last executing test programs: 4.617960905s ago: executing program 1 (id=6578): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x16, 0x81, 0x60, @mcast1, @private1, 0x7, 0x700, 0x2}}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newqdisc={0x68, 0x24, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x1, 0xffe0}, {0xd, 0x2}, {0xfff2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7f, 0x3, 0x2, 0x4, 0x0, 0xd2, 0x5, 0x3, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x16, 0x81, 0x60, @mcast1, @private1, 0x7, 0x700, 0x2}}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newqdisc={0x68, 0x24, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x1, 0xffe0}, {0xd, 0x2}, {0xfff2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7f, 0x3, 0x2, 0x4, 0x0, 0xd2, 0x5, 0x3, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) (async) 3.877907789s ago: executing program 1 (id=6580): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xe4, 0x0, 0x0, 0x8, 0x0, 0x5c1, 0x8000, 0x0, 0x0, 0x7], [0xec52, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d666eb1309f8ef1470000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x29, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="b00df4ca00"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7054608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket(0x21, 0x4, 0x0) sendmmsg$inet(r11, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}}], 0x1, 0x804) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000400020000001400017a06000100020000001e000300ac1416aacc43c82f750790a53afdd8d3f168a2830db6cb66e3d272fd5ae95a3d8d48362e64190f7ed2ad3a633d96406e2f5256ca300a7ac827406f80c2a65b088ba75b6e57f5fda48667"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={0x3c, r6, 0x2, 0x70bd2f, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x3c}, 0x1, 0xff07}, 0x2000000) bind$l2tp6(r2, &(0x7f0000000540)={0xa, 0x0, 0xed68, @empty, 0x8}, 0x20) 3.810492364s ago: executing program 4 (id=6581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x800200, @mcast2, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000012, &(0x7f0000000200)=0x50, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$qrtr(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00), 0x0, 0x20000010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000380)=""/30, &(0x7f0000000340)=0x1e) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20003cbd000008015d2eb3000300", @ANYRES32=0x0, @ANYBLOB="0c009900001000003e0000000a00060008021100000100000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) 3.495171258s ago: executing program 4 (id=6583): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000800)=""/268, 0x10c, 0x0, &(0x7f0000000700)=""/248, 0xf8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400edcb4aad169f000000ffffffff0b8ec44e00000000", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0xc2, &(0x7f0000000400)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x25e}, 0x10, r0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x76) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={r6, 0xcabc}, &(0x7f0000000380)=0x8) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f}, 0xa) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0xb83a) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003700010327de7000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r7, 0x3328}, {r3, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) 3.364107626s ago: executing program 3 (id=6586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010000304000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000070000000ebe31a3f98439a77904c1b4be2ac200012801c8dfd810240064761080001006774700014001d80050006000900"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x4}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@delsa={0xf0, 0x11, 0x4, 0x70bd2d, 0x25dfdbfd, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x4d4, 0x2, 0x3c}, [@mark={0xc, 0x15, {0x35075a, 0xd}}, @extra_flags={0x8, 0x18, 0x5}, @algo_auth_trunc={0x63, 0x14, {{'blake2s-224-x86\x00'}, 0xb8, 0x0, "5c3721d64ada1569280876620f4aaab24ab918914f8a68"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_thresh={0x8, 0xb, 0x530b1c5e}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd26, 0x70bd25, 0x70bd25, 0x70bd25, 0x6, [0xc, 0xfffff5b9, 0x7, 0x101, 0x3, 0x6, 0x6]}}, @proto={0x5, 0x19, 0x3c}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x800) 3.210049208s ago: executing program 0 (id=6587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvfrom$unix(r1, 0x0, 0xffffffffffffff71, 0x2121, 0x0, 0xc0425c42332f6716) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) write(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x800) (async) recvfrom$unix(r1, 0x0, 0xffffffffffffff71, 0x2121, 0x0, 0xc0425c42332f6716) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) write(r2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3.148537319s ago: executing program 0 (id=6588): syz_emit_ethernet(0x7e, &(0x7f0000000340)={@multicast, @broadcast, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @private1, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r4 = socket(0x15, 0x5, 0x0) connect$unix(r4, &(0x7f00000003c0)=@abs={0xa}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000041) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x20, 0x2e, 0x107, 0x70bd2c, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.033369446s ago: executing program 0 (id=6589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x40, 0x7, 0x7, 0x2, {{0xa, 0x4, 0x3, 0x5, 0x28, 0x67, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@ssrr={0x89, 0x7, 0x47, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x6f, [@loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf0, 0xff, 0x50, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x700, 0x9, 0x5}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x4, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x4000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000a0}, 0x20004890) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff}}, {0x4}}]}]}, 0x58}}, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x9, 0x18}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @private}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x40041) 2.558143635s ago: executing program 4 (id=6591): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x2000, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r0, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x48850) 2.376711943s ago: executing program 1 (id=6592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000006400)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="bc303b5e19ad979f18efe4c666cecdeaedad584ef38db46f8f0b4840288f602c54d1a722e4b0b22ef84d19a4a4e0e09e713e46973dc244dac9378e655895a5d8f03f0fba2e139dbfb0ddb740b3e6cebfb619f350962ee951fed86e586c469672b53620521b5cf1443488aec1d7d9fdcc597dab4e81aaecc9f8fd2ff6c883e37811a374b7303238fb5e4441180480c38093dcfefdce1e04e22dd383fdba70dddd73c669acc67361a71df3d1db62721daa342e3382ed91c6", 0xb7}], 0x1, &(0x7f0000000200), 0x0, 0x48060}, {&(0x7f00000002c0)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="44a41344d5e1f7fb3881a401d5a7fb1fe9e5af4a6303f01f7afcdc8a71694d27818378eda6c0b205957b3fba3cc5ccb0ce3fe99bd703c31ff80188b0af601b105248795fad197c184734a04507f9cd02c552b69cdd71fc3cb2537ded1e1d06015760bba9627174eb1df7e24e5876cafd662c4688e12bce7354b9c48a2e", 0x7d}], 0x1, &(0x7f0000001bc0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x8000, 0x0, 0xfffffffe, 0x80, 0x1, 0x9, 0x5df5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}, @sndinfo={0x20, 0x84, 0x2, {0xff0a, 0x8000, 0x800, 0x9}}, @init={0x18, 0x84, 0x0, {0xfff, 0x7f, 0x3, 0x9}}], 0xe0, 0x4000000}, {&(0x7f0000001cc0)=@in={0x2, 0xb79f, @empty}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001d00)="e67aef19156637261732a833f8a0fefa98e94c598abda4a40bd0862650206672c5bc1c51960d39666d8c616d972c69ed61a6243252c9d035cf08d1acf98562a99f129fa38603fcc99453471009c7bcb7966688704be217b7242b8cb593d3a2f7ad18bf43853ced8773a9ede20bfde685bb5c4231d79f1c231953503c168bef31a33ba827b0fc8fbf06a39b98b1ca9d9c490a4b0f03c824f8611ef149d1050705e166ee5a383bc11675b7dd1f56fad7fb70861be76d33ba8eee2f2226feaac16019fe4f4c3f3e8ee8ff0e46ed50467f24067352ec0b7b7e291f8f1cf86bd9dc3c46", 0xe1}, {&(0x7f0000001e00)="ce0f09a6e8ae63ac260e327553b4b2378375377b92500f1dc863c9c2e8fcc02f89b0342d8418a77123efd9997b9f826811d6c0abafa10cafd2c14b3dcb4998e3eedd0c787a8f96464394e5236476a56cf3dc99bf8aaa4f4c47c6108913d07a4f584120913d1466602c2daa5eaa279d3a035c4f7e457ec9e4e1cc76be2bbd0d15f0aede454c1a17deffc386fb364ebbb5b3dc77b7c4cdbd25d4732e6000310299e635ead5b51b", 0xa6}, {&(0x7f0000001ec0)="630d22b3aaa1a3dfc385bf4d2304b26d4c5abe4ff145631a7069a483ffdd40988b1c1969713910b2534605ea41b06b05ccd360f0223329aace1d91f5e2c7f3f54320b456e0e402111039263a671eb435233ecc55d0437e18c728c6149d44686a89a4ed41ea02e068a90a09512e90c18687fa6e9cbdb452011566f1b96f158e6199c700488027284735a3bc849c118b04928b986932c3a1436b896b2da3a550bfc7b5a1d064f5d7169d4885ecbe1357abd93fcb3934cb57fd49e7383042e053f160367b9aa249a126066cf76d6abce62a360e91d89941b3a03a8367b1eeb1c184dfc60ea7771798d294", 0xe9}, {&(0x7f0000001fc0)="d34167ff65354cb8529f52c3ec42e444263a54523d60", 0x16}, {&(0x7f0000002000)="635562b76bb9de87c872444b0dac35534d28a6dc8c191394340d7a2a04f024d862914632288ed010b471143b83ca3228b5bf4ca0dbb9afd724bc68eb528ebc33530ac8c6f237e5461fde7ee475c4f0fe0894fea1cf40c9d600cf7ed2bf87d7a0df47463dbf89e505e7156e718f86542f453b1b2ac07fc12e4ee7bc5d826bf5b8a52286bba45520dc96133823fae1fe97cd6666d51ea3cbca8962d284b6920bbb1fce1dc295a8fb499c10299b03fb9bed0ac3e620433034506b3a66dd4f9380eb6b4fcd34c479893f5fa9b7ba221e785bd1d2525a34f10f14dce0d503cf89305b02538961e53209bd9e8483d01c91583f5b0576de0dcd79ad1a85fbe4899ac35ebf932f5caccc8f9473821b63c7745f8274bc978248a8cd44e7f49fefaab7d4d38e5085f65ad298dc7815daf0e830ad32ed523f257774a9e7efb4349a37ba18eede689bc458a0866cfdf82f964c52bfbfcc3a3fb39ba7535e0509428b07286e92a1e75883611c64ce886e1cd8910f791d04f9b7b0e24388c2467fa18a8bf9f78e40f88f612faac0719a53b48fbd738d28e14ff0a44d9a38e8cf8c5658d750c2e39adf76a0fb590be97fbf8511510b624f3a38954589a9463fb2069ace8944e69ece726df029945fc411f1c1614ceb50343e6c6433257ee99ecdc1437eba6a9e9f831808f517b88d21a0e173619b39bcf3fd46be12cc12d6af0d5e4b3872ecf64d1771a2be64f98b8d05c55e3bb0c2ce8fb5bcdc1695dc0f6fe864e251de6216a9249ac3037ab5138a2b112aad80835115862f8b085e0cc1499efdf4a0ff90a8c5cbbfe6930f8e48eb4fee1969e7ef0cb840a255dea99dc6c1c14f369026537823142ff1aa6c7a2f1bd04a554f383c7cbcba48c3e59d74b198dc029821c9b6e7dbaf4b2be03eb2533d345abb2555bd22ac4d8d986a1bdf81e52d033f061e7aa6e132aa15e2db32e057c64e70cb1cc84eca77988046e0c52f0bb9fd91459928ac4296807555cf6eaf2d5520782954de742bdae99d2d70eac3adaccd4e44cc41a3f656c5280988465b80b105e43d60b8026b06eaee2799e2821783726529f3a6f5dcc11a0954bbc85c73bf37fa4f340dda0011fd91e6ee9949f6c76ba3adce30ae3ade83f1a1901e1b6f199f1e056f56bde87c76f5f7f58acaef6b0015f937b0de53681090713b68c95fce21cd113257d004ca419ef360883b62704ad2a203aa4dcc4b6fff01aa38313944dcb3fe0486d5ecdfabb13a533abe160f7039ff060c0f0a0c403f1eb7355129aeb6f3815176e9d42eef70a355e89a42f168f5f2df6dab0015e851f10ba24c7edd5d9a8b59dd39721b725db18a2f90e66108d977f48b5bf0b2d01ce2634593b879d5d623541246b13b4e3158985831f5adf7aa03224b6db423694bcdd8315c5d01605c0cb75a698545476975a3c12e2a0c085ebc8d229b9c4b7d8aea80a4cc01d60984b73556f52f14576092fd01080e7a590584941aaba9737eeebb7b4d5d5ae889ccf0991f65eca742b7161f7abce9305c1ed86f0df64001856c0caf82ab6ad1de62b132f4a3dc9a27235d831217d7be195a40fe28a5e7756d0002edec154128ce868365d2390289278594ddbaa8199d272e92601b2ff987a2af2bef66c5e928391eb9835722963998489d2b797fef27a357f311f93cb49414827f329dd3e9300bd2dce2ec26eba36ac6fb8ed1640ece14edc0ded1014ea10d1dca2bb94a6130b65811b47147163976b5ba5714dd6fbb12f69fd93ceef5fc672e700bec966550681c00c145f8bb41bcd466ac5916896040667a865d3b9c2f5a2a45a78418f5797dd47a84dced1334cbc36bafb0af85ff684e1de0e2988caf8aac2f01ac2e5d2ef28359630846859210ac5fa63efb0a2837cd99313d16bbb1cf4c405d7bfa6def14997e917279fc2befac05ef329a2fdc3708565827d065f6a37bde25e085d70fb8688e4dd929b6e50754ee9b37e3ddaccb7c55b3130c17867ac816b2f929c1b9bc2c9de81e03ab707c9aa4b6ba5631ea3e33566a62ab8aa6c9098306f5d84d10f5b4894ae1fe06f63208e3086e00433403aed5872fb8715aa26b7134bf0ba8eb8112f247b4bde1fa53477104ead05ad16ab65e1ec37b545678956defa83e8b26ae944816c2111ce46c0b8358a52e87ce455bfc6d6c460da393addf08f8d8f4e6fbccbf58c0d0570f8d0cb474386a79fe52f5c906e0cd9fe351ae26b04368295bd68ba3302693d4dae1e2458833a2db55d9f6a6a5d0bc6aefdedd8490029cfd6a844384f39bc35b031b45ef018ba607764dd027a12d0ec479b5da2da9bc34713861ee3eac4e57e5bc563679df2defff31143cfca9f9829c35d4c3cf3cf992cb6679bc16751800b35a3d90e8906fe2591ed7949cabdf5f0430dc8849276224270f4cef664a0e3e45b2ca268c951ecc97666b35b3b2f0c87474f635f6cf1daf2811bb8613a8c0324198e037482cdcd9a9d01913730d76ad4584a97f37d8cad3f993ef2339b6405ab4ec9e16c0e66f97652e7da1a6425277a53166ec3d202b8f5f93a0223de89357e9776a8e3cb16c06a608d4bbab91590e72642d57376ebf999b305664a93a4df60616980b053a8eb3233c527565df1e1b903b0851ed311e99f24472d9b7eb9e8bfe27c34489dda78cfd3ed1ffcae22f37f3b62d60ed7319801f854ac855048f4043903d2189dd594234d9877ece2045da066f698638260e8b1df2b56e9f04ef7f15ace133690e3803ba023412ed548bd4b283a67ded638bddd26eb856260f25dc8af4dde2777cc191015e18a2488e1b7334e82ea84c6d1bf5db4fcff9838cdba7ae7bc8e5d12db3fb5bf48e103a27b4d8b8bb61f6ea42559e9265fcb6fc9110221ec11e4e35f12ffbbd38c7468e9b61cb017ef5221cb5bfbda85ae307ec8740596ed83a49f4ab206ec4634176aa6da105b28ce3dcc2fbbc15f1281bc6025f4e3b09c6ab9e5c213f196b05e6b5826db5a14c7eab06faad791ad9d2d09a8c28f13b00fc468ba9935fa667389f6e472431ab2f91d4a34d82b69b73f80a90588ab3864780c2e2d425de937e727a13ce35d12e24943e64d2cd45839d0a652aaef4b419b4e752ae0e6bc8e9e1f7e85b1370c15a6ff38a66c36baa356e3f46b9068817e7d7cdc8957e79099353203ee0f7531dea5540ce0a8b33b032ca624d564f96e5002f8b1fa788795c1a26f08ccba27c0e78dc823f9822cac07f62d5b0a48653276733f54c4a875924afbd69fa9962dcf11553fa4a68769715570b0a282d909cd9a67dcba482b83a825624139096b9dd50b4ce650d3019125a497f80e9551e6a9fe29e93c32c089fd566e50b3c8ed4790d94bfb245e37726f538ac5b29206bc3c76a8deb956bec6a45de48567476dcde9f976d66e883acd423bf39075add57db7c1b239a201154ba895da447b4b521b29925eb74d8fa5093bf79c4d5d6244e1c2bd844bd9f449e618069c0ef80ca0acd104455bd383fdf2c04ba2e53d1a047b1fbc081323813446af7a8733f3f109b35c00a9d052db50998fa29189ee894e48693617a936258e7e575e50c52e01b779471ec70981257cd96047a0cdb5e2cd092fc2424beb5a8a65bce7a8296e79df91127d9ead9733aae1336f71d75bf20a887b87b0a30ddc1e4372916b623ad70bbac0f0e8fab73f1efd3305ea6f30d13239584fe30974ade5ecd0db63d0e90247cd243589eff89ae6e5e3e68cce2c13920e59c2b55de017bd4a622b37074a1b7bbcd8ec8e8830db121ab27ee392c5d60fe1c380d6fa8b0dd2fcd42e8227b7d044af8e02ea70676e30c11d07b86bf0eb71570eda2eb9713341c8fac2a7eab8a599103bd7857f0c39af1187b593c908a0cf2fb0910419c49e2d33fd36cf2cec218c4785d2b5156d58696fa066ba07ed0979b4ebc078b60e702dbe72c799b92b1b7c9b6b5b7f6b9f734252d6913ef717c8f102cae25d4c24621c29580e571f537729c92ec6b17ae25791450903cbac84fed2610f8ffa7b36ff1b4b8a789175c55b773c6710dbbd83a69f5956af479037afd06a0ad3f9aae53fc6a4bee574e32bfb090320d61816f2f6da91f4c6f8bedb21777a43a764eeb4a1107930efbd1c67b241511faef269f467712eafd2dbe98a1325395740b948d05c6eca3024b02c9c2173e4fd106727dd8caef8916c2680cd09b6feadb7ec16b327f83e277b686c24ee2312204ac55317a8a5b11c85985a7cbf61c596e4b63ec5baf0537f6c4b0b00766eb929377772a1ff5b6f6fe0c734dab19f4409481c572672a411f58aab25534f2493574a77b635b37969a61f04e72b700d3f58efa7595fe9695a69729036f3c875c207103e30d02264dc750ae3942957e2498526d9e50c269e40cf8047cf9d9eb23e61b9605d5697989aee1bf2700f0393e0727eca11e31214e6b7a7646591ef192788d1dd7ac0520926fc5fa33ad5f8f428d5632203618d5c87899ce05738bab289f7e2550c126f8253d8a2b7091e623abcd8c041f03612bae3c01b3516b095dde63a304b7077ef4991d01a83f0fdde5adc24e019ebd5c3797fc4053d0f9304c6eb3427a7e4b19a0dec14a439847fb6ec7cd4e5a8b56ac4f307ec539cd265e86c3ab2256ce709e7c5b2c2630f00e110683249f021f28074fc3f8df2187f052f611d56e3b873b56733b119ade6ac10c496236d8603e8e9877c743c5df9bd8cb4803916de5ea3830f0ae1100d3ba8d7c2f836631b3a02cefd5662033427cfb5b59f782c3a4c374d65963ea7799834c917439dfeda7f7ecd74461b6277c52d9b7baf0f4bf1da69852564fb77f6ae8c3e92f1e409e61df1ecdc8b6135537f06a20fb212ff86ee145b02c2659b554975561b1bc219e25d8bfb2dab0ccc7a188c6495aea1ddb48dd596d57c019307ab7cb6810fe8ca23db20a03e940887450dafec06d17bb23cf71cd2b0656e36ccc418310a8f1a8299065c85d2034ecbd1c0a136c117fc2bc75f9d1cebe392eab83d26f58b21b38b7b6e4d4378a205d7828f9b2254f55542b1280f7f2f7d9d9bb472d588cc1e1ed5430a6babbd956b3c720a0b8a33d6c67e32d91b919f3898f9c4a8666cee8a272ddd1d146e83527a5d5b084c2f468c116dda8ddbf22a5cc652da79028154f9a8b0388162a9f1778bb942aeeb73edaaaae86690a53246edfc2a675ee09da8bb07eee34b3a52fe8fce6e183d9254a45508f44816ee2451b9006c28f7a85e94494749d97bea3ae94391f5d314e70408498d8b8a3fa42393c89918befa179008761110a7c660e7bbbc33b9076d4d6bdfb888ba97aeab82b96580682a7fd398e02fb6eed430689a3f37ef0b2723fcd2f38476fce7a518cc1825ebe182eaef03717de0cc7db795bfd7dfb3be1fdeedbcc3715bf3c6ebe62c9d0a82105b838d798d312a456c9d0dc2f89f3192d8b405da5fa742367d27cc05b999ba0f760689c266b0abbc26e843d0849714ec96a71e5ed9293c4c8ac416fc243624ed5c5be96c8788c6119fcd1e50fe59eab86b598e21f272509c78bc46c9eda29139affebfb01a111820ec5f8a2cbebb1a5a1424eba52dd1d1e63d96ce495defafcba9b105655cdab8142e4ad5db7ab3cc4493e8ad5dfe1c65718600c94fc127eb1b9e17edfe57a63867fb090d2879af2b00edec95934f07c202fb115b965ca7343a57939bd05db3b26ec8998b781e1aaae3e72121e35b031f4dccf89b6b6c94c334549c7a07feb5ae694a73a0466714f2560a0f4f74b2135b955a534e6b2be962bb598c857ebcac3b8fcee79c24b09591c72e0b6f845b08e3573c797", 0x1000}, {&(0x7f0000003000)="6d60e56f0e500596a39eb4cc9bd9e18f8558bd0174d4aea62ec730bc4052fc42771dd19bdaca9809ca4a7bac8079fae3a0db76cf78e4e51ecdb77499f4c3dce8be59f3b30d24a3001479396e457f45f58ef0343ab78f396d09f4b09f7e1196547b4ef028a91da3f450fbef351f541abd83cfad3f5d05be17e4892a20a4cf028411696cd967a0", 0x86}], 0x6, &(0x7f0000003140)=[@authinfo={0x18, 0x84, 0x6, {0x18a}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x6, 0x0, 0x6, 0xfff, 0x0, 0x2, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xea}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8, 0x7, 0x2}}], 0x80, 0x50}, {&(0x7f00000031c0)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000005f00)=[{&(0x7f0000003200)="79503aee617620d2253c3d894d05711806585c5c3f4e9d866bf2abec8cb3f5a2a9173dcff77d591ac076a602adc906b9390f4a4aa205a693afa611b8f7c223814476234dd001ece43311b21f18237b4cb52ea119e19686509cd7defa4428cb6334dc875b08a344b8610d96af37b918a731a5e2987d0b58946c", 0x79}, {&(0x7f0000003280)="4b79fd85fb06b3b5a030971f04bb86c74a823455a59b2a86d5896813c6a39a5ecb1136afe82ccea0f10cfedb74b73a810202d243c1c7eb239c5e6cf0d7d6f352afd6ae6555b7238a0fd731aac88dd7dd29213c2f972f6f4acaa0a28be4729e82899e43c31a61700d33a011b9de5b4ee4fbcd62f14c75197b16b99fa0dc", 0x7d}, {&(0x7f0000004d40)="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", 0x1000}, {&(0x7f0000005d40)="d2dcfbc9c557e67a4439893b50ec660ab22edcb8619ddafdeb02118038489004259f4cd26eba828c6d0ea0169f7452168bef3df8e240f7924c04f642d42210456787e8872fe2f3a92acf16a8d8273ab823ef2510c91990c471f09673993bffafa6026cbc35d02d00c2c92915eb799b2dc617b5afc22dc97910a327c95746a0c6", 0x80}, {&(0x7f0000005dc0)="f6a77144db83163851630dd6627a711ffda2f4863667bb1f0082c92d1e8c3a0b0a98d5aa79462605e4888fb34b0e7ce6d6a4b1359213caddaffa67653562e56427619d1d6d9788afddd863d1668e199a8afe44078b336077ca7e2dc0a8c8c6cbb14910739c4242bbc789", 0x6a}, {&(0x7f0000005e40)="47654511f757fa3b9b9a3b9718c62c9b4690ab14c1ba0e29200e7e9bb4486ac32821834ab44f5d6ffef6f871d101699807f142b7d74567bcfed4bc4c028a1cc1ad0c3f35c6143808422c6ef8d86a6d70f4806a5c10313848c789f463a125c16376cd5b7c50d0662833670cc795b4c3bc485accd3b1a60e314b31ba5bf579383dcfe505835c9b5d7c28a5ae30a6c888dcfbfd8e5b98014212dc0c3e9326609090a3507fe2cc8b", 0xa6}], 0x6, &(0x7f0000006080)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x7, 0x5d, 0x2, 0xc02a, 0x3, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x50f2, 0x207, 0x9, 0x0, 0x5, 0x3, 0x9}}], 0x80, 0x4004090}, {&(0x7f0000006100)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000006340)=[{&(0x7f0000006140)="3f2aad2d31a15b0461e593847ec549ae48973edb17f89d2459c5a69340729721d4364aaa62bca25cb3fcbf75ea24122d708ca4fa345db1f3a4857e5edc1bb7733dde28cb8bc9bc4da4f8de14cc38f5719b8f948e16d24e13b537a5f8178cd7afc5bf342b2d5a4ce65e0becc7005906346ccef85162fa7d7bbf33b2c3b607e2542c54605a2fc4838c05d7f9e6ee10b4", 0x8f}, {&(0x7f0000006200)="fd42c279d1f33d9456c2211a0f76c9f58710d1f68da7fddcd7028fbfa1448531d15392e71af738d4055bdd991aca18b6309786aa39a8b937a431570b31501501cab58c80589645080714b1aeaa2433c940e8774a80091f84a9cbf8736bd98d72841c0f749f3dd2219d003f9e55e91fa5c511a51521ac466ebf9aeb425554e63a6649c86d3874cb8e81d9152ad90b6857c15fe99693516dc489ceb4c3bc4b7131a549a15b2e735d1c94c6672cdbea73d848a3cef0a9b47dc0462c6a1c517e8875e66af7f9c294b81269d394", 0xcb}, {&(0x7f0000006300)="a2d3d75b18", 0x5}], 0x3, &(0x7f0000006380)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x50, 0x20000001}], 0x5, 0x200000d0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000800)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) r8 = socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x800, 0x3) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000052) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) poll(&(0x7f0000000300)=[{r8, 0x80}], 0x1, 0x101) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.245732001s ago: executing program 0 (id=6593): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x80, 0x8) vmsplice(r2, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x21c}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff2, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x2c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041004}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000a8aa9b5c000000f9e68228dfe34b0a0400000085a2253886bd0ef9d5a4d1e4cf0210000006000000180000000000006d9114a864ef8a41dafb825c08bd3c4aa7dfe784c74178a5f17fb7f1b7ddfdda6246743439d1b67ee22c2c44009dce6bbb69170f4e14", @ANYRESOCT=r11, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xd9, &(0x7f0000000340)=""/217, 0x0, 0x8}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x7, 0x4, 0x0, 0x7, 0x49b8}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r10, 0xe, 0x1, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2.244503314s ago: executing program 2 (id=6594): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6016ecded2e38f38e200007f2c0000000000008027473f682571b990f37e7d21ab23da2be9f13cdb7d0080a7eacf821a8690a7449e5b9f0626c991a0f70200f519296c862a06588e", @ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x40058c0}, 0x20000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.060987039s ago: executing program 4 (id=6595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0)=0x800, 0x4) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x4, 0x1}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x21c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1ec, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xffffffffffffffa3, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x0, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x1010, r5, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xbf, "24d0c131677f64e91fb8c9b97442f290d52e8675e10ec3903bc427aa94044622b6f190e85b86c2219f9265b335e16d0d9c38a9fed3b1b73a334dfd5d72e995ddb80094a8c341fec5bfd735bf5c8c7f597e3ca70cf67e0f822181b9e2613d5845d5b5717398ae7139b77bdefd123476264a3d91184497ebc26f9b168221270c75374e1fbc3ade29f2fedad20ed7e86ace852655233400895ff67ae491b4d15c6c8f56250953e304b4f27e24e18c8f01cde8a20f2d8ad9dfa8270a72f4508178"}, &(0x7f0000000200)=0xc7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e22, @local}}, 0x6}, 0x90) 1.972642722s ago: executing program 2 (id=6596): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000040)="273321e9320dd93dcc3950e957a721a61ecce50d8562e7d9d0652a176c2ca37e2ea4b379b17002ed9fa045435dfbd3187676f11124262faa3a46e1d7a1c805fc8421f76f39b706aa6ea48f311081f8a5ef2a22590d5975c10a3b0157750b9820048ec40910390a2b6a2ae22fff42263786fbfa827c44d51da7f71104d2d5250dd2bd06bbcf302b0d5dd1d57f", 0x8c) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) 1.641614705s ago: executing program 2 (id=6597): unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {0x10, 0xb}, {0xd, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000500)={r1, &(0x7f0000000380)='^:\x00', 0x0, &(0x7f00000003c0)={@align=0xf93, {0x408a, 0x9, 0x2, 0x1}}, 0xd932, &(0x7f0000000440), &(0x7f00000004c0)=0xfffffffc}) openat$cgroup_procs(r5, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004e9d0000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@o_path={&(0x7f0000000680)='./file0\x00', r9, 0x4000, r11}, 0x18) pipe(&(0x7f0000000840)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x1, 0x6, 0x9, 0x4, 0x50, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ldst={0x3, 0x2, 0x6, 0x0, 0x2, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0x0, &(0x7f0000000800), 0x40f00, 0x1, '\x00', r3, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0xa, 0x101, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r5], &(0x7f0000000900)=[{0x1, 0x1, 0xd, 0x7}, {0x2, 0x3, 0x7, 0x5}], 0x10, 0x6}, 0x94) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="27030200590214000600002fb94bbcf7061611d4b8bf4abc3e552611867d533408fb0000b918172e31accb00200000000000000700"/67, 0x43}], 0x1}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0xb2d}}}}}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newtaction={0x12c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x118, 0x1, [@m_bpf={0x114, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x0, 0x0, 0x9, 0xa}}]}, {0xb9, 0x6, "88c1814dee662f9984f41cd7ccd79d5e69405fd01059c917aca408c6876bf1524afa3b4c0598fc2f2d53f78bd688d650fb961cc0af8717d0acf0118f19fbb0ec6fe72f77c139b80c53461c647a2e1a5a9c7d7b823a94dc2f420446a08feaf1923a709c6894823e8ee0ef541610454cee30993525fb2a88c4d6f60599ecd7d726042d9fa13d059924c39eb8b56a696f21929e33307a5fb3f7d7c91f1b46b03074991c19a160d66e61a30c2368e39f7f52d5bfa35307"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x12c}}, 0x0) 1.64090211s ago: executing program 4 (id=6598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6c1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_LABELS_MASK={0x10, 0x17, [0x3, 0xe8, 0x40000000]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20040090) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x100000, 0x0, {0x0, 0x0, 0x0, r2, 0x8a83}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xbd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 1.538483509s ago: executing program 3 (id=6599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003\n\x88\x86'}]}, 0x2c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000c002b8008000200", @ANYRES32, @ANYBLOB="1400030076657468305f746f5f6261746164760008002900419203"], 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 1.289746994s ago: executing program 3 (id=6600): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0xe8}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="148fb55fd9c914f0212e80c72d023f6b000000100001000000000000000000000000ec57000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)}, 0x40002042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x38, 0x0, 0x7d, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1.211835128s ago: executing program 4 (id=6601): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x90}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r8, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 842.287698ms ago: executing program 3 (id=6602): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080003000b00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 815.409833ms ago: executing program 0 (id=6603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@deltclass={0x4c, 0x29, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x15}, {0xfff3, 0xfff1}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1d}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 736.756882ms ago: executing program 1 (id=6604): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000046c0012800b00010062726964676500005c00028008000500010000000c002e00feff000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000046c0012800b00010062726964676500005c00028008000500010000000c002e00feff000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) 481.484663ms ago: executing program 2 (id=6605): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x62010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="8649a491", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf25010000000000000001410000001c001700000016000000006574683a6d6163767461703000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40804) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x62010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="8649a491", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf25010000000000000001410000001c001700000016000000006574683a6d6163767461703000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x40804) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x12, 0x60d, 0x0, 0x202, 0x228, 0x2e8, 0x2e8, 0x228, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00, 0xff], [], 'vxcan1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x3a}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "00dc", 0x1}}, @common=@icmp6={{0x28}, {0xc, "1173", 0x5}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xa, 0x3, 0x9, 0x6, 0x7ff, 0xffffffff, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x12, 0x60d, 0x0, 0x202, 0x228, 0x2e8, 0x2e8, 0x228, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00, 0xff], [], 'vxcan1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x3a}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "00dc", 0x1}}, @common=@icmp6={{0x28}, {0xc, "1173", 0x5}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xa, 0x3, 0x9, 0x6, 0x7ff, 0xffffffff, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000600)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, @loopback}, 0xc) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000600)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, @loopback}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x6, 0x4e21, 0x9, 0x2, 0xa0, 0x60, 0x4, 0x0, r4}, {0x8, 0x9, 0x7, 0x0, 0x7ff, 0x7fff, 0x4000000000000000, 0x7ff}, {0x405, 0xfffffffffffff55c, 0x9, 0x100000000}, 0x9, 0x6e6bbd, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in=@empty, 0x3505, 0x1, 0x2, 0xfd, 0x78, 0x9, 0x3}}, 0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES16=r0, @ANYBLOB="210329bd7000fbdbdf250100000004000300"], 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x40005) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="38000000a384c58ea0b4a17d175842acb88ce710", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000080029000000010008000d0080000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="38000000a384c58ea0b4a17d175842acb88ce710", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000080029000000010008000d0080000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x77, 0x6, 0x7, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x7, 0xf2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'ip6tnl0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0x77, 0x6, 0x7, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x7, 0xf2}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000040)={@private2, r12}, 0x14) socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000780)={r6, &(0x7f0000000680)='!(\x00', 0x101000, &(0x7f00000006c0)={@_ha_fsid={[0x8, 0x9]}, {0x7, 0x9, 0x577af3ee, 0xffffffffffffbc41}}, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x29}) 369.51151ms ago: executing program 0 (id=6606): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010020050900020073797a30000000000500010007000000080009400000aa67ed2f0eeb8b9cc5a472cb50000114000880100007800a001100aaaaaaaaaaaa0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000140000000100900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xa, 0xd164, 0x6a, @mcast2, @local, 0x7, 0x7800, 0x7, 0x6}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0xe69e4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6 \x00'}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000080000000000001d89b34dcadabda987ecca6950f5f3060007e3008ca5f797002ba9da7ce9d12de47b79570d4ea08834b0f9f86176941d8883d130ce1000b8014ba41f81b2c3bc720c9531000001004ffc7efd343de43dc436ee3d4989ea0468dafe309dd23ccce9e294655ebd41220f081670f92911fbea0e1f6974d4fe8d4436193ae06b6fa60a97be", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182a0000", @ANYRES32=r7, @ANYBLOB="0000000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x0, 0x0, 0x20680, 0x8, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=[{0x1, 0x5, 0x3, 0x6}, {0xffffffff, 0x1, 0x5, 0x6}, {0x0, 0x2, 0x2, 0xa}, {0x2, 0x4, 0xf, 0x8}, {0x2, 0x1, 0x8, 0xa}, {0x0, 0x1, 0xe, 0xa}, {0x1, 0x3, 0xa, 0x2}], 0x10, 0x13}, 0x94) recvmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000006040)=""/4084, 0xff4}, {0x0}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x2, 0x2, 0x0) 339.797978ms ago: executing program 3 (id=6607): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) close(r0) 225.833934ms ago: executing program 1 (id=6608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fcffff5e6db4b1e7ed348bc5b98ab9b9a07de5ff", @ANYRES16=r1, @ANYBLOB="10012dbd7000fddbdf250400000014000180080009002f000000060002002c000000080004000300000008000400060000000800060004000000140001800800090047000000080009005700000008000400010000001400028006000f000100000006000e004e2300001400028005000d000000000008000700050000000800060004000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40044}, 0x8080) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4) 162.108733ms ago: executing program 2 (id=6609): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xd, 0xa, 0x5, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xe, 0xfed, &(0x7f0000001cc0)=""/4077, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 125.765975ms ago: executing program 3 (id=6610): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="80c8a3435760050b0000000000008500000017000000850000000e00000095000000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x202, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x35, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x9) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x6, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3], 0x20}, 0x1, 0x0, 0x0, 0xe805}, 0x4000011) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000000c0)='dvmrp1\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x43) r6 = socket(0x25, 0x2, 0x2) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @dev}, 0x3) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x110, 0xffffffffffffffff, 0xd2416000) socket(0x15, 0x5, 0x0) 49.388878ms ago: executing program 1 (id=6611): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x830, 0x0, 0x678, 0x350, 0x1d0, 0x350, 0x760, 0x760, 0x760, 0x760, 0x760, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xff], 'virt_wifi0\x00', 'hsr0\x00', {}, {}, 0x2, 0x0, 0x6}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [0xffffff00], [], 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}, {}, 0x3b, 0x0, 0x0, 0x12}, 0x0, 0x138, 0x180, 0x7400, {}, [@common=@srh1={{0x90}, {0x0, 0x92, 0x9, 0x7, 0x6, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff0001fe, 0x0, 0x0, 0xffffffff], 0x400, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x38, 0x12, 0xd7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@local, 0x38, 0x20, 0x32}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x401, 0x1ff], 0x9, 0x2, 0x0, [@local, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @empty}], 0x9}}, @common=@frag={{0x30}, {[0x80000000, 0x7], 0x7, 0xa}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0xff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x890) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r4, 0x0, 0x20000000002) accept4$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80000) 0s ago: executing program 2 (id=6612): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4) (async) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559", 0x5c}], 0x2}}], 0x1, 0x24044015) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/126, 0x7e}], 0x1}, 0x2}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f00000007c0)=""/20, 0x14}], 0x2, &(0x7f0000000840)=""/138, 0x8a}, 0x4}], 0x2, 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x6100204) (async) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f0000000240)}], 0x2, 0x739, 0x1) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000005c0)=0x200200, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7e4827bd7000fbdbdf25140000000c000600010000000100000108000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40882) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000004c0)={0x2c, 0x2, r5}, 0x10) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000500)={0x2a, 0x0, 0x7ffe}, 0xc) r7 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1, 0x7ffe}, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000400), 0x0, 0x6, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbe40a27df2500", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc020000000000000000000000000001"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) kernel console output (not intermixed with test programs): wn, defaulting to 1000 [ 980.503594][T27374] lo speed is unknown, defaulting to 1000 [ 980.942353][T27394] tipc: Enabled bearer , priority 0 [ 980.991163][T27387] syzkaller0: entered promiscuous mode [ 981.024243][T27387] syzkaller0: entered allmulticast mode [ 981.228790][T27387] tipc: Resetting bearer [ 981.238256][T27406] C: renamed from veth1_to_team (while UP) [ 981.253352][T27406] netlink: 'syz.1.5364': attribute type 2 has an invalid length. [ 981.261529][T27406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 981.282380][T27386] tipc: Resetting bearer [ 981.346493][T27386] tipc: Disabling bearer [ 981.499762][T27408] veth1_to_team: Caught tx_queue_len zero misconfig [ 981.896463][T27421] netlink: 'syz.0.5370': attribute type 1 has an invalid length. [ 981.929941][T27427] mac80211_hwsim hwsim38 wlan0: Caught tx_queue_len zero misconfig [ 982.437748][T27440] erspan0: entered promiscuous mode [ 982.450089][T27440] macsec1: entered promiscuous mode [ 982.556078][T27440] erspan0: left promiscuous mode [ 982.724087][T27441] syzkaller1: entered promiscuous mode [ 982.739039][T27441] syzkaller1: entered allmulticast mode [ 983.306239][T27481] __nla_validate_parse: 10 callbacks suppressed [ 983.306282][T27481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 983.544247][T26367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.559941][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 983.601172][T27491] macsec2: entered promiscuous mode [ 983.870512][T27500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5389'. [ 984.198716][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 984.383655][T27528] bond9 (unregistering): Released all slaves [ 984.842019][T27555] netlink: 'syz.1.5403': attribute type 1 has an invalid length. [ 984.898883][T27555] bond9: entered promiscuous mode [ 984.904997][T27555] 8021q: adding VLAN 0 to HW filter on device bond9 [ 984.933171][T27556] bond9: (slave bridge14): making interface the new active one [ 984.940966][T27556] bridge14: entered promiscuous mode [ 984.952828][T27556] bond9: (slave bridge14): Enslaving as an active interface with an up link [ 984.984584][T27555] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 985.022437][T27555] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 985.134371][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5409'. [ 985.193410][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5409'. [ 985.579147][T27582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.590100][T27582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.593517][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5414'. [ 986.168358][T27613] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 986.308636][T27634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 986.540416][T27582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.547474][T27646] netlink: 768 bytes leftover after parsing attributes in process `syz.0.5428'. [ 986.569752][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5428'. [ 986.571976][T27582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.578814][T27646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5428'. [ 986.917070][T27582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.932982][T27582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.963399][T27659] xt_CONNSECMARK: invalid mode: 0 [ 986.984764][T26370] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.993582][T26370] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.002748][T27661] team0: Cannot enslave team device to itself [ 987.025814][T27661] team0: Cannot enslave team device to itself [ 987.032189][T27661] team0: Cannot enslave team device to itself [ 987.053315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.109883][T26370] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.118736][T26370] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.128858][T27661] team0: Cannot enslave team device to itself [ 987.142550][T27661] team0: Cannot enslave team device to itself [ 987.181772][T27670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.251241][T27582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.275975][T27582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.386259][T27661] team0: Cannot enslave team device to itself [ 987.418979][T27661] team0: Cannot enslave team device to itself [ 987.432014][T27661] team0: Cannot enslave team device to itself [ 987.451185][T27661] team0: Cannot enslave team device to itself [ 987.457695][T27661] team0: Cannot enslave team device to itself [ 987.470314][T27661] team0: Cannot enslave team device to itself [ 987.480764][T27661] team0: Cannot enslave team device to itself [ 987.503147][T27661] team0: Cannot enslave team device to itself [ 987.517090][T27661] team0: Cannot enslave team device to itself [ 987.531239][T27661] team0: Cannot enslave team device to itself [ 987.549902][T27661] team0: Cannot enslave team device to itself [ 987.568411][T27661] team0: Cannot enslave team device to itself [ 987.579104][T27661] team0: Cannot enslave team device to itself [ 987.591699][T27661] team0: Cannot enslave team device to itself [ 987.607966][T27661] team0: Cannot enslave team device to itself [ 987.728153][T27661] team0: Cannot enslave team device to itself [ 987.735021][T26368] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.746268][T26368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.773339][T27661] team0: Cannot enslave team device to itself [ 987.780971][T27661] team0: Cannot enslave team device to itself [ 987.805052][T26368] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.814226][T26368] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.822796][T27680] syzkaller0: entered promiscuous mode [ 987.828843][T27680] syzkaller0: entered allmulticast mode [ 987.839125][T27661] team0: Cannot enslave team device to itself [ 987.852857][T27683] macsec0: entered allmulticast mode [ 987.864708][T27683] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 987.966120][T26368] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.978581][T26368] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.022220][ T29] audit: type=1804 audit(1783299486.209:18): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5441" name="/newroot/482/cgroup.controllers" dev="tmpfs" ino=2485 res=1 errno=0 [ 988.045191][ T29] audit: type=1800 audit(1783299486.209:19): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5441" name="cgroup.controllers" dev="tmpfs" ino=2485 res=0 errno=0 [ 988.141378][T27683] syzkaller1: entered promiscuous mode [ 988.148171][T27683] syzkaller1: entered allmulticast mode [ 988.155524][T26370] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.163748][T26370] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.264755][T27697] netlink: 'syz.4.5445': attribute type 11 has an invalid length. [ 988.390959][T27705] __nla_validate_parse: 5 callbacks suppressed [ 988.390992][T27705] netlink: 64587 bytes leftover after parsing attributes in process `syz.4.5447'. [ 988.508850][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'. [ 988.525013][T27711] netlink: 'syz.0.5449': attribute type 1 has an invalid length. [ 988.605982][T27711] 8021q: adding VLAN 0 to HW filter on device bond9 [ 988.644285][T26364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.667861][T27711] veth0_to_bond: left allmulticast mode [ 988.681913][T27711] bond9: (slave veth0_to_bond): making interface the new active one [ 988.696102][T27711] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 988.698950][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 988.848719][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 988.879044][T27726] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 988.909048][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 988.957993][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 989.009413][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 989.040820][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 989.088526][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 989.147278][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5451'. [ 989.206007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.214527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.222854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.231415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.239835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.776809][T27823] nbd: must specify a size in bytes for the device [ 991.279729][T27849] netlink: 'syz.4.5481': attribute type 8 has an invalid length. [ 991.560678][T27861] netlink: 'syz.2.5485': attribute type 4 has an invalid length. [ 991.577258][T27861] netlink: 'syz.2.5485': attribute type 4 has an invalid length. [ 991.743511][T27879] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 991.866422][T27878] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 991.897556][T27878] bond4 (unregistering): Released all slaves [ 992.069199][T27894] netlink: 'syz.3.5494': attribute type 11 has an invalid length. [ 992.162784][T27894] netlink: 'syz.3.5494': attribute type 1 has an invalid length. [ 992.234535][T27894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 992.282294][T27894] bond6: entered promiscuous mode [ 992.287383][T27894] bond6: entered allmulticast mode [ 992.325760][T27904] team_slave_1: Caught tx_queue_len zero misconfig [ 992.518859][T27919] bond10: entered promiscuous mode [ 992.524044][T27919] bond10: entered allmulticast mode [ 992.932857][T27938] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 993.089802][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.466500][T27966] x_tables: ip_tables: ah match: only valid for protocol 51 [ 993.475454][T27966] netlink: 'syz.4.5510': attribute type 1 has an invalid length. [ 993.577562][T27966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 993.584673][T27975] __nla_validate_parse: 19 callbacks suppressed [ 993.584691][T27975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'. [ 993.602865][T27965] bond4: (slave gretap2): making interface the new active one [ 993.620888][T27965] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 993.767778][T27983] bond0: entered promiscuous mode [ 993.774275][T27983] bond0: left promiscuous mode [ 993.939177][T27994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5520'. [ 993.953762][T27994] ip6tnl2: entered allmulticast mode [ 993.981113][T27996] netlink: 'syz.1.5519': attribute type 2 has an invalid length. [ 993.991746][T27994] lo speed is unknown, defaulting to 1000 [ 993.999123][T27994] lo speed is unknown, defaulting to 1000 [ 994.066283][T28001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.079371][T28001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.091392][T28001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.105997][T28001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.108020][T28003] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20000 [ 994.148772][T28006] 8021q: VLANs not supported on ip6_vti0 [ 994.353847][T26370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.615273][T28025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.689774][T28026] lo: Caught tx_queue_len zero misconfig [ 994.790873][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5529'. [ 994.811301][T28032] batman_adv: batadv0: Interface deactivated: dummy0 [ 994.825209][T28032] batman_adv: batadv0: Removing interface: dummy0 [ 995.417057][T28047] tipc: Enabling of bearer rejected, failed to enable media [ 995.515027][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5536'. [ 995.707752][T28067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.014207][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'. [ 996.031334][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5545'. [ 996.135467][T28092] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5544'. [ 996.277313][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 996.315325][T28097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5547'. [ 997.020963][T28136] macsec1: entered promiscuous mode [ 997.032795][T28136] bridge0: entered promiscuous mode [ 997.059921][T28137] netlink: 'syz.4.5560': attribute type 2 has an invalid length. [ 997.081960][T28137] netlink: 'syz.4.5560': attribute type 1 has an invalid length. [ 997.098842][T28140] ip6tnl5: entered promiscuous mode [ 997.116106][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5560'. [ 997.129288][T28143] ipt_ECN: cannot use operation on non-tcp rule [ 997.158224][T28137] nbd: illegal input index -120127480 [ 997.556176][T15557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.577046][T15557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.588051][T15557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.604755][T15557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.643911][T15557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.761349][T28158] syzkaller0: entered promiscuous mode [ 997.766965][T28158] syzkaller0: entered allmulticast mode [ 998.166426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.776674][T28195] __nla_validate_parse: 1 callbacks suppressed [ 998.776695][T28195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5571'. [ 999.707401][ T50] Bluetooth: hci4: command tx timeout [ 1000.092565][T26365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.785342][ T50] Bluetooth: hci4: command tx timeout [ 1002.656495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.934371][T28196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1002.943543][T28196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1002.952508][T28196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1002.990546][T26366] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.000932][T26366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52511 - 0 [ 1003.010784][T26366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1003.420218][T28221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5576'. [ 1003.429319][T28157] lo speed is unknown, defaulting to 1000 [ 1003.448127][T28157] lo speed is unknown, defaulting to 1000 [ 1003.458229][T26366] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.533041][T26366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52511 - 0 [ 1003.542939][T26366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1003.574801][T28221] netlink: 'syz.4.5576': attribute type 29 has an invalid length. [ 1003.725625][T28235] tipc: Enabled bearer , priority 0 [ 1003.745297][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5580'. [ 1003.842261][T26366] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.866151][T28244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1003.893548][T26366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52511 - 0 [ 1003.909821][T26366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1003.943162][ T50] Bluetooth: hci4: command tx timeout [ 1003.953989][T28253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1004.006551][T28233] tipc: Disabling bearer [ 1004.215985][T26366] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.225816][T26366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52511 - 0 [ 1004.235764][T26366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1004.338101][T28254] lo speed is unknown, defaulting to 1000 [ 1004.359791][T28254] lo speed is unknown, defaulting to 1000 [ 1004.809999][T28157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.819085][T28157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.827005][T28157] bridge_slave_0: entered allmulticast mode [ 1004.835259][T28157] bridge_slave_0: entered promiscuous mode [ 1004.844773][T28157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.852190][T28157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.859809][T28157] bridge_slave_1: entered allmulticast mode [ 1004.870683][T28157] bridge_slave_1: entered promiscuous mode [ 1004.904261][T28294] netlink: 'syz.3.5592': attribute type 16 has an invalid length. [ 1005.073769][T28303] netlink: 'syz.2.5593': attribute type 1 has an invalid length. [ 1005.131452][T28157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.165758][T28157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.193936][T28294] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1005.215267][T28303] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1005.218726][T28295] lo speed is unknown, defaulting to 1000 [ 1005.262486][T28295] lo speed is unknown, defaulting to 1000 [ 1005.449428][T28157] team0: Port device team_slave_0 added [ 1005.507747][T28157] team0: Port device team_slave_1 added [ 1005.566892][T26366] bridge_slave_1: left allmulticast mode [ 1005.572772][T26366] bridge_slave_1: left promiscuous mode [ 1005.624165][T26366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.633684][T26366] bridge_slave_0: left allmulticast mode [ 1005.634006][T28330] netlink: 'syz.4.5600': attribute type 10 has an invalid length. [ 1005.639450][T26366] bridge_slave_0: left promiscuous mode [ 1005.642918][T26366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.756162][T26366] dvmrp0: left allmulticast mode [ 1005.790568][T26366] batman_adv: batadv0: Interface deactivated: gretap2 [ 1005.908269][T26363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.001310][T28342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1006.011675][ T50] Bluetooth: hci4: command tx timeout [ 1006.107499][T26366] batman_adv: batadv0: Removing interface: gretap2 [ 1006.119964][T26366] bond5 (unregistering): (slave gre1): Releasing backup interface [ 1006.127862][T26366] gre1 (unregistering): left promiscuous mode [ 1006.192751][T26366] bridge1 (unregistering): left promiscuous mode [ 1006.200145][T26366] team0: Port device bridge1 removed [ 1006.232269][T26366] team0: Port device bridge5 removed [ 1006.242425][T26366] bond2 (unregistering): (slave bridge6): Releasing active interface [ 1006.293170][T26366] bond8 (unregistering): (slave bridge12): Removing an active aggregator [ 1006.302793][T26366] bond8 (unregistering): (slave bridge12): Releasing backup interface [ 1006.310970][T26366] bond8 (unregistering): (slave bridge12): the permanent HWaddr of slave - ba:c3:b8:63:13:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1006.340666][T26366] bridge12 (unregistering): left promiscuous mode [ 1006.347460][T26366] bridge12 (unregistering): left allmulticast mode [ 1006.358223][T26366] bond8 (unregistering): (slave bridge13): Releasing backup interface [ 1006.366998][T26366] bridge13 (unregistering): left promiscuous mode [ 1006.373465][T26366] bridge13 (unregistering): left allmulticast mode [ 1006.383835][T26366] bond9 (unregistering): (slave bridge14): Releasing backup interface [ 1006.392032][T26366] bridge14 (unregistering): left promiscuous mode [ 1006.410062][T26366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.420215][T26366] bond0 (unregistering): Released all slaves [ 1006.430239][T26366] bond1 (unregistering): Released all slaves [ 1006.510605][T26366] bond2 (unregistering): Released all slaves [ 1006.524749][T26366] bond3 (unregistering): (slave veth9): Releasing active interface [ 1006.534904][T26366] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1006.544958][T26366] bond3 (unregistering): Released all slaves [ 1006.558546][T26366] bond4 (unregistering): Released all slaves [ 1006.572061][T26366] bond5 (unregistering): Released all slaves [ 1006.584990][T26366] bond6 (unregistering): Released all slaves [ 1006.598697][T26366] bond7 (unregistering): (slave veth11): Releasing backup interface [ 1006.618639][T26366] bond7 (unregistering): Released all slaves [ 1006.632313][T26366] bond8 (unregistering): Released all slaves [ 1006.645436][T26366] bond9 (unregistering): Released all slaves [ 1006.658400][T26366] bond10 (unregistering): Released all slaves [ 1006.671486][T28325] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1006.672706][T28157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.688540][T28157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.714435][T28157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.742218][T28157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.752313][T28157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.778193][T28157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.817331][T28330] dummy0: entered allmulticast mode [ 1006.823773][T28330] team0: Port device dummy0 added [ 1006.960078][T28340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1006.986639][T28341] veth1_macvtap: renamed from vlan0 (while UP) [ 1007.393800][T26366] tipc: Left network mode [ 1007.505309][T28157] hsr_slave_0: entered promiscuous mode [ 1007.513944][T28157] hsr_slave_1: entered promiscuous mode [ 1007.520648][T28157] debugfs: 'hsr0' already exists in 'hsr' [ 1007.540137][T28157] Cannot create hsr debugfs directory [ 1008.459684][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1008.582454][T28386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1008.817545][T28390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5612'. [ 1008.932170][T28394] netlink: 'syz.4.5610': attribute type 1 has an invalid length. [ 1009.223549][T28409] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1009.236641][T26366] hsr_slave_0: left promiscuous mode [ 1009.255035][T28409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1009.273486][T26366] hsr_slave_1: left promiscuous mode [ 1009.283640][T26366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.300543][T28416] netlink: 'syz.2.5616': attribute type 1 has an invalid length. [ 1009.308452][T26366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.319174][T26366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.326612][T26366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.334673][T26366] batman_adv: batadv0: Interface deactivated: dummy0 [ 1009.341392][T26366] batman_adv: batadv0: Removing interface: dummy0 [ 1009.352245][T26366] dummy0: left promiscuous mode [ 1009.394191][T26366] veth1_macvtap: left promiscuous mode [ 1009.399741][T26366] veth0_macvtap: left promiscuous mode [ 1009.702693][T26366] team_slave_1 (unregistering): left promiscuous mode [ 1009.741221][T26366] team0 (unregistering): Port device team_slave_1 removed [ 1009.910503][T28392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.957611][T28392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.992442][T28392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.002087][T28392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.013092][T28392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1010.027445][T28392] veth1_vlan: left promiscuous mode [ 1010.033783][T28392] veth0_vlan: left promiscuous mode [ 1010.040103][T28392] veth0_vlan: entered promiscuous mode [ 1010.047997][T28392] veth1_vlan: entered promiscuous mode [ 1010.057715][T28392] veth0_macvtap: left promiscuous mode [ 1010.064316][T28392] veth0_macvtap: entered promiscuous mode [ 1010.088312][T28392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.096467][T28392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.104438][T28392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.112461][T28392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.120111][T28392] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1010.175648][T28416] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1010.199704][T26367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.206854][T26367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.247924][T28424] bond13: (slave syz_tun): Enslaving as a backup interface with an up link [ 1010.271836][T28435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1010.280943][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1010.285536][T26364] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1010.320483][T28435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1010.329659][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1010.344526][ T809] batman_adv: batadv0: Interface activated: vlan2 [ 1010.354573][T26369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.364582][T26369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.418008][T26362] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1010.573440][T26369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.582696][T26369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.655385][T26365] bond13: (slave syz_tun): link status up again after 0 ms [ 1010.752543][T26369] bond13: (slave syz_tun): link status up again after 0 ms [ 1010.859691][T26365] bond13: (slave syz_tun): link status up again after 0 ms [ 1010.898419][T26365] bond13: (slave syz_tun): failed to get link speed/duplex [ 1010.940879][T28460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5625'. [ 1011.023304][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1011.069683][T28471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1011.117844][T28468] tipc: Enabled bearer , priority 0 [ 1011.371707][T28485] openvswitch: netlink: Message has 1 unknown bytes. [ 1011.399729][T28485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.434249][T28476] syzkaller0: entered promiscuous mode [ 1011.439778][T28476] syzkaller0: entered allmulticast mode [ 1011.445867][T28476] tipc: Resetting bearer [ 1011.485421][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5632'. [ 1011.513153][T28491] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5632'. [ 1011.634760][T26369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.730772][T26365] tipc: Resetting bearer [ 1011.737396][T28467] tipc: Resetting bearer [ 1016.252762][T28467] tipc: Disabling bearer [ 1016.335105][T26366] IPVS: stop unused estimator thread 0... [ 1016.474560][T28520] block nbd0: NBD_DISCONNECT [ 1016.503563][T28520] block nbd0: Send disconnect failed -32 [ 1016.531129][T28520] block nbd0: shutting down sockets [ 1016.635380][T28526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5639'. [ 1016.737206][T28157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1016.802165][T28157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.812029][T28157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1016.872175][T28544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1016.881104][T28544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5641'. [ 1016.936598][T28157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.998006][T28157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1017.015225][T28157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.045830][T28157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1017.072886][T28157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.234243][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1017.313943][T28157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.359427][T28568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1017.388989][T28157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.403850][T26364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.458069][T28568] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1017.471925][T26364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.479104][T26364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.512689][T26363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.519947][T26363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.543264][T28568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1017.685307][T28576] ip6tnl0: Caught tx_queue_len zero misconfig [ 1017.742303][T28583] netlink: 'syz.4.5648': attribute type 1 has an invalid length. [ 1017.766314][T28583] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1017.838160][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1017.909897][T28593] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1017.937640][T28593] pimreg1: renamed from bridge0 (while UP) [ 1017.972049][T28593] pimreg1: entered allmulticast mode [ 1017.978172][T28593] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 1018.167818][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.286362][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.293082][T28604] sctp: [Deprecated]: syz.2.5652 (pid 28604) Use of int in max_burst socket option. [ 1018.293082][T28604] Use struct sctp_assoc_value instead [ 1018.394005][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.497942][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.613782][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.647983][T28612] lo speed is unknown, defaulting to 1000 [ 1018.655791][T28612] lo speed is unknown, defaulting to 1000 [ 1018.740323][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1018.858676][T28615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5654'. [ 1018.962464][T28157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.024852][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1019.221188][T28629] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5658'. [ 1019.238359][T28632] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5659'. [ 1019.252324][T28629] netlink: 'syz.2.5658': attribute type 9 has an invalid length. [ 1019.342891][T28157] veth0_vlan: entered promiscuous mode [ 1019.349640][T28640] netlink: 'syz.3.5661': attribute type 15 has an invalid length. [ 1019.388345][T28157] veth1_vlan: entered promiscuous mode [ 1019.400573][T28639] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1019.464808][T28645] IPVS: stopping master sync thread 26048 ... [ 1019.501196][T28157] veth0_macvtap: entered promiscuous mode [ 1019.511554][T28157] veth1_macvtap: entered promiscuous mode [ 1019.570188][T28157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.586750][T28157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.616941][T26366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.632824][T26366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.642195][T26366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.651010][T26366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.893474][T26363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.913798][T26363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.967320][T26363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.975289][T26363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.021280][T28669] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1020.559096][T28693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.751974][T28702] ip6gre1: entered promiscuous mode [ 1020.767872][T28702] ip6gre1: entered allmulticast mode [ 1020.871733][T28709] netlink: 'syz.2.5676': attribute type 1 has an invalid length. [ 1020.918792][T28709] bond14: entered promiscuous mode [ 1020.926660][T28709] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1021.000088][T28712] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1021.012711][T28712] bond14: (slave bond15): making interface the new active one [ 1021.022351][T28712] bond15: entered promiscuous mode [ 1021.035617][T28712] bond14: (slave bond15): Enslaving as an active interface with an up link [ 1021.050199][T28705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.145414][T28705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.247519][T28712] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1021.256389][T28712] bond14: (slave bond16): Enslaving as a backup interface with an up link [ 1021.327634][T28712] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1021.336387][T28712] bond14: (slave bond17): Enslaving as a backup interface with an up link [ 1021.433590][T28712] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1021.442486][T28712] bond14: (slave bond18): Enslaving as a backup interface with an up link [ 1021.523985][ T50] Bluetooth: hci4: command tx timeout [ 1021.610654][T28712] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1021.638347][T28712] bond14: (slave bond19): Enslaving as a backup interface with an up link [ 1021.673925][T28712] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1021.711835][T28712] bond14: (slave bond20): Enslaving as a backup interface with an up link [ 1021.756813][T28752] __nla_validate_parse: 17 callbacks suppressed [ 1021.756832][T28752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'. [ 1021.788547][T28754] netlink: 'syz.2.5686': attribute type 1 has an invalid length. [ 1021.855368][T28759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1021.970445][T28754] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1022.055993][T28765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5688'. [ 1022.271528][T26368] net_ratelimit: 12 callbacks suppressed [ 1022.271565][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1022.368679][T28785] netlink: 'syz.4.5691': attribute type 1 has an invalid length. [ 1022.377464][T28785] xt_hl: Unknown Hop Limit match mode: 206 [ 1022.416404][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1022.513001][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1022.569542][T28795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5694'. [ 1022.621322][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1022.738438][T28800] netlink: 'syz.3.5696': attribute type 1 has an invalid length. [ 1022.784630][T28806] xt_nat: multiple ranges no longer supported [ 1022.814605][T28800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1022.829753][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1023.117959][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1023.161938][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1023.171609][T26362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.341356][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1023.520539][T28831] tipc: Enabled bearer , priority 0 [ 1023.528173][T28831] syzkaller0: entered promiscuous mode [ 1023.534578][T28831] syzkaller0: entered allmulticast mode [ 1023.546173][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1023.636550][T28838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1023.677636][T28832] tipc: Resetting bearer [ 1023.776462][T28830] tipc: Resetting bearer [ 1023.829578][T28830] tipc: Disabling bearer [ 1023.964484][T28845] syzkaller0: entered promiscuous mode [ 1023.985010][T28845] syzkaller0: entered allmulticast mode [ 1024.004608][T28845] tipc: Started in network mode [ 1024.009859][T28845] tipc: Node identity b6285f44b0d3, cluster identity 4711 [ 1024.018213][T28845] tipc: Enabled bearer , priority 0 [ 1024.026101][T28845] syzkaller0: mtu less than device minimum [ 1024.037512][T28844] tipc: Resetting bearer [ 1024.069360][T28844] tipc: Disabling bearer [ 1024.445157][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1025.865983][T28905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1026.032704][T28907] bond5: (slave bond_slave_1): Device is not bonding slave [ 1026.085155][T28907] bond5: option active_slave: invalid value (bond_slave_1) [ 1026.108839][T28907] bond5 (unregistering): Released all slaves [ 1026.704170][T28945] syzkaller1: entered promiscuous mode [ 1026.709705][T28945] syzkaller1: entered allmulticast mode [ 1026.760936][T28945] netlink: 'syz.3.5732': attribute type 12 has an invalid length. [ 1027.333259][T26370] net_ratelimit: 25 callbacks suppressed [ 1027.333280][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1027.478899][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1027.580092][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1027.599360][T28966] netlink: 'syz.0.5738': attribute type 5 has an invalid length. [ 1027.667109][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1027.691081][T28966] pim6reg1: entered promiscuous mode [ 1027.696567][T28966] pim6reg1: entered allmulticast mode [ 1027.889501][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1028.000325][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053693000: rx timeout, send abort [ 1028.012717][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053693000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1028.057854][T28991] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 1028.111377][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1028.153020][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1028.239768][T29004] bond8 (unregistering): Released all slaves [ 1028.267837][T28994] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 1028.313376][T29010] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1028.326820][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1028.372723][T29010] team0: Device xfrm0 is of different type [ 1028.496759][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1028.566129][T29016] netlink: 'syz.4.5751': attribute type 10 has an invalid length. [ 1028.579305][T29016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1028.608090][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1028.629757][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1028.669929][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1028.714338][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5754'. [ 1028.816503][T29031] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1029.004439][T29018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1029.095120][T29051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5759'. [ 1029.332698][T29070] netlink: 'syz.0.5762': attribute type 4 has an invalid length. [ 1029.354267][T29063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 1029.528084][T29080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 1029.638465][T29087] x_tables: duplicate underflow at hook 1 [ 1029.706267][T29089] netlink: 'syz.0.5771': attribute type 8 has an invalid length. [ 1030.024580][T29100] x_tables: duplicate underflow at hook 1 [ 1030.146765][T29110] netlink: 'syz.2.5776': attribute type 1 has an invalid length. [ 1030.944597][T29154] syz_tun: tun_net_xmit 42 [ 1030.950458][T29154] syz_tun: tun_net_xmit 42 [ 1030.955450][T29154] syz_tun: tun_net_xmit 42 [ 1030.960235][T29154] syz_tun: tun_net_xmit 42 [ 1030.965007][T29154] syz_tun: tun_net_xmit 42 [ 1030.969758][T29154] syz_tun: tun_net_xmit 42 [ 1030.976824][T29154] syz_tun: tun_net_xmit 42 [ 1030.978268][T29160] syzkaller1: entered promiscuous mode [ 1030.981628][T29154] syz_tun: tun_net_xmit 42 [ 1030.992310][T29154] syz_tun: tun_net_xmit 42 [ 1030.997202][T29154] syz_tun: tun_net_xmit 42 [ 1031.000806][T29160] syzkaller1: entered allmulticast mode [ 1031.001987][T29154] syz_tun: tun_net_xmit 42 [ 1031.011988][T29154] syz_tun: tun_net_xmit 42 [ 1031.016849][T29154] syz_tun: tun_net_xmit 42 [ 1031.021641][T29154] syz_tun: tun_net_xmit 42 [ 1031.074922][T29154] syz_tun: tun_net_xmit 42 [ 1031.080217][T29154] syz_tun: tun_net_xmit 42 [ 1031.085095][T29154] syz_tun: tun_net_xmit 42 [ 1031.090142][T29154] syz_tun: tun_net_xmit 42 [ 1031.095296][T29154] syz_tun: tun_net_xmit 42 [ 1031.101182][T29154] syz_tun: tun_net_xmit 42 [ 1031.106159][T29154] syz_tun: tun_net_xmit 42 [ 1031.110988][T29154] syz_tun: tun_net_xmit 42 [ 1031.115824][T29154] syz_tun: tun_net_xmit 42 [ 1031.121123][T29154] syz_tun: tun_net_xmit 42 [ 1031.126631][T29154] syz_tun: tun_net_xmit 42 [ 1031.131818][T29154] syz_tun: tun_net_xmit 42 [ 1031.136678][T29154] syz_tun: tun_net_xmit 42 [ 1031.160087][T29154] syz_tun: tun_net_xmit 42 [ 1031.164947][T29154] syz_tun: tun_net_xmit 42 [ 1031.169760][T29154] syz_tun: tun_net_xmit 42 [ 1031.193268][T29154] syz_tun: tun_net_xmit 42 [ 1031.198140][T29154] syz_tun: tun_net_xmit 42 [ 1031.202995][T29154] syz_tun: tun_net_xmit 42 [ 1031.207833][T29154] syz_tun: tun_net_xmit 42 [ 1031.212624][T29154] syz_tun: tun_net_xmit 42 [ 1031.217423][T29154] syz_tun: tun_net_xmit 42 [ 1031.222214][T29154] syz_tun: tun_net_xmit 42 [ 1031.227072][T29154] syz_tun: tun_net_xmit 42 [ 1031.238288][T29156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.524945][T29156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1031.572411][T29156] veth1_vlan: left promiscuous mode [ 1031.590519][T29156] veth0_vlan: left promiscuous mode [ 1031.606812][T29156] veth0_vlan: entered promiscuous mode [ 1031.639375][T29156] veth1_vlan: entered promiscuous mode [ 1031.731374][T29156] veth1_macvtap: left promiscuous mode [ 1031.757804][T29156] veth0_macvtap: left promiscuous mode [ 1031.767765][T29156] veth0_macvtap: entered promiscuous mode [ 1031.773584][T29156] veth0_macvtap: entered allmulticast mode [ 1031.781008][T29156] veth1_macvtap: entered promiscuous mode [ 1031.791348][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.799771][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.808106][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1031.816147][T29156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1031.851174][T26370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.858471][T26370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.881956][ C0] syz_tun: tun_net_xmit 42 [ 1031.887551][ C0] syz_tun: tun_net_xmit 42 [ 1031.892134][ C0] syz_tun: tun_net_xmit 42 [ 1031.896866][ C0] syz_tun: tun_net_xmit 42 [ 1031.897690][T26366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.920167][T26366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.929023][T26366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.943707][T26366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.423887][T26370] net_ratelimit: 40 callbacks suppressed [ 1032.423910][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1032.424536][T29197] lo speed is unknown, defaulting to 1000 [ 1032.459773][T29203] syzkaller0: entered promiscuous mode [ 1032.479438][T29203] syzkaller0: entered allmulticast mode [ 1032.570468][T29197] lo speed is unknown, defaulting to 1000 [ 1032.583166][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1032.965305][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1033.050678][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1033.503283][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1033.637666][T29236] __nla_validate_parse: 19 callbacks suppressed [ 1033.637688][T29236] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1033.654326][T29240] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1033.685440][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1033.874058][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1033.992673][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1034.038765][T26362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.094068][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1034.526898][T29288] pim6reg1: entered promiscuous mode [ 1034.532424][T29288] pim6reg1: entered allmulticast mode [ 1036.591001][T29246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.613101][T29278] netlink: 'syz.2.5817': attribute type 2 has an invalid length. [ 1036.708455][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1036.819657][T29290] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1036.836612][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5823'. [ 1036.957079][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1037.057329][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1037.076958][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1037.091469][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1037.190972][T29318] netlink: 'syz.4.5830': attribute type 4 has an invalid length. [ 1037.248210][T29319] netlink: 'syz.4.5830': attribute type 4 has an invalid length. [ 1037.272677][T29321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1037.504083][T26364] net_ratelimit: 25 callbacks suppressed [ 1037.504111][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1037.662162][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1037.775981][T26364] bond13: (slave syz_tun): failed to get link speed/duplex [ 1037.883166][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1037.997884][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.055238][T29357] tipc: Enabled bearer , priority 0 [ 1038.065860][T29349] tipc: Disabling bearer [ 1038.134758][T29363] veth0: entered promiscuous mode [ 1038.153404][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.195862][T29363] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1038.274063][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.304117][T29348] lo speed is unknown, defaulting to 1000 [ 1038.312629][T29348] lo speed is unknown, defaulting to 1000 [ 1038.383378][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.545022][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.652913][T29386] __nla_validate_parse: 3 callbacks suppressed [ 1038.652929][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1038.680007][T29388] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1038.703144][T26365] bond13: (slave syz_tun): failed to get link speed/duplex [ 1038.833598][T29360] veth0: left promiscuous mode [ 1038.863936][T29394] tun0: tun_chr_ioctl cmd 1074025673 [ 1038.954877][T29390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'. [ 1039.078461][T29406] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5854'. [ 1039.096144][ T5740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1039.119636][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5854'. [ 1039.246476][T29413] netlink: 'syz.4.5858': attribute type 12 has an invalid length. [ 1039.259994][T29413] netlink: 'syz.4.5858': attribute type 3 has an invalid length. [ 1039.268469][T29413] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1039.278293][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1039.284543][T29420] netlink: 'syz.2.5860': attribute type 1 has an invalid length. [ 1039.308782][T29420] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 1039.532682][T26363] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1039.925142][ T5740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1040.005686][T29425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.647173][T29491] bond10: option mode: invalid value (254) [ 1040.661145][T29500] Cannot find add_set index 1 as target [ 1040.676184][T29500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1040.736701][T29491] bond10 (unregistering): Released all slaves [ 1040.788112][T26364] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1040.796163][T26364] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.016290][T29512] sit0: left promiscuous mode [ 1041.460863][T29512] pimreg1: port 3(vlan2) entered disabled state [ 1041.475406][T29512] pimreg1: left allmulticast mode [ 1041.530714][T29512] team0: left allmulticast mode [ 1041.550692][T29512] dummy0: left allmulticast mode [ 1041.691379][T29538] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1041.729307][T22727] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1041.845390][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5887'. [ 1041.959230][T29512] 0·: left allmulticast mode [ 1041.971301][T29512] hsr_slave_0: left allmulticast mode [ 1041.976767][T29512] hsr_slave_1: left allmulticast mode [ 1042.120857][T29512] gretap1: left allmulticast mode [ 1042.131458][T29512] macvlan2: left allmulticast mode [ 1042.137318][T29512] ipip0: left promiscuous mode [ 1042.145891][T29512] geneve2: left promiscuous mode [ 1042.241904][T29512] bond3: left allmulticast mode [ 1042.275989][T29512] vti0: left promiscuous mode [ 1042.312171][T29512] ipip2: left promiscuous mode [ 1042.353444][T29512] macsec2: left promiscuous mode [ 1042.425680][T29528] syzkaller1: entered promiscuous mode [ 1042.431213][T29528] syzkaller1: entered allmulticast mode [ 1042.495040][T29542] veth1_macvtap: left promiscuous mode [ 1042.526255][T26362] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.543054][T26362] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.558310][T26362] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.577163][T26362] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.680531][T26369] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.715368][T26369] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.723928][T26369] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.736380][T26369] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.753168][T26369] net_ratelimit: 17 callbacks suppressed [ 1042.753187][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1042.923181][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.038879][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.054301][T29592] xt_hashlimit: size too large, truncated to 1048576 [ 1043.072737][T29593] Cannot find set identified by id 3 to match [ 1043.101247][T29597] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 1043.118045][T29597] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1043.145399][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.257543][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.309658][T29604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5900'. [ 1043.339576][T29604] xt_TCPMSS: Only works on TCP SYN packets [ 1043.359545][T29608] tap0: tun_chr_ioctl cmd 1074025672 [ 1043.380179][T29608] tap0: ignored: set checksum disabled [ 1043.413117][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.460263][T29612] netlink: 'syz.0.5903': attribute type 1 has an invalid length. [ 1043.512138][T29604] bridge_slave_1: left allmulticast mode [ 1043.531367][T29604] bridge_slave_1: left promiscuous mode [ 1043.553425][T29604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.576797][T29604] bridge_slave_0: left allmulticast mode [ 1043.593406][T29604] bridge_slave_0: left promiscuous mode [ 1043.609513][T29604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.713275][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.830487][T26362] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.915266][T29629] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1043.931929][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1043.947785][T29633] netlink: 'syz.4.5904': attribute type 1 has an invalid length. [ 1043.973683][T29629] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1044.001066][T29629] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1044.180543][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1044.308425][T29643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5907'. [ 1044.441716][T29639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1044.450353][T29639] bond5: (slave bond6): making interface the new active one [ 1044.458223][T29639] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1044.499194][T29665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1044.513999][T29662] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1044.514195][T29666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5910'. [ 1044.596202][T29633] bond5: (slave gretap3): Enslaving as a backup interface with an up link [ 1044.653091][T29667] team0: entered promiscuous mode [ 1044.658190][T29667] team_slave_0: entered promiscuous mode [ 1044.666730][T29667] team_slave_1: entered promiscuous mode [ 1044.981946][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1045.030387][T29684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5914'. [ 1045.113550][T29692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1045.203595][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.355696][T29663] team0: left promiscuous mode [ 1045.372895][T29663] team_slave_0: left promiscuous mode [ 1045.396202][T29663] team_slave_1: left promiscuous mode [ 1045.591419][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1045.601649][T29705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1045.613711][T29705] netlink: 'syz.2.5918': attribute type 13 has an invalid length. [ 1045.863888][T29713] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1046.444545][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 1047.499432][T29667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1047.805824][T29749] xt_hashlimit: size too large, truncated to 1048576 [ 1047.947129][T26370] net_ratelimit: 29 callbacks suppressed [ 1047.947151][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.056639][T29763] netlink: 'syz.0.5930': attribute type 10 has an invalid length. [ 1048.066797][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.112415][T29763] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 1048.189977][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.334278][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.438087][ T29] audit: type=1800 audit(1783299546.569:20): pid=29784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5937" name="memory.events" dev="tmpfs" ino=2843 res=0 errno=0 [ 1048.459468][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.466772][ T29] audit: type=1804 audit(1783299546.569:21): pid=29785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5937" name="/newroot/550/memory.events" dev="tmpfs" ino=2843 res=1 errno=0 [ 1048.607824][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.683388][T29805] netlink: 'syz.1.5942': attribute type 1 has an invalid length. [ 1048.698977][T29805] gretap1: entered allmulticast mode [ 1048.829555][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1048.862612][T29810] netlink: 'syz.4.5945': attribute type 21 has an invalid length. [ 1048.936205][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1049.063867][T26368] bond13: (slave syz_tun): failed to get link speed/duplex [ 1049.183231][T26369] bond13: (slave syz_tun): failed to get link speed/duplex [ 1049.234849][T29829] bond23: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1049.337085][T29829] bond23 (unregistering): Released all slaves [ 1049.366480][T29834] __nla_validate_parse: 69 callbacks suppressed [ 1049.366498][T29834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1049.648704][T29842] netlink: 'syz.1.5956': attribute type 21 has an invalid length. [ 1049.867083][T29865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1050.405338][T29889] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5964'. [ 1050.416807][T29889] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5964'. [ 1050.616339][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1050.625551][T29899] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1050.634235][T29899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1050.928551][T29917] Cannot find add_set index 0 as target [ 1050.967836][T29921] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1050.997036][T29920] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1051.243115][T29938] xt_l2tp: v2 doesn't support IP mode [ 1051.344706][T29947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5978'. [ 1051.384750][T29950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5980'. [ 1051.396354][T29954] gre0: Caught tx_queue_len zero misconfig [ 1051.478964][T29950] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1051.497092][T29954] netlink: 'syz.3.5979': attribute type 29 has an invalid length. [ 1051.634331][T29971] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 1051.662400][T29967] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 1051.842463][T29973] veth9: entered promiscuous mode [ 1051.854575][T29973] veth9: entered allmulticast mode [ 1052.199643][T29996] netlink: 'syz.0.5991': attribute type 39 has an invalid length. [ 1052.250433][T29999] sctp: [Deprecated]: syz.4.5993 (pid 29999) Use of int in max_burst socket option. [ 1052.250433][T29999] Use struct sctp_assoc_value instead [ 1052.388060][T29995] IPVS: length: 94 != 77517489144 [ 1052.442301][T29995] syzkaller1: entered allmulticast mode [ 1052.727434][T30014] gretap0: entered promiscuous mode [ 1052.754573][T30014] macvlan2: entered allmulticast mode [ 1052.800680][T30016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.973385][T26367] net_ratelimit: 27 callbacks suppressed [ 1052.973407][T26367] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.141014][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.353225][T26366] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.453029][T30057] bond8: option primary_reselect: invalid value (6) [ 1053.474367][T30063] netlink: 'syz.2.6010': attribute type 1 has an invalid length. [ 1053.474392][T30063] netlink: 'syz.2.6010': attribute type 2 has an invalid length. [ 1053.537966][T30057] bond8 (unregistering): Released all slaves [ 1053.580456][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.707208][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.815880][T26363] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.912569][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1053.979238][T30087] lo speed is unknown, defaulting to 1000 [ 1053.986860][T30087] lo speed is unknown, defaulting to 1000 [ 1054.125580][T26370] bond13: (slave syz_tun): failed to get link speed/duplex [ 1054.221194][T30107] netlink: 'syz.3.6021': attribute type 32 has an invalid length. [ 1054.338770][T30109] syzkaller0: entered promiscuous mode [ 1054.367430][T30109] syzkaller0: entered allmulticast mode [ 1054.530316][T15557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1054.563507][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1054.575148][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.594144][T15557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1054.607154][T15557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1054.620688][T15557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1054.634244][T15557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1055.142696][T18222] bond13: (slave syz_tun): Removing an active aggregator [ 1055.153557][T30143] __nla_validate_parse: 114 callbacks suppressed [ 1055.153574][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1055.154738][T18222] bond13: (slave syz_tun): Releasing backup interface [ 1055.167210][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6030'. [ 1055.266658][T30144] bond7: entered promiscuous mode [ 1055.278663][T30144] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1055.391204][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1055.416465][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1055.511103][T30164] gre1: entered allmulticast mode [ 1055.847965][T30178] ip6erspan0: entered allmulticast mode [ 1055.911389][T30115] lo speed is unknown, defaulting to 1000 [ 1055.984948][T30115] lo speed is unknown, defaulting to 1000 [ 1056.061245][T30191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6045'. [ 1056.196835][T30200] netlink: 'syz.1.6048': attribute type 1 has an invalid length. [ 1056.318260][T30203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1056.392671][T30214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1056.401864][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6051'. [ 1056.433730][T26366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.443433][T30209] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1056.486228][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1056.670851][T30231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6056'. [ 1056.737332][ T50] Bluetooth: hci5: command tx timeout [ 1056.877526][T30236] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1056.946413][T30248] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1057.110466][T30263] netlink: 'syz.0.6066': attribute type 9 has an invalid length. [ 1057.177336][T30115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.184625][T30115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.191879][T30115] bridge_slave_0: entered allmulticast mode [ 1057.198895][T30115] bridge_slave_0: entered promiscuous mode [ 1057.206703][T30115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.213867][T30115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.220990][T30115] bridge_slave_1: entered allmulticast mode [ 1057.228050][T30115] bridge_slave_1: entered promiscuous mode [ 1057.341845][T30115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.369231][T30115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.418401][T30115] team0: Port device team_slave_0 added [ 1057.425906][T30115] team0: Port device team_slave_1 added [ 1057.448820][T30115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.455784][T30115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.481869][T30115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.518352][T30115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.526664][T30115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.556069][T30115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.619362][T30115] hsr_slave_0: entered promiscuous mode [ 1057.626490][T30115] hsr_slave_1: entered promiscuous mode [ 1057.851696][T30115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.865291][T30115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.037306][T30115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.047747][T30115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.158659][T30115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.169760][T30115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.288012][T30115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.298427][T30115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.843418][ T50] Bluetooth: hci5: command tx timeout [ 1060.016502][T30258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.027471][T30281] netlink: 'syz.0.6068': attribute type 3 has an invalid length. [ 1060.064797][T30281] netlink: 'syz.0.6068': attribute type 1 has an invalid length. [ 1060.128301][T30115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1060.191027][T30115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.198997][T30115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1060.222006][T30115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.230132][T30115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1060.247775][T30291] x_tables: duplicate underflow at hook 4 [ 1060.267679][T30115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.307499][T30115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1060.325424][T30115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.413482][T30293] lo speed is unknown, defaulting to 1000 [ 1060.443213][T30293] lo speed is unknown, defaulting to 1000 [ 1060.592800][T30315] netlink: 'syz.4.6077': attribute type 3 has an invalid length. [ 1060.724718][T30115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.886092][T30115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.904504][ T50] Bluetooth: hci5: command tx timeout [ 1060.943091][T26370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.950352][T26370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.987732][T26370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.995164][T26370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.055270][T30115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1061.065662][T30115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.101173][T30325] __nla_validate_parse: 3 callbacks suppressed [ 1061.101191][T30325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6078'. [ 1061.494060][T30331] net_ratelimit: 1 callbacks suppressed [ 1061.494081][T30331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1061.786044][T30353] tipc: Enabling of bearer rejected, failed to enable media [ 1061.854692][T30357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1061.863868][T30357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1061.935290][T30357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1061.941822][T30357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1061.994651][T30115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.002226][T30357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1062.002367][T30357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1062.002627][T30357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1062.002683][T30357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1062.002887][T30357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1062.152648][T30115] veth0_vlan: entered promiscuous mode [ 1062.156901][T30368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6088'. [ 1062.189471][T30115] veth1_vlan: entered promiscuous mode [ 1062.254906][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6089'. [ 1062.255422][T30115] veth0_macvtap: entered promiscuous mode [ 1062.261899][T30115] veth1_macvtap: entered promiscuous mode [ 1062.300319][T30115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.314649][T30115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.329366][T26368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.363704][T26368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.372691][T26368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.381436][T26368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.584478][T26363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.608758][T26363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.702040][T26367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.710005][T26367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.003373][ T50] Bluetooth: hci5: command tx timeout [ 1063.168331][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1063.178690][T30403] syzkaller0: entered promiscuous mode [ 1063.184213][T30403] syzkaller0: entered allmulticast mode [ 1063.189936][T30410] netlink: 'syz.0.6099': attribute type 2 has an invalid length. [ 1063.203227][T30410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1063.217097][T30403] tipc: Enabled bearer , priority 0 [ 1063.431867][T30420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1063.553706][T30410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.581892][T30410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.610671][T30402] tipc: Resetting bearer [ 1063.819932][T30402] tipc: Disabling bearer [ 1064.325433][T15557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.355870][T30410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.366279][T30410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.366567][T15557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.396166][T15557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.404267][T15557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.412421][T15557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.159102][T30410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.172376][T30410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.197430][T26366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.205412][T26366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.234200][T30482] netlink: 'syz.3.6115': attribute type 83 has an invalid length. [ 1065.305562][T30487] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6117'. [ 1065.587373][T30410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1065.608107][T30410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.740286][T30447] lo speed is unknown, defaulting to 1000 [ 1065.785858][T30447] lo speed is unknown, defaulting to 1000 [ 1066.193185][T26367] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.213447][T26367] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.271285][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1066.282250][T30515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1066.386292][T26367] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.408188][T26367] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.483475][T15557] Bluetooth: hci3: command tx timeout [ 1066.579176][T26362] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.588252][T26362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.824443][T26367] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.868051][T26367] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.927934][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1067.016931][T30544] netlink: 356 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1067.017970][T30548] net_ratelimit: 1993 callbacks suppressed [ 1067.017987][T30548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1067.043900][T30538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1067.119462][T26363] batadv1: left allmulticast mode [ 1067.124558][T26363] batadv1: left promiscuous mode [ 1067.129715][T26363] pimreg1: port 1(batadv1) entered disabled state [ 1067.156353][T26363] vlan2: left allmulticast mode [ 1067.190852][T26363] geneve0: left allmulticast mode [ 1067.198064][T26363] vlan2: left promiscuous mode [ 1067.203162][T26363] geneve0: left promiscuous mode [ 1067.208710][T26363] pimreg1: port 3(vlan2) entered disabled state [ 1067.246258][T26363] pim6reg: left allmulticast mode [ 1067.255691][T30558] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1067.315129][T30556] block nbd0: server does not support multiple connections per device. [ 1067.337567][T30556] block nbd0: shutting down sockets [ 1067.403233][T30569] netlink: 'syz.2.6141': attribute type 10 has an invalid length. [ 1067.468087][T30573] netlink: 'syz.2.6141': attribute type 10 has an invalid length. [ 1067.840132][T26363] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1067.883226][T26363] bond5 (unregistering): (slave gretap3): Releasing backup interface [ 1067.936271][T26366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.112717][T26363] bond0 (unregistering): Released all slaves [ 1068.126498][T26363] bond1 (unregistering): Released all slaves [ 1068.145664][T26363] bond2 (unregistering): Released all slaves [ 1068.171742][T26363] bond3 (unregistering): Released all slaves [ 1068.191191][T26363] bond4 (unregistering): Released all slaves [ 1068.217492][T26363] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1068.226417][T26363] bond5 (unregistering): Released all slaves [ 1068.249890][T26363] bond6 (unregistering): Released all slaves [ 1068.273862][T26363] bond7 (unregistering): Released all slaves [ 1068.529434][T30581] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.538915][T30569] team0: Port device dummy0 added [ 1068.552340][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.559205][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.566027][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.572859][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.579780][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.586860][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.593686][T30580] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1068.608955][T15557] Bluetooth: hci3: command tx timeout [ 1068.648380][T30573] team0: Port device dummy0 removed [ 1068.657406][T30573] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1068.789060][T26363] tipc: Left network mode [ 1068.813788][T30596] sctp: [Deprecated]: syz.1.6145 (pid 30596) Use of int in max_burst socket option. [ 1068.813788][T30596] Use struct sctp_assoc_value instead [ 1068.824570][T30556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1068.849968][T30556] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1069.024206][T30611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1069.219632][T30447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.235844][T30447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.253245][T30447] bridge_slave_0: entered allmulticast mode [ 1069.265802][T30447] bridge_slave_0: entered promiscuous mode [ 1069.285235][T30447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.297125][T30447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.313691][T30447] bridge_slave_1: entered allmulticast mode [ 1069.331866][T30447] bridge_slave_1: entered promiscuous mode [ 1069.613932][T30556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1069.630915][T30556] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1069.718580][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1069.792929][T30447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.805377][T30447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.925342][T30556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1069.955317][T30447] team0: Port device team_slave_0 added [ 1069.961950][T30556] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1069.986950][T30447] team0: Port device team_slave_1 added [ 1070.088743][T30447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.132371][T30447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.199871][T30447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.267511][T30447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.281816][T30447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.309229][T30447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.428130][T30556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1070.436800][T30556] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1070.595921][T30447] hsr_slave_0: entered promiscuous mode [ 1070.619543][T30447] hsr_slave_1: entered promiscuous mode [ 1070.633850][T30447] debugfs: 'hsr0' already exists in 'hsr' [ 1070.640133][T30447] Cannot create hsr debugfs directory [ 1070.717313][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1070.724522][T30556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1070.730467][T30556] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1070.804374][ T50] Bluetooth: hci3: command tx timeout [ 1071.466155][T30696] IPv6: Can't replace route, no match found [ 1071.652820][T30710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1071.855912][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1073.692431][T26362] net_ratelimit: 57 callbacks suppressed [ 1073.692462][T26362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.717986][T30701] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1074.106418][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1074.126435][T30734] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6167'. [ 1074.195529][T30731] lo speed is unknown, defaulting to 1000 [ 1074.203007][T30731] lo speed is unknown, defaulting to 1000 [ 1074.258775][T30745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6169'. [ 1074.267695][T30745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6169'. [ 1074.276742][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6169'. [ 1074.387665][T30748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1074.541312][T30757] netlink: 'syz.3.6172': attribute type 83 has an invalid length. [ 1074.565273][T30758] netlink: 'syz.3.6172': attribute type 83 has an invalid length. [ 1074.763361][T30769] netlink: 'syz.1.6173': attribute type 1 has an invalid length. [ 1074.799407][T30766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6173'. [ 1074.864509][T30769] bond3: entered promiscuous mode [ 1074.870162][T30769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.902010][T30766] bond3: entered allmulticast mode [ 1075.331423][T30781] bond3: (slave bridge1): making interface the new active one [ 1075.365656][T30781] bridge1: entered promiscuous mode [ 1075.383845][T30781] bridge1: entered allmulticast mode [ 1075.411682][T30781] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1075.421027][T30793] dummy0: entered allmulticast mode [ 1075.566777][T30793] dummy0: left allmulticast mode [ 1075.659026][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.672625][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.723360][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.730575][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.737719][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.744820][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.751927][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.852205][T26363] hsr_slave_0: left promiscuous mode [ 1075.859903][T26363] hsr_slave_1: left promiscuous mode [ 1075.870353][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.900218][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.907418][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.914594][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.983388][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.990620][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1075.997791][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.004953][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.012111][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.019270][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.019518][T30841] netlink: 'syz.0.6184': attribute type 1 has an invalid length. [ 1076.026454][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.078548][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.093539][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.100926][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.109601][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.116795][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.122610][T30843] netlink: 'syz.0.6184': attribute type 5 has an invalid length. [ 1076.137499][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.160172][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.176879][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.197654][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.215018][T30844] netlink: 'syz.0.6184': attribute type 3 has an invalid length. [ 1076.220303][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.246723][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.260043][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.268258][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.287379][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.295693][T30826] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1076.400084][T30849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1076.653568][T26363] team0 (unregistering): Port device dummy0 removed [ 1076.700850][T30841] bond11: entered promiscuous mode [ 1076.706529][T30841] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1077.198674][T30447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1077.278728][T30447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.291169][T30447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1077.307323][T30447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.458566][T30447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1077.502816][T30447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.526883][T30447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1077.560155][T30447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.777891][T30908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6197'. [ 1077.852753][T30890] syz_tun: entered allmulticast mode [ 1077.873680][T30447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.922628][T26363] IPVS: stop unused estimator thread 0... [ 1077.930539][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1078.041944][T30447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.079225][T26370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.086457][T26370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.121516][T26369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.128836][T26369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.291126][T30927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1078.301462][T30927] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1079.400274][T30983] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6207'. [ 1079.447781][T26369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.467216][T30981] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6207'. [ 1079.617614][T30983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.722882][T30447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.902531][T31009] syzkaller0: entered promiscuous mode [ 1079.908063][T31009] syzkaller0: entered allmulticast mode [ 1080.415464][T30447] veth0_vlan: entered promiscuous mode [ 1080.420609][T31033] netlink: 'syz.1.6218': attribute type 13 has an invalid length. [ 1080.434406][T30447] veth1_vlan: entered promiscuous mode [ 1080.542078][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1081.019916][T31033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.052888][T31033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.329896][T26363] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.340052][T26363] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.353173][T26363] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.412127][T26363] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.541589][T30447] veth0_macvtap: entered promiscuous mode [ 1081.551657][T30447] veth1_macvtap: entered promiscuous mode [ 1081.570401][T30447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.582184][T30447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.673672][T26364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.682488][T26364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.694000][T26364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.736307][T31071] syzkaller0: entered promiscuous mode [ 1081.751448][T31071] syzkaller0: entered allmulticast mode [ 1081.776326][T26364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.385868][T31093] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1082.455112][T26368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.463062][T26368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.624101][T26368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.633635][T26368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.756931][T31113] xt_hl: Unknown Hop Limit match mode: 206 [ 1082.882314][T31126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6233'. [ 1083.066523][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.075485][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.157438][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.166400][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.175322][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.184245][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.201238][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.215554][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.224592][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1083.334559][T15557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.347255][T15557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.392942][T15557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.406422][T15557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.417470][T15557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.508918][T31149] syzkaller0: entered promiscuous mode [ 1083.536356][T31149] syzkaller0: entered allmulticast mode [ 1084.087506][T31184] netlink: 'syz.1.6248': attribute type 4 has an invalid length. [ 1084.149619][T31184] netlink: 'syz.1.6248': attribute type 4 has an invalid length. [ 1084.409209][T31151] lo speed is unknown, defaulting to 1000 [ 1084.483904][T31151] lo speed is unknown, defaulting to 1000 [ 1085.241637][T26370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.443747][T15557] Bluetooth: hci0: command tx timeout [ 1085.601540][T31220] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1085.640552][T31220] bond1 (unregistering): Released all slaves [ 1085.908990][T31151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.916306][T31151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.923549][T31151] bridge_slave_0: entered allmulticast mode [ 1085.931134][T31151] bridge_slave_0: entered promiscuous mode [ 1085.939898][T31151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.970016][T31151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.977328][T31151] bridge_slave_1: entered allmulticast mode [ 1085.985148][T31151] bridge_slave_1: entered promiscuous mode [ 1086.026159][T31248] xt_hashlimit: max too large, truncated to 1048576 [ 1086.030912][T31151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.043129][T31249] xt_hashlimit: max too large, truncated to 1048576 [ 1086.052309][T31151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.071269][T31248] xt_ecn: cannot match TCP bits for non-tcp packets [ 1086.083717][T31249] xt_ecn: cannot match TCP bits for non-tcp packets [ 1086.243839][T31151] team0: Port device team_slave_0 added [ 1086.252360][T31151] team0: Port device team_slave_1 added [ 1086.403966][T31151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.411147][T31151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.503974][T31151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.517784][T31151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.525096][T31151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.553305][T31151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.565068][T31271] 8021q: VLANs not supported on gre0 [ 1086.655021][T31151] hsr_slave_0: entered promiscuous mode [ 1086.661693][T31151] hsr_slave_1: entered promiscuous mode [ 1086.668082][T31151] debugfs: 'hsr0' already exists in 'hsr' [ 1086.674781][T31151] Cannot create hsr debugfs directory [ 1087.046236][T31151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.119637][T31289] netlink: 'syz.1.6269': attribute type 16 has an invalid length. [ 1087.166732][T31296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 1087.232099][T31296] netlink: 'syz.4.6272': attribute type 1 has an invalid length. [ 1087.494693][T31305] Cannot find add_set index 0 as target [ 1087.518864][T31151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.525134][T15557] Bluetooth: hci0: command tx timeout [ 1087.669031][T31151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.689299][T31317] veth1_to_hsr: entered promiscuous mode [ 1087.695744][T31317] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 1087.869736][T31151] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.947339][T31323] tipc: Enabled bearer , priority 0 [ 1087.973979][T31322] tipc: Enabling of bearer rejected, already enabled [ 1088.028935][T31329] syzkaller0: entered promiscuous mode [ 1088.060183][T31329] syzkaller0: entered allmulticast mode [ 1088.265260][T31329] tipc: Resetting bearer [ 1088.424309][T31329] tipc: Disabling bearer [ 1088.491696][T31343] xt_hashlimit: size too large, truncated to 1048576 [ 1088.714941][T31353] __nla_validate_parse: 55 callbacks suppressed [ 1088.714961][T31353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1088.757124][T31353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1088.811185][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1088.820101][T31354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1088.847075][T31151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1088.888490][T31151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.907790][T31151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1088.940364][T31151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.960183][T31151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1089.006992][T31151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.117285][T31151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1089.131110][T31151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.232021][T31151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.253620][T31151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.271334][T26368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.278533][T26368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.307250][T26368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.314475][T26368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.556571][T31386] netlink: 'syz.0.6293': attribute type 4 has an invalid length. [ 1089.570994][T31386] netlink: 'syz.0.6293': attribute type 4 has an invalid length. [ 1089.645216][T15557] Bluetooth: hci0: command tx timeout [ 1090.013111][T31404] netlink: 'syz.1.6297': attribute type 1 has an invalid length. [ 1090.350113][T31421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6302'. [ 1090.362279][T31421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6302'. [ 1090.390986][T31151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.453888][T31151] veth0_vlan: entered promiscuous mode [ 1090.468427][T31151] veth1_vlan: entered promiscuous mode [ 1090.502988][T31151] veth0_macvtap: entered promiscuous mode [ 1090.514282][T31151] veth1_macvtap: entered promiscuous mode [ 1090.559148][T31151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.572782][T31151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.585926][T26370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.596848][T26370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.613571][T26370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.622348][T26370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.790163][T31433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1090.811781][T26364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.836099][T26364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.884466][T26370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.895055][T26370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.975909][T26369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.997442][T31433] netlink: 'syz.1.6306': attribute type 1 has an invalid length. [ 1091.256841][T31463] netlink: 'syz.1.6306': attribute type 3 has an invalid length. [ 1091.264638][T31463] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1091.362123][T31460] syzkaller1: entered promiscuous mode [ 1091.383325][T31460] syzkaller1: entered allmulticast mode [ 1091.606379][T31445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1091.645076][T31445] bond4: (slave bond5): making interface the new active one [ 1091.680312][T31445] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1091.689513][T15557] Bluetooth: hci0: command tx timeout [ 1091.714868][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1091.746397][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1091.758555][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1091.789179][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1091.804027][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.841877][T31471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6316'. [ 1092.298264][T31498] lo speed is unknown, defaulting to 1000 [ 1092.326964][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6320'. [ 1092.332980][T31475] lo speed is unknown, defaulting to 1000 [ 1092.349032][T31503] pimreg: entered allmulticast mode [ 1092.365391][T31498] lo speed is unknown, defaulting to 1000 [ 1092.371728][T31506] openvswitch: netlink: Flow key attr not present in new flow. [ 1092.431659][T31475] lo speed is unknown, defaulting to 1000 [ 1092.644905][T31517] lo speed is unknown, defaulting to 1000 [ 1092.652482][T31517] lo speed is unknown, defaulting to 1000 [ 1092.695369][T31518] dvmrp4: entered allmulticast mode [ 1092.958266][T31475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.965580][T31475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.972841][T31475] bridge_slave_0: entered allmulticast mode [ 1092.981098][T31475] bridge_slave_0: entered promiscuous mode [ 1092.990444][T31475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.997765][T31475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.005511][T31475] bridge_slave_1: entered allmulticast mode [ 1093.015000][T31475] bridge_slave_1: entered promiscuous mode [ 1093.110508][T31475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.123852][T31475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.234411][T31475] team0: Port device team_slave_0 added [ 1093.248153][T31475] team0: Port device team_slave_1 added [ 1093.328047][T31475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.343107][T31475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.386406][T31475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.424252][T31475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.431697][T31475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.458447][T31475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.582704][T31475] hsr_slave_0: entered promiscuous mode [ 1093.597866][T31475] hsr_slave_1: entered promiscuous mode [ 1093.605446][T31475] debugfs: 'hsr0' already exists in 'hsr' [ 1093.611837][T31475] Cannot create hsr debugfs directory [ 1093.752659][T31554] __nla_validate_parse: 1 callbacks suppressed [ 1093.752678][T31554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6332'. [ 1093.839310][T31558] bridge0: port 1(vlan2) entered blocking state [ 1093.845869][T31558] bridge0: port 1(vlan2) entered disabled state [ 1093.852377][T31558] vlan2: entered allmulticast mode [ 1093.857857][T31558] geneve0: entered allmulticast mode [ 1093.864139][ T50] Bluetooth: hci2: command tx timeout [ 1093.936775][T31475] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1093.949726][T31475] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.040287][T31475] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.050827][T31475] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.137584][T31475] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.165687][T31475] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.349477][T31475] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1094.377571][T31475] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.795755][T31573] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1094.809680][T31573] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1094.818162][T31573] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1094.889767][T31475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1094.906829][T31475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.914925][T31475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1094.925497][T31475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.935743][T31576] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6337'. [ 1094.945706][T31475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1094.956700][T31475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.970100][T31475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1095.008310][T31475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.071436][T31475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.109000][T31475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.156091][T26370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.163382][T26370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.198944][T26370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.206285][T26370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.290205][T31475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.392636][T31597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1095.499948][T31604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1095.924294][ T50] Bluetooth: hci2: command tx timeout [ 1096.047079][T31475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.121050][T31475] veth0_vlan: entered promiscuous mode [ 1096.142324][T31475] veth1_vlan: entered promiscuous mode [ 1096.237291][T31475] veth0_macvtap: entered promiscuous mode [ 1096.280214][T31642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.291994][T31475] veth1_macvtap: entered promiscuous mode [ 1096.339822][T31475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.368580][T31475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.404728][T31647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6355'. [ 1096.456799][T26369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.475141][T26369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.517415][T26369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.541043][T26369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.727710][T26364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.847144][T31659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6358'. [ 1096.989861][T31661] bond1: entered promiscuous mode [ 1096.996382][T31661] bond1: entered allmulticast mode [ 1097.024218][T31664] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1097.058785][T31664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1097.098734][T26364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.120317][T26364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.276128][T26368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.313160][T26368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.956467][T31692] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1097.997737][T31693] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1098.008636][ T50] Bluetooth: hci2: command tx timeout [ 1099.038051][T31753] __nla_validate_parse: 2 callbacks suppressed [ 1099.038072][T31753] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1099.384941][T31728] syzkaller1: entered promiscuous mode [ 1099.390778][T31728] syzkaller1: entered allmulticast mode [ 1099.532667][T31763] syzkaller0: entered promiscuous mode [ 1099.542847][T31763] syzkaller0: entered allmulticast mode [ 1099.879635][T31778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1100.046323][T31781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1100.109128][ T50] Bluetooth: hci2: command tx timeout [ 1100.219746][T31789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6395'. [ 1100.230610][T31789] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6395'. [ 1100.275512][T31793] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 1100.275578][T31794] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 1100.494762][T31802] netlink: 'syz.3.6398': attribute type 1 has an invalid length. [ 1100.539862][T31802] nbd: socks must be embedded in a SOCK_ITEM attr [ 1100.546725][T31802] block nbd0: shutting down sockets [ 1100.630983][T31812] netlink: 'syz.1.6401': attribute type 210 has an invalid length. [ 1100.727936][T31809] syzkaller0: entered promiscuous mode [ 1100.778632][T31809] syzkaller0: entered allmulticast mode [ 1100.788274][T31809] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1100.851667][T31822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1100.897119][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1100.921788][T31825] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1100.937173][T31825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1100.947695][T31825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1100.956600][T31825] bond0: Unable to set up delay as MII monitoring is disabled [ 1100.985725][ T5740] IPVS: starting estimator thread 0... [ 1101.123656][T31828] IPVS: using max 31 ests per chain, 74400 per kthread [ 1101.174731][T31841] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1101.234297][T31836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6408'. [ 1101.858895][T31874] netlink: 'syz.2.6418': attribute type 18 has an invalid length. [ 1102.068160][T31882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.300935][T31901] lo speed is unknown, defaulting to 1000 [ 1102.308366][T31901] lo speed is unknown, defaulting to 1000 [ 1102.565655][T26366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.027307][T32005] netlink: 'syz.0.6443': attribute type 2 has an invalid length. [ 1104.260217][T32012] netlink: 'syz.4.6444': attribute type 1 has an invalid length. [ 1104.268491][T32012] __nla_validate_parse: 8 callbacks suppressed [ 1104.268508][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1104.287844][T32012] veth2: entered promiscuous mode [ 1104.321407][T32015] netlink: 'syz.1.6446': attribute type 9 has an invalid length. [ 1104.374027][T32017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6444'. [ 1104.536897][T32017] veth4: entered promiscuous mode [ 1104.561718][T32021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1104.678082][T32016] netlink: 'syz.1.6446': attribute type 9 has an invalid length. [ 1104.727431][T32023] netlink: 'syz.3.6448': attribute type 1 has an invalid length. [ 1104.745715][T32023] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6448'. [ 1104.881855][T32034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6450'. [ 1105.003523][T32043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6453'. [ 1105.062767][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1105.071964][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1105.212586][T32052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1105.227161][T32052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1105.474969][T32063] gretap0: entered promiscuous mode [ 1105.485357][T32063] vlan2: entered promiscuous mode [ 1106.174766][T32104] veth0_to_hsr: entered promiscuous mode [ 1106.180567][T32104] veth0_to_hsr: entered allmulticast mode [ 1106.338761][T32110] netlink: zone id is out of range [ 1106.351148][T32110] netlink: zone id is out of range [ 1106.357043][T32110] netlink: zone id is out of range [ 1106.362205][T32110] netlink: zone id is out of range [ 1106.367429][T32110] netlink: zone id is out of range [ 1106.372560][T32110] netlink: zone id is out of range [ 1106.377690][T32110] netlink: zone id is out of range [ 1106.382847][T32110] netlink: zone id is out of range [ 1106.387992][T32110] netlink: zone id is out of range [ 1106.577733][T32112] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1106.618945][T12872] IPVS: starting estimator thread 0... [ 1106.904259][T32131] IPVS: using max 55 ests per chain, 132000 per kthread [ 1106.935174][T32154] validate_nla: 1 callbacks suppressed [ 1106.935193][T32154] netlink: 'syz.1.6487': attribute type 1 has an invalid length. [ 1107.044763][T32154] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1107.054926][T32159] nbd: must specify an index to disconnect [ 1107.579604][T32194] Cannot find add_set index 0 as target [ 1107.819126][T32201] tipc: Failed to remove unknown binding: 66,1,1/0:3071221502/3071221504 [ 1108.130369][T32215] veth5: entered promiscuous mode [ 1108.143878][T32215] veth5: entered allmulticast mode [ 1108.180901][T32215] team0: Device veth5 is up. Set it down before adding it as a team port [ 1108.246960][T26363] net_ratelimit: 7 callbacks suppressed [ 1108.246980][T26363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.287455][T32217] veth5: entered promiscuous mode [ 1108.292632][T32217] veth5: entered allmulticast mode [ 1108.329045][T32217] team0: Device veth5 is up. Set it down before adding it as a team port [ 1108.360841][T32239] sctp: [Deprecated]: syz.0.6508 (pid 32239) Use of int in max_burst socket option deprecated. [ 1108.360841][T32239] Use struct sctp_assoc_value instead [ 1108.416141][T32228] veth1_to_bond: entered allmulticast mode [ 1108.426148][T32233] veth1_to_bond: entered promiscuous mode [ 1108.445917][T32239] veth1_to_bond (unregistering): left allmulticast mode [ 1108.454469][T32239] veth1_to_bond (unregistering): left promiscuous mode [ 1108.475233][T32239] bond0: (slave bond_slave_1): Releasing backup interface [ 1108.504867][T32236] team1: entered promiscuous mode [ 1108.510270][T32236] team1: entered allmulticast mode [ 1108.516043][T32236] 8021q: adding VLAN 0 to HW filter on device team1 [ 1108.549232][T32240] team2: entered promiscuous mode [ 1108.556410][T32240] team2: entered allmulticast mode [ 1108.562201][T32240] 8021q: adding VLAN 0 to HW filter on device team2 [ 1108.757651][T32256] IPVS: set_ctl: invalid protocol: 22 172.20.20.19:20000 [ 1108.817534][T32261] nbd: must specify a device to reconfigure [ 1109.042670][T32270] netlink: 'syz.2.6521': attribute type 10 has an invalid length. [ 1109.091373][T32270] bond0: (slave dummy0): Releasing backup interface [ 1109.106244][T32276] netlink: 'syz.2.6521': attribute type 10 has an invalid length. [ 1109.189672][T32270] team0: Port device dummy0 added [ 1109.270030][T32276] team0: Port device dummy0 removed [ 1109.297406][T32276] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1109.373926][T32291] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1109.488541][T32297] __nla_validate_parse: 27 callbacks suppressed [ 1109.488559][T32297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6532'. [ 1109.504450][T32297] xt_TCPMSS: Only works on TCP SYN packets [ 1109.610319][T32308] Bluetooth: MGMT ver 1.23 [ 1109.719136][T32306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6533'. [ 1109.933729][T32327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6538'. [ 1109.977244][T32327] sock: sock_set_timeout: `syz.1.6538' (pid 32327) tries to set negative timeout [ 1110.094149][T32335] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1110.292714][T32344] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1110.295449][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.309093][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.366437][T32347] netlink: 'syz.4.6544': attribute type 49 has an invalid length. [ 1110.391664][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.415780][T32356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6547'. [ 1110.418378][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.461184][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.470875][T32349] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1110.474963][T32360] netlink: 'syz.1.6550': attribute type 1 has an invalid length. [ 1110.834421][T32389] syzkaller0: entered promiscuous mode [ 1110.840070][T32389] syzkaller0: entered allmulticast mode [ 1110.849701][T32390] tipc: Started in network mode [ 1110.854816][T32390] tipc: Node identity 42c7f67d3e18, cluster identity 4711 [ 1110.862152][T32390] tipc: Enabled bearer , priority 0 [ 1110.869037][T32389] tipc: Enabling of bearer rejected, already enabled [ 1110.896311][T26367] bridge_slave_1: left promiscuous mode [ 1110.902046][T26367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.024206][T26367] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1112.190224][T26367] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1112.205657][T26367] bond7 (unregistering): (slave bridge4): Releasing active interface [ 1112.227318][T26367] bond1 (unregistering): Released all slaves [ 1112.240635][T26367] bond2 (unregistering): Released all slaves [ 1112.260939][T26367] bond3 (unregistering): Released all slaves [ 1112.278031][T26367] bond4 (unregistering): Released all slaves [ 1112.290882][T26367] bond0 (unregistering): Released all slaves [ 1112.304303][T26367] bond5 (unregistering): Released all slaves [ 1112.325622][T26367] bond6 (unregistering): Released all slaves [ 1112.344569][T26367] bond7 (unregistering): Released all slaves [ 1112.397949][T26367] bond8 (unregistering): (slave lo): Releasing backup interface [ 1112.411667][T26367] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1112.429369][T26367] bond8 (unregistering): Released all slaves [ 1112.450220][T26367] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1112.462095][T26367] bond9 (unregistering): Released all slaves [ 1112.484532][T26367] bond10 (unregistering): Released all slaves [ 1112.510150][T26367] bond11 (unregistering): Released all slaves [ 1112.536288][T32394] tipc: Resetting bearer [ 1112.559976][T32388] tipc: Resetting bearer [ 1112.697342][T32388] tipc: Disabling bearer [ 1113.029441][ T6781] tipc: Node number set to 2095052413 [ 1113.083186][T26367] : left promiscuous mode [ 1113.258862][T32410] lo speed is unknown, defaulting to 1000 [ 1113.300317][T32410] lo speed is unknown, defaulting to 1000 [ 1113.308008][T26367] tipc: Disabling bearer [ 1113.332737][T26367] tipc: Left network mode [ 1113.380767][T26362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.490522][T32481] __nla_validate_parse: 66 callbacks suppressed [ 1114.490541][T32481] netlink: 4256 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1114.555971][T32481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1114.629219][T32481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1114.764125][T32485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6576'. [ 1114.797038][T32483] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 1114.837781][T32483] bond1: entered promiscuous mode [ 1114.867674][T32483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.127365][T32514] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1115.346520][T26367] hsr_slave_0: left promiscuous mode [ 1115.394095][T26367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.443047][T26367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.493054][T26367] batman_adv: batadv0: Interface deactivated: vlan2 [ 1115.512249][T26367] batman_adv: batadv0: Removing interface: vlan2 [ 1115.586182][T26367] veth0_macvtap: left promiscuous mode [ 1115.609977][T26367] veth1_vlan: left promiscuous mode [ 1115.626059][T26367] veth0_vlan: left promiscuous mode [ 1115.964461][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.081792][T32560] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6585'. [ 1116.401501][T32572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1116.413536][T32573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6590'. [ 1116.470842][T26367] team0 (unregistering): Port device team_slave_1 removed [ 1116.495575][T32577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1116.509870][T26367] team0 (unregistering): Port device team_slave_0 removed [ 1116.782881][T32567] netlink: 'syz.0.6589': attribute type 10 has an invalid length. [ 1117.645449][T32613] syzkaller0: entered promiscuous mode [ 1117.651180][T32613] syzkaller0: entered allmulticast mode [ 1117.659426][T32615] netlink: 'syz.4.6598': attribute type 1 has an invalid length. [ 1117.842779][T32615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1117.852138][T32623] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 1117.907946][T26367] IPVS: stop unused estimator thread 0... [ 1118.159390][T32633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1119.143688][T26366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.464736][ T50] block nbd0: Receive control failed (result -1) [ 1119.474731][ T50] [ 1119.477097][ T50] ====================================================== [ 1119.484125][ T50] WARNING: possible circular locking dependency detected [ 1119.491143][ T50] syzkaller #0 Not tainted [ 1119.495538][ T50] ------------------------------------------------------ [ 1119.502539][ T50] kworker/u9:0/50 is trying to acquire lock: [ 1119.508509][ T50] ffff88802c6d45e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1119.518040][ T50] [ 1119.518040][ T50] but task is already holding lock: [ 1119.525411][ T50] ffff888074dfbe68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1119.534415][ T50] [ 1119.534415][ T50] which lock already depends on the new lock. [ 1119.534415][ T50] [ 1119.544803][ T50] [ 1119.544803][ T50] the existing dependency chain (in reverse order) is: [ 1119.553800][ T50] [ 1119.553800][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1119.561433][ T50] __mutex_lock+0x19d/0x1550 [ 1119.566604][ T50] nbd_queue_rq+0x373/0x1150 [ 1119.571765][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1119.577875][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1119.584785][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1119.591290][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1119.596821][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1119.602900][ T50] worker_thread+0xa47/0xfb0 [ 1119.607997][ T50] kthread+0x388/0x470 [ 1119.612576][ T50] ret_from_fork+0x514/0xb70 [ 1119.617702][ T50] ret_from_fork_asm+0x1a/0x30 [ 1119.622988][ T50] [ 1119.622988][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1119.630220][ T50] __mutex_lock+0x19d/0x1550 [ 1119.635362][ T50] nbd_queue_rq+0xc1/0x1150 [ 1119.640412][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1119.646493][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1119.653358][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1119.659882][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1119.665439][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1119.671762][ T50] worker_thread+0xa47/0xfb0 [ 1119.676884][ T50] kthread+0x388/0x470 [ 1119.681477][ T50] ret_from_fork+0x514/0xb70 [ 1119.686607][ T50] ret_from_fork_asm+0x1a/0x30 [ 1119.691897][ T50] [ 1119.691897][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 1119.699046][ T50] __synchronize_srcu+0xc9/0x2f0 [ 1119.704507][ T50] elevator_switch+0x1e8/0x7b0 [ 1119.709973][ T50] elevator_change+0x2fa/0x480 [ 1119.715262][ T50] elevator_set_default+0x375/0x440 [ 1119.720998][ T50] blk_register_queue+0x3f3/0x4e0 [ 1119.726671][ T50] __add_disk+0x6cb/0xe30 [ 1119.731538][ T50] add_disk_fwnode+0xfb/0x4b0 [ 1119.736728][ T50] nbd_dev_add+0x733/0xb60 [ 1119.741665][ T50] nbd_init+0x15f/0x1e0 [ 1119.746483][ T50] do_one_initcall+0x250/0x870 [ 1119.751786][ T50] do_initcall_level+0x10a/0x1a0 [ 1119.757453][ T50] do_initcalls+0x59/0xa0 [ 1119.762311][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1119.768120][ T50] kernel_init+0x1d/0x1d0 [ 1119.772970][ T50] ret_from_fork+0x514/0xb70 [ 1119.778096][ T50] ret_from_fork_asm+0x1a/0x30 [ 1119.783380][ T50] [ 1119.783380][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1119.791197][ T50] __mutex_lock+0x19d/0x1550 [ 1119.796315][ T50] elevator_change+0x1af/0x480 [ 1119.801613][ T50] elevator_set_none+0xb5/0x140 [ 1119.806980][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1119.813309][ T50] nbd_start_device+0x189/0xb30 [ 1119.818683][ T50] nbd_genl_connect+0x1597/0x1c10 [ 1119.824225][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 1119.830285][ T50] genl_rcv_msg+0x614/0x7a0 [ 1119.835303][ T50] netlink_rcv_skb+0x226/0x4a0 [ 1119.840588][ T50] genl_rcv+0x28/0x40 [ 1119.845137][ T50] netlink_unicast+0x7bb/0x940 [ 1119.850418][ T50] netlink_sendmsg+0x813/0xb40 [ 1119.855785][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 1119.861409][ T50] ____sys_sendmsg+0x54e/0x850 [ 1119.866700][ T50] ___sys_sendmsg+0x2a5/0x360 [ 1119.871924][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 1119.877395][ T50] do_syscall_64+0x174/0x580 [ 1119.882511][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.888920][ T50] [ 1119.888920][ T50] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1119.897526][ T50] blk_alloc_queue+0x544/0x690 [ 1119.902915][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 1119.908564][ T50] nbd_dev_add+0x494/0xb60 [ 1119.913501][ T50] nbd_init+0x15f/0x1e0 [ 1119.918177][ T50] do_one_initcall+0x250/0x870 [ 1119.923464][ T50] do_initcall_level+0x10a/0x1a0 [ 1119.928923][ T50] do_initcalls+0x59/0xa0 [ 1119.933766][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1119.939476][ T50] kernel_init+0x1d/0x1d0 [ 1119.944315][ T50] ret_from_fork+0x514/0xb70 [ 1119.949785][ T50] ret_from_fork_asm+0x1a/0x30 [ 1119.955094][ T50] [ 1119.955094][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1119.962312][ T50] fs_reclaim_acquire+0x71/0x100 [ 1119.967774][ T50] __kmalloc_noprof+0xbc/0x720 [ 1119.973162][ T50] tls_sw_sendmsg+0x599/0x2860 [ 1119.978577][ T50] sock_sendmsg_nosec+0x90/0x180 [ 1119.984040][ T50] sock_sendmsg+0x1ca/0x2d0 [ 1119.989069][ T50] splice_to_socket+0xb5e/0x12a0 [ 1119.994546][ T50] direct_splice_actor+0x101/0x160 [ 1120.000191][ T50] splice_direct_to_actor+0x57b/0xcb0 [ 1120.006174][ T50] do_splice_direct+0x195/0x290 [ 1120.011542][ T50] do_sendfile+0x52e/0x7c0 [ 1120.016471][ T50] __se_sys_sendfile64+0x144/0x1a0 [ 1120.022101][ T50] do_syscall_64+0x174/0x580 [ 1120.027208][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.033614][ T50] [ 1120.033614][ T50] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1120.041690][ T50] __lock_acquire+0x1520/0x2cf0 [ 1120.047061][ T50] lock_acquire+0x106/0x350 [ 1120.052083][ T50] lock_sock_nested+0x41/0x100 [ 1120.057360][ T50] inet_shutdown+0x6a/0x390 [ 1120.062379][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 1120.068009][ T50] recv_work+0x1cee/0x1e10 [ 1120.072941][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1120.079014][ T50] worker_thread+0xa47/0xfb0 [ 1120.084129][ T50] kthread+0x388/0x470 [ 1120.088721][ T50] ret_from_fork+0x514/0xb70 [ 1120.093845][ T50] ret_from_fork_asm+0x1a/0x30 [ 1120.099123][ T50] [ 1120.099123][ T50] other info that might help us debug this: [ 1120.099123][ T50] [ 1120.109357][ T50] Chain exists of: [ 1120.109357][ T50] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1120.109357][ T50] [ 1120.122412][ T50] Possible unsafe locking scenario: [ 1120.122412][ T50] [ 1120.129864][ T50] CPU0 CPU1 [ 1120.135238][ T50] ---- ---- [ 1120.140616][ T50] lock(&nsock->tx_lock); [ 1120.145049][ T50] lock(&cmd->lock); [ 1120.151631][ T50] lock(&nsock->tx_lock); [ 1120.158736][ T50] lock(sk_lock-AF_INET6-NBD); [ 1120.163581][ T50] [ 1120.163581][ T50] *** DEADLOCK *** [ 1120.163581][ T50] [ 1120.171904][ T50] 3 locks held by kworker/u9:0/50: [ 1120.177022][ T50] #0: ffff8880274d1140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1120.188290][ T50] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1120.200044][ T50] #2: ffff888074dfbe68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1120.209363][ T50] [ 1120.209363][ T50] stack backtrace: [ 1120.215244][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1120.215270][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1120.215282][ T50] Workqueue: nbd0-recv recv_work [ 1120.215301][ T50] Call Trace: [ 1120.215309][ T50] [ 1120.215317][ T50] dump_stack_lvl+0xe8/0x150 [ 1120.215342][ T50] print_circular_bug+0x2e1/0x300 [ 1120.215361][ T50] check_noncircular+0x12e/0x150 [ 1120.215387][ T50] __lock_acquire+0x1520/0x2cf0 [ 1120.215411][ T50] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1120.215603][ T50] ? try_to_wake_up+0x8c5/0x14d0 [ 1120.215632][ T50] ? inet_shutdown+0x6a/0x390 [ 1120.215659][ T50] lock_acquire+0x106/0x350 [ 1120.215678][ T50] ? inet_shutdown+0x6a/0x390 [ 1120.215701][ T50] ? __queue_work+0x1ea/0x10a0 [ 1120.215733][ T50] lock_sock_nested+0x41/0x100 [ 1120.215749][ T50] ? inet_shutdown+0x6a/0x390 [ 1120.215770][ T50] inet_shutdown+0x6a/0x390 [ 1120.215792][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 1120.215816][ T50] recv_work+0x1cee/0x1e10 [ 1120.215833][ T50] ? __lock_acquire+0x683/0x2cf0 [ 1120.215855][ T50] ? register_lock_class+0x31/0x2e0 [ 1120.215875][ T50] ? __lock_acquire+0x683/0x2cf0 [ 1120.215899][ T50] ? __pfx_recv_work+0x10/0x10 [ 1120.215913][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 1120.215932][ T50] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1120.215949][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 1120.215971][ T50] ? rcu_is_watching+0x15/0xb0 [ 1120.215995][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 1120.216011][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1120.216039][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1120.216059][ T50] ? assign_work+0x3cf/0x5d0 [ 1120.216075][ T50] worker_thread+0xa47/0xfb0 [ 1120.216103][ T50] kthread+0x388/0x470 [ 1120.216125][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1120.216142][ T50] ? __pfx_kthread+0x10/0x10 [ 1120.216163][ T50] ret_from_fork+0x514/0xb70 [ 1120.216188][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1120.216208][ T50] ? __switch_to+0xc89/0x1420 [ 1120.216228][ T50] ? __pfx_kthread+0x10/0x10 [ 1120.216250][ T50] ret_from_fork_asm+0x1a/0x30 [ 1120.216269][ T50] [ 1124.894459][T26366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog