last executing test programs: 4.486180124s ago: executing program 4 (id=5405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000200)="8f6bb66f47d47554c1eacd985a1403aba32253ff6423059d", 0x18, 0x4044, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x5, 0x4) 4.102691833s ago: executing program 4 (id=5409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3c, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0xf3c, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x53fa, 0xb09, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff1}, {0xfff1}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x1ff, 0x1, 0x7fffffff, 0x6, 0xffff, 0xfffffffd, 0x0, 0x8e46, 0x81, 0x1, 0xb, 0x627, 0x447b, 0xd, 0x4, 0x0, 0x10, 0x4, 0x6, 0x8, 0xb, 0x6, 0x5, 0x2e3, 0x8, 0x81, 0x8, 0x6, 0x7, 0x1, 0x0, 0x3, 0x1, 0x80, 0x8, 0x10000, 0x800, 0x4, 0x7, 0x10000, 0xf5, 0x0, 0x1, 0xfffffe01, 0x0, 0x8, 0x3, 0x2, 0x9, 0x9, 0x1, 0x9, 0x8d, 0x4, 0x10000, 0xe87, 0x4, 0x6, 0x6, 0xc85, 0x3, 0x77a3, 0x3, 0x93cb, 0x9, 0x8000, 0x7ec, 0x80000001, 0x0, 0x4, 0x4, 0x6, 0x3ff, 0x10, 0x3, 0x6, 0x7, 0x8, 0x6, 0x1ff, 0x3, 0xfffffffb, 0x7, 0x9726, 0x1b, 0x1, 0x2, 0x5, 0x8, 0xca, 0x1, 0xe, 0x6, 0x34, 0x5, 0x80000001, 0xc, 0x6, 0x100, 0xed, 0xc9, 0x0, 0x4, 0x1, 0xfa61, 0x3, 0x2, 0x80, 0x2, 0x7, 0x1, 0x5, 0x7fffffff, 0x0, 0x4, 0xe, 0x1, 0x9, 0x2, 0x3, 0xffff, 0x3, 0x1000, 0x9, 0x1, 0x6, 0x7, 0x40, 0x9ac, 0x7, 0x9, 0x1, 0x1, 0xffff, 0x1ff, 0xa, 0x80, 0x5, 0x5, 0x2, 0x2, 0x2, 0x3, 0x5, 0xffffd68b, 0x7, 0xffffff4e, 0x8001, 0x6, 0x3, 0x80000000, 0x5, 0x0, 0x4, 0xc9, 0x2, 0xba, 0x0, 0x200, 0x2154, 0x0, 0x2, 0x80, 0x8, 0x3, 0xa42f, 0xa, 0x2, 0x0, 0x1, 0x4, 0x5, 0x7, 0x6, 0x1, 0x7, 0x17f0, 0x2, 0xc76, 0x6, 0x40, 0xffffffff, 0x3, 0x7f, 0xffffffff, 0xffff, 0x9, 0x100, 0x7b, 0x8001, 0x6, 0x3, 0x8c, 0x8001, 0x9, 0x866a, 0xffffffff, 0x7f, 0x4, 0x6, 0x7, 0x6, 0xf, 0x8000, 0x887f, 0x2000, 0xcb, 0x4, 0x2f8, 0xb, 0x3, 0xfffffffc, 0xc6, 0xfffffffa, 0x56, 0x102, 0x5, 0xe, 0x2, 0x9, 0x1, 0x80, 0x6c0, 0x2, 0x1, 0x9, 0x1, 0x3, 0x3, 0x1, 0xb, 0x8000, 0xffff, 0xff, 0x8, 0xf62, 0x1, 0x8, 0x8, 0x2, 0x3ff, 0xffff, 0x22, 0xffff, 0x1, 0x0, 0x1, 0x2, 0x5, 0x7fffffff, 0x0, 0x8, 0x8, 0x5]}]}}]}, 0x434}}, 0x4008000) 3.411994942s ago: executing program 4 (id=5411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000002300004802c0001800c00010062697477697365001c000280080001400000000008e5014000000004080003407fffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3e, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x5, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4000040) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x12) (async) sendto$packet(r1, &(0x7f0000000480)="4ad51506b60fde9fa26d94fd6b2b724b571774a7ebe9d2bb68727bf938651498469fb6e754d69d1de7093469aee766502aeaa49a9739b39cb09e8acfc3aa705cc513ec8a41bfa018140b1dfe086dc2c27167dd18821ba838c265ad89681f020897881e8deb2a22222ba97875885d1c02c3e861adc63ca7dad52947e0ae2b151e89dd769c795e2c253ca6d0011a64e3dde7b1b3ddbd9cf269da353af75f81c256d1a6d127b5958e24ae2e8cf155370e61436e8ac93b9d40da76b0f8b7577046b949e89f6fb046610d8433cc839828c33b71713d1bc653fbd0d1a2c0c496186a9feb01b17068d0eb0884772a616dcf64bbed2ed7c4fe55b854330633c0f275fe01bda133001ca38c1e78fb8dcf6c651f76b4410244330b0c64f86eeabc3d745195b92729aa246f1287e9441d5cfb48f604bb3c3ee0439972d6a009c4fb0bfa3aa70f6e23bca3b45a878707d1cd71feb861cac30097586da48135ffd8fc24d146feb97ea11c07ca986747cb8fc1721d91b50ae3f17e990ce37ecbaca89e0162843e032775aa827da9c32616f529da8639927818388724c2e512e2d210f2ff6eb71020f6a64917122227103449f73ee024c18f101910fb68053b524a7d06b69e105768e0640c8c1373bf6edb63af11854f395802327049d0e69ed65090055a5473d79e93def69e8314b0586e09a67dbd98a68f971e87243cf125ed6f369491ba934b0a38c434f88eac75c077397dfe5bd6a44c01e048c225b6273e47cf91a8ad75aefa7b91a5d31cf153df5864f126384e76f5d7041f9049484acd9576f20c3b453be27bf14887852dcb99fb43554bf25604c5a585e4573de6d2f8c32ceb17ab3e0336dfc9b6a7370d46efc9fc4327961d9e162e258c06d98601d9c3c4c82687b6d755c1cb46543629cb870016578567b2ae28a7c10ce335195a62b1e5b9d44be3fea565a37a46c5dafa1d00d01860c2302977fe0e2865c04be58cbebdb11641e9bc49ad9e043b1d8b31e4cac00564d2a0d43fca8e2a4934ed49e9b5bc11da26a3d816ce9eabce76f52244a751ab693e315a8852709c9291eceee69366692740136a4c61bfd41db3609f547a608ccb9f1bd7b9940100d139682325b82e90ed44141f8deb70918f24333a5b0bca67ba6ce9e720379658f8ceecc3f59f1dfa0990d83977a7476cef7b51ccc2f8f7e4c270f6336ab93ff09d40d961d2ccbc36cb49f313a6f8a6a288e35b5fcd859298503721f3443924fdc1b49c05b5da863ab8792cd6c63fd849fb18616f45f720bf101c8b711493a20edfc70dcad54bfc2151c00fc21d4b6464c13ebda162337e57b78dacadc1a6fdfce8eb470ffaf6fcf4eaa6c0eaa7181b16f3fe2793b01c8030cfa7f7f49f3b2b37101f9b57dd8c68c168e811a3fbb57410a8f2f8135fdedf979813b81cf14f56c36db488d7f5549a5019214e52512f9b87afb5b8fd22308aa54a4c01a37a6672bb3c22eeb3ead181162adbf684b81ea18e1345f8d6ff88673f153d7e6c22bf5cb96275c20a8aeb1025bb2d43877aff2e35db0d7f4532ff459bb7a23667d1962e6ca9e1a13f3cf98c889e56bb016b2fed377e4ab59ad80b4aba91a1ee4015874068c83e0b9aa69c173b46c6e51c6ed6def71ab3077b5e19cbac7306ef21adca5e699344632f05bcea2cfb56586eec05dc29940d93a6c518a14714a7c5d467a330bba1a810b5658f1e9602f690e38d8b5da433f53236d9f739248b0745d618cda522f079ff005674e4a6b8857f4cb66a81806e3aeb2358f4e3ee291b97394bbcc15846c24d5ac54598b4e27b115e8194c99d8948afa6d7c66dfa134a4ac65160570147fa9a44bce0e2a1e633084b50196badd8c754d27daad7e5e9cbb0364f4748eac3008ee28cbc9a4265b916953bc16a2b2f589806b1dc967a63ed88ccd9ea9cc1c6c7fb66d999686ddbcb0c83c9916a4b1f0a81f6b99c855728ba2e75966d2fbf71e66edb52069c38ffa5c07b2c8618d08cfb7966a67004d1a82fad0653052ed7c50677fd1a7b14d43c4b4066c8f5374ee5e5112527fca0ad9cf189c3272bf57a696e6e6573814e6c9107bb6bcc0d45b89ffd07de3bf8286fcd24e9d51db1881f59d0fae7115f31f29eb8de0c16f117a13a51e945f87634f5c344f694e0587961487c04c06e541535ae39ddb485af2183960463b08e439c4f418f28d3047e90b288d058a99cd4bb58a1d334f2df6d774aff6e8d4b613c10b149dd28a7877c507bcc741e315fe66c40cefa6fabebc458f1ddbb14edc16b5332551dd607e49184d8e0b82f8e5b4b2db09bb140dafb75724b767ec51d96643eb2b9dd6e87e93c4ca66e0ebd6bc83ab3b0331f3ee79337fc420469bc6e64ba45b2757d12e23b883f7a454f050452b695bfffecb72706823a09e4454ca9fd6017cc7773b312fcf761e13087244d1eb3843e0458f2f4f2156373c51f084671bd3ce00e7f48d0f20d760df7aa98ad7b52336e36b34058abfca8a2d2614b5800dc0ca4f98dd98bd6755aaae59e80ee02e2a32f4b1cb2e299bc810d6edc23cad9109c29dc730d4557b66bc32ba7b9c93facd99e45d273b65e6123c4a7ba0731a0d6f9475fe6a94cbf848f67c4ff6fe4c045e3c937c92ade1108fcbfb6b897772543d4955b6534ba68ad1d9eb32b16da33592035ad677b579bae2e0d208f5e0754c94640fae577913b5376b94611c381fe780525e6c229bfa054ea246ec2e13b16a0209d7ce3558e2edc22bf43934c482afefcaa6c8c124ea3a5b36fd3dd55b6e0e930f8ad88b89012a24301d1dfab254265cdf39783f67da3664281ebb27ddee9a40aadf832cd886121d4d45a34fb5b4c0df53b86cefb74560bdd030971113e1e8024db9ee3b9945ed9d46ea9495e66d415b148f039f4a2810ec44090f6c3a7eba3904021d5e0da0e8f37eb7bdd41964c287c2d3197dfda539d6e0ac13286f5c1671ca7c32fa79067e7807c94a2a21891d2c898ff3df2bf3dd625cab9ad45685bf43ba60d2d5d0a378a6a443bbb7806cb3b7883cf391aba6a8930b3a217dba41dcfa861c5d63a80d62c60b7de7838fbdc0f21e7132fd757ffb29e7628d35c24bd0e2a4f030f69b13bf1d0b7998df4402282e0ef97eb8e415286cd007a58810db47e3152c84293f7e0287e9328026bb1020d9acbaaed63b40584eeba7f96fd4289811887d1060ae0b9ef0db08fa91d46199d553dcc371a60c05d64d83e17a25f1592bf6bb999b136fd968623520e7564f5b34024c7550bc01699e3b8b3f6f35bc6ebe128bca34cf19ae2eff4c7b543e25b6fe2949814cad2ef7103fc0b8323b35489088bad7a68d2e8c9ab66b559e00248f5d6525a0387528c108953dee0fba2f59d76c226d9c9c93598810b68399c484afe2487c3bf10f7c7b997d8215e855116686554f7dc7e7270d54c5c5b5ce01a51f76eee33388d98e1f9f00872e5aad9d1d65681cdbd7c97db8e1a627698b81c6aa0d761182ded7bb938b0876f31041a83f6183b54cca5f7ef6f25812b9032b466d4b4deb9449a2fa60f369f22860ac07b484d95b1217f9e087c3d34cb4217fbbb8fa6fe49fac5aa35a3147c7370e433e63a3ad12021c6483ce31da86b8a5fcc5e123d2cf7cbe755dcb0065901a8c5554e25acedad80e61d625a9ab5985f1b36c194df78acb220ef58dc64dba645932d87661ddbc7659d2cf4c3465d3106de70c14ac48e59a8eebeddc5cdb4d7c798fe826dd175361498e62c607e339d3d46cfb8a7e666fb1a7b4bd8f9d912012ce187ebdb3e465ca39a1e86fea513b663f5d27a939697ecd7b7d10fdfe00d8fe252a2826d9e311ddac8f47f627685ab14fe3bab9a6e55bfc07dba6e0159d310bc001311a547e58f76372506247dec42e737d056fb7ae7746f8610802023c899063550840f3679b5f3c4705c07c714185b82e7cf9c2f61c489787e50a6f366082867d50ae5dea90db3ab019c065aad0967b107b6c629d2bcaf6319cf09e39700ed98144b8f64066e8bc3c87d5a442e5c6d5ac863e8f156db1035eca15014194c96a2a5b7d91cb07fb693d9df668df384c48badcadca3e912e1c65d8a599c8574d366f40381b57d270bdeeb5563e920c24c2c8db2c39199cb41d4ae7f0f19322990990cbb99cfa20a470c152dc7eda0c7450e3df7cd6fd75a267689908afbb096d916495b821e431154a99f9bba4596676fe59a9758c0f835a52d550509b55565a6b7f3d8225c952f898ab252f00cc10dad044b12362c0aa59f6dfede9efd9e4bc8394e38bb5072c4f3e2f6e6cd7c7f247a218647f2fd6ab1428ca66a4c0f39fac23453be261efd1e4020540d6b096afec045d175e246f7d7fb2f65394d8dc9df0e8235fece027e9e62a65288f48b0f2833a1fee9ff6e1d4a08bb69d8b4fa67b5672dd510b07ea3775aae3d69df85e05c63925d355ed866ab4561c87df3e2016469f871e705aec40bd92a0241a7010810d4a0c40740adad490f60ba9c5bbdeac988a27ab35eb03f19b15f370819c5b29244c65aa19a127b542a3764f291a394e55b7295a314a8363df7536a4dd7e82cb7754ad793201178eb00138665686f1c5d006e670768cef70dcd8b59b6843c5292ab766f9abe8958afaad462ab2b020eedef34f026517c88ae3fbef4fd83b1b301409ab3e1ce533c497bc4f2d5c6db0c62761ca3f4e5241b457a370c08e1d2ba4df8fee0ee2d7cddbe9cfa8f56663e1927ffd45776bdc8d66d0f21358ab739cfb116ded83078b677ed24732772acbd24165e83250d207823110f7917709fc912c3374ffd724011422cf0d9ffe45c468e09c4399c421408e6195746fdced7a1ec681670ae3811d76b746ef2f90c253f02f5a8e9eb536b471b390dd7de15e18a195723500563a4b48b4f4f9e01881d33114834ea7e34bd4a9132e70416cb8085275871083d7247fdbb180355ddc4ea5c5d001d6a4d58499e3883c9ec68ea4e893269898d202a99019938e17c0b69d0b765e32bb831086a6093a0bcc0012a99ccc953fc2c2cbd9628d7af24c94f7ef934488d178af63600116590f21a60ad1a5c427b4711b3fcb5de5ac072d03c15bd36376105ecd6024ac2ab66484e4d7f62274bc62b4ae68da3c76d75da0effd487558597ea64179381ea7a6acf1a59f4ef2ce19e37e4cb170a8a2a669db5e36380d8c3d5f78b0d23913e30834d45e66aedc7454e4e95ae7f890bdfe149bd804a5ba180faea4b6e7d3a8f75cd1bc17bee9834683697a6d3eac1899124f477af930f483f8084f961b6e1482ce6fe8d07e10dfd9074da9220dc0c23f6d693b0810aad81ea9151e3f042200c099442069784c5f36c32a0e2718e05f7e848e48488c3a73852ba0c04417fdbd81b4b981984252e8249aaaa8559cc1ae6b5bdd720b393cd2db224c592cf4166cd65cf028f17276725ecbdd7ef1d174778fd65a3797fc91c37ba42eaaf181ccaaceb274ccb86c15210c8e3d77487958ba372563aabfa798170153afb1c71370a2b75ad34cf0b83853a57c5329e46e6e7bd33f62fc2ef20cffb8e58badad9b13c26cfa49eaabec5363b26bcd3d7793aa06efdcc7edc9b4ca907ee4423a60c6b475f78ee037f4737842a5297d9c27be734b17d9940423428abbc4bc6babcb3f363e59ba19d0be74f5c220b77cf826ca2c824741dbffe7164279b0654ae77d434e4f33d4d1d917e59ab99ea0001ff1b01198b8077863b13bcc4c8e9151b8c35ddd52130f520c39a694dc18f760b1168e53467276be999a1a1583fcb7e9528ba1617ac199dc2edec3319f586232d0204173e22e56925df53", 0x1000, 0x8000, &(0x7f0000001480)={0x11, 0x19, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 2.971708312s ago: executing program 4 (id=5417): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000060000000000000003000000950000000000000085100000019500000000000000"], &(0x7f0000000400)='GPL\x00', 0x30, 0x4d, &(0x7f0000000440)=""/77, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1, 0x1, 0x1, 0x1, r1], &(0x7f0000000540)=[{0x1, 0x5, 0xc, 0x6}, {0x2, 0x2, 0xa}, {0x0, 0x4, 0xe, 0x5}]}, 0x94) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) (async) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x4) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, r5, 0xd}, 0x80, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x9, 0xa}, {0x0, 0xc}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="58020000000000000000000000000000850000002200000095000000f6d10097"], &(0x7f0000000080)='GPL\x00'}, 0x90) 2.523528668s ago: executing program 1 (id=5423): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x4000844) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="00000000885203004c0012800b000100697036746e6c00003c00028014000300fc01000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000bb0800080008000000"], 0x6c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x1, 0x8}) 2.45499451s ago: executing program 3 (id=5424): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x3, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8, 0x400000000000}, {0xffffffffffffffff, 0x1, 0x800, 0x1}, {0x0, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x81, 0x6, "6c55e7e2bd9d8264ec7a7898d92f647415e629c210eff7f1f8f1f4e8be4668e2bd5e080d2489e9882dfc66995db6aae890b3829728884ca19ae80c864c1b5111502bcecb4bc56eeec76bbb2c75b06a0277ee9541d1e7c604e9f78db318096d82bf6274ae898957ec1fb22f21b69d1e9000a0b30774ca06f0b9eca05fad"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f00000002c0)="a49e97548b7aab83476e40a24d51978634adbab00303ace807950386ad2fb6a56427ca309a3bf76e97b93b68019f44953c83fb4561bc3b15ffef5f9cefb68721295c6546e8a311d140198b725fac2180b457c41f8b607b3153699fca47a0af44a44bbef1e99986c02be04602d637", &(0x7f0000000340)=@buf="64a53c45016bf6be698297c122957f6e1bb0d330ca49f642f9ab8d57b69e0fdbed1e68bd0a50819983653b94e7f613954bdd69d143d43eee6870e6fb8eacd3555950853c43d657a17e58516a836496cc97d9f2f08086eabcead230513865990d61ba13965f85c0d24adfdbb339261930c6f1fb89064860079711895c4a69f02693da20ac4da6c4d05d9ebd101925", 0x2}, 0x20) 2.392603786s ago: executing program 2 (id=5425): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x7, 0xf, 0x3b, 0x1, 0xc0, 0x2f2a, 0xd}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7, 0xffff, 0xa8, @loopback, @private2, 0x8, 0x8, 0x5, 0xfff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x17, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}, @call={0x85, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x38a}, @jmp={0x5, 0x0, 0x9, 0x7, 0x3, 0xfffffffffffffff0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x0, 0x9, 0x5, 0xb, 0x40, 0xfffffffffffffffc}], &(0x7f0000000600)='GPL\x00', 0x401, 0x0, 0x0, 0x40f00, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r1, r1, r1, r1, r1, r1], &(0x7f00000007c0)=[{0x4, 0x2, 0x2}, {0x3, 0x4, 0xfffffffb, 0x2}, {0x2, 0x3, 0x8, 0x1}, {0x2, 0x2, 0x6, 0x6}, {0x5, 0x2, 0x1, 0x6}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48004) 2.329179232s ago: executing program 1 (id=5426): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.176330934s ago: executing program 2 (id=5428): r0 = socket(0x11, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x100c0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0x1, &(0x7f0000000040)="441c1e8382"}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r4, 0x3, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7d2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x48, r4, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x1}, 0x69, 0x1, @device_a, 0x6, 0x63, 0xfffffffe}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0x9, 0x0, @random="f48c6696b4"}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x17, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.163255132s ago: executing program 3 (id=5429): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/191, 0xbf}], 0x6, &(0x7f0000000480)=""/241, 0xf1}, 0x4}, {{&(0x7f0000000580)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/200, 0xc8}], 0x1, &(0x7f0000000740)=""/64, 0x40}, 0xb}, {{&(0x7f0000000780)=@nl=@unspec, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000880)=""/28, 0x1c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000009c0)=""/135, 0x87}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/19, 0x13}], 0x6}, 0x3}, {{&(0x7f0000000c00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/24, 0x18}, {&(0x7f0000000cc0)=""/26, 0x1a}], 0x2, &(0x7f0000000d40)=""/107, 0x6b}, 0x2}], 0x4, 0x2021, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x1}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r5 = socket(0x8, 0x3, 0x8) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r2) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x4}, {0x36}, {0xc}, {0x1, 0x1}, {0x3, 0x1}, {0x48}, {0x48}, {0x48, 0x1}, {0x2}, {0x1b, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000011c0)) sendmsg$key(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x2, 0x14, 0xfb, 0x5, 0xc, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb4, 0x6, {0x6, 0x3c, 0xd6, 0x9, 0x0, 0x5, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@remote}}, @sadb_x_nat_t_type={0x1, 0x14, 0x46}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x60}}, 0x802) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x1, 0x33, 0x20, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x20e5, 0x80000000}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000013c0)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000014c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001500)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x0, 0x4e20, 0x9, 0x2, 0x20, 0x0, 0x3b, r8, r9}, {0x3, 0x100000000, 0x5, 0x5, 0x2, 0x5, 0x7, 0x7}, {0x2a4, 0x0, 0x2, 0xa}, 0x3, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x3505, 0x5, 0x2, 0x80, 0x0, 0x8, 0x7fff}}, 0xe8) socket$kcm(0x29, 0x5, 0x0) connect$pppoe(r5, &(0x7f0000001600)={0x18, 0x0, {0x0, @broadcast, 'nicvf0\x00'}}, 0x1e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x7, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30, 0x0, 0x71, 0x71, 0x0, 0x5f]}}, &(0x7f0000001680)=""/234, 0x2c, 0xea, 0x1, 0xf}, 0x28) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x20048000) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000001a00)={&(0x7f0000001900), 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x64, 0x1, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000001a40)={0x6, 0x80000000, 0xc, 0x75f, 0x2}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000001dc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b40)={0x208, r11, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x69}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffbff}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x28b}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffc01}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20004000}, 0x4c850) r12 = accept(r2, 0x0, &(0x7f0000001e00)) sendmsg$NL80211_CMD_NEW_MPATH(r12, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0xbc, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x51b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x74, 0xac, "4b9e156a266980e82e36d2b73e36605a35a4bd4e5c5834fa836658d8cb1174f0379024ab7e3abb8ae1d32da0c668af7f0357e70fb3bbec8f61afb73dad6a08592c5d44c3429b46f9c7df31a6c4f452ebbb26a736311f706e0d9e66ff94e327888ff2362144e4708a7463e657cc8d24b2"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x5}, {0x48, 0x1}, {0x12}, {0x24, 0x1}, {0x30}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x881}, 0x4000) 2.143805306s ago: executing program 1 (id=5430): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0xc880}, 0x4c040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x67f0e7512f0b4a75, 0x810, r5, 0x650d6000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80240, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x200}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000700)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13}, 0xc) 1.952477121s ago: executing program 2 (id=5432): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb33, 0x4f}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x38}}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$FIOCLEX(r0, 0x5451) 1.889029753s ago: executing program 4 (id=5433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f0000000180)={0x1, 0x3, 0x81}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xb}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000811) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800010400000000000000000000000000000000060003000100000014000200010000000100000002000c80060001000b0e00"/64], 0x40}}, 0x0) 1.836082541s ago: executing program 1 (id=5434): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x9, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000000280)=@udp=r2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.411919878s ago: executing program 2 (id=5436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) close(r2) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f16ca2117000fcdbdf25010000000500040003000000060001004e200000080800000000800000000600ac1414bb08000b0099f07a70c273f9e492eadb6771c636ffa462150e3183003305f0c1faedd4e3d6904c0db2c9d65814b2506181a1d0e3369050513450cfdd18f51843b3aff94b9ac90e3fa4020f45d3aef5c855d1e9e7efef62016f13d72d08e30e078e1c94cdbfb9f37df88a9360735f99c468dbb0703b9ffd1be497302309ba", @ANYRES32=r8, @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x1ac, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x198, 0x1, [@m_connmark={0x194, 0x16, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x108, 0x5, 0x6, 0xf}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x8, 0x5, 0x1000}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe54b, 0x80, 0xa, 0x3b, 0xf}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf95e, 0x1, 0xffffffffffffffff, 0x8}, 0x9}}]}, {0xf1, 0x6, "fe1d5e6c7fcd28226b99ebcff6bdbe28a4e1f79f035982147608c6d85a03461f582792e3cee6445235ce15f9bd6d1613a5a08ea0c1711b739828f1757f5735b57dade8c1b35179769b0ac30a8192380872fc7d7dc70547ba3b578e6e81a76e4d46bb0a0ba9e1dcccac3c4a593223fa29b085ee509e5b8d18ccad0c15adb170999fb03b91882ef5f0d4e0b910e55a6c00123841c2647f5821efdf8b07978d368b725c1a74521537178943da580e7d3a47043eb0d172d447240f7e48d6b232a57be86969e9388ed18b1cb563a2a128a877496f9cf2db4ba3c5581d49615078b32ea3934666880081d9504cf62d71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1ac}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4001) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x7b94b000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fedb46250500000048000180080003007f0091481a18c33dcbdc62fb2200010500020000000000060005004e2300000800030000fc00000000000000000000000000000005000200000000000800020008000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) 1.398372912s ago: executing program 3 (id=5437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010000032c000000030a01010000000000000000010000090900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000a08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000040900010073797a3000000000140000001100010000000000000000000300000a83445a57f86c6f93e01bd3069a51a3d1bf31b94d5cc04def5daf88cd7b70dac2147d2cd85de8a088c72b1c7cc96b00361cd9652c47680b4840239705e40737e63906ad1f0a8a2b0314f75abcc2ded5ba498f5ae0ec44b53aa5ac3b2f7b5054d579174f32faa20ca666575b2d5780f64dd9ac08d6befab401d5dde478bdf88f30ccace0be565beeec43dcf500f1018b2afdd5"], 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}}, 0xc000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}}, 0xc000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 1.324970968s ago: executing program 0 (id=5438): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x1d6, &(0x7f00000002c0)={@broadcast, @local, @void, {@mpls_uc={0x8847, {[{}, {0x8, 0x0, 0x1}, {0xd, 0x0, 0x1}], @ipv4=@tipc={{0x26, 0x4, 0x0, 0x3, 0x1bc, 0x67, 0x0, 0x2a, 0x6, 0x0, @broadcast, @loopback, {[@generic={0x7, 0x3, 'w'}, @timestamp={0x44, 0x14, 0x75, 0x0, 0xf, [0xffffffff, 0x401, 0x7fff, 0x2]}, @timestamp_prespec={0x44, 0x4c, 0x63, 0x3, 0x8, [{@empty, 0x7}, {@private=0xa010100, 0x6d3}, {@rand_addr=0x64010101, 0x7}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@multicast1, 0x2}, {@private=0xa010100, 0x9}, {@broadcast, 0xd0e}, {@private=0xa010102, 0x6}]}, @end, @lsrr={0x83, 0xb, 0xcc, [@dev={0xac, 0x14, 0x14, 0x27}, @local]}, @ssrr={0x89, 0x13, 0xbf, [@rand_addr=0x64010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x5a5, 0x0, 0x0, 0x6, 0xe5b, 0x2, 0x4e23, 0x4e24, 0x0, 0x4, 0x0, 0x0, 0x1}, [{0x5d54a1b3, 0xff, 0x6, 0x8, 0x100, 0x581d, 0x9, 0x7}, {0x8, 0x4, 0x5, 0x10000, 0x5, 0x100, 0x0, 0x7}, {0x8, 0xffff5eec, 0x8, 0x81, 0x6, 0x8, 0xf, 0x40}, {0x5, 0x8, 0x7, 0xa01, 0x4, 0xfffffffa, 0xf, 0xff}, {0x6b, 0x2, 0x2, 0xf95, 0x2fd, 0x7fff, 0xc, 0x3}, {0xf5, 0x7fff, 0x8, 0xcae, 0x2, 0x80, 0xc, 0x5}, {0x8000, 0x5, 0x7ff, 0x5, 0x9, 0xe, 0x3, 0x1}, {0x0, 0x6, 0x9, 0x7, 0x800, 0x6f8, 0x2, 0xff}, {0x0, 0x4, 0x9, 0xf757, 0x5, 0x1, 0x1, 0x5}]}}}}}}, 0x0) 1.027535336s ago: executing program 0 (id=5439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100)="42c64d5a4475ea6529312c6fe9503392976c807cbee2ff505f1cf7179029558063413272f17586ef6c6bc142b20964ab49c9b42f5dfedad9f87370ed0904be86b22fd717ef76869bfc32007b81cbf795baa8d3f51b7f7d61dc4e98ac33c1b339444978c273fdcc7a3eec2f5bbc53944469338f08d85538a97fb44c84e4b89200ee1d09f49a1b9436", &(0x7f00000001c0)=@udp6=r1, 0x4}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) 997.767216ms ago: executing program 2 (id=5440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x6, 0x7}]}}}}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000e8460000ffffffff00"}}}]}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$unix(r3, &(0x7f00000009c0)={&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000600)="d50b1a579d47fbcb803db910e997304e76dbbf06e9aac7d029d0b57283c7e14f90c556f059", 0x25}, {&(0x7f0000000640)="ee6ba6166c6f6e851c26964404d2407ec13bc1902c963561127aafbeba317380ae44ca4aa49c9292aca3e3d1b47a6befb0f1c6121ced803dd18e291adfe1a1b5781a1300e80f27adcaa081e958946dd6ee085dd34dd401af739ffcd6a4430fdb44a61f243d3328c2d440107d45f50d625b76601d6f42916341b47ae6c3875420e805bf9e8bb601d07b792149bccb0b10e598a24cabb96522682a2e20c49b71bc79cc5c9d938e037c7a6874d8f4140ffb1fe788ef", 0xb4}, {&(0x7f00000007c0)="c355595e36e5a113c65373afb6d4aae07ac1df1789822545aa8539fdd3dca3a26f499b3555598a7cf068238d416dd0ed87a70dccf05d7bf6ffadcbe72ae436f820eb1582398a6e7b0a964d7f022b3d2041ff4c3bd55cd6a8604652dfa7ee86e20a601ad197ba02b73a40786e745190faff1fd58028b410f6e7f5b273df97f114d79626ba748bed9888f5ee5f04852d782b84788d3ddc07f422e8aec13760f66b243d8aef705eaf11b21eedf428034bf6b84436c8054dfe30fcf6350c101a7f68f6", 0xc1}, {&(0x7f00000008c0)="7b299e90a1bc99a1b8d481658e552accbce76b59eb4e90955e98650bd57dd2a61a0f97e23678d07408982e56e9c863c03f00ae145f67f8ca8f7429ba72b319335afb2f770353d6290b8af2142c6fb78ec7bb7a68e3d8dce71a71e2eae59ade185408a0eef5a6dafaff2b23870fcc4de65d5d5e63c1d84422c9ace0a57a3efbaea98d816a9decb61f812683b3fb045e6e90fae2528a932cac91323d831a2347d90d2aac", 0xa3}], 0x4, 0x0, 0x0, 0x4050}, 0x24004800) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0x3, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8003, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0x101, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x8002, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x3, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x5, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x6, 0x80000001, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x2, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x6, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x400000, 0xcd34, 0x9, 0x81, 0xdf5, 0x2, 0x1, 0x8, 0x40fff, 0xfffff6ac, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a9, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xffffff01, 0x6, 0x6, 0x100000c, 0x10001000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x8f, 0x0, 0xfffffbff, 0x5, 0x10000, 0x401, 0x3, 0x5, 0x140c, 0x3ff, 0xc08, 0x800, 0x0, 0x1, 0x2, 0xff, 0x9, 0x80000000, 0x4, 0x7, 0x4, 0x7, 0xfff, 0x40, 0xce, 0x8, 0x200, 0x7, 0x100, 0x7, 0x6, 0x2, 0x3cf, 0x0, 0x3, 0x1, 0x2f, 0xffffffc0, 0x4, 0x7, 0x6, 0x2, 0x7, 0x8, 0x7, 0x0, 0x1, 0x401, 0x10000, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfff, 0x5, 0xed71, 0x65b4, 0xfffff248, 0x1, 0x3ff, 0x7, 0x0, 0xa, 0x9, 0x8, 0x7f, 0x267, 0x0, 0x8, 0x5, 0x1, 0xfffffffb, 0x0, 0x9, 0x800, 0x9, 0x9, 0x8001, 0x9, 0x7ff, 0xfffffff9, 0xfffffff7, 0x3, 0x4, 0x401, 0x8, 0x8, 0x9, 0x1, 0x3, 0x3ff, 0x5, 0x7, 0x4, 0x3, 0x62b, 0xc, 0x5, 0xa60, 0xb4f0, 0x6, 0x9, 0xffff, 0x8, 0x5, 0x5, 0xfb, 0x0, 0x9, 0xfffff0d0, 0x1, 0x3cfd, 0x10, 0x23, 0xfffffff9, 0xffffffff, 0x639, 0xffff, 0x81, 0x0, 0x10001, 0x10, 0x81, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x200, 0x91b0, 0x0, 0x1, 0xfffffffb, 0x10000, 0x7, 0x8, 0x6, 0xa63, 0x3ff, 0x7, 0x4, 0x7fff, 0x9, 0xff, 0x401, 0x726d, 0x11, 0x9, 0x8, 0x1, 0x3, 0xffff8000, 0x0, 0xdb, 0xace, 0xb, 0x549a, 0x1e, 0x5, 0x4, 0x1ff, 0x38, 0x6, 0x8, 0x4, 0x1, 0x5, 0x7, 0x10, 0xd48d, 0x1, 0x1, 0x10, 0x5, 0xe3, 0x6, 0x3, 0x7, 0x9, 0x9, 0x9, 0xffffffff, 0x4, 0x8b01, 0xbf19, 0x7, 0xfffbff57, 0x80, 0x6, 0xff, 0x6, 0x5, 0x6, 0x423, 0x1, 0x80000001, 0x9, 0x80, 0xa0, 0x4, 0xb, 0x46, 0xa, 0x7033, 0x3, 0x2, 0x5a2, 0x2, 0xa6, 0x7, 0xffffffff, 0x3, 0x6, 0x3, 0x8cff, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x2, 0x0, 0x7, 0x8, 0x1000, 0x5b, 0x8, 0x3, 0xfffffffc, 0x3285b265, 0x7, 0x2a, 0xa883acfe, 0x8, 0x7, 0xfffff000, 0x7, 0x10001, 0x9, 0x1c, 0xe, 0x400, 0x3, 0x2, 0x80, 0x15, 0xf, 0x403, 0x6, 0x9, 0xfffff800, 0x1, 0x25]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 800.966204ms ago: executing program 3 (id=5441): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000006c0)={&(0x7f0000000300)=0xfffffffffffffffd, 0xfffffff8, &(0x7f0000000500)=[{}, {}], &(0x7f0000000680)}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x40) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000000071107a0000000000060000000000000095000000000000008b59eba364940e929c669ee25d826d1b68a9646b1caa573b96e0ba006164c1a56fc1d1574d350983f3d8fd1a49874f9f1b7bed8e55d7661449ca59cafec543d613957e7ca2184700637e44500359013ade5352727911015315fb30fb61a6104af32a415ed5c42268f81f9b8cece6a6f52a1415738b1ad7aea3f42a07673330b0b66360b7426d259deb35cc72a99f4c0f6115d71c0c2494fd78032cd8710bff5782d56940fbfbe483ce68d6531326049aab5b2899fd0ae42db1efea80ae9cc55288dc90dad117c7e35a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000a00", @ANYRES32=r9, @ANYBLOB="040002805d06dcb37a3b39b6b670547201349b2da49c09fef8037bfc58aa74d9d801d826a40039c9aae7"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x40008090) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x1e, &(0x7f0000000040), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 770.867331ms ago: executing program 0 (id=5442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r6, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@report={0x194, 0x20, 0x400, 0x70bd26, 0x25dfdbff, {0x6c, {@in=@multicast2, @in6=@mcast2, 0x4e23, 0x3ff, 0x4e23, 0xa, 0xa, 0x20, 0xa0, 0x32, r3, r4}}, [@algo_auth={0x146, 0x1, {{'rmd128-generic\x00'}, 0x7f0, "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"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e000000010000100020002000000060000000000", @ANYRES32=0x0, @ANYBLOB="00000000210004000800fba966660000b8001980b20002002d6a2d006735b4b3a4a6a0ee3f57caf9109e5581af1098e42c3a215487a409838a5a37fa105e4e165fae80e712d49f4fcadc176ecc3ae76a1f45eb6986aa81b0ede670d50c47bf64e7f89b10db668fc9d0c8a88aa3754e3104a84577e059688f01ef37e7951cc4a9ff927c1f26445590dbcb345ea0245a89b0c73c4de7dd589321b8858c928cdadcac6bc8843eca3b8c92b52fda7f5615ea3cc4cb6e5aa2c01693c6736e8b37d37a8c27f1685cdc0000978a4c1a708d8a0ac21c84ba1aa9830cdf49e4e67d7fefe1acdc9516b704efabbfdf4015ac7075d2205cf454dd6dd3f8c4be181a55045db8a905fe7b130720d59e069fd685f4ab1cf4a57e4ed1b6a75515376759cca0f0ba7c4f994d43fd9aaa87634ababab9d0c64a8574ca3c4085b1b4e1c320cffced648ce2750ec714ec75a6f9fe08337cdbe771615a3a45af9171c2e9bd728d33fcf3be4a373b1ea577328e61a100276264cd0594c26bec2af82b6dfb6cbd922f597e01270c70882b1eba405b1052bae6891bc74c515db9ac41ae8da3fe00abd930a6588ba460fc83c3fafd8ce7"], 0xe0}}, 0x4080) 733.697751ms ago: executing program 4 (id=5443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) write$nci(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="610506040302020104808e212847092201c426086dab3638e128a5a38373b89baac5988e248b164f92c95fe2a9c61f1640092b05807b2d727cbd6ce52790a4a28d988cc9e9cfd852ea84d14a85dff84999b315120170457428a6ab75458f019ef3635c9113d23bd09b3a98a516103724d0e551c58407b3d5d2b475d1262891e446c0e2706da6c9cbf3489ed8ab5a885b2d9eec06f872be9e9cf7a5e4a6090050259daeccf1434a23138678afb7cc"], 0xad) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) (async) write$nci(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="610506040302020104808e212847092201c426086dab3638e128a5a38373b89baac5988e248b164f92c95fe2a9c61f1640092b05807b2d727cbd6ce52790a4a28d988cc9e9cfd852ea84d14a85dff84999b315120170457428a6ab75458f019ef3635c9113d23bd09b3a98a516103724d0e551c58407b3d5d2b475d1262891e446c0e2706da6c9cbf3489ed8ab5a885b2d9eec06f872be9e9cf7a5e4a6090050259daeccf1434a23138678afb7cc"], 0xad) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) (async) 652.937173ms ago: executing program 1 (id=5444): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6cec636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14e, 0x14e, 0x8, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0xa}, @enum64={0xe, 0x4, 0x0, 0x13, 0x0, 0x4, [{0xc, 0xffff8001, 0x5}, {0x7, 0x8, 0x3}, {0x5, 0x0, 0x6}, {0x6, 0x9, 0x6}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x8, 0x5}]}, @restrict={0x7}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1}, {0x0, 0x1}, {0x10}, {0xa, 0x5}, {0x6}]}, @datasec={0xe, 0x8, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x2}, {0x1, 0x643, 0x2}, {0x3, 0x800, 0xff}, {0x4, 0x54bf}, {0x3, 0x75c, 0x7}, {0x3, 0x2a, 0xfffffffe}, {0x3, 0x4, 0x6}, {0x4, 0x81, 0x1}], "1775"}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x46, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x61, 0x61, 0x0, 0x30, 0x0]}}, &(0x7f0000000680)=""/4096, 0x170, 0x1000, 0x0, 0x7b43, 0x10000}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xc, 0x6, 0x6, 0x401, 0x20800, r3, 0x1, '\x00', 0x0, r2, 0x1, 0x2, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000c5"], 0x18}}, 0x20000010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x110d1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffc, 0x2}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 356.291843ms ago: executing program 3 (id=5445): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f000000e380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x3}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4090, 0xffa}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f0000002640)=""/203, 0xcb}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = socket(0x2b, 0x80801, 0x1) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r6) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000002800)=ANY=[@ANYBLOB="000000001e373e76fb6c5c1d6530fbcea333bbdc409efc9d555fd6a5a5c256774c78d051635a3ac1ca7c3e865cc5116fc2ce972eab0956cdf39f87a9cc703a37577a91bb5b01d81ffbf161cad91db083f58724c0", @ANYRES16=r7, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) vmsplice(r0, &(0x7f0000002840), 0x0, 0x5) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c57a5f7ce619e14850000000000000000000000050001000700000009b5403bcdffb6560afaca2b98c14592a81ae306c6255d1bf4ed2a1cd52570d1650a839454121a2c189759b7d39bd9158a27f6a8f5ddf892709727ad8fc20e04d2e24ebe63e7ff72e2aa0384215d63afb7bbeec9306d4aa21ec7ef7af785b4bd37c261e0d850388e4eeb5b21c0d61f81ba9e8b261ea2c26e9ac3815f18ab9b5a87665471fb316b1bdf231c5035d5d405dc23edacba624435d2af0a7c5d81e61c"], 0x1c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc04132478543c0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x83e29f5c14b60d7e) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f00000000c0)="c7401a73a78e9ddc6e154d0aacbc03948ebe04dd84e4414f97df2a406561e34a45268ce96f4447ac48", 0x29}, {&(0x7f0000000100)="3cc10c4120fa3e44242be7f6f9019528717560b7fca5a8204520b223b2cf961356aca741b518e47a812588ab12f9bb672c9289f384fb34fd60cb4bb0b5b98f4a267d8946cb7e37c8a54e6164497ef49ecc93dbcee3e321a40a57d3da", 0x5c}, {&(0x7f0000000180)="d15267bc9c565071abbc6158c8df0fdb5b4d9753a5055b07b967de3de7253453d328cd195a3bff764f20e5308dd3d2ae57df47e338", 0x35}, {&(0x7f00000001c0)="fa2baa7e539862d75785eb7c0dc619bd43463551fd09470739c169e147e8dfb59dd6", 0x22}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="428c8f9b6baaf62bf7ed2c8b95594942679d1072ac033dea3c377cf7b02143e1342d14bbd68462f8a11c0bfe2e145be48375b1ebf1", 0x35}], 0x6}, 0x4000) 355.060313ms ago: executing program 1 (id=5446): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611004000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x9, 0xfff, 0xb709, 0x58f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 350.88341ms ago: executing program 0 (id=5447): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)={0x14, 0x26, 0x300, 0x870bd22, 0xfffffff9, {0x7e}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 221.130647ms ago: executing program 0 (id=5448): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @private=0xa010100}}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) socket$pptp(0x18, 0x1, 0x2) 220.414219ms ago: executing program 2 (id=5449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x8}}, 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r5) 46.314739ms ago: executing program 0 (id=5450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x24) 0s ago: executing program 3 (id=5451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4000080) (async) kernel console output (not intermixed with test programs): packets. [ 503.678414][T20410] ip_tables: iptables: counters copy to user failed while replacing table [ 503.688734][T20410] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 503.816901][T20390] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.358257][T20431] bond1: invalid ARP target 0.0.0.0 specified for addition [ 504.366344][T20431] bond1: option arp_ip_target: invalid value (0) [ 504.380719][T20431] bond1 (unregistering): Released all slaves [ 504.397054][T20450] __nla_validate_parse: 10 callbacks suppressed [ 504.404973][T20450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3532'. [ 504.429327][T20452] Cannot find add_set index 0 as target [ 504.465431][T20444] ipvlan2: entered allmulticast mode [ 504.471115][T20444] virt_wifi0: entered allmulticast mode [ 504.479689][T20441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3534'. [ 504.514128][T20454] ipvlan3: entered allmulticast mode [ 504.590181][T20454] set match dimension is over the limit! [ 504.714042][T20461] netlink: 'syz.2.3537': attribute type 1 has an invalid length. [ 504.873102][T20464] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 504.932713][T20470] netlink: 'syz.4.3538': attribute type 83 has an invalid length. [ 504.939566][T20470] netlink: 'syz.4.3538': attribute type 4 has an invalid length. [ 504.939639][T20470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3538'. [ 505.059526][T20470] .`: renamed from bond0 (while UP) [ 505.179864][T20488] netlink: 'syz.1.3543': attribute type 1 has an invalid length. [ 505.188028][T20488] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3543'. [ 505.199721][T20488] netlink: 'syz.1.3543': attribute type 2 has an invalid length. [ 505.199779][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 505.483521][T20488] bond1: entered promiscuous mode [ 505.483595][T20488] bond1: entered allmulticast mode [ 505.484178][T20488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.598052][T20499] syzkaller1: entered promiscuous mode [ 505.598113][T20499] syzkaller1: entered allmulticast mode [ 505.692777][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'. [ 505.823042][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.860389][T20505] syzkaller0: entered promiscuous mode [ 505.867529][T20505] syzkaller0: entered allmulticast mode [ 505.878941][T20505] tipc: Started in network mode [ 505.883972][T20505] tipc: Node identity 92dcf2be4fb6, cluster identity 4711 [ 505.891693][T20505] tipc: Enabled bearer , priority 0 [ 505.935933][T20505] tipc: Resetting bearer [ 505.967103][T20504] tipc: Resetting bearer [ 506.084587][T20504] tipc: Disabling bearer [ 506.190463][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 506.273390][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 507.368053][T20575] netlink: 'syz.3.3566': attribute type 1 has an invalid length. [ 507.368100][T20575] netlink: 'syz.3.3566': attribute type 3 has an invalid length. [ 507.368139][T20575] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3566'. [ 507.368162][T20575] NCSI netlink: No device for ifindex 813332851 [ 507.558524][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 30 seconds [ 507.560547][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 30 seconds [ 507.560691][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 30 seconds [ 507.560772][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 30 seconds [ 507.581112][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3570'. [ 507.797022][T20593] netlink: 'syz.1.3574': attribute type 4 has an invalid length. [ 508.693351][T20629] bridge_slave_0: left allmulticast mode [ 508.700342][T20629] bridge_slave_0: left promiscuous mode [ 508.700629][T20629] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.753705][T20629] bridge_slave_1: left allmulticast mode [ 508.753759][T20629] bridge_slave_1: left promiscuous mode [ 508.804971][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.888327][T20629] .`: (slave bond_slave_0): Releasing backup interface [ 508.997484][T20629] .`: (slave bond_slave_1): Releasing backup interface [ 509.063759][T20629] team0: Port device team_slave_0 removed [ 509.109006][T20629] team0: Port device team_slave_1 removed [ 509.122764][T20629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.131351][T20629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.183965][T20629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.193087][T20629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.226378][T20629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.243619][T20626] syzkaller1: entered promiscuous mode [ 509.243652][T20626] syzkaller1: entered allmulticast mode [ 509.366014][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.366199][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.366355][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.366490][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.366625][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.371285][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.371751][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.372113][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.372434][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.372634][T20652] ip6t_srh: unknown srh match flags 4000 [ 509.743087][T20660] netlink: 'syz.4.3590': attribute type 2 has an invalid length. [ 509.900278][T20671] __nla_validate_parse: 5 callbacks suppressed [ 509.900340][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3592'. [ 509.911974][T20664] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3591'. [ 510.368571][T20681] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 510.486722][T20685] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 511.268055][T20728] ªªªªª»: renamed from dummy0 (while UP) [ 511.373781][T20728] syzkaller1: entered promiscuous mode [ 511.373836][T20728] syzkaller1: entered allmulticast mode [ 511.481796][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 511.687832][T20746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3605'. [ 512.433395][T20776] netlink: 'syz.0.3616': attribute type 21 has an invalid length. [ 512.527332][T20777] x_tables: duplicate underflow at hook 3 [ 512.802373][T20794] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 513.122203][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 513.131595][T20809] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3624'. [ 513.403560][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 513.403642][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 513.425626][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 513.425690][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'. [ 513.440936][T17507] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.446744][ T242] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.446798][ T242] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.446836][ T242] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.883156][T20841] openvswitch: netlink: EtherType 0 is less than min 600 [ 514.072217][T20840] tipc: Enabling of bearer rejected, failed to enable media [ 514.211905][T20848] xt_hashlimit: size too large, truncated to 1048576 [ 514.581736][T20874] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 514.651365][T20878] netlink: 'syz.1.3644': attribute type 11 has an invalid length. [ 514.667752][T20880] syz_tun: vlans aren't supported yet for dev_uc|mc_add() [ 514.898538][T20891] bond2: entered promiscuous mode [ 514.904959][T20891] bond2: entered allmulticast mode [ 514.910997][T20891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.944286][T20901] syzkaller1: entered promiscuous mode [ 514.944350][T20901] syzkaller1: entered allmulticast mode [ 515.068925][T20905] __nla_validate_parse: 9 callbacks suppressed [ 515.068985][T20905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3649'. [ 515.094516][T20903] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3649'. [ 515.094588][T20903] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3649'. [ 515.283483][T20912] bridge_slave_0: left allmulticast mode [ 515.291979][T20912] bridge_slave_0: left promiscuous mode [ 515.298231][T20912] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.327733][T20912] bridge_slave_1: left allmulticast mode [ 515.334350][T20912] bridge_slave_1: left promiscuous mode [ 515.340555][T20912] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.353991][T20914] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3650'. [ 515.381267][T20912] bond0: (slave bond_slave_0): Releasing backup interface [ 515.419426][T20912] bond0: (slave bond_slave_1): Releasing backup interface [ 515.471715][T20912] team0: Port device team_slave_0 removed [ 515.499382][T20912] team0: Port device team_slave_1 removed [ 515.507253][T20912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.507281][T20912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.531181][T20912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.531237][T20912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.549476][T20912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.088415][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'. [ 516.195545][T16683] wlan1: Trigger new scan to find an IBSS to join [ 516.256617][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 516.361423][T20956] sctp: [Deprecated]: syz.1.3661 (pid 20956) Use of int in maxseg socket option. [ 516.361423][T20956] Use struct sctp_assoc_value instead [ 516.472853][T20961] netlink: 'syz.4.3662': attribute type 1 has an invalid length. [ 516.472912][T20961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3662'. [ 516.689257][T20970] openvswitch: netlink: IPv4 tunnel dst address is zero [ 516.689326][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.748958][T20973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3668'. [ 516.817341][T20976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3667'. [ 516.940004][T20987] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3671'. [ 516.950180][T20987] gretap0: entered promiscuous mode [ 516.963606][T20987] 0ªî{X¹¦: renamed from gretap0 [ 516.992928][T20987] 0ªî{X¹¦: left promiscuous mode [ 516.992987][T20987] 0ªî{X¹¦: entered allmulticast mode [ 517.009922][T20987] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 517.062461][T20990] tipc: Enabling of bearer rejected, failed to enable media [ 517.142927][T20990] syzkaller0: entered promiscuous mode [ 517.149413][T20990] syzkaller0: entered allmulticast mode [ 517.199889][T20987] syzkaller0: entered promiscuous mode [ 517.199953][T20987] syzkaller0: entered allmulticast mode [ 519.264292][ T242] wlan1: Trigger new scan to find an IBSS to join [ 521.315865][T21026] __nla_validate_parse: 3 callbacks suppressed [ 521.315927][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 521.550864][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3682'. [ 521.552106][T21041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3682'. [ 522.050454][T21061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.196364][T17495] wlan1: Trigger new scan to find an IBSS to join [ 522.200043][T21067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3690'. [ 522.823553][T21098] Bluetooth: hci0: unsupported parameter 5135 [ 522.823608][T21098] Bluetooth: hci0: unsupported parameter 8192 [ 522.823626][T21098] Bluetooth: hci0: unsupported parameter 5135 [ 522.823695][T21098] Bluetooth: hci0: unsupported parameter 8192 [ 522.900959][T21103] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3701'. [ 522.993178][T21105] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.107020][T17495] wlan1: Creating new IBSS network, BSSID da:04:4d:47:33:1c [ 523.148269][T21119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3704'. [ 523.405281][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.405442][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.405678][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.405783][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.405894][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.405988][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406086][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406185][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406284][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406382][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406487][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406586][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.406722][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.420900][T21131] x_tables: duplicate entry at hook 4 [ 523.427271][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.427387][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.427479][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.427867][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.428188][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.479526][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.479926][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.480212][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.491399][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.491825][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.492071][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.492415][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.492737][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.500871][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.501156][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.501396][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.504395][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.514432][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.516184][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.516528][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.518681][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.521602][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.522868][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.532267][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.535546][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.535984][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.536301][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.536606][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.536977][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.541621][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.541980][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.543940][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.548508][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.571904][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.572205][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.572558][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.572966][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.593774][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.594177][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.594550][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.608073][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.608446][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.608877][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.609122][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.609355][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.632819][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.633188][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.633615][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.633962][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.634196][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.640000][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.640301][T21128] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.962385][T21138] bridge_slave_0: left allmulticast mode [ 523.962442][T21138] bridge_slave_0: left promiscuous mode [ 523.962707][T21138] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.074880][T21138] bridge_slave_1: left allmulticast mode [ 524.074948][T21138] bridge_slave_1: left promiscuous mode [ 524.079615][T21138] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.191284][ T31] audit: type=1800 audit(1789044065.676:12): pid=21141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3714" name="memory.events" dev="tmpfs" ino=906 res=0 errno=0 [ 524.282285][T21138] bond0: (slave bond_slave_0): Releasing backup interface [ 524.362021][T21138] bond0: (slave bond_slave_1): Releasing backup interface [ 524.483217][T21138] team0: Port device team_slave_0 removed [ 524.533178][T21138] team0: Port device team_slave_1 removed [ 524.541776][T21138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.541833][T21138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.564013][T21138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.564070][T21138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.585813][T21138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.930189][T21175] xt_hashlimit: size too large, truncated to 1048576 [ 524.964489][T13533] IPVS: starting estimator thread 0... [ 525.002791][T21181] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3726'. [ 525.066920][T21183] IPVS: using max 39 ests per chain, 93600 per kthread [ 525.093536][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 525.427882][T21201] syzkaller0: entered promiscuous mode [ 525.427940][T21201] syzkaller0: entered allmulticast mode [ 525.614438][T21207] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 525.638895][T21206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 525.726147][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3735'. [ 525.871025][T21222] netlink: 'syz.1.3736': attribute type 7 has an invalid length. [ 525.884295][T21222] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3736'. [ 525.897757][T21222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.494329][T21252] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 526.512019][T21252] netlink: 'syz.3.3743': attribute type 21 has an invalid length. [ 526.513391][T21252] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3743'. [ 526.513723][T21252] netlink: 'syz.3.3743': attribute type 5 has an invalid length. [ 526.513766][T21252] netlink: 'syz.3.3743': attribute type 6 has an invalid length. [ 526.513806][T21252] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3743'. [ 528.808743][T21217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.054796][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'. [ 529.332080][T21303] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3757'. [ 529.381096][T21298] syzkaller1: entered promiscuous mode [ 529.390249][T21298] syzkaller1: entered allmulticast mode [ 529.514281][T21317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3758'. [ 529.531707][T21317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.646829][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 529.943224][T21327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3763'. [ 530.236900][T21337] Cannot find set identified by id 0 to match [ 530.469824][T21343] netlink: 'syz.1.3767': attribute type 21 has an invalid length. [ 532.638784][T21325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.656446][T21337] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3766'. [ 532.928290][T21355] netlink: 'syz.3.3771': attribute type 29 has an invalid length. [ 532.938390][T21357] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 533.205667][T21357] block nbd296: server does not support multiple connections per device. [ 533.310606][T19530] block nbd296: shutting down sockets [ 533.392894][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 533.392942][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 533.432955][T21375] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3777'. [ 533.597804][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'. [ 533.607238][T21380] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.620167][T21380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.631378][T21380] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.639194][T21380] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3780'. [ 533.649163][T21380] 0·: renamed from hsr0 (while UP) [ 533.677834][T21380] 0·: entered allmulticast mode [ 533.677886][T21380] hsr_slave_0: entered allmulticast mode [ 533.677926][T21380] hsr_slave_1: entered allmulticast mode [ 533.678593][T21380] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 533.860360][T21382] bond3: (slave bond_slave_0): Device is not our slave [ 533.869602][T21382] bond3: option active_slave: invalid value (bond_slave_0) [ 533.882158][T21382] bond3 (unregistering): Released all slaves [ 534.019676][T21391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 534.270639][T21398] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 534.285578][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3780'. [ 534.285652][T21380] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3780'. [ 534.413403][T21380] veth3: entered promiscuous mode [ 534.641670][T21413] netlink: 'syz.4.3790': attribute type 9 has an invalid length. [ 534.747992][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 534.766176][T21425] netlink: 'syz.3.3791': attribute type 8 has an invalid length. [ 534.997346][T21398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.001869][T21398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.139181][T21432] batman_adv: batadv0: Adding interface: gretap1 [ 535.145822][T21432] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.175949][T21432] batman_adv: batadv0: Interface activated: gretap1 [ 535.187460][T21417] syzkaller1: entered promiscuous mode [ 535.187535][T21417] syzkaller1: entered allmulticast mode [ 535.193552][T21428] syzkaller1: entered promiscuous mode [ 535.193578][T21428] syzkaller1: entered allmulticast mode [ 535.381686][T21398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.400247][T21398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.672780][T21398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.672860][T21398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.740931][T21458] netlink: 'syz.4.3801': attribute type 1 has an invalid length. [ 535.917576][T21453] veth3: entered allmulticast mode [ 535.939071][T21453] bond0: (slave veth3): Enslaving as an active interface with a down link [ 535.969782][T21458] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 536.100719][T21468] x_tables: duplicate entry at hook 3 [ 536.129667][T21398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.129742][T21398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.512531][T21492] ip6t_hbh: unknown flags 38 [ 536.517549][T16697] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.517590][T16697] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.738581][T17487] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.747567][T17487] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.758192][T17487] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.758234][T17487] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.758879][T17487] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.758910][T17487] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.008010][T21510] netlink: 'syz.3.3821': attribute type 1 has an invalid length. [ 537.074606][T21516] tipc: Started in network mode [ 537.074702][T21516] tipc: Node identity ac141441, cluster identity 4711 [ 537.161135][T21516] tipc: Enabled bearer , priority 10 [ 537.191401][T21519] vlan2: entered allmulticast mode [ 537.191460][T21519] bond0: entered allmulticast mode [ 537.191501][T21519] bond_slave_0: entered allmulticast mode [ 537.191591][T21519] bond_slave_1: entered allmulticast mode [ 537.270165][T21524] tipc: Started in network mode [ 537.276792][T21524] tipc: Node identity 46fab2b2ea8b, cluster identity 4711 [ 537.284482][T21524] tipc: Enabled bearer , priority 0 [ 537.349688][T21524] syzkaller0: entered promiscuous mode [ 537.356094][T21524] syzkaller0: entered allmulticast mode [ 537.362729][T21524] tipc: Resetting bearer [ 537.455777][T21530] xt_socket: unknown flags 0x8 [ 537.642986][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 60 seconds [ 537.643036][T21546] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 537.643055][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 60 seconds [ 537.643105][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 60 seconds [ 537.643138][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 60 seconds [ 538.171880][T17487] tipc: Resetting bearer [ 538.182990][T21522] tipc: Resetting bearer [ 538.274040][T21563] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 538.459587][T21566] __nla_validate_parse: 74 callbacks suppressed [ 538.459677][T21566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 540.178661][ T4983] udevd[4983]: worker [17847] /devices/virtual/block/nbd1 is taking a long time [ 542.203863][T21522] tipc: Disabling bearer [ 542.247552][ T989] tipc: Node number set to 2886997057 [ 542.253201][ T5722] tipc: Node number set to 2893132466 [ 542.425446][T21572] batman_adv: batadv0: Adding interface: wlan1 [ 542.432273][T21572] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.460731][T21572] batman_adv: batadv0: Interface activated: wlan1 [ 542.547759][T21580] netlink: 'syz.1.3841': attribute type 3 has an invalid length. [ 542.756857][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.981232][T21602] tap0: tun_chr_ioctl cmd 1074025676 [ 542.981290][T21602] tap0: owner set to 0 [ 543.174659][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 543.305188][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 544.082651][T21646] sctp: [Deprecated]: syz.4.3859 (pid 21646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.082651][T21646] Use struct sctp_sack_info instead [ 544.255417][T21660] netlink: 'syz.1.3864': attribute type 4 has an invalid length. [ 544.255465][T21660] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3864'. [ 544.290111][T21660] .`: renamed from bond0 (while UP) [ 544.338255][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3866'. [ 544.754014][T21690] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 544.769454][T21689] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 544.929138][T21696] v: renamed from veth0_vlan (while UP) [ 545.291667][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3876'. [ 545.291763][T21705] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 545.462503][T21719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.488867][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3881'. [ 545.676986][T21729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 546.336198][T21763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3889'. [ 546.584041][T21766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 547.113383][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 547.138398][T21780] pim6reg: entered allmulticast mode [ 547.163650][T21780] pim6reg: left allmulticast mode [ 547.309226][T21777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3894'. [ 547.675731][T21810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3899'. [ 547.975920][T21825] ip_tables: iptables: counters copy to user failed while replacing table [ 548.293973][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3910'. [ 548.662536][T21857] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 548.789751][T21861] netlink: 'syz.2.3914': attribute type 2 has an invalid length. [ 549.048971][T21874] netlink: 'syz.2.3920': attribute type 1 has an invalid length. [ 549.118666][T21874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.258864][T21877] bond1: (slave veth3): Enslaving as an active interface with a down link [ 549.273362][T21890] __nla_validate_parse: 1 callbacks suppressed [ 549.278656][T21890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'. [ 549.307658][T21878] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 549.322900][T21878] bond1: (slave batadv1): making interface the new active one [ 549.338172][T21891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3924'. [ 549.340096][T21878] batadv1: entered promiscuous mode [ 549.372616][T21878] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 549.440760][T21874] bond1: (slave veth5): Enslaving as an active interface with a down link [ 549.478458][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3925'. [ 549.773384][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 549.782896][T21908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3931'. [ 549.848862][T21908] bond2 (unregistering): Released all slaves [ 550.054092][T21917] netlink: 'syz.3.3934': attribute type 21 has an invalid length. [ 550.054140][T21917] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3934'. [ 550.161320][T21922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3932'. [ 550.181022][T21922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3932'. [ 550.197623][T21922] netlink: 'syz.1.3932': attribute type 32 has an invalid length. [ 550.197682][T21922] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3932'. [ 550.204328][T21922] netlink: 'syz.1.3932': attribute type 4 has an invalid length. [ 550.387730][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3939'. [ 550.510754][ T31] audit: type=1804 audit(1789044091.996:13): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3938" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=714 res=1 errno=0 [ 550.537115][ T31] audit: type=1800 audit(1789044092.026:14): pid=21948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3938" name="cgroup.controllers" dev="tmpfs" ino=714 res=0 errno=0 [ 551.040288][T21966] team0: Port device team_slave_0 removed [ 551.222087][T21982] netlink: 'syz.3.3946': attribute type 29 has an invalid length. [ 551.238271][T21982] netlink: 'syz.3.3946': attribute type 29 has an invalid length. [ 551.322076][T21990] TCP: TCP_TX_DELAY enabled [ 551.676973][T22007] vlan2: entered allmulticast mode [ 551.684353][T22007] bond0: entered allmulticast mode [ 552.004443][T22024] sctp: [Deprecated]: syz.2.3962 (pid 22024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.004443][T22024] Use struct sctp_sack_info instead [ 552.578852][T22049] syz_tun: entered allmulticast mode [ 552.614362][T22049] dvmrp8: entered allmulticast mode [ 552.647640][T22046] syz_tun: left allmulticast mode [ 552.854106][T22063] 0: reclassify loop, rule prio 0, protocol 03 [ 553.118312][T16683] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.546497][T22102] syzkaller0: entered promiscuous mode [ 553.546551][T22102] syzkaller0: entered allmulticast mode [ 554.198134][T22128] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 554.282315][T22132] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 554.393454][T22141] __nla_validate_parse: 14 callbacks suppressed [ 554.401035][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.410769][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.425475][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.435529][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.435734][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.435874][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.436021][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.436166][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.436309][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 554.436446][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 555.374493][T22184] openvswitch: netlink: IPv6 tunnel dst address is zero [ 555.703178][T22194] netlink: 'syz.3.3999': attribute type 7 has an invalid length. [ 555.703224][T22194] netlink: 'syz.3.3999': attribute type 8 has an invalid length. [ 556.064180][ T30] hid-generic 0005:0C45:0003.0004: item fetching failed at offset 0/1 [ 556.072584][ T30] hid-generic 0005:0C45:0003.0004: probe with driver hid-generic failed with error -22 [ 558.068341][T22304] ip6tnl1: entered promiscuous mode [ 558.082727][T22304] ip6tnl1: entered allmulticast mode [ 558.438583][T22281] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 558.468927][T22326] netlink: 'syz.2.4027': attribute type 62 has an invalid length. [ 558.698648][T22337] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.801728][T22324] syzkaller1: entered promiscuous mode [ 558.810553][T22324] syzkaller1: entered allmulticast mode [ 559.587638][T22371] bond0: entered promiscuous mode [ 559.587698][T22371] bond0: entered allmulticast mode [ 560.195374][T22310] Bluetooth: hci1: command 0x0406 tx timeout [ 560.740044][T22433] netlink: 'syz.0.4053': attribute type 32 has an invalid length. [ 560.740528][T22433] __nla_validate_parse: 41 callbacks suppressed [ 560.740569][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 560.801750][T22432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4054'. [ 560.899092][T22433] bond4: option coupled_control: invalid value (192) [ 560.914120][T22433] bond4 (unregistering): Released all slaves [ 561.171864][T22439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4054'. [ 561.188062][T17507] batadv1: left promiscuous mode [ 561.245875][T22432] Bluetooth: hci0: unsupported parameter 5135 [ 561.245937][T22432] Bluetooth: hci0: unsupported parameter 8192 [ 561.245974][T22432] Bluetooth: hci0: unsupported parameter 5135 [ 561.246040][T22432] Bluetooth: hci0: unsupported parameter 8192 [ 561.393852][T22464] x_tables: duplicate underflow at hook 2 [ 561.440268][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.440340][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.568412][T22472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4063'. [ 561.577969][T22472] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4063'. [ 561.941670][T22499] netlink: 'syz.2.4065': attribute type 4 has an invalid length. [ 561.941726][T22499] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4065'. [ 562.035324][T22479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.095201][T22499] .`: renamed from bond0 (while UP) [ 562.398609][T22522] netlink: 344 bytes leftover after parsing attributes in process `syz.2.4076'. [ 562.424293][T22525] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4078'. [ 562.584607][T22531] netlink: 'syz.1.4082': attribute type 10 has an invalid length. [ 562.671215][T22535] syzkaller1: entered promiscuous mode [ 562.671273][T22535] syzkaller1: entered allmulticast mode [ 562.746219][T22540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4084'. [ 562.865779][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4085'. [ 563.343444][T22570] netlink: Conntrack attr has 4 unknown bytes [ 563.343513][T22570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.400402][T22568] 0ªî{X¹¦: left allmulticast mode [ 563.480973][T22581] sctp: [Deprecated]: syz.3.4095 (pid 22581) Use of int in max_burst socket option deprecated. [ 563.480973][T22581] Use struct sctp_assoc_value instead [ 564.094027][T22617] syzkaller0: entered promiscuous mode [ 564.094075][T22617] syzkaller0: entered allmulticast mode [ 564.113431][T22618] netlink: 'syz.4.4108': attribute type 4 has an invalid length. [ 564.132389][T22621] netlink: 'syz.3.4109': attribute type 6 has an invalid length. [ 564.377218][T22629] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 564.377278][T22629] netlink: 'syz.4.4113': attribute type 2 has an invalid length. [ 564.478334][T22632] ip6t_rpfilter: unknown options [ 564.607867][T17495] IPVS: starting estimator thread 0... [ 564.691158][T22638] wg0 speed is unknown, defaulting to 1000 [ 564.699111][T22638] hsr0 speed is unknown, defaulting to 1000 [ 564.708969][T22638] wlan0 speed is unknown, defaulting to 1000 [ 564.718084][T22641] IPVS: using max 32 ests per chain, 76800 per kthread [ 564.811569][T22647] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 564.839714][T22645] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 567.715570][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 90 seconds [ 567.729688][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 90 seconds [ 567.729813][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 90 seconds [ 567.729928][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 90 seconds [ 575.565862][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 584.042891][T16694] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.757947][T22678] netlink: 'syz.3.4128': attribute type 12 has an invalid length. [ 590.789434][T17538] IPVS: starting estimator thread 0... [ 590.837001][T22682] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 590.839408][T22682] x_tables: duplicate underflow at hook 2 [ 590.853322][T22688] netlink: 'syz.1.4126': attribute type 21 has an invalid length. [ 590.853369][T22688] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.855050][T22688] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 590.880048][T22684] IPVS: using max 31 ests per chain, 74400 per kthread [ 591.105407][T22687] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 591.390438][T22702] ip_tables: iptables: counters copy to user failed while replacing table [ 591.417823][T22709] __nla_validate_parse: 9 callbacks suppressed [ 591.424340][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4136'. [ 591.437230][T22709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4136'. [ 591.647975][T22713] x_tables: unsorted underflow at hook 2 [ 591.694438][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 591.709829][T22714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 591.737356][T22713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4138'. [ 591.737405][T22713] tipc: Invalid UDP bearer configuration [ 591.737484][T22713] tipc: Enabling of bearer rejected, failed to enable media [ 591.937205][T22716] netlink: 'syz.4.4139': attribute type 10 has an invalid length. [ 591.957245][T22716] bond0: (slave veth0_to_bond): Releasing active interface [ 592.242047][T22722] vlan3: entered allmulticast mode [ 592.249066][T22722] veth1_virt_wifi: entered allmulticast mode [ 592.629939][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4148'. [ 592.698376][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 592.841733][T22740] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 593.413909][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 593.905397][T22799] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4166'. [ 593.943821][T22804] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4166'. [ 594.171318][T22812] openvswitch: netlink: Key type 262 is out of range max 32 [ 594.209687][T22814] openvswitch: netlink: Key type 262 is out of range max 32 [ 594.520574][T22835] No such timeout policy "s" [ 594.526246][T22835] netlink: Failed to associated timeout policy 's' [ 594.751995][T22850] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 595.029858][T22864] netlink: 'syz.3.4182': attribute type 3 has an invalid length. [ 595.041222][T22865] netlink: 'syz.2.4185': attribute type 1 has an invalid length. [ 595.041281][T22865] netlink: 'syz.2.4185': attribute type 11 has an invalid length. [ 595.607408][T22895] openvswitch: netlink: Message has 1 unknown bytes. [ 595.717950][T22901] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 595.745275][T22903] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 595.808710][T22903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.861757][T22907] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 596.038121][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 596.119693][T22910] netlink: 'syz.2.4200': attribute type 3 has an invalid length. [ 596.924115][T22943] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 596.996812][T22946] __nla_validate_parse: 7 callbacks suppressed [ 597.003828][T22946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4208'. [ 597.344097][T22957] bond3: option mode: unable to set because the bond device is up [ 597.494021][T22965] xt_recent: Unsupported userspace flags (000000b1) [ 597.622782][T22972] netlink: 'syz.4.4214': attribute type 9 has an invalid length. [ 597.631007][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4214'. [ 597.804210][T22978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4216'. [ 597.813693][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 120 seconds [ 597.813745][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 120 seconds [ 597.813774][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 120 seconds [ 597.813799][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 120 seconds [ 597.870689][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4216'. [ 598.491604][T23006] syzkaller1: entered promiscuous mode [ 598.498581][T23006] syzkaller1: entered allmulticast mode [ 598.585751][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 598.613684][T23012] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 598.627799][T23012] bond2 (unregistering): Released all slaves [ 598.759513][T23016] netlink: 'syz.3.4228': attribute type 1 has an invalid length. [ 598.759569][T23016] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4228'. [ 598.972389][T23023] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 599.134237][T22993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.252629][T23025] netlink: 'syz.2.4231': attribute type 1 has an invalid length. [ 599.407804][T23025] bond0: entered promiscuous mode [ 599.416297][T23025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.480214][T23027] bond0: (slave bridge1): making interface the new active one [ 599.480263][T23027] bridge1: entered promiscuous mode [ 599.493737][T23027] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 599.613333][T23037] netlink: 'syz.4.4234': attribute type 3 has an invalid length. [ 599.719317][T23049] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 599.760190][T23049] bond3: option mode: invalid value (9) [ 599.769030][T23049] bond3 (unregistering): Released all slaves [ 599.917145][T23055] netlink: 'syz.1.4237': attribute type 10 has an invalid length. [ 599.917194][T23055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4237'. [ 600.066478][T23061] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4239'. [ 600.138813][T23055] ªªªªª»: entered promiscuous mode [ 600.495985][T23081] openvswitch: netlink: IPv6 tunnel dst address is zero [ 600.548679][T23083] tipc: Enabling of bearer rejected, failed to enable media [ 600.688213][T23091] netlink: 81 bytes leftover after parsing attributes in process `syz.3.4249'. [ 600.713048][T23091] netlink: 81 bytes leftover after parsing attributes in process `syz.3.4249'. [ 601.176572][T23113] netlink: 'syz.1.4258': attribute type 10 has an invalid length. [ 601.223531][T23117] netlink: 'syz.4.4261': attribute type 1 has an invalid length. [ 601.223593][T23117] netlink: 'syz.4.4261': attribute type 2 has an invalid length. [ 601.267148][T23113] veth0_to_bond: entered allmulticast mode [ 601.281739][T23113] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 601.294194][T23118] netlink: 'syz.4.4261': attribute type 1 has an invalid length. [ 601.294251][T23118] netlink: 'syz.4.4261': attribute type 2 has an invalid length. [ 601.961436][T23141] syzkaller0: entered promiscuous mode [ 601.961493][T23141] syzkaller0: entered allmulticast mode [ 601.984352][T23155] xt_IDLETIMER: timeout value is zero [ 602.009914][T23155] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 602.018933][T23155] __nla_validate_parse: 6 callbacks suppressed [ 602.026549][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.036739][T23155] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 602.044930][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.054415][T23155] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 602.063106][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.063398][T23155] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 602.063414][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.063616][T23155] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 602.063632][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.063821][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.064015][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.131788][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.132539][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.133333][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4268'. [ 602.482435][T23162] tipc: Enabling of bearer rejected, failed to enable media [ 602.809565][T23177] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 603.744271][T17538] IPVS: starting estimator thread 0... [ 603.840781][T23223] IPVS: using max 34 ests per chain, 81600 per kthread [ 604.139726][T23233] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 604.211727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 604.284619][T23235] bond4: entered promiscuous mode [ 604.301814][T23235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.506040][T23253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.523074][T23253] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 604.523125][T23253] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 604.552585][T23253] bond4: (slave ip6gre1): making interface the new active one [ 604.560503][T23253] ip6gre1: entered promiscuous mode [ 604.568251][T23253] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 604.656139][T23267] xt_l2tp: missing protocol rule (udp|l2tpip) [ 604.859522][T23257] bond4: entered promiscuous mode [ 604.870246][T23257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.973769][T23345] batman_adv: batadv0: Interface deactivated: gretap1 [ 607.083453][T23342] __nla_validate_parse: 36 callbacks suppressed [ 607.083525][T23342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4317'. [ 607.091092][T17538] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.101556][T17538] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.123423][T16680] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.123465][T16680] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.123755][T16680] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.123838][T16680] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.123944][T16680] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.124016][T16680] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.378227][T23364] validate_nla: 34 callbacks suppressed [ 607.384169][T23364] netlink: 'syz.0.4322': attribute type 3 has an invalid length. [ 607.393870][T23364] netlink: 'syz.0.4322': attribute type 11 has an invalid length. [ 607.407906][T23364] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4322'. [ 607.503771][T23360] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4321'. [ 607.613710][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4326'. [ 607.687510][T23380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4329'. [ 607.743289][T23384] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4329'. [ 607.982915][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4330'. [ 608.204372][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 608.204429][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 608.281650][T23409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 608.902020][T23446] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4342'. [ 609.209902][T23464] netlink: 'syz.2.4348': attribute type 7 has an invalid length. [ 609.480641][T23472] netlink: 'syz.0.4351': attribute type 17 has an invalid length. [ 609.504293][T23472] syz_tun: entered promiscuous mode [ 609.520688][T23472] syz_tun: left promiscuous mode [ 609.540483][T23477] netlink: NAT attribute has 8 unknown bytes [ 609.540545][T23477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.580461][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.588662][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.596092][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603384][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603427][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603456][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603484][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603511][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603537][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603562][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603589][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603617][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603644][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603671][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603698][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603725][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603752][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603778][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603805][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603831][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603858][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603892][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603919][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603945][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603971][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.603998][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604024][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604051][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604078][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604104][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604131][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604157][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 609.604183][T23481] IPVS: set_ctl: invalid protocol: 0 172.20.20.38:20003 [ 610.018391][T23487] wg0 speed is unknown, defaulting to 1000 [ 610.034041][T23487] hsr0 speed is unknown, defaulting to 1000 [ 610.044907][T23487] wlan0 speed is unknown, defaulting to 1000 [ 610.588488][T23505] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 610.599811][T23508] macvlan0: entered promiscuous mode [ 610.613065][T23523] x_tables: duplicate underflow at hook 2 [ 610.911771][T23536] netlink: 'syz.2.4367': attribute type 21 has an invalid length. [ 610.911889][T23536] netlink: 'syz.2.4367': attribute type 1 has an invalid length. [ 611.082059][T23540] bond4 (unregistering): Released all slaves [ 611.142512][T23547] siw: device registration error -23 [ 611.953636][T23575] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 612.130648][T23577] __nla_validate_parse: 11 callbacks suppressed [ 612.130716][T23577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4377'. [ 616.143495][T23582] netlink: 'syz.1.4381': attribute type 1 has an invalid length. [ 616.216237][T23590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.230521][T23582] bond3: entered promiscuous mode [ 616.231048][T23582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.286083][T23587] ipvlan2: entered allmulticast mode [ 616.291662][T23587] bond3: entered allmulticast mode [ 616.299309][T23588] tun0: tun_chr_ioctl cmd 1074025675 [ 616.299361][T23588] tun0: persist disabled [ 616.311344][T23602] netlink: 'syz.1.4381': attribute type 1 has an invalid length. [ 616.353563][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4384'. [ 616.470006][T23608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4386'. [ 616.515278][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 616.550226][T23611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4386'. [ 616.703653][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 616.753480][T23617] syzkaller0: entered promiscuous mode [ 616.753544][T23617] syzkaller0: entered allmulticast mode [ 617.130714][T23632] netlink: 'syz.0.4396': attribute type 1 has an invalid length. [ 617.130761][T23632] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4396'. [ 617.169861][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 617.187205][T23633] netlink: 'syz.2.4393': attribute type 11 has an invalid length. [ 617.189090][T23635] netlink: 'syz.0.4396': attribute type 1 has an invalid length. [ 617.189150][T23635] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4396'. [ 617.213263][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'. [ 617.472139][T23650] netlink: 'syz.3.4398': attribute type 4 has an invalid length. [ 617.472184][T23650] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4398'. [ 617.481242][T23650] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 617.750570][T23670] IPVS: set_ctl: invalid protocol: 128 0.32.0.0:14336 [ 617.757813][T23670] openvswitch: netlink: Missing valid actions attribute. [ 617.757906][T23670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.630467][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4412'. [ 619.102668][T23731] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 619.121500][T23731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4416'. [ 619.121577][T23731] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4416'. [ 619.578116][T23753] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 619.593242][T23753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4420'. [ 621.559235][T23710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.948125][T23767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.120768][T23770] IPv6: NLM_F_CREATE should be specified when creating new route [ 622.339426][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 622.406694][T23782] netlink: 'syz.3.4431': attribute type 2 has an invalid length. [ 622.406745][T23782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4431'. [ 622.513883][T23789] netlink: 'syz.4.4430': attribute type 1 has an invalid length. [ 622.567984][T23789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4430'. [ 622.886899][T23805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4438'. [ 622.983265][T23819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4437'. [ 623.010138][T23814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4439'. [ 623.010435][T23814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4439'. [ 623.010878][T23814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4439'. [ 623.011273][T23814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4439'. [ 623.011584][T23814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4439'. [ 623.724002][T23855] syzkaller0: entered promiscuous mode [ 623.724072][T23855] syzkaller0: entered allmulticast mode [ 624.244070][T23876] netlink: 'syz.0.4453': attribute type 1 has an invalid length. [ 624.409168][T23876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.514527][T23876] netlink: 'syz.0.4453': attribute type 1 has an invalid length. [ 624.600633][T23879] bond5: (slave gretap0): making interface the new active one [ 624.649208][T23879] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 625.385055][T23934] netlink: 'syz.4.4465': attribute type 24 has an invalid length. [ 625.401806][T23929] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 625.428088][T23929] bond6 (unregistering): Released all slaves [ 625.771453][T23940] syzkaller1: entered promiscuous mode [ 625.771504][T23940] syzkaller1: entered allmulticast mode [ 626.434471][T23984] netlink: 'syz.1.4475': attribute type 1 has an invalid length. [ 626.693878][T23994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.819706][T24006] netlink: 'syz.2.4482': attribute type 1 has an invalid length. [ 626.819794][T24006] netlink: 'syz.2.4482': attribute type 1 has an invalid length. [ 626.827160][T23999] openvswitch: netlink: IP tunnel dst address not specified [ 626.827280][T23999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.375896][T24029] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 627.375964][T24029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.849701][T24050] __nla_validate_parse: 49 callbacks suppressed [ 627.856713][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'. [ 627.885738][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 150 seconds [ 627.885804][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 150 seconds [ 627.885850][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 150 seconds [ 627.885880][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 150 seconds [ 628.000584][T24051] netlink: 'syz.3.4496': attribute type 1 has an invalid length. [ 628.112083][T24051] bond2: entered promiscuous mode [ 628.126846][T24051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.135603][T24060] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 628.156435][T24060] xt_addrtype: ipv6 does not support BROADCAST matching [ 628.541346][T24077] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 628.560854][T24077] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 628.560935][T24077] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 628.840745][T24102] netlink: 'syz.2.4511': attribute type 2 has an invalid length. [ 629.463710][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4518'. [ 629.487536][T24129] team0: Mode changed to "roundrobin" [ 629.501338][T24125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4517'. [ 630.044119][T24140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4522'. [ 630.764542][T24173] sctp: [Deprecated]: syz.3.4529 (pid 24173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.764542][T24173] Use struct sctp_sack_info instead [ 630.830323][T24146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 630.849694][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4522'. [ 630.926090][T24145] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 630.961140][T24184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4530'. [ 631.273023][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4533'. [ 631.351519][T24202] netlink: 'syz.4.4534': attribute type 1 has an invalid length. [ 631.985686][T24232] netlink: 'syz.1.4542': attribute type 3 has an invalid length. [ 632.128389][T24236] tipc: Started in network mode [ 632.135514][T24236] tipc: Node identity ac14142f, cluster identity 4711 [ 632.135876][T24236] tipc: New replicast peer: 0.0.0.0 [ 632.153927][T24236] tipc: Enabled bearer , priority 10 [ 632.355471][T22310] Bluetooth: hci0: command 0x0406 tx timeout [ 632.988984][T24255] netlink: 'syz.3.4551': attribute type 1 has an invalid length. [ 633.069093][T24255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.168726][T24258] bond3: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 633.254928][ T30] tipc: Node number set to 2886997039 [ 633.277138][T24243] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 633.616431][T24267] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.4553'. [ 633.745729][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.763657][T24282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.776191][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.776551][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.776843][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.777083][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.777301][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.834190][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 633.853878][T24281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 634.714064][T24308] syzkaller0: entered promiscuous mode [ 634.714134][T24308] syzkaller0: entered allmulticast mode [ 634.753234][T24308] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 634.888609][T24319] ip6t_srh: unknown srh invflags 4000 [ 635.243659][T24343] xt_ipcomp: unknown flags 1D [ 636.484278][T24381] syzkaller0: entered promiscuous mode [ 636.484330][T24381] syzkaller0: entered allmulticast mode [ 637.721904][T24428] netlink: 'syz.2.4593': attribute type 2 has an invalid length. [ 638.553895][T24446] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001 [ 638.650830][T24449] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001 [ 639.980617][T24489] __nla_validate_parse: 39 callbacks suppressed [ 639.980752][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 640.445190][T24502] netlink: 'syz.1.4615': attribute type 61 has an invalid length. [ 640.454293][T24489] hsr_slave_1 (unregistering): left promiscuous mode [ 640.916305][T24509] netlink: ct_mark mask cannot be 0 [ 640.916389][T24509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.929459][T24505] netlink: 'syz.3.4616': attribute type 10 has an invalid length. [ 640.934642][T24505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.991832][T24516] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 641.443677][T24539] netlink: 'syz.0.4624': attribute type 1 has an invalid length. [ 641.443731][T24539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4624'. [ 641.631541][T24536] bridge0: port 3(vlan3) entered blocking state [ 641.641377][T24536] bridge0: port 3(vlan3) entered disabled state [ 641.642025][T24536] vlan3: entered allmulticast mode [ 641.642082][T24536] geneve0: entered allmulticast mode [ 641.681413][T24536] vlan3: entered promiscuous mode [ 641.681502][T24536] geneve0: entered promiscuous mode [ 641.846460][T24551] syzkaller1: entered promiscuous mode [ 641.847339][T24551] syzkaller1: entered allmulticast mode [ 642.072465][T24572] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4633'. [ 642.072706][T24572] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4633'. [ 642.209252][T24578] --map-set only usable from mangle table [ 642.394596][T24581] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 642.490938][T24581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 642.609057][T24594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.783492][T24600] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4641'. [ 643.048686][T24594] syzkaller0: entered promiscuous mode [ 643.048767][T24594] syzkaller0: entered allmulticast mode [ 643.090566][T24610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4644'. [ 643.121068][T24614] x_tables: duplicate underflow at hook 2 [ 643.612613][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 643.633964][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 647.928721][T24647] syzkaller0: entered promiscuous mode [ 647.928784][T24647] syzkaller0: entered allmulticast mode [ 647.969162][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'. [ 648.222587][T24659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4655'. [ 648.262650][T24659] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4655'. [ 648.304114][T24662] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 648.587238][T24687] openvswitch: netlink: Actions may not be safe on all matching packets [ 648.628270][T24683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4660'. [ 648.736877][T24685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4660'. [ 648.932829][T24692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4662'. [ 649.148656][T24705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 649.159319][T24705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 649.349855][T24710] netlink: 'syz.3.4667': attribute type 9 has an invalid length. [ 649.349909][T24710] netlink: 'syz.3.4667': attribute type 4 has an invalid length. [ 649.717641][T24727] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4672'. [ 649.843232][T22310] Bluetooth: hci1: ISO packet too small [ 649.906690][T24741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4676'. [ 650.132247][T24748] ip_tables: iptables: counters copy to user failed while replacing table [ 650.720976][T24777] tipc: Failed to remove unknown binding: 66,0,0/2893132466:59924398/59924400 [ 650.721032][T24777] tipc: Failed to remove unknown binding: 66,0,0/2893132466:59924398/59924399 [ 650.723514][T24777] tipc: Failed to remove unknown binding: 66,0,0/2893132466:59924398/59924400 [ 650.723599][T24777] tipc: Failed to remove unknown binding: 66,0,0/2893132466:59924398/59924399 [ 651.084599][T24792] FAULT_INJECTION: forcing a failure. [ 651.084599][T24792] name failslab, interval 1, probability 0, space 0, times 0 [ 651.084680][T24792] CPU: 1 UID: 0 PID: 24792 Comm: syz.0.4691 Not tainted syzkaller #0 PREEMPT(full) [ 651.084743][T24792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.084801][T24792] Call Trace: [ 651.084919][T24792] [ 651.085016][T24792] dump_stack_lvl+0xe8/0x150 [ 651.085255][T24792] should_fail_ex+0x410/0x560 [ 651.085473][T24792] should_failslab+0xa8/0x100 [ 651.085609][T24792] __kmalloc_noprof+0xfe/0x720 [ 651.085712][T24792] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 651.085945][T24792] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 651.086056][T24792] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 651.086166][T24792] genl_family_rcv_msg_doit+0xda/0x340 [ 651.086280][T24792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.086402][T24792] ? apparmor_capable+0x126/0x170 [ 651.086544][T24792] ? bpf_lsm_capable+0x9/0x20 [ 651.086661][T24792] ? security_capable+0x7e/0x2c0 [ 651.086764][T24792] genl_rcv_msg+0x614/0x7a0 [ 651.086862][T24792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.086954][T24792] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 651.087094][T24792] ? __pfx_nl80211_connect+0x10/0x10 [ 651.087194][T24792] ? __pfx_nl80211_post_doit+0x10/0x10 [ 651.087250][T24792] ? __pfx_ref_tracker_free+0x10/0x10 [ 651.087365][T24792] netlink_rcv_skb+0x226/0x4a0 [ 651.087443][T24792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.087531][T24792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.087665][T24792] ? down_read+0x2be/0x330 [ 651.087811][T24792] genl_rcv+0x28/0x40 [ 651.087895][T24792] netlink_unicast+0x7bd/0x940 [ 651.087999][T24792] netlink_sendmsg+0x813/0xb40 [ 651.088095][T24792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.088183][T24792] ? apparmor_socket_sendmsg+0x98/0x360 [ 651.088301][T24792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.088374][T24792] sock_sendmsg_nosec+0x13a/0x180 [ 651.088537][T24792] ____sys_sendmsg+0x54e/0x850 [ 651.088613][T24792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.088692][T24792] ? import_iovec+0x73/0xa0 [ 651.088807][T24792] ___sys_sendmsg+0x2a5/0x360 [ 651.088862][T24792] ? __lock_acquire+0x6df/0x2e50 [ 651.088985][T24792] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.089158][T24792] ? __fget_files+0x2a/0x420 [ 651.089260][T24792] ? __fget_files+0x3a2/0x420 [ 651.089357][T24792] __x64_sys_sendmsg+0x1b1/0x290 [ 651.089422][T24792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.089544][T24792] do_syscall_64+0x166/0x520 [ 651.089672][T24792] ? trace_irq_disable+0x3b/0x140 [ 651.089746][T24792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.089827][T24792] ? clear_bhb_loop+0x70/0xc0 [ 651.089893][T24792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.089993][T24792] RIP: 0033:0x7f9d5cb9e159 [ 651.090085][T24792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.090129][T24792] RSP: 002b:00007f9d5dad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.090238][T24792] RAX: ffffffffffffffda RBX: 00007f9d5ce25fa0 RCX: 00007f9d5cb9e159 [ 651.090273][T24792] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 651.090313][T24792] RBP: 00007f9d5dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 651.090347][T24792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.090386][T24792] R13: 00007f9d5ce26038 R14: 00007f9d5ce25fa0 R15: 00007ffe3c9f2f38 [ 651.090493][T24792] [ 651.490389][T24794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.217944][T24814] syzkaller1: entered promiscuous mode [ 652.223748][T24814] syzkaller1: entered allmulticast mode [ 652.295845][T24835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.478106][T24841] veth1_macvtap: left promiscuous mode [ 654.935936][T24828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.262729][T24863] nbd: couldn't find device at index 15663104 [ 655.361088][T24873] Bluetooth: hci0: unsupported parameter 5134 [ 655.361136][T24873] Bluetooth: hci0: unsupported parameter 8192 [ 655.361172][T24873] Bluetooth: hci0: unsupported parameter 5134 [ 655.361191][T24873] Bluetooth: hci0: unsupported parameter 8192 [ 655.417077][T24869] vlan3: entered promiscuous mode [ 655.422423][T24869] bridge0: entered promiscuous mode [ 655.936406][T24893] __nla_validate_parse: 70 callbacks suppressed [ 655.943187][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'. [ 655.953231][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'. [ 655.994217][T24898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4722'. [ 656.006316][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4722'. [ 656.102248][T24910] x_tables: duplicate underflow at hook 3 [ 656.180099][T24908] pimreg: entered allmulticast mode [ 656.190009][T24908] pimreg: left allmulticast mode [ 656.641131][T24935] netlink: 'syz.2.4729': attribute type 21 has an invalid length. [ 656.655769][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 656.668184][T24935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4729'. [ 657.134239][T24950] syz_tun: entered promiscuous mode [ 657.142598][T24948] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 657.142652][T24948] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 657.154650][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 657.241115][T24960] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4733'. [ 657.395431][T24967] Bluetooth: MGMT ver 1.23 [ 657.461979][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4738'. [ 657.547550][T24969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4739'. [ 657.965400][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 180 seconds [ 657.965466][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 180 seconds [ 657.965521][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 180 seconds [ 657.965550][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 180 seconds [ 658.779130][T25038] netlink: 'syz.2.4759': attribute type 10 has an invalid length. [ 658.863378][T25038] .`: (slave bridge0): Enslaving as an active interface with an up link [ 659.076628][T25049] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 659.252357][T25059] tipc: Enabled bearer , priority 10 [ 659.512438][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.512931][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.513302][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.513648][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.526947][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.527391][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.527814][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.528048][T25078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.530741][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.531148][T25077] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 659.808068][T25090] netlink: 'syz.2.4772': attribute type 1 has an invalid length. [ 659.900660][T25090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 659.945898][T25091] vlan2: entered promiscuous mode [ 659.951961][T25091] bond4: entered promiscuous mode [ 659.958089][T25091] vlan2: entered allmulticast mode [ 659.958112][T25091] bond4: entered allmulticast mode [ 660.002183][T25097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.459904][ T5800] tipc: Node number set to 3714773694 [ 660.719119][T25123] netlink: 'syz.2.4781': attribute type 1 has an invalid length. [ 660.995449][T25143] __nla_validate_parse: 16 callbacks suppressed [ 661.004098][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 661.012934][T25144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4787'. [ 661.079064][T25142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.079128][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.129651][T25145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.129705][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.142563][T25149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.153699][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.259400][T25154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4786'. [ 661.371369][T25159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4789'. [ 661.615458][T25170] bridge1: entered promiscuous mode [ 661.620953][T25170] bridge1: entered allmulticast mode [ 661.633446][T25170] team0: Port device bridge1 added [ 661.679488][T25175] netlink: 'syz.4.4793': attribute type 8 has an invalid length. [ 661.680166][T25173] netlink: 'syz.4.4793': attribute type 8 has an invalid length. [ 661.906528][T25176] tipc: Enabled bearer , priority 0 [ 661.912299][T25186] syzkaller0: entered promiscuous mode [ 661.912404][T25186] syzkaller0: entered allmulticast mode [ 662.158701][T25176] tipc: Resetting bearer [ 662.165728][T25186] bridge0: port 1(team0) entered blocking state [ 662.165917][T25186] bridge0: port 1(team0) entered disabled state [ 662.166123][T25186] team0: entered allmulticast mode [ 662.235965][T25169] tipc: Resetting bearer [ 662.287185][T25169] tipc: Disabling bearer [ 662.324899][T17495] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.417716][T25204] dvmrp0: entered allmulticast mode [ 662.957066][T25232] netlink: 'syz.0.4811': attribute type 1 has an invalid length. [ 663.045096][T25232] bond7: entered promiscuous mode [ 663.050410][T25232] bond7: entered allmulticast mode [ 663.050865][T25232] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.090035][T25232] erspan1: entered allmulticast mode [ 663.105960][T25232] bond7: (slave erspan1): making interface the new active one [ 663.113832][T25232] erspan1: entered promiscuous mode [ 663.125235][T25232] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 663.249957][T25241] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 663.586157][T25250] smbdirect: ib_dev[syz0] removed [ 663.704022][T25257] team0: left allmulticast mode [ 663.740470][T25257] bridge0: port 1(team0) entered disabled state [ 663.748156][T25230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.149125][T25270] netlink: 'syz.1.4819': attribute type 9 has an invalid length. [ 664.188936][T25274] netdevsim netdevsim2 : renamed from netdevsim0 [ 664.257607][T25271] netlink: 'syz.3.4818': attribute type 1 has an invalid length. [ 664.592864][T25299] erspan0: entered promiscuous mode [ 664.869966][T25314] macvlan0: entered promiscuous mode [ 665.220705][T25331] netlink: 'syz.0.4836': attribute type 5 has an invalid length. [ 665.499010][T25332] syzkaller0: entered promiscuous mode [ 665.499061][T25332] syzkaller0: entered allmulticast mode [ 665.572320][T25346] netlink: 'syz.3.4838': attribute type 1 has an invalid length. [ 665.617068][T25346] bond4: entered promiscuous mode [ 665.624092][T25346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.360374][T25384] __nla_validate_parse: 17 callbacks suppressed [ 666.360464][T25384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4845'. [ 666.690293][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4848'. [ 666.753409][T25393] net_ratelimit: 37 callbacks suppressed [ 666.753484][T25393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.891108][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'. [ 666.948926][T25401] openvswitch: netlink: Missing key (keys=40, expected=100) [ 666.990838][T25407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4854'. [ 667.116380][T25410] netlink: 'syz.0.4852': attribute type 2 has an invalid length. [ 667.611033][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'. [ 667.630333][T25420] veth1_macvtap: entered promiscuous mode [ 667.665383][T25420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.683106][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'. [ 667.698785][T25420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.722474][T25420] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 667.864235][T25436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'. [ 667.864273][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4859'. [ 667.888193][T17496] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.931232][T25426] netlink: 'syz.3.4861': attribute type 9 has an invalid length. [ 667.931291][T25426] netlink: 'syz.3.4861': attribute type 4 has an invalid length. [ 668.025936][T25428] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 668.066541][T25427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.083956][T16680] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.102759][T17496] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.389258][T25429] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 668.493493][T25450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4866'. [ 668.672915][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4866'. [ 669.430302][T25476] tipc: MTU too low for tipc bearer [ 670.022424][T25495] bridge0: port 1(vlan0) entered blocking state [ 670.025317][T25495] bridge0: port 1(vlan0) entered disabled state [ 670.025593][T25495] vlan0: entered allmulticast mode [ 670.025617][T25495] geneve0: entered allmulticast mode [ 670.063234][T25495] vlan0: entered promiscuous mode [ 670.063282][T25495] geneve0: entered promiscuous mode [ 670.248037][T25499] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 670.259518][T25499] openvswitch: netlink: Message has 146 unknown bytes. [ 670.279285][T25499] xt_TCPMSS: Only works on TCP SYN packets [ 670.811189][T25520] team0 (unregistering): Port device bridge1 removed [ 670.891811][T25523] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 670.902894][T25523] batman_adv: batadv0: Adding interface: gretap2 [ 670.913115][T25523] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.941210][T25523] batman_adv: batadv0: Interface activated: gretap2 [ 673.192614][T25501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.884236][T25562] __nla_validate_parse: 6 callbacks suppressed [ 673.884302][T25562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4893'. [ 674.089505][T25567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4894'. [ 674.389183][T25580] vlan4: entered promiscuous mode [ 674.389239][T25580] ip6gretap0: entered promiscuous mode [ 674.399939][T25580] vlan4: entered allmulticast mode [ 674.400005][T25580] ip6gretap0: entered allmulticast mode [ 674.671891][T25584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4900'. [ 674.687143][T25584] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4900'. [ 674.742682][T25587] netlink: 'syz.3.4898': attribute type 11 has an invalid length. [ 674.766673][T25591] netlink: 'syz.2.4901': attribute type 1 has an invalid length. [ 674.766717][T25591] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4901'. [ 674.970803][T25600] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4902'. [ 675.159194][T25609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4905'. [ 675.268141][T25615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4907'. [ 675.356405][T25619] nbd: socks must be embedded in a SOCK_ITEM attr [ 675.442065][T25600] 0ªî{X¹¦: entered promiscuous mode [ 675.687012][T25625] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 675.836385][T25631] netlink: 'syz.1.4910': attribute type 1 has an invalid length. [ 675.991080][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4910'. [ 676.025875][T25646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4914'. [ 676.043359][T25631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.320649][T25631] bond4: (slave geneve3): making interface the new active one [ 676.411890][T25631] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 676.710948][T25650] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 677.172617][T25686] netlink: 'syz.2.4925': attribute type 21 has an invalid length. [ 677.319695][T25690] bond4: entered allmulticast mode [ 677.319747][T25690] ip6gre1: entered allmulticast mode [ 677.371844][T25689] bond4: left allmulticast mode [ 677.380838][T25689] ip6gre1: left allmulticast mode [ 678.231163][T25725] netlink: 'syz.2.4938': attribute type 7 has an invalid length. [ 678.269053][T25720] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 678.510804][T25740] netlink: 'syz.0.4939': attribute type 4 has an invalid length. [ 678.534450][T25741] xt_NETMAP: bad rangesize 37. [ 679.023085][T25755] netlink: 'syz.4.4944': attribute type 3 has an invalid length. [ 679.453364][T25777] __nla_validate_parse: 56 callbacks suppressed [ 679.454544][T25777] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4950'. [ 679.535215][T25779] bond8: up delay (6) is not a multiple of miimon (8), value rounded to 0 ms [ 679.547645][T25779] bond8 (unregistering): Released all slaves [ 679.582942][T25782] netlink: 'syz.4.4952': attribute type 2 has an invalid length. [ 679.842631][T25795] xt_limit: Overflow, try lower: 536871034/127 [ 679.862557][T25796] xt_limit: Overflow, try lower: 536871034/127 [ 680.008724][T25801] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 680.022341][T25801] bond8 (unregistering): Released all slaves [ 680.579811][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 680.608532][T25832] netlink: 'syz.1.4963': attribute type 1 has an invalid length. [ 680.794095][T25841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.809609][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4965'. [ 680.995470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.471454][T25875] lo: entered allmulticast mode [ 681.472407][T25875] tunl0: entered allmulticast mode [ 681.481313][T25879] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 681.563819][T25875] gre0: entered allmulticast mode [ 681.661393][T25875] gretap0: left promiscuous mode [ 681.661456][T25875] gretap0: entered allmulticast mode [ 681.700409][T25875] erspan0: entered allmulticast mode [ 681.827371][T25893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4981'. [ 681.863466][T25875] ip_vti0: entered allmulticast mode [ 681.896860][T25875] ip6_vti0: entered allmulticast mode [ 681.920498][T25875] sit0: entered allmulticast mode [ 681.952359][T25875] ip6tnl0: entered allmulticast mode [ 682.006112][T25875] ip6gre0: entered allmulticast mode [ 682.046814][T25875] syz_tun: entered allmulticast mode [ 682.075334][T25875] ip6gretap0: entered allmulticast mode [ 682.118515][T25875] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.119404][T25875] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.168122][T25875] bridge0: entered allmulticast mode [ 682.180799][T25875] vcan0: entered allmulticast mode [ 682.208063][T25875] team0: entered allmulticast mode [ 682.208117][T25875] team_slave_1: entered allmulticast mode [ 682.233490][T25875] ªªªªª»: left promiscuous mode [ 682.233545][T25875] ªªªªª»: entered allmulticast mode [ 682.257747][T25875] nlmon0: entered allmulticast mode [ 682.271546][T25875] vxcan0: entered allmulticast mode [ 682.293296][T25875] vxcan1: entered allmulticast mode [ 682.310832][T25875] veth0: entered allmulticast mode [ 682.332123][T25875] veth1: entered allmulticast mode [ 682.363240][T25875] wg0: entered allmulticast mode [ 682.402825][T25875] wg1: left promiscuous mode [ 682.437809][T25875] wg2: entered allmulticast mode [ 682.449200][T25875] veth0_to_bridge: entered allmulticast mode [ 682.492903][T25875] veth1_to_bridge: entered allmulticast mode [ 682.562210][T25875] veth1_to_bond: entered allmulticast mode [ 682.598377][T25875] veth1_to_team: entered allmulticast mode [ 682.641258][T25875] veth0_to_batadv: entered allmulticast mode [ 682.667856][T25875] batadv_slave_0: entered allmulticast mode [ 682.703628][T25875] veth1_to_batadv: entered allmulticast mode [ 682.731895][T25875] batadv_slave_1: entered allmulticast mode [ 682.760942][T25875] xfrm0: entered allmulticast mode [ 682.788868][T25875] veth0_to_hsr: entered allmulticast mode [ 682.800125][T25875] hsr_slave_0: entered allmulticast mode [ 682.830981][T25875] veth1_to_hsr: entered allmulticast mode [ 682.842556][T25875] hsr_slave_1: entered allmulticast mode [ 682.850882][T25875] hsr0: entered allmulticast mode [ 682.873775][T25875] veth1_virt_wifi: entered allmulticast mode [ 682.886773][T25875] veth0_virt_wifi: entered allmulticast mode [ 682.912188][T25875] virt_wifi0: entered allmulticast mode [ 682.918822][T25875] veth1_vlan: entered allmulticast mode [ 683.027759][T25875] v: entered allmulticast mode [ 683.028338][T25875] vlan0: left promiscuous mode [ 683.030671][T25875] vlan0: entered allmulticast mode [ 683.031169][T25875] vlan1: entered allmulticast mode [ 683.043761][T25875] macvlan0: entered allmulticast mode [ 683.077643][T25875] macvlan1: entered allmulticast mode [ 683.099916][T25875] ipvlan0: entered allmulticast mode [ 683.100414][T25875] ipvlan1: entered allmulticast mode [ 683.102709][T25875] veth1_macvtap: entered allmulticast mode [ 683.108937][T25875] veth0_macvtap: entered allmulticast mode [ 683.154039][T25875] macvtap0: entered allmulticast mode [ 683.190607][T25875] macsec0: entered allmulticast mode [ 683.241287][T25875] geneve1: entered allmulticast mode [ 683.299657][T25875] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 683.319119][T25875] mac80211_hwsim hwsim27 pim6reg0: entered allmulticast mode [ 683.322812][T25875] vxlan0: entered allmulticast mode [ 683.340534][T25875] syztnl2: entered allmulticast mode [ 683.341275][T25875] gtp0: left promiscuous mode [ 683.357970][T25875] ipip0: entered allmulticast mode [ 683.363532][T25875] bridge1: entered allmulticast mode [ 683.377302][T25875] bond1: left promiscuous mode [ 683.384303][T25875] vxlan1: entered allmulticast mode [ 683.392513][T25875] dummy1: entered allmulticast mode [ 683.401670][T25875] dummy2: entered allmulticast mode [ 683.408099][T25875] bond2: left promiscuous mode [ 683.416412][T25875] netdevsim netdevsim1 eth0: entered allmulticast mode [ 683.423896][T25875] netdevsim netdevsim1 eth1: entered allmulticast mode [ 683.431999][T25875] netdevsim netdevsim1 eth2: entered allmulticast mode [ 683.432179][T25875] netdevsim netdevsim1 eth3: entered allmulticast mode [ 683.447721][T25875] bond0: entered allmulticast mode [ 683.455363][T25875] gretap1: entered allmulticast mode [ 683.455754][T25875] vti60: entered allmulticast mode [ 683.468174][T25875] bond3: left promiscuous mode [ 683.481538][T25875] bridge2: entered allmulticast mode [ 683.492243][T25875] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 683.493427][T25875] syztnl1: entered allmulticast mode [ 683.493757][T25875] macvlan2: entered allmulticast mode [ 683.513764][T25875] bond4: entered allmulticast mode [ 683.513812][T25875] geneve3: entered allmulticast mode [ 683.534191][T25875] vlan4: entered allmulticast mode [ 683.635679][T16687] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.635743][T16687] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.635836][T16687] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.635878][T16687] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.635921][T16687] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.635954][T16687] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.635996][T16687] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.636028][T16687] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.636671][T25893] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 683.968273][T25906] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 684.161024][T25923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4988'. [ 684.227998][T25927] batman_adv: batadv0: Adding interface: gretap3 [ 684.228043][T25927] batman_adv: batadv0: The MTU of interface gretap3 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.228102][T25927] batman_adv: batadv0: Interface activated: gretap3 [ 684.568451][T25940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4992'. [ 684.889661][T13533] tipc: Resetting bearer [ 685.019449][T25953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4997'. [ 685.174877][T25962] netlink: 'syz.1.4999': attribute type 21 has an invalid length. [ 685.174928][T25962] IPv6: NLM_F_CREATE should be specified when creating new route [ 685.480923][T25972] syzkaller1: entered promiscuous mode [ 685.480975][T25972] syzkaller1: entered allmulticast mode [ 685.861205][T26000] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 685.875280][T26000] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 686.624196][ T5278] veth0_vlan: left promiscuous mode [ 686.640971][T25968] infiniband syz0: set down [ 686.654106][T25968] infiniband syz0: added ipvlan1 [ 686.691223][T25968] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 686.708095][T26026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'. [ 686.718474][T25968] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 686.754005][ T30] veth0_vlan: entered promiscuous mode [ 686.786515][T25968] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 686.844523][T26027] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5012'. [ 686.904426][T25968] RDS/IB: syz0: added [ 686.920438][T25968] smc: adding ib device syz0 with port count 1 [ 686.929050][T25968] smc: ib device syz0 port 1 has no pnetid [ 687.030670][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5013'. [ 687.079312][T26026] bond8: Invalid ad_actor_system MAC address. [ 687.087314][T26026] bond8: option ad_actor_system: invalid value (1) [ 687.101778][T26026] bond8 (unregistering): Released all slaves [ 687.625668][T26059] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5018'. [ 687.879526][T26072] openvswitch: netlink: Duplicate or invalid key (type 0). [ 688.046097][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 210 seconds [ 688.046168][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 210 seconds [ 688.046222][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 210 seconds [ 688.046257][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 210 seconds [ 688.440432][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 688.440491][T26089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5024'. [ 688.708929][T26095] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5026'. [ 689.275640][T26118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5032'. [ 690.043174][T26134] netlink: 'syz.1.5036': attribute type 1 has an invalid length. [ 690.043231][T26134] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5036'. [ 690.302699][T26142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5038'. [ 691.078003][T26171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5043'. [ 691.195163][T26171] netlink: 83 bytes leftover after parsing attributes in process `syz.4.5043'. [ 691.275451][T26178] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 691.285515][T26178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.406340][T26185] netlink: 'syz.3.5044': attribute type 16 has an invalid length. [ 691.415669][T26185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5044'. [ 691.776160][T26191] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5049'. [ 692.056895][T26196] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 692.207264][T26198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.268490][ T4983] udevd[4983]: worker [17847] /devices/virtual/block/nbd1 timeout; kill it [ 692.268718][ T4983] udevd[4983]: seq 22214 '/devices/virtual/block/nbd1' killed [ 692.797220][T26215] syzkaller0: entered promiscuous mode [ 692.804103][T26215] syzkaller0: entered allmulticast mode [ 693.459544][T26232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5062'. [ 693.470599][T26233] sctp: [Deprecated]: syz.1.5063 (pid 26233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.470599][T26233] Use struct sctp_sack_info instead [ 693.549051][T26236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5063'. [ 693.611237][T26237] sctp: [Deprecated]: syz.1.5063 (pid 26237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.611237][T26237] Use struct sctp_sack_info instead [ 693.641138][T26238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5063'. [ 694.161847][T26246] netlink: 'syz.4.5064': attribute type 1 has an invalid length. [ 694.349860][T26246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 694.466793][T26252] bond6: entered promiscuous mode [ 694.466855][T26252] bond6: entered allmulticast mode [ 695.097409][T26274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5070'. [ 695.208584][T26280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5071'. [ 695.259131][T26282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5073'. [ 695.466685][T26288] openvswitch: netlink: Missing valid actions attribute. [ 695.479342][T26288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.564241][T26270] syzkaller0: entered promiscuous mode [ 695.570194][T26270] syzkaller0: entered allmulticast mode [ 696.177296][T26302] ip6t_srh: unknown srh match flags 5F28 [ 703.738174][T26320] openvswitch: netlink: Unknown key attributes 1 [ 703.928288][T26332] ip6_vti0: entered promiscuous mode [ 703.955610][T26332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5085'. [ 704.250319][T17495] IPVS: starting estimator thread 0... [ 704.368874][T26349] IPVS: using max 32 ests per chain, 76800 per kthread [ 704.677376][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5089'. [ 704.927658][T26367] IPVS: length: 24 != 16106127384 [ 705.163072][T26372] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 705.314244][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5094'. [ 705.662341][T26386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5097'. [ 705.721766][T26389] netlink: 'syz.3.5098': attribute type 3 has an invalid length. [ 706.423473][T26413] macvlan3: entered promiscuous mode [ 706.430493][T26413] macvlan3: entered allmulticast mode [ 706.439633][T26413] .`: (slave macvlan3): Error -98 calling set_mac_address [ 706.653673][T26432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5107'. [ 707.052636][T26445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5110'. [ 707.127325][T26445] xt_limit: Overflow, try lower: 536871034/127 [ 707.138451][T26444] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5109'. [ 707.383982][T26465] netlink: 'syz.0.5111': attribute type 10 has an invalid length. [ 707.384037][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5111'. [ 708.001442][T26480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5117'. [ 708.088772][T26490] netlink: 'syz.2.5117': attribute type 1 has an invalid length. [ 708.353226][T26490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.694337][T26496] bond5: (slave veth11): Enslaving as an active interface with a down link [ 708.791396][T26480] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 708.823532][T26480] bond5: (slave batadv2): making interface the new active one [ 708.839994][T26480] batadv2: entered promiscuous mode [ 708.860210][T26480] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 708.923276][T26520] netlink: 'syz.1.5118': attribute type 8 has an invalid length. [ 708.947671][T26512] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5118'. [ 709.073212][T26527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.279128][T26542] openvswitch: netlink: Invalid VLAN frame [ 709.292762][T26543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5125'. [ 709.495492][T26550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5128'. [ 709.679421][T26554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5130'. [ 709.736539][T26554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5130'. [ 709.820605][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 709.849521][T26570] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5130'. [ 709.859301][T26554] tap0: tun_chr_ioctl cmd 1074025672 [ 709.859330][T26554] tap0: ignored: set checksum disabled [ 709.908707][T26574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5135'. [ 710.358566][T26590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5143'. [ 710.405941][T26590] nft_compat: unsupported protocol 0 [ 710.431645][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 710.458530][T26590] netlink: 'syz.4.5143': attribute type 3 has an invalid length. [ 710.470810][T26590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5143'. [ 710.816105][T26600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.921940][T26610] Cannot find map_set index 135 as target [ 710.983003][T26612] 1·: renamed from c0· (while UP) [ 710.997346][T26612] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 711.016662][T26612] C: renamed from lo [ 711.035664][T26612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 711.052373][T26612] x_tables: duplicate underflow at hook 1 [ 711.577011][T26631] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 711.577075][T26631] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 712.678119][T26664] netlink: 'syz.1.5166': attribute type 2 has an invalid length. [ 712.704332][T26664] ip_tables: iptables: counters copy to user failed while replacing table [ 713.779155][T26722] bond0: invalid NS target :: specified for addition [ 713.779220][T26722] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 714.326698][T26748] __nla_validate_parse: 13 callbacks suppressed [ 714.327756][T26748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5192'. [ 714.472515][T26753] netlink: 'syz.2.5195': attribute type 2 has an invalid length. [ 714.472578][T26753] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5195'. [ 714.495113][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5197'. [ 714.512902][T26753] netlink: 'syz.2.5195': attribute type 30 has an invalid length. [ 714.521053][T26753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5195'. [ 714.590414][T26760] netlink: 'syz.3.5198': attribute type 21 has an invalid length. [ 714.604010][T26760] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5198'. [ 714.742196][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5199'. [ 714.793195][T26766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5199'. [ 714.808670][T26766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5199'. [ 715.293647][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 715.330853][T26793] sctp: [Deprecated]: syz.2.5207 (pid 26793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 715.330853][T26793] Use struct sctp_sack_info instead [ 715.414596][T26797] netlink: 'syz.1.5208': attribute type 3 has an invalid length. [ 715.880351][T26819] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5214'. [ 715.893577][T26819] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5214'. [ 717.006723][T26858] netlink: 'syz.3.5223': attribute type 1 has an invalid length. [ 717.063420][T26862] set match dimension is over the limit! [ 717.085972][T26860] netlink: 'syz.1.5224': attribute type 2 has an invalid length. [ 717.118338][T26860] Bluetooth: MGMT ver 1.23 [ 717.188004][T26858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 717.197965][T26866] sctp: [Deprecated]: syz.0.5226 (pid 26866) Use of int in maxseg socket option. [ 717.197965][T26866] Use struct sctp_assoc_value instead [ 717.422884][T26863] bond5: (slave veth7): Enslaving as an active interface with a down link [ 717.613158][T26858] bond5: (slave veth9): Enslaving as an active interface with a down link [ 717.710172][T26878] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 717.799656][T26883] netlink: 'syz.0.5233': attribute type 7 has an invalid length. [ 717.907142][T26883] netlink: 'syz.0.5233': attribute type 7 has an invalid length. [ 718.116193][ T11] block nbd1: Possible stuck request ffff888026990000: control (read@0,1024B). Runtime 240 seconds [ 718.116260][ T11] block nbd1: Possible stuck request ffff8880269901c0: control (read@1024,1024B). Runtime 240 seconds [ 718.116310][ T11] block nbd1: Possible stuck request ffff888026990380: control (read@2048,1024B). Runtime 240 seconds [ 718.116343][ T11] block nbd1: Possible stuck request ffff888026990540: control (read@3072,1024B). Runtime 240 seconds [ 718.470035][T26906] openvswitch: netlink: IP tunnel dst address not specified [ 719.148791][T26938] netlink: 'syz.4.5249': attribute type 16 has an invalid length. [ 719.161003][T26938] netlink: 'syz.4.5249': attribute type 17 has an invalid length. [ 719.382637][T26934] __nla_validate_parse: 70 callbacks suppressed [ 719.382700][T26934] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5246'. [ 719.449505][T26957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5254'. [ 719.460218][T26957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5254'. [ 719.472962][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5254'. [ 719.548046][T26938] 8021q: adding VLAN 0 to HW filter on device .` [ 719.591642][T26962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5255'. [ 719.707137][T26938] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 719.708386][T26938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.734394][T26938] gre1: left promiscuous mode [ 719.734458][T26938] gre1: left allmulticast mode [ 719.749997][T26938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 719.761285][T26938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 719.772867][T26938] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 719.939456][ T13] batadv2: left promiscuous mode [ 719.967838][T26966] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.316252][T26979] sctp: [Deprecated]: syz.2.5262 (pid 26979) Use of int in max_burst socket option. [ 720.316252][T26979] Use struct sctp_assoc_value instead [ 720.832641][T27007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5273'. [ 720.945802][T27008] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5274'. [ 721.182330][T27021] xt_TCPMSS: Only works on TCP SYN packets [ 721.271223][T27018] xt_TCPMSS: Only works on TCP SYN packets [ 721.467734][T27037] netlink: 'syz.3.5280': attribute type 1 has an invalid length. [ 721.504299][T27033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.544626][T27040] macvlan3: entered promiscuous mode [ 721.548916][T27040] macvlan3: entered allmulticast mode [ 721.566558][T27040] bond5: (slave macvlan3): Error -22 calling dev_set_mtu [ 721.572622][T27037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.608778][T27042] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5281'. [ 721.737957][T27047] netlink: 'syz.2.5283': attribute type 39 has an invalid length. [ 721.746634][T27049] netlink: 'syz.2.5283': attribute type 39 has an invalid length. [ 722.113315][T27062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5286'. [ 722.841452][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 722.923196][T27093] netlink: 'syz.2.5294': attribute type 1 has an invalid length. [ 723.516099][T27119] 0ªî{X¹¦: left promiscuous mode [ 723.528106][T27119] erspan0: left promiscuous mode [ 723.696937][T27134] netlink: 'syz.4.5305': attribute type 2 has an invalid length. [ 723.944503][T27119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 724.507852][T27163] __nla_validate_parse: 6 callbacks suppressed [ 724.507909][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'. [ 724.652836][T27168] 8021q: adding VLAN 0 to HW filter on device bond9 [ 724.658739][T27168] bridge0: port 1(bond9) entered blocking state [ 724.659207][T27168] bridge0: port 1(bond9) entered disabled state [ 724.659644][T27168] bond9: entered allmulticast mode [ 724.668473][T27168] bond9: entered promiscuous mode [ 724.670586][T27168] bridge0: port 1(bond9) entered blocking state [ 724.670715][T27168] bridge0: port 1(bond9) entered forwarding state [ 724.731770][ T13] bridge0: port 1(bond9) entered disabled state [ 725.082241][T27185] Bluetooth: hci0: unsupported parameter 5161 [ 725.082299][T27185] Bluetooth: hci0: unsupported parameter 8192 [ 725.082335][T27185] Bluetooth: hci0: unsupported parameter 5161 [ 725.082354][T27185] Bluetooth: hci0: unsupported parameter 8192 [ 725.189455][T27189] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 725.210498][T27195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.292567][T27198] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 725.948703][T27237] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5332'. [ 726.096145][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5331'. [ 726.096218][T27238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5331'. [ 726.217582][T27244] xt_REDIRECT: bad rangesize 26624. [ 726.301578][T27249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 726.729497][T27268] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5338'. [ 726.733689][T27268] netlink: 'syz.3.5338': attribute type 3 has an invalid length. [ 726.752445][T27271] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5338'. [ 726.753454][T27268] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5338'. [ 726.765121][T27272] netlink: 'syz.3.5338': attribute type 3 has an invalid length. [ 727.861911][T27307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5351'. [ 727.872311][T27307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5351'. [ 728.474485][T27337] openvswitch: netlink: Actions may not be safe on all matching packets [ 728.613991][T27338] vlan4: entered allmulticast mode [ 728.614040][T27338] erspan0: entered allmulticast mode [ 729.121837][T27360] netlink: 'syz.1.5369': attribute type 10 has an invalid length. [ 729.921998][T27390] netlink: 'syz.4.5376': attribute type 4 has an invalid length. [ 729.970042][T27390] netlink: 'syz.4.5376': attribute type 4 has an invalid length. [ 730.087403][T27390] netlink: 'syz.4.5376': attribute type 64 has an invalid length. [ 730.087455][T27390] __nla_validate_parse: 9 callbacks suppressed [ 730.087469][T27390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5376'. [ 730.174332][T27392] netlink: 'syz.2.5377': attribute type 1 has an invalid length. [ 730.174394][T27392] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5377'. [ 730.254094][T27395] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5377'. [ 730.291087][T27392] netlink: 'syz.2.5377': attribute type 1 has an invalid length. [ 730.402906][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 730.414425][T27392] bond11: entered promiscuous mode [ 730.427257][T27392] 8021q: adding VLAN 0 to HW filter on device bond11 [ 730.475948][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 730.476020][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 730.476259][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5379'. [ 730.518381][T27400] 8021q: adding VLAN 0 to HW filter on device bond11 [ 730.534990][T27400] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 730.535043][T27400] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 730.566602][T27400] bond11: (slave ip6gre1): making interface the new active one [ 730.566658][T27400] ip6gre1: entered promiscuous mode [ 730.586159][T27400] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 730.898808][T27420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.219787][T27439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.241525][T27440] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 731.652918][T27443] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 731.796191][T27467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5395'. [ 731.820625][T27472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5395'. [ 732.064094][T27481] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5399'. [ 732.517636][T17496] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.518404][T17487] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.518519][T17487] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.200010][T16694] tipc: Subscription rejected, illegal request [ 734.306515][T27580] netlink: 'syz.4.5417': attribute type 1 has an invalid length. [ 734.317040][T27587] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 735.371444][T27637] bridge8: entered promiscuous mode [ 735.371544][T27637] bridge8: entered allmulticast mode [ 735.473455][T27637] __nla_validate_parse: 8 callbacks suppressed [ 735.478267][T27637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5433'. [ 735.601618][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012370800: rx timeout, send abort [ 735.689439][T27650] netlink: zone id is out of range [ 735.695144][T27650] netlink: zone id is out of range [ 735.701054][T27650] netlink: zone id is out of range [ 735.706521][T27650] netlink: zone id is out of range [ 735.717513][T27650] netlink: zone id is out of range [ 735.722909][T27650] netlink: zone id is out of range [ 735.728480][T27650] netlink: zone id is out of range [ 735.733827][T27650] netlink: zone id is out of range [ 735.779533][T27650] vlan1: entered promiscuous mode [ 735.779587][T27650] hsr0: entered promiscuous mode [ 735.780355][T27650] vlan1: entered allmulticast mode [ 735.780396][T27650] hsr0: entered allmulticast mode [ 735.780429][T27650] hsr_slave_0: entered allmulticast mode [ 735.780471][T27650] hsr_slave_1: entered allmulticast mode [ 735.815485][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5437'. [ 735.826834][T27654] hsr_slave_0: left promiscuous mode [ 735.833267][T27654] hsr_slave_1: left promiscuous mode [ 735.878005][T27648] netlink: 'syz.2.5436': attribute type 10 has an invalid length. [ 735.878058][T27648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5436'. [ 735.935314][T27660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5437'. [ 736.101845][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012370800: abort rx timeout. Force session deactivation [ 736.112473][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012370400: rx timeout, send abort [ 736.400578][T27680] net_ratelimit: 25 callbacks suppressed [ 736.400637][T27680] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 736.418291][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 736.573060][T27687] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5443'. [ 736.573138][T27687] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5443'. [ 736.613695][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012370400: abort rx timeout. Force session deactivation [ 736.827193][T27703] bond0: Error: Cannot enslave bond to itself. [ 736.834393][T27703] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5446'. [ 736.858547][T27707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5446'. [ 736.858599][T27707] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5446'. [ 736.858635][T27707] netlink: 'syz.1.5446': attribute type 5 has an invalid length. [ 736.858654][T27707] netlink: 'syz.1.5446': attribute type 6 has an invalid length. [ 736.869650][T27708] netlink: 'syz.3.5445': attribute type 10 has an invalid length. [ 737.557027][T16683] [ 737.559429][T16683] ====================================================== [ 737.566498][T16683] WARNING: possible circular locking dependency detected [ 737.573569][T16683] syzkaller #0 Not tainted [ 737.578012][T16683] ------------------------------------------------------ [ 737.585233][T16683] kworker/u8:20/16683 is trying to acquire lock: [ 737.591842][T16683] ffff888077cb1070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 737.601034][T16683] [ 737.601034][T16683] but task is already holding lock: [ 737.608462][T16683] ffff888032047158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 737.618572][T16683] [ 737.618572][T16683] which lock already depends on the new lock. [ 737.618572][T16683] [ 737.629012][T16683] [ 737.629012][T16683] the existing dependency chain (in reverse order) is: [ 737.638133][T16683] [ 737.638133][T16683] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 737.646520][T16683] _raw_spin_lock+0x2e/0x40 [ 737.651582][T16683] sch_direct_xmit+0x15f/0x4c0 [ 737.656921][T16683] __dev_queue_xmit+0x177f/0x3820 [ 737.662611][T16683] hsr_forward_skb+0x1701/0x2b70 [ 737.668126][T16683] hsr_dev_xmit+0x242/0x360 [ 737.673199][T16683] dev_hard_start_xmit+0x2cd/0x830 [ 737.679129][T16683] __dev_queue_xmit+0x14c0/0x3820 [ 737.684717][T16683] ip6_output+0x337/0x540 [ 737.689736][T16683] NF_HOOK+0x177/0x4f0 [ 737.694408][T16683] mld_sendpack+0x890/0xe10 [ 737.699494][T16683] mld_ifc_work+0x842/0xd60 [ 737.704586][T16683] process_scheduled_works+0xc3d/0x1630 [ 737.710747][T16683] worker_thread+0xa47/0xfb0 [ 737.715922][T16683] kthread+0x38b/0x480 [ 737.720559][T16683] ret_from_fork+0x514/0xb70 [ 737.725759][T16683] ret_from_fork_asm+0x1a/0x30 [ 737.731134][T16683] [ 737.731134][T16683] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 737.738978][T16683] __lock_acquire+0x15ff/0x2e50 [ 737.744386][T16683] lock_acquire+0x115/0x350 [ 737.749456][T16683] _raw_spin_lock_bh+0x36/0x50 [ 737.754872][T16683] hsr_dev_xmit+0x237/0x360 [ 737.759955][T16683] dev_hard_start_xmit+0x2cd/0x830 [ 737.765623][T16683] __dev_queue_xmit+0x14c0/0x3820 [ 737.771254][T16683] NF_HOOK+0x33a/0x3c0 [ 737.775957][T16683] arp_xmit+0x16c/0x270 [ 737.780685][T16683] arp_solicit+0xbdc/0xe40 [ 737.785699][T16683] __neigh_event_send+0xf0c/0x1510 [ 737.791445][T16683] neigh_resolve_output+0x1a1/0x720 [ 737.797288][T16683] ip_finish_output2+0xc4b/0x10b0 [ 737.802964][T16683] ip_output+0x29f/0x450 [ 737.807762][T16683] iptunnel_xmit+0x626/0xd10 [ 737.813032][T16683] ip_tunnel_xmit+0x195b/0x2040 [ 737.818538][T16683] erspan_xmit+0xb6a/0x1620 [ 737.823673][T16683] dev_hard_start_xmit+0x2cd/0x830 [ 737.829354][T16683] sch_direct_xmit+0x257/0x4c0 [ 737.834774][T16683] __dev_queue_xmit+0x177f/0x3820 [ 737.840358][T16683] alb_send_lp_vid+0x348/0x550 [ 737.845895][T16683] alb_send_learning_packets+0x12c/0x300 [ 737.852091][T16683] bond_alb_monitor+0x3d0/0x1820 [ 737.857669][T16683] process_scheduled_works+0xc3d/0x1630 [ 737.863776][T16683] worker_thread+0xa47/0xfb0 [ 737.868932][T16683] kthread+0x38b/0x480 [ 737.873562][T16683] ret_from_fork+0x514/0xb70 [ 737.878685][T16683] ret_from_fork_asm+0x1a/0x30 [ 737.883992][T16683] [ 737.883992][T16683] other info that might help us debug this: [ 737.883992][T16683] [ 737.894229][T16683] Possible unsafe locking scenario: [ 737.894229][T16683] [ 737.901725][T16683] CPU0 CPU1 [ 737.907131][T16683] ---- ---- [ 737.912562][T16683] lock(&qdisc_xmit_lock_key#4); [ 737.917601][T16683] lock(&hsr->seqnr_lock); [ 737.924632][T16683] lock(&qdisc_xmit_lock_key#4); [ 737.932230][T16683] lock(&hsr->seqnr_lock); [ 737.936774][T16683] [ 737.936774][T16683] *** DEADLOCK *** [ 737.936774][T16683] [ 737.944957][T16683] locks held by kworker/u8:20/16683: 11, last CPU#0: [ 737.951700][T16683] #0: ffff888029cd5140 ((wq_completion)bond7#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 737.962833][T16683] #1: ffffc9000201fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 737.975782][T16683] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820 [ 737.985389][T16683] #3: ffffffff8ed5c740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 737.995379][T16683] #4: ffff88803636d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 738.008063][T16683] #5: ffff888032047158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 738.018452][T16683] #6: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 738.027363][T16683] #7: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 738.037185][T16683] #8: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 738.046047][T16683] #9: ffffffff8ed5c740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 738.056035][T16683] #10: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 738.065338][T16683] [ 738.065338][T16683] stack backtrace: [ 738.071275][T16683] CPU: 0 UID: 0 PID: 16683 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 738.080946][T16683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.091034][T16683] Workqueue: bond7 bond_alb_monitor [ 738.096269][T16683] Call Trace: [ 738.099555][T16683] [ 738.102492][T16683] dump_stack_lvl+0xe8/0x150 [ 738.107159][T16683] print_circular_bug+0x2e2/0x300 [ 738.112239][T16683] check_noncircular+0x12f/0x150 [ 738.117218][T16683] __lock_acquire+0x15ff/0x2e50 [ 738.122081][T16683] ? __siphash_unaligned+0x28d/0x3e0 [ 738.127462][T16683] ? skb_network_protocol+0x23d/0x400 [ 738.132848][T16683] lock_acquire+0x115/0x350 [ 738.137363][T16683] ? hsr_dev_xmit+0x237/0x360 [ 738.142061][T16683] ? hsr_dev_xmit+0x237/0x360 [ 738.146755][T16683] _raw_spin_lock_bh+0x36/0x50 [ 738.151532][T16683] ? hsr_dev_xmit+0x237/0x360 [ 738.156218][T16683] hsr_dev_xmit+0x237/0x360 [ 738.160735][T16683] ? hsr_dev_xmit+0x2d/0x360 [ 738.165362][T16683] dev_hard_start_xmit+0x2cd/0x830 [ 738.170512][T16683] __dev_queue_xmit+0x14c0/0x3820 [ 738.175556][T16683] ? __dev_queue_xmit+0x29b/0x3820 [ 738.180682][T16683] ? __lock_acquire+0x6df/0x2e50 [ 738.185624][T16683] ? arpt_do_table+0x25b/0x1f90 [ 738.190545][T16683] ? __pfx___dev_queue_xmit+0x10/0x10 [ 738.195943][T16683] ? __pfx_arpt_do_table+0x10/0x10 [ 738.201103][T16683] ? NF_HOOK+0xa2/0x3c0 [ 738.205303][T16683] NF_HOOK+0x33a/0x3c0 [ 738.209387][T16683] ? __pfx_arp_xmit_finish+0x10/0x10 [ 738.214688][T16683] ? NF_HOOK+0xa2/0x3c0 [ 738.218881][T16683] ? __pfx_NF_HOOK+0x10/0x10 [ 738.223557][T16683] ? lock_acquire+0x115/0x350 [ 738.228256][T16683] ? __pfx_arp_xmit_finish+0x10/0x10 [ 738.233652][T16683] ? inet_addr_type_dev_table+0x25/0x190 [ 738.239474][T16683] arp_xmit+0x16c/0x270 [ 738.243686][T16683] ? arp_xmit+0x23/0x270 [ 738.247967][T16683] arp_solicit+0xbdc/0xe40 [ 738.252435][T16683] ? __pfx_arp_solicit+0x10/0x10 [ 738.257411][T16683] ? __neigh_event_send+0xea4/0x1510 [ 738.262760][T16683] ? __pfx_arp_solicit+0x10/0x10 [ 738.267746][T16683] __neigh_event_send+0xf0c/0x1510 [ 738.272920][T16683] neigh_resolve_output+0x1a1/0x720 [ 738.278176][T16683] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 738.283260][T16683] ? ip_finish_output2+0x3de/0x10b0 [ 738.288522][T16683] ip_finish_output2+0xc4b/0x10b0 [ 738.293602][T16683] ? ip_skb_dst_mtu+0x811/0xa50 [ 738.298497][T16683] ? ip_finish_output2+0x3de/0x10b0 [ 738.303769][T16683] ? ip_finish_output+0x40b/0x530 [ 738.308918][T16683] ip_output+0x29f/0x450 [ 738.313183][T16683] ? ip_output+0x5a/0x450 [ 738.317535][T16683] iptunnel_xmit+0x626/0xd10 [ 738.322153][T16683] ip_tunnel_xmit+0x195b/0x2040 [ 738.327054][T16683] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 738.332306][T16683] ? __gre_xmit+0x106/0x1a0 [ 738.336917][T16683] erspan_xmit+0xb6a/0x1620 [ 738.341445][T16683] ? __pfx_erspan_xmit+0x10/0x10 [ 738.346486][T16683] ? __lock_acquire+0x6df/0x2e50 [ 738.351465][T16683] dev_hard_start_xmit+0x2cd/0x830 [ 738.356622][T16683] sch_direct_xmit+0x257/0x4c0 [ 738.361430][T16683] ? __pfx_sch_direct_xmit+0x10/0x10 [ 738.366748][T16683] ? __switch_to_asm+0x50/0x70 [ 738.371559][T16683] __dev_queue_xmit+0x177f/0x3820 [ 738.376736][T16683] ? __dev_queue_xmit+0x29b/0x3820 [ 738.381892][T16683] ? __pfx___dev_queue_xmit+0x10/0x10 [ 738.387279][T16683] ? __alloc_skb+0x27a/0x7a0 [ 738.391955][T16683] ? rcu_is_watching+0x16/0xb0 [ 738.396761][T16683] ? __alloc_skb+0x27a/0x7a0 [ 738.401380][T16683] ? trace_kmem_cache_alloc+0x29/0xe0 [ 738.406780][T16683] ? __alloc_skb+0x27a/0x7a0 [ 738.411390][T16683] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 738.417484][T16683] ? __alloc_skb+0x4d0/0x7a0 [ 738.422104][T16683] ? alb_send_lp_vid+0x14e/0x550 [ 738.427073][T16683] alb_send_lp_vid+0x348/0x550 [ 738.431903][T16683] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 738.437235][T16683] ? __lock_acquire+0x6df/0x2e50 [ 738.442225][T16683] alb_send_learning_packets+0x12c/0x300 [ 738.447896][T16683] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 738.454078][T16683] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 738.460539][T16683] bond_alb_monitor+0x3d0/0x1820 [ 738.465514][T16683] ? bond_alb_monitor+0xf3/0x1820 [ 738.470587][T16683] ? __pfx_bond_alb_monitor+0x10/0x10 [ 738.476004][T16683] ? rcu_is_watching+0x16/0xb0 [ 738.480801][T16683] ? process_scheduled_works+0x97a/0x1630 [ 738.486560][T16683] process_scheduled_works+0xc3d/0x1630 [ 738.492183][T16683] ? __pfx_process_scheduled_works+0x10/0x10 [ 738.498207][T16683] ? assign_work+0x3cf/0x5d0 [ 738.502857][T16683] worker_thread+0xa47/0xfb0 [ 738.507514][T16683] kthread+0x38b/0x480 [ 738.511654][T16683] ? __pfx_worker_thread+0x10/0x10 [ 738.516966][T16683] ? __pfx_kthread+0x10/0x10 [ 738.521588][T16683] ret_from_fork+0x514/0xb70 [ 738.526226][T16683] ? __pfx_ret_from_fork+0x10/0x10 [ 738.531434][T16683] ? __switch_to+0xc89/0x1420 [ 738.536141][T16683] ? __pfx_kthread+0x10/0x10 [ 738.540755][T16683] ret_from_fork_asm+0x1a/0x30 [ 738.545576][T16683] [ 739.311258][T27677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512