] team_slave_1 (unregistering): left promiscuous mode [ 440.696807][T15016] team0 (unregistering): Port device team_slave_1 removed [ 440.702652][T15016] team_slave_0 (unregistering): left promiscuous mode [ 440.712191][T15016] team0 (unregistering): Port device team_slave_0 removed [ 440.741269][T12561] smbdirect: ib_dev[syz2] removed [ 440.799445][T19521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.801985][T19521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.802548][T19521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.804506][T19521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.805056][T19521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.807346][T19521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.850147][T19521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.853319][T19521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.890197][T19521] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.890277][T19521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.890500][T19521] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.890599][T19521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.913333][T15013] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.923637][T15013] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.010953][T19521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.024215][T19521] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.028823][T15032] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.028896][T15032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.033299][T15032] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.033360][T15032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.088962][T15016] IPVS: stop unused estimator thread 0... [ 441.093656][T19521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.391423][T19521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.610005][T19521] veth0_vlan: entered promiscuous mode [ 441.614765][T19521] veth1_vlan: entered promiscuous mode [ 441.641380][T19521] veth0_macvtap: entered promiscuous mode [ 441.646737][T19521] veth1_macvtap: entered promiscuous mode [ 441.666892][T19521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.678901][T19521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.684173][T12561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.684307][T12561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.684404][T12561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.698913][ T5619] Bluetooth: hci0: command tx timeout [ 441.738896][T15013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.741981][T19521] ieee80211 phy59: Selected rate control algorithm 'minstrel_ht' [ 441.780710][T15032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.780727][T15032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.783313][T19521] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 441.827049][T12561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.827067][T12561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.138961][ T1983] block nbd4: Connection timed out, retrying (0/1 alive) [ 445.139019][ T1983] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139044][ T1983] Buffer I/O error on dev nbd4, logical block 0, async page read [ 445.139177][ T4944] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139199][ T4944] Buffer I/O error on dev nbd4, logical block 0, async page read [ 445.139271][ T4944] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139289][ T4944] Buffer I/O error on dev nbd4, logical block 1, async page read [ 445.139350][ T4944] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139370][ T4944] Buffer I/O error on dev nbd4, logical block 2, async page read [ 445.139432][ T4944] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139452][ T4944] Buffer I/O error on dev nbd4, logical block 3, async page read [ 445.139526][ T4944] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139543][ T4944] Buffer I/O error on dev nbd4, logical block 0, async page read [ 445.139593][ T4944] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139605][ T4944] Buffer I/O error on dev nbd4, logical block 1, async page read [ 445.139644][ T4944] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139656][ T4944] Buffer I/O error on dev nbd4, logical block 2, async page read [ 445.139694][ T4944] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139706][ T4944] Buffer I/O error on dev nbd4, logical block 3, async page read [ 445.139752][ T4944] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.139763][ T4944] Buffer I/O error on dev nbd4, logical block 0, async page read [ 445.141195][ T6590] ldm_validate_partition_table(): Disk read failed. [ 445.141805][ T6590] Dev nbd4: unable to read RDB block 0 [ 445.142400][ T6590] nbd4: unable to read partition table [ 445.145463][ T6590] ldm_validate_partition_table(): Disk read failed. [ 445.146242][ T6590] Dev nbd4: unable to read RDB block 0 [ 445.147114][ T6590] nbd4: unable to read partition table