last executing test programs: 5.296492749s ago: executing program 3 (id=3448): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x93}}, 0x20044000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) 4.650267585s ago: executing program 1 (id=3458): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5068b, 0x24}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3e}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000b00fe8000000000000000000000000000002e000100ff020000000000008656519a2acb8b8d0800090000000000"], 0x48}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000001000)) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) 4.408063924s ago: executing program 1 (id=3460): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) write$nci(r2, &(0x7f0000000280)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x20, "813ef89fd104c304d0d0c9e09aabc2aeb68a06e8a3620433dcc4b1b42b2bdb79"}, 0x23) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x38, r5, 0xa01, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040000) read$nci(r2, 0x0, 0x0) unshare(0x20000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x200204) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000240)={0xfffffffffffffff8, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000080)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0x2}) sendfile(r1, r8, 0x0, 0x5) 4.34041326s ago: executing program 3 (id=3462): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000fc0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) pselect6(0xfffffffffffffe9f, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xbb6, 0x0, 0x9, 0x0, 0x10000, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 3.362179704s ago: executing program 1 (id=3465): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0x80}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) unshare(0x400) r1 = socket(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000a00), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000980), &(0x7f00000009c0)=0xe) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x4004) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x10, 0x0, 0xa, 0x120, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000, 0x759ee043}}}, 0xb8}}, 0x2c000010) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x7}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @generic={0x3, 0x7, 0x3, 0x8000, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xce1e, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xe, 0x6, 0xffff2aab}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000480)=[{0x4, 0x3, 0x0, 0xc}, {0x4, 0x1, 0x0, 0x4}, {0x1, 0x0, 0x8, 0x8}, {0x2, 0x5, 0x6, 0xb}, {0x2, 0x2, 0x2, 0xc}], 0x10, 0x405d}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup, 0x2, 0x1, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000900)={{r1, &(0x7f0000000700)='\x00', 0x20000, &(0x7f0000000740)={@_ha_fsid={[0x1, 0x8]}, {0xffff, 0xa1c4, 0xf, 0x40}}, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=0x1ff}, {[0x7f, 0x1ff, 0x0, 0xfffffffb]}, 0x715, 0xdd, &(0x7f0000000800)=""/221}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@cgroup, r5, 0x51, 0x6, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r8, 0x84fb000) r9 = socket$netlink(0x10, 0x3, 0x1) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.002781057s ago: executing program 1 (id=3468): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32) unshare(0x68040000) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002007634e2070000000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611885000000000095"], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r2}, 0x38) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffffffb}, 0x50) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000580)={r0, &(0x7f00000003c0)='{\'!\x00', 0x7050c0, &(0x7f0000000400)={@align=0x4, {0x7fff, 0x9, 0x4, 0x8}}, 0x3ff, &(0x7f0000000440), &(0x7f0000000540)=0x81}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) (async) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4, 0x2, 0x4, {r4, r5/1000+10000}, {0x77359400}, {0x2}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x21, 0x1, 0x0, 0x0, "5f10ffc03aef1447b070836d9a36fa6d743aa6d78551720f4cd10e902128efc8549496d5473aa9f36752e408c141c3d69541fe263414a04180e209e457cfd7d9"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008804) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r2}, 0x38) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) unshare(0x2c020400) (async) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) 2.648117951s ago: executing program 1 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x7ff0000}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000e40)=""/237, 0xed}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000600)=""/252, 0xfc}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa29d1b6714e3e4b}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20040000) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000006100000000a582448dbeaa7b7002e8ecb17c652332d4f97788e36dbe61aa21bfb918fb6105a8e3153e0e95630621ff626207cf0d"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = epoll_create1(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r8, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000080)={0x14}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r10, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) sendto$l2tp6(r5, 0x0, 0x0, 0x54, &(0x7f0000000180)={0xa, 0x0, 0x10000, @mcast2, 0xfffffffa, 0x4}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@loopback, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x5}, {}, 0x0, 0x60, 0x0, 0x0, 0x2, 0x3}}}, 0xc0}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0xffffffffffff8000, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0xbc, 0x5a}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x4f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) 2.550258122s ago: executing program 0 (id=3471): socket$nl_xfrm(0x10, 0x3, 0x6) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802001e0000000000000000f9dfffff8500c1194426df4e940000300000009500e4ffae023a3d"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x1, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0x7fffffff, 0xe}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe1f0, 0x9, 0xc1c5, 0xe44}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r9, 0x11, 0x64, 0x0, &(0x7f00000000c0)) (async) connect(0xffffffffffffffff, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) (async) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.469541725s ago: executing program 3 (id=3472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x4, 0xba) syz_emit_ethernet(0x72, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0xd8, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@generic={0xc63d3f4df91ef3bd, 0xf, "235c1a31eca6cc935d0fe664ed"}, @noop, @lsrr={0x83, 0x3, 0x36}, @ssrr={0x89, 0x1b, 0x38, [@loopback, @multicast1, @multicast1, @multicast1, @loopback, @private=0xa010101]}]}}, {{0x0, 0x0, r3, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@eol, @timestamp={0x8, 0xa, 0x6, 0x10}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1c0800450000280067000002069078ac141431ac1414aa00004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="5cc200009477fff9"], 0x0) 2.427882443s ago: executing program 2 (id=3473): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) 2.250194173s ago: executing program 3 (id=3475): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$nci(r2, &(0x7f0000000280)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x20, "813ef89fd104c304d0d0c9e09aabc2aeb68a06e8a3620433dcc4b1b42b2bdb79"}, 0x23) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x38, r5, 0xa01, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040000) read$nci(r2, 0x0, 0x0) unshare(0x20000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x200204) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000240)={0xfffffffffffffff8, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000080)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0x2}) sendfile(r1, r8, 0x0, 0x5) 2.153943054s ago: executing program 2 (id=3476): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x2000009, 0x4) setsockopt(r0, 0x83, 0x23, &(0x7f00000000c0)="020c00000180118fd817a5c4", 0xc) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c060000) unshare(0x2000800) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x2000009, 0x4) (async) setsockopt(r0, 0x83, 0x23, &(0x7f00000000c0)="020c00000180118fd817a5c4", 0xc) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) unshare(0x2c060000) (async) unshare(0x2000800) (async) unshare(0x2c020400) (async) 1.98927646s ago: executing program 2 (id=3478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) getsockname(r2, 0x0, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x3, 0x7622091, 0x9, 0x5200, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.834044345s ago: executing program 0 (id=3480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0xffffbe05, {{0xe, 0x4, 0x0, 0x2, 0x38, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x7, 0xa, "4206a8541b6b5099"}]}, @rr={0x7, 0xb, 0xbc, [@multicast1, @private=0xa010100]}, @rr={0x7, 0x7, 0xe6, [@multicast1]}]}}}}}) sendto$packet(r2, &(0x7f00000000c0)="a8dac12c3db8d6d14bc3e2181f1b07b51148c819bdbce7119658f5699ed9e903d8873cbbe07f578a929bf3af8b04af03217d30e63d5422012180b36d01c6125541446c23a3cd7a5699e97176cc534ee21e1e6d2d1c2d2f8899d3b0f6261fef2802c567a5c3b24aff62b22715b7d332c098365cafbbbec59ea6c0703ee2634fac91caa0bcc29c496917598ef0bc80eaea8e06cf2411f6161f0c7789ffcd20a09274c1828bf074ede049676d8eb014b7a6ec622ddfb7ce89609cae2c30099abcbfb94b24d20be15915bdb963", 0xcb, 0x85, &(0x7f00000002c0)={0x11, 0xb, r3, 0x1, 0x92, 0x6, @broadcast}, 0x14) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.83380802s ago: executing program 4 (id=3481): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffb9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.772758678s ago: executing program 2 (id=3482): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002000080000001b00000000001700000058dcdd5c3000"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000025a5, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703ca", 0x20}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b", 0x73}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x182}], 0x1}}], 0x2, 0x2090) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000f800ffff91118a00"/32], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x94) sendmsg$802154_raw(r5, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8018}, 0x8080) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) close(0x4) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0x5f, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001, 0x2f00, 0xfffffffe, 0xb}}) 1.62947188s ago: executing program 1 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000080)='@]\')-\x00', 0x105400, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x7]}, {0xf565, 0x80, 0x5627}}, 0x9, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}, {[0x4, 0xfffffffe, 0x3, 0x3]}, 0x2a03, 0x35, &(0x7f0000000180)=""/53}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000000)="bd50fe378ff4ce0deec9c588af654e25b4c71d24436f6d0a96c1d14ec728502d999444c2646fbdd808db5d13fbbce029a1f07375162aeec15eb6d8418cbc02969e111905da8a8fd44c44602538de7ad12d2af09b2e9aece1b680703acb22c641321990566bf1eade8fe6cbea609ab5510a2032b414be867c001160ee", &(0x7f0000000340)=@udp6=r1}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 1.594035352s ago: executing program 4 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)={0x2c, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@nested={0x5, 0x59, 0x0, 0x1, [@generic='\b']}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x298, 0x130, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x3, 0x0, [0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 1.516235423s ago: executing program 0 (id=3485): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000844) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x70, 0xa8, @random="cbf86688a1c078e26ba0cc497ac472709d5f2b6b0542686856f426ae3941e88ed6d59cad87cd6bb173767a1e556a085ab444692148e856cbb8856da454907610ce8e28e8f8919b919e007c61d2497ad2ee03870f6059f1974a990cc4d65a632c38e7d127963ccdb147a77c6d"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x200}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000051}, 0x24000000) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r6, &(0x7f0000000600)="ec31195385c8e6b3f96ca1ff992fbb2a211935971481635f6bb81b48f6c6b7d1df3146254d61e0ac8306fa19e169bb4410b9a51b10fcbe601f552ecbe34dd55fd16d1349f81b7f6a12c9500fa08279a9a007fa60e63d3a866c61c9b2d90ea417798e263b217773824684b2ab9d3d7f6e0506f2eefedf8f308d85b32a9dd155fecf6b52434793c80ce7c67a2fac0d10e460c341e6d5c6fe7b0a2eed82a2e848d61e63c37ec09e9d643bb0a472da71442a6553", &(0x7f00000006c0)=""/223}, 0x20) r7 = accept(r0, &(0x7f0000000800)=@ax25={{0x3, @null}, [@remote, @null, @remote, @null, @rose, @rose, @netrom, @default]}, &(0x7f0000000880)=0x80) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r6, 0x7c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x350, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1cc, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe4, 0x1, "ee914c7d2ac330d7cd73dece4cb86113dad1323ed9c02576ccfd3ecc5aa70ba44495353371efe3aa785013115ac7f681fb63724680fe73e88b215b236c78f266923f2be506b8584965f9c19dc3834aeef6f95f33ccee112a353a8059ec0009ed4f617a32261effb47c1d967597a5d5b67da9a8f8c7615f7028b340fcc071bc4d12775fa5a9eda6380fb8f64238d9ae79c8f1e7c0909d7ed600e6a8f76488549e2761b0ab1d0622d4c974fa63cc673301dc88e098e9b46a50ea534d0d5b2065b369ccc570d14e6dc85071cb4385c59c01ff5f2988487f87e508e944b65913d0a4"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd9, 0x2, "d959a6a574c7b48f71817fa82099cd5dd561de1b05386ff8235648e90aed2fa1843d47f590e60cbf20d871cb8ba4dd5bd46ef8b0b673a62493774e4fd67f8596212c09b0a77c6a76b2a87e2b8d6e4dbd42a122b1dc419f21035ed32dbe38f955ecea0dfd7a1d09df216667067e2cdb90eaac6d3a0102b8f4fdec4e31ac7d41b7baedabf7bd5507bcbab3be7abae60c9c4397c621a4b6b91640eb8ecd8e5fda7a56a1c29ea8ba936c763ade65478a0b74bf5d691daa1ed9df1c7b909f9979d8ecab5d230e80436cebd0855ae934a112465a51c65a78"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa9, 0x2, "3d1c8be7614e5fc564b962b41d830d2017671998457bc8a7010758c18f294b0179d0ed807206e68a3bb1f3644f9bdba1fe86088445862e1207efa9f95c36d2624f0fee7dc284f3c7f246315d38405970d3c323f2060d590a5166ead150b24abdd2a2d4003145f1d70e9cc4769ff6b34bc0d2d8e75dfcf4041b53ecb43c385a0b9b2b9e902a3656f94e6eb9f9269c14dc8a273cc60f5622493ef587485202629a9cf2ee25ad"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8001}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7e, 0x2, "0d3b910f4cd2975b4197be91ef04365d21ed679915d33e4f487eb1c3af136d044a23186d92ce6603ac78e9e91d30ddcfe86b302f04836976eb602843bb12ce4426fed5ecae42db1dd049bf2fe485f0fea02c4688e69625dd1b85df245fac0cb0c73d72223482c713369f674f911bfc6a2429c22a278a5a68d734"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x400}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x350}, 0x1, 0x0, 0x0, 0x20008801}, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e00)={0x0, 0x1}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e80)={r10, 0x6}, &(0x7f0000000ec0)=0x8) unshare(0x41000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000f00)={0x67, @dev={0xac, 0x14, 0x14, 0x30}, 0x4e20, 0x3, 'wrr\x00', 0x20, 0x6, 0x1}, 0x2c) connect$pppoe(r7, &(0x7f0000000f40)={0x18, 0x0, {0x0, @remote, 'pimreg1\x00'}}, 0x1e) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000) syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) getpeername$inet6(r11, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001000)=0x1c) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r13, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c0}, 0x1) 1.499059014s ago: executing program 4 (id=3486): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000800) syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x6, 0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet(0x2, 0x1, 0x0) 1.450306622s ago: executing program 0 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000010000108000000002ba0d1b3639670ce5a3ee64fea586c5b59c4d475e9378e8655a6cc76c2fa326190ad9d42187ccf460146f765dc53085876b234b1453d8fda0d101f6c3d251d2d07a76a14bfa9b0194e257b77d825e526fc74a411fef61a", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="14001680100001800c0004000500000009000000"], 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r4, 0x0, 0x856) bind$ax25(r4, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default]}, 0x48) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000740)={0x0, 0x206000, 0x0, 0x3}, 0x20) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd21, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0, 0x4}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x40814) 1.25855319s ago: executing program 3 (id=3488): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180110003"], 0x40}}, 0x0) unshare(0x6a040000) r3 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2c8, 0x0, 0x3e8, 0x0, 0x4b8, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x32, 0x5}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "28c2"}}, @common=@mh={{0x28}, {"af63"}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0x0, 0xff, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff000000], 'vlan1\x00', 'veth1\x00', {}, {0xff}, 0x1d, 0x8, 0x2, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000500", @ANYRES16=r8, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r7, 0xf, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r11, @ANYBLOB="08000a007461a097a3cbdddffdd891", @ANYRES32=r11, @ANYBLOB], 0x60}}, 0x8000) sendto(r4, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.160287821s ago: executing program 0 (id=3489): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x64}}, 0x10804) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f01) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000620000000000000000008007120a5cf963d365ba300000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r8) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 859.010343ms ago: executing program 2 (id=3490): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x57930}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x804) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x1}, 0x48100) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfce) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r5, r4, 0x2f, 0x203e, 0x4}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 633.099086ms ago: executing program 2 (id=3491): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @remote, @rose, @default, @default, @netrom, @rose, @bcast]}, &(0x7f0000000300)=0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x24060400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c0002800800014000000004080002400000009408000340000000000900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000540)={0x3, @null, r3}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000003700)=""/4075, 0xfeb}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000000)=""/189, 0xbd}, {&(0x7f00000001c0)=""/145, 0x91}], 0x7}, 0x11000) 536.423507ms ago: executing program 4 (id=3492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0x10, 0x0, &(0x7f00000000c0)="2b206d074843b39773764e72e6167ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x5, 0x1, 0x6]}, &(0x7f0000000080)=0xa) syz_emit_ethernet(0x2f7, &(0x7f0000000980)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x18, 0x4, 0x1, 0x3a, 0x2e9, 0x64, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x2f, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast1, @loopback, @empty, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x34, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb3, 0x1, [], "57ec4757c06c4e2592b8ec0809dff816e43dcef5239e3cf52d1dc85497644bcf3b6edbe06c3a8f82b47950837b9996b06d3844b3f96f26ccf7a5eac152f92bdbddd5e49d1e9f931faaad84eb7a19abc3b29f48932d272359db84643b7367244cc3e69697c2cf2e59677d66f275669b7cc983b0ad237d32dca2557335a47819bb25618623ad6a6e337134e829958550e473b30fe25bc2a103aa8ba7d222a3248cc968f761479a58e00dcc23a0ff81886206573c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1000, 0x5], "5df30cbcfb64f7f7f416db1a1afe0fd7073da0ef97e90f03904a49b4b111d809b6a58aff01ecef5e5e4863f385ab46e26209a86a8773db11c89af100dd443d3bf74b7a1cfd2667e9f8f3eff828bffba54d9406cb364ef84d5bb7d5252af96c1759c5e1f907ca1bbf6974b5d7b0d665b7865399f39e62d1ad"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7d8379317c4627776c161ac1bc94d9522588eadb4d6257caeddd157c51d34fb7ab31f2334b232db5e074b84773bd07ea38304171fcaf75721f3a9cc3ec13eefb562670ef80a481d33ef0dd8019625831377aaaf820aa45c517e57e9c8cbb01681dffdd5429924403fc884107805c10e537cf7f8b089124512d47660e30ff928971410a9307cf8fafc1c217cac8e7b51a21703bc3eb9f963e96e9557d44dd3f0e79d58f6ad1f04038bef1d8b4e24c9ce92a33d3"}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0xae, 0x3, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0xf, 0x2, 0x9, 0x1, 0x1, 0x2, 0x4, 0x81}, 0x2, {0x7044, 0x4, 0x0, 0xe, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "7f3299a9da12eb092c68347386830ba83cbc33b59cb61d5f45f709abae7c406bbb1568e683f253bac40f0d86ad366484b239b33aaa042303214c4ab3b46b13799f3303bd596b9f1857b30363d1a4738d69ea5fa5c8425d66102c5fa68d4a9c179cbe4d"}}}}}}, 0x0) 410.985578ms ago: executing program 4 (id=3493): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r0 = socket(0x10, 0x2, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r2, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x4001) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000010}, 0x4040004) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c116869060035a6f0e6e2e184ee36a18f000000", @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32=r5, @ANYBLOB="080201006f453744ce268c0e4901328482dd4222d06566237d6b733dbd01b69d6f632803cedc76902814667c57f951f158b3173dfa2c317900f8d360029072461f6f2419f807aa1fef50e5e2e55418ba907eb921e246aa0cc2c0a145709add445f6d1079dd34113a6c3f1d40b420ff8393", @ANYRES32=0x0, @ANYBLOB="4b5ed7deeaaf6fcce7866695cccf43283a4440c04aaac8e4e0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000020) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xa, @mcast1, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24008054) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000040)={0x1ff, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x2, 0x10, r7, 0xa05e2000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000006, 0x6e073, r7, 0x0) 245.595948ms ago: executing program 0 (id=3494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="d956d860d8dcf4a2720288082da5df8883bbe6fea928477ee93a2bc4031283d674d3fcd99587d4fd3e88e2fa6ba885d56a787c4ece112c11ea324f8eab5105efa569310e69a6a1e3215f86a9d535f2939c569f79c6676f1d0a93a9a8388e90a62f59f88b5e3e5bf69413712da888b0d384fcaba7087875e6806653ef619d7d1a84059b7879f1538cd855c623c568625e495b003ad6ce69db1d87cd32f80849f05982796855cff596d38d1256d3558a426e736dbe9489ffc73157a79c9c7e0e30", 0xc0}, {&(0x7f0000001b80)='{3D', 0x3}], 0x2, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000002700, 0x40}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x2000) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x74, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0xc1e889b7fa5038b7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000010000000003000000280001800e0001006574683a766c616e3000000014000280080001"], 0x3c}}, 0x0) 157.90599ms ago: executing program 3 (id=3495): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2908004500002840000000002c9078ac1414bbac1414aa0000000020535d8ae4c891796ed1fd000019e563865241babebfa24165c40240b5eecf30", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 0s ago: executing program 4 (id=3496): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000002c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x0, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000620000280012800b00010065727370616e00001800028004001200060010004e23000006000f00ef2100006d78465ff9ac0ae886ed30d4cd58a703705491a8fed789bd16a31d96c1944816bbccf8084185402d4ca36df5ded20234d6eb66f7953ae31a071e37dbe9757b686f09a4d38184e9d1762588242ab690b1b534f52d25ed582dea71643e563c16ba5a008760d683652f755ee2bb6adfafc9dab399cb73eafe5ed5cc6f64c3f1a634a0e6d0ee9eadb8dfe7608287c7cff91a6f2e80772bb980"], 0x48}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) (async) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = accept4$x25(0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000001500)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000001540)) (async, rerun: 64) r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0xc7b38611ad7e7460, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x7, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x100000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) (async) write$tun(r4, &(0x7f0000000080)=ANY=[], 0xfb5) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r6, 0x4, 0x40, 0x100}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x74, r12, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): 8.433781][T14894] ? __pfx_netlink_unicast+0x10/0x10 [ 428.433810][T14894] ? netlink_sendmsg+0x650/0xb40 [ 428.433856][T14894] ? skb_put+0x11b/0x210 [ 428.433896][T14894] netlink_sendmsg+0x813/0xb40 [ 428.433937][T14894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.433972][T14894] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.434002][T14894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.434030][T14894] ____sys_sendmsg+0x972/0x9f0 [ 428.434064][T14894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.434096][T14894] ? import_iovec+0x73/0xa0 [ 428.434134][T14894] ___sys_sendmsg+0x2a5/0x360 [ 428.434162][T14894] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.434223][T14894] ? __fget_files+0x2a/0x420 [ 428.434255][T14894] ? __fget_files+0x3a0/0x420 [ 428.434298][T14894] __x64_sys_sendmsg+0x1bd/0x2a0 [ 428.434323][T14894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.434356][T14894] ? __pfx_ksys_write+0x10/0x10 [ 428.434393][T14894] do_syscall_64+0x14d/0xf80 [ 428.434424][T14894] ? trace_irq_disable+0x3b/0x150 [ 428.434455][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.434478][T14894] ? clear_bhb_loop+0x40/0x90 [ 428.434506][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.434528][T14894] RIP: 0033:0x7fea4c59c799 [ 428.434555][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.434574][T14894] RSP: 002b:00007fea4a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.434598][T14894] RAX: ffffffffffffffda RBX: 00007fea4c815fa0 RCX: 00007fea4c59c799 [ 428.434614][T14894] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 428.434628][T14894] RBP: 00007fea4a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.434641][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.434654][T14894] R13: 00007fea4c816038 R14: 00007fea4c815fa0 R15: 00007ffde9d8f1f8 [ 428.434690][T14894] [ 429.431952][T14930] lo speed is unknown, defaulting to 1000 [ 429.469183][T14926] __nla_validate_parse: 1 callbacks suppressed [ 429.469204][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 429.584982][T14939] FAULT_INJECTION: forcing a failure. [ 429.584982][T14939] name failslab, interval 1, probability 0, space 0, times 0 [ 429.614803][T14939] CPU: 0 UID: 0 PID: 14939 Comm: syz.0.2197 Not tainted syzkaller #0 PREEMPT(full) [ 429.614836][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.614850][T14939] Call Trace: [ 429.614859][T14939] [ 429.614868][T14939] dump_stack_lvl+0xe8/0x150 [ 429.614906][T14939] should_fail_ex+0x412/0x560 [ 429.614941][T14939] should_failslab+0xa8/0x100 [ 429.614971][T14939] __kmalloc_noprof+0xe8/0x760 [ 429.614997][T14939] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 429.615029][T14939] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 429.615055][T14939] ? __dev_queue_xmit+0x28b/0x3870 [ 429.615085][T14939] genl_family_rcv_msg_doit+0xd9/0x330 [ 429.615109][T14939] ? __asan_memcpy+0x40/0x70 [ 429.615133][T14939] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.615166][T14939] ? apparmor_capable+0x126/0x170 [ 429.615202][T14939] ? bpf_lsm_capable+0x9/0x20 [ 429.615231][T14939] ? security_capable+0x7e/0x2c0 [ 429.615266][T14939] genl_rcv_msg+0x61c/0x7a0 [ 429.615296][T14939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.615318][T14939] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 429.615353][T14939] ? __lock_acquire+0x6b5/0x2cf0 [ 429.615394][T14939] netlink_rcv_skb+0x232/0x4b0 [ 429.615434][T14939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.615458][T14939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.615506][T14939] ? down_read+0x272/0x2e0 [ 429.615524][T14939] ? genl_rcv+0xd/0x40 [ 429.615545][T14939] genl_rcv+0x28/0x40 [ 429.615563][T14939] netlink_unicast+0x80f/0x9b0 [ 429.615601][T14939] ? __pfx_netlink_unicast+0x10/0x10 [ 429.615630][T14939] ? netlink_sendmsg+0x650/0xb40 [ 429.615657][T14939] ? skb_put+0x11b/0x210 [ 429.615697][T14939] netlink_sendmsg+0x813/0xb40 [ 429.615737][T14939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.615770][T14939] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.615800][T14939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.615827][T14939] ____sys_sendmsg+0x972/0x9f0 [ 429.615859][T14939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.615891][T14939] ? import_iovec+0x73/0xa0 [ 429.615928][T14939] ___sys_sendmsg+0x2a5/0x360 [ 429.615956][T14939] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.616013][T14939] ? __fget_files+0x2a/0x420 [ 429.616044][T14939] ? __fget_files+0x3a0/0x420 [ 429.616087][T14939] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.616113][T14939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.616145][T14939] ? __pfx_ksys_write+0x10/0x10 [ 429.616181][T14939] do_syscall_64+0x14d/0xf80 [ 429.616211][T14939] ? trace_irq_disable+0x3b/0x150 [ 429.616242][T14939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.616265][T14939] ? clear_bhb_loop+0x40/0x90 [ 429.616290][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.616312][T14939] RIP: 0033:0x7f241db9c799 [ 429.616332][T14939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.616351][T14939] RSP: 002b:00007f241eb27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.616374][T14939] RAX: ffffffffffffffda RBX: 00007f241de15fa0 RCX: 00007f241db9c799 [ 429.616388][T14939] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 429.616402][T14939] RBP: 00007f241eb27090 R08: 0000000000000000 R09: 0000000000000000 [ 429.616424][T14939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.616437][T14939] R13: 00007f241de16038 R14: 00007f241de15fa0 R15: 00007fff9bf29398 [ 429.616472][T14939] [ 429.678736][T14935] lo speed is unknown, defaulting to 1000 [ 430.147145][T14936] lo speed is unknown, defaulting to 1000 [ 430.240028][T14953] netlink: 'syz.0.2202': attribute type 4 has an invalid length. [ 430.315045][T14958] netlink: 'syz.0.2202': attribute type 4 has an invalid length. [ 430.606457][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 430.875608][T14987] FAULT_INJECTION: forcing a failure. [ 430.875608][T14987] name failslab, interval 1, probability 0, space 0, times 0 [ 430.920349][T14987] CPU: 0 UID: 0 PID: 14987 Comm: syz.1.2209 Not tainted syzkaller #0 PREEMPT(full) [ 430.920380][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.920394][T14987] Call Trace: [ 430.920403][T14987] [ 430.920412][T14987] dump_stack_lvl+0xe8/0x150 [ 430.920449][T14987] should_fail_ex+0x412/0x560 [ 430.920484][T14987] should_failslab+0xa8/0x100 [ 430.920514][T14987] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 430.920541][T14987] ? __alloc_skb+0x1d0/0x7d0 [ 430.920571][T14987] ? __local_bh_enable_ip+0xd0/0x130 [ 430.920606][T14987] __alloc_skb+0x1d0/0x7d0 [ 430.920636][T14987] ? netlink_ack_tlv_len+0x6c/0x210 [ 430.920669][T14987] netlink_ack+0x146/0xa50 [ 430.920695][T14987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.920721][T14987] ? __lock_acquire+0x6b5/0x2cf0 [ 430.920762][T14987] netlink_rcv_skb+0x2b6/0x4b0 [ 430.920793][T14987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.920818][T14987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.920866][T14987] ? down_read+0x272/0x2e0 [ 430.920886][T14987] ? genl_rcv+0xd/0x40 [ 430.920909][T14987] genl_rcv+0x28/0x40 [ 430.920929][T14987] netlink_unicast+0x80f/0x9b0 [ 430.920966][T14987] ? __pfx_netlink_unicast+0x10/0x10 [ 430.920995][T14987] ? netlink_sendmsg+0x650/0xb40 [ 430.921023][T14987] ? skb_put+0x11b/0x210 [ 430.921058][T14987] netlink_sendmsg+0x813/0xb40 [ 430.921099][T14987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.921133][T14987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.921164][T14987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.921192][T14987] ____sys_sendmsg+0x972/0x9f0 [ 430.921223][T14987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.921263][T14987] ? import_iovec+0x73/0xa0 [ 430.921300][T14987] ___sys_sendmsg+0x2a5/0x360 [ 430.921332][T14987] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.921393][T14987] ? __fget_files+0x2a/0x420 [ 430.921424][T14987] ? __fget_files+0x3a0/0x420 [ 430.921467][T14987] __x64_sys_sendmsg+0x1bd/0x2a0 [ 430.921493][T14987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.921525][T14987] ? __pfx_ksys_write+0x10/0x10 [ 430.921561][T14987] do_syscall_64+0x14d/0xf80 [ 430.921592][T14987] ? trace_irq_disable+0x3b/0x150 [ 430.921623][T14987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.921645][T14987] ? clear_bhb_loop+0x40/0x90 [ 430.921671][T14987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.921693][T14987] RIP: 0033:0x7f12b859c799 [ 430.921713][T14987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.921733][T14987] RSP: 002b:00007f12b9515028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.921757][T14987] RAX: ffffffffffffffda RBX: 00007f12b8815fa0 RCX: 00007f12b859c799 [ 430.921773][T14987] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 430.921787][T14987] RBP: 00007f12b9515090 R08: 0000000000000000 R09: 0000000000000000 [ 430.921800][T14987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.921812][T14987] R13: 00007f12b8816038 R14: 00007f12b8815fa0 R15: 00007fff2057eaf8 [ 430.921846][T14987] [ 431.025720][T14989] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 431.245347][T14993] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 431.274830][T14992] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 431.523435][ T1123] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.532466][ T1123] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.558953][ T1123] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.602656][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.674256][ T1123] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.709383][T15001] syzkaller1: entered promiscuous mode [ 431.714935][T15001] syzkaller1: entered allmulticast mode [ 431.849744][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2213'. [ 431.862979][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 431.872198][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 431.957464][T15008] netlink: 'syz.2.2213': attribute type 6 has an invalid length. [ 431.999921][T15008] netlink: 'syz.2.2213': attribute type 5 has an invalid length. [ 432.024758][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 432.024775][ T3496] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.043174][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 432.057277][T15008] netlink: 'syz.2.2213': attribute type 6 has an invalid length. [ 432.068875][T15008] netlink: 'syz.2.2213': attribute type 5 has an invalid length. [ 432.084570][ T3496] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.122491][ T3496] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.158296][ T3496] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.199363][T15008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2213'. [ 432.264061][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 432.285529][T15035] lo: left allmulticast mode [ 432.290502][T15035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.329572][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 433.181216][T15066] validate_nla: 256 callbacks suppressed [ 433.181237][T15066] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 433.460004][T15075] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 433.498282][T15075] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 433.565369][T15066] bond10: (slave gretap2): making interface the new active one [ 433.592136][T15066] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 433.626675][T15085] pimreg: left allmulticast mode [ 433.792140][T15095] netlink: 'syz.2.2237': attribute type 11 has an invalid length. [ 434.149310][T15110] xt_CT: No such helper "snmp_trap" [ 435.765464][T15107] tipc: Enabled bearer , priority 10 [ 435.969704][T15133] lo speed is unknown, defaulting to 1000 [ 435.983551][T15137] lo: entered allmulticast mode [ 435.989214][T15137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.008806][T15133] lo speed is unknown, defaulting to 1000 [ 436.009729][T15137] tipc: Enabling of bearer rejected, failed to enable media [ 436.033579][T15137] netlink: 'syz.4.2247': attribute type 10 has an invalid length. [ 436.069239][T15133] lo speed is unknown, defaulting to 1000 [ 436.259025][T15146] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.298858][T15147] netlink: 'syz.4.2250': attribute type 30 has an invalid length. [ 436.324450][T15151] veth1: entered allmulticast mode [ 436.341323][T15151] __nla_validate_parse: 326 callbacks suppressed [ 436.341346][T15151] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2251'. [ 436.374535][T15146] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.655892][T15133] infiniband syz0: set down [ 436.672605][T15133] infiniband syz0: added lo [ 436.837917][T15133] RDS/IB: syz0: added [ 436.851386][T15133] smc: adding ib device syz0 with port count 1 [ 436.871237][T15146] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.882613][T15133] smc: ib device syz0 port 1 has no pnetid [ 436.944672][ T8644] lo speed is unknown, defaulting to 1000 [ 436.956775][ T795] lo speed is unknown, defaulting to 1000 [ 436.964832][T15146] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.997757][T15163] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 437.017776][T15163] netlink: 352 bytes leftover after parsing attributes in process `syz.4.2255'. [ 437.050079][T15133] lo speed is unknown, defaulting to 1000 [ 437.067863][T15163] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 437.097460][T15163] netlink: 352 bytes leftover after parsing attributes in process `syz.4.2255'. [ 437.132908][ T3553] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.160772][ T3553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.199791][ T3553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.237816][ T3496] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.402077][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2258'. [ 437.511107][T15180] netlink: 'syz.4.2261': attribute type 11 has an invalid length. [ 437.584294][T15133] lo speed is unknown, defaulting to 1000 [ 437.666005][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 437.685764][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 437.715227][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 437.759550][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 437.789014][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 437.817517][T15182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2262'. [ 438.140032][T15182] macsec0: left allmulticast mode [ 438.269280][T15133] lo speed is unknown, defaulting to 1000 [ 438.275207][ T1123] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.308495][ T1123] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.320604][ T1123] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.330423][ T1123] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.464978][T15199] netlink: 'syz.4.2267': attribute type 62 has an invalid length. [ 438.579926][T15211] netlink: 'syz.0.2269': attribute type 2 has an invalid length. [ 438.597406][T15203] netlink: 'syz.0.2269': attribute type 2 has an invalid length. [ 438.610141][T15205] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 438.622711][T15205] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 438.651906][T15211] !9: entered promiscuous mode [ 438.697948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.807188][T15220] lo: left allmulticast mode [ 438.863715][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.892426][T15220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.058933][T15133] lo speed is unknown, defaulting to 1000 [ 439.352118][T15244] bridge0: port 1(gretap0) entered blocking state [ 439.359678][T15244] bridge0: port 1(gretap0) entered disabled state [ 439.366814][T15244] gretap0: entered allmulticast mode [ 439.388381][T15244] gretap0: entered promiscuous mode [ 439.617525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.727878][T15260] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 439.751632][T15259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.767807][T15133] lo speed is unknown, defaulting to 1000 [ 440.022435][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.279914][T15214] siw: device registration error -23 [ 440.361720][T15282] bond7: entered promiscuous mode [ 440.390366][T15282] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.636338][T15285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.644687][T15285] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 440.656123][T15285] bond7: (slave sit1): Error -95 calling set_mac_address [ 440.675897][T15296] veth1_to_bond: Caught tx_queue_len zero misconfig [ 440.846902][T15305] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 440.958396][T15311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.011631][T15312] 8021q: adding VLAN 0 to HW filter on device bond11 [ 441.116838][T15312] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 441.634689][T15341] x_tables: duplicate underflow at hook 1 [ 441.660441][T15341] __nla_validate_parse: 192 callbacks suppressed [ 441.660462][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 441.719232][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2311'. [ 441.802918][T15345] lo speed is unknown, defaulting to 1000 [ 441.868243][T15345] lo speed is unknown, defaulting to 1000 [ 442.001923][T15364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2316'. [ 442.012009][T15364] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 442.527178][T15388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.536179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.549885][T15388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.559393][ T3496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.607642][T15388] syzkaller1: entered promiscuous mode [ 442.627315][T15388] syzkaller1: entered allmulticast mode [ 442.651141][T15392] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2323'. [ 442.666342][T15392] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2323'. [ 442.959719][T15398] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2325'. [ 443.104116][T15405] netlink: 'syz.4.2326': attribute type 8 has an invalid length. [ 443.240588][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 443.422352][T15426] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 443.491195][T15430] lo speed is unknown, defaulting to 1000 [ 443.633527][T15430] lo speed is unknown, defaulting to 1000 [ 443.746674][T15447] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.779648][T15448] net_ratelimit: 10 callbacks suppressed [ 443.779672][T15448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.794173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.828335][T15448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.838031][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.847408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.856147][T15448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.865259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.964343][T15448] lo speed is unknown, defaulting to 1000 [ 444.040492][T15447] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.169286][T15447] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.316339][T15447] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.483587][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.572568][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.619481][T15448] lo speed is unknown, defaulting to 1000 [ 444.729269][T15469] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2342'. [ 444.843901][ T48] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.857627][T15464] lo speed is unknown, defaulting to 1000 [ 444.943616][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 445.007809][ T3553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.193650][T15464] lo speed is unknown, defaulting to 1000 [ 445.204258][T15481] bridge0: port 2(syz_tun) entered blocking state [ 445.229216][T15481] bridge0: port 2(syz_tun) entered disabled state [ 445.247825][T15481] syz_tun: entered allmulticast mode [ 445.254984][T15481] syz_tun: entered promiscuous mode [ 445.517532][T15491] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2349'. [ 445.981301][T15508] netlink: 'syz.1.2353': attribute type 11 has an invalid length. [ 446.692755][T15531] unsupported nla_type 142 [ 447.114602][T15545] __nla_validate_parse: 2 callbacks suppressed [ 447.114625][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 447.134167][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 447.181889][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 447.236862][T15556] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 447.462916][T15565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2369'. [ 447.617961][T15580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2372'. [ 447.630265][T15580] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2372'. [ 447.656771][T15581] lo speed is unknown, defaulting to 1000 [ 447.662734][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 447.663816][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 447.689851][T15581] lo speed is unknown, defaulting to 1000 [ 447.845676][T15588] lo speed is unknown, defaulting to 1000 [ 447.902169][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2373'. [ 447.988279][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 448.569538][T15612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.595910][T15588] lo speed is unknown, defaulting to 1000 [ 448.639214][T15606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.261824][T15641] x_tables: duplicate underflow at hook 1 [ 449.765170][T15660] ip6gre1: entered promiscuous mode [ 449.831125][ T29] audit: type=1800 audit(1773666476.863:9): pid=15662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2386" name="memory.events" dev="tmpfs" ino=2497 res=0 errno=0 [ 449.854866][T15660] ip6gre1: entered allmulticast mode [ 450.804123][T15697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 450.990559][T15704] bpq0: entered promiscuous mode [ 451.456511][T15722] lo speed is unknown, defaulting to 1000 [ 451.529588][T15722] lo speed is unknown, defaulting to 1000 [ 451.568904][T15717] lo speed is unknown, defaulting to 1000 [ 451.845656][T15734] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 451.889417][T15734] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 452.201568][T15717] lo speed is unknown, defaulting to 1000 [ 452.432355][T15743] __nla_validate_parse: 3 callbacks suppressed [ 452.432383][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 452.603247][T15747] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 452.893721][T15765] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 452.904225][T15762] tipc: Enabling of bearer rejected, failed to enable media [ 452.917505][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 452.928905][T15760] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 453.124264][T15768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2407'. [ 453.168555][T15770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2408'. [ 453.261958][T15777] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20000 [ 453.294851][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 453.415925][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 453.435296][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 453.707173][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 453.751546][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 453.780141][ T3553] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.789383][ T3553] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.809565][ T3553] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.005332][ T3553] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.352161][T15797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2412'. [ 454.490058][T15807] lo speed is unknown, defaulting to 1000 [ 454.627858][T15807] lo speed is unknown, defaulting to 1000 [ 456.016318][T15574] Set syz1 is full, maxelem 65536 reached [ 456.505090][T15857] lo speed is unknown, defaulting to 1000 [ 456.527504][T15860] netlink: 'syz.3.2424': attribute type 2 has an invalid length. [ 456.634961][T15857] lo speed is unknown, defaulting to 1000 [ 456.703040][T15860] : entered promiscuous mode [ 456.976279][T15872] lo speed is unknown, defaulting to 1000 [ 457.230732][T15883] netlink: 'syz.1.2429': attribute type 4 has an invalid length. [ 457.436838][T15890] netlink: 'syz.2.2431': attribute type 58 has an invalid length. [ 457.463873][T15872] lo speed is unknown, defaulting to 1000 [ 457.626073][T15898] netlink: 'syz.2.2434': attribute type 9 has an invalid length. [ 457.959950][T15914] __nla_validate_parse: 3 callbacks suppressed [ 457.959972][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2437'. [ 458.000988][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 458.072028][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 458.093199][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 458.186129][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 458.240724][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 458.247435][ T3496] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.267512][ T3496] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.279269][T15920] netlink: 'syz.1.2439': attribute type 13 has an invalid length. [ 458.336972][ T3496] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.356768][ T1123] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.557615][T15935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.567093][T15935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.582362][T15935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.659885][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 458.785882][ T3496] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.820122][ T3496] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.832975][ T3496] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.844582][ T3496] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.831841][T15972] batadv_slave_1: entered promiscuous mode [ 460.121387][T15968] batadv_slave_1: left promiscuous mode [ 460.368230][ T29] audit: type=1800 audit(1773666487.403:10): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2454" name="memory.events" dev="tmpfs" ino=2373 res=0 errno=0 [ 460.523139][T16007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2457'. [ 460.730072][T16023] lo speed is unknown, defaulting to 1000 [ 460.776080][T16023] lo speed is unknown, defaulting to 1000 [ 460.936539][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 461.005775][T16041] openvswitch: netlink: Key type 30 is not supported [ 461.016554][T16044] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2469'. [ 461.136383][T16051] netlink: 'syz.4.2471': attribute type 13 has an invalid length. [ 461.145171][T16051] netlink: 'syz.4.2471': attribute type 27 has an invalid length. [ 461.914650][T16083] delete_channel: no stack [ 462.074862][T16094] tunl0: Caught tx_queue_len zero misconfig [ 462.081266][T16094] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 462.089701][T16027] batadv_slave_1: entered promiscuous mode [ 462.192165][T16022] batadv_slave_1: left promiscuous mode [ 462.209830][T16096] delete_channel: no stack [ 462.513007][T16113] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 462.529371][T16113] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 462.971486][T16138] __nla_validate_parse: 11 callbacks suppressed [ 462.971510][T16138] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2496'. [ 463.381366][T16158] lo speed is unknown, defaulting to 1000 [ 463.400461][T16158] lo speed is unknown, defaulting to 1000 [ 463.521730][T16163] lo speed is unknown, defaulting to 1000 [ 463.539547][T16169] --map-set only usable from mangle table [ 463.552299][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 463.564672][T16169] xt_hashlimit: size too large, truncated to 1048576 [ 463.789652][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2506'. [ 463.848853][T16178] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2507'. [ 463.960183][T16163] lo speed is unknown, defaulting to 1000 [ 464.034931][T16187] tipc: Enabled bearer , priority 14 [ 464.913731][T16208] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 464.930811][T16208] netlink: 'syz.0.2516': attribute type 4 has an invalid length. [ 464.941425][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 465.224398][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 465.456556][T16233] lo: entered allmulticast mode [ 465.463346][T16235] x_tables: duplicate underflow at hook 4 [ 465.498683][T16233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.648054][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 465.987565][T16264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'. [ 466.004201][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 466.367780][T16289] pimreg: entered allmulticast mode [ 466.413286][T16289] pimreg: left allmulticast mode [ 466.490570][T16292] veth1: entered allmulticast mode [ 466.500642][T16296] lo: Caught tx_queue_len zero misconfig [ 466.525862][T16284] lo speed is unknown, defaulting to 1000 [ 466.535504][T16284] lo speed is unknown, defaulting to 1000 [ 466.865474][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 467.728173][T16342] syzkaller0: entered promiscuous mode [ 467.733825][T16342] syzkaller0: entered allmulticast mode [ 469.522655][T16369] bond0: (slave bridge0): Releasing backup interface [ 469.534608][T16369] bridge_slave_0: left allmulticast mode [ 469.542522][T16369] bridge_slave_0: left promiscuous mode [ 469.548704][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.568058][T16369] bridge_slave_1: left allmulticast mode [ 469.574004][T16369] bridge_slave_1: left promiscuous mode [ 469.581524][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.597092][T16369] bond0: (slave bond_slave_0): Releasing backup interface [ 469.609340][T16369] bond0: (slave bond_slave_1): Releasing backup interface [ 469.621889][T16369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.631355][T16369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.641833][T16369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 469.671348][T16375] __nla_validate_parse: 2 callbacks suppressed [ 469.671370][T16375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2558'. [ 469.850778][T16390] x_tables: duplicate underflow at hook 1 [ 469.881085][T16390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2561'. [ 469.947527][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 470.406603][T16418] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 470.424842][T16416] netlink: 'syz.1.2566': attribute type 4 has an invalid length. [ 470.433518][T16418] netlink: 'syz.0.2565': attribute type 2 has an invalid length. [ 470.447311][T16418] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 470.678340][T16434] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 470.752428][T16440] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 470.842721][T16442] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 470.879586][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2572'. [ 470.926119][T16434] veth17: entered promiscuous mode [ 470.942644][T16434] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 470.954397][ T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 470.964514][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'. [ 470.976939][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.981978][T16442] 8021q: adding VLAN 0 to HW filter on device bond8 [ 471.137854][ T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 471.246866][T16461] netlink: 'syz.1.2575': attribute type 27 has an invalid length. [ 471.318673][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2576'. [ 471.398080][T16461] bridge0: left allmulticast mode [ 471.429973][T16461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.446222][T16461] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.463779][T16461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.625719][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'. [ 471.736147][T16485] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2580'. [ 471.752789][T16490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.926289][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 472.560499][T16536] netlink: 'syz.0.2591': attribute type 10 has an invalid length. [ 472.569103][T16536] syz_tun: left allmulticast mode [ 472.574775][T16536] bridge0: port 2(syz_tun) entered disabled state [ 472.589085][T16536] syz_tun: entered allmulticast mode [ 472.597762][T16536] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 472.607895][T16534] syzkaller1: entered promiscuous mode [ 472.613459][T16534] syzkaller1: entered allmulticast mode [ 472.628626][T16539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2590'. [ 473.073178][T16555] lo speed is unknown, defaulting to 1000 [ 473.095607][T16555] lo speed is unknown, defaulting to 1000 [ 473.134584][T16562] syzkaller0: entered promiscuous mode [ 473.141566][T16562] syzkaller0: entered allmulticast mode [ 473.546063][T16572] xt_bpf: check failed: parse error [ 473.575649][T16572] siw: device registration error -23 [ 473.900753][T16582] netlink: 'syz.2.2602': attribute type 11 has an invalid length. [ 501.460898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.993227][T16596] __nla_validate_parse: 1 callbacks suppressed [ 513.993252][T16596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2603'. [ 514.364263][T16620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 514.398671][T16616] lo speed is unknown, defaulting to 1000 [ 514.406417][T16616] lo speed is unknown, defaulting to 1000 [ 515.160965][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 515.211758][T16641] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2618'. [ 515.377132][T16650] netlink: 'syz.2.2621': attribute type 29 has an invalid length. [ 515.643319][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2627'. [ 515.788043][T16674] netlink: 'syz.1.2630': attribute type 89 has an invalid length. [ 515.861009][T16678] geneve3: entered promiscuous mode [ 515.889214][ T1123] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.919202][ T1123] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.948253][ T3496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.981059][ T3496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.709551][T16703] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 516.740512][T16703] netlink: 'syz.0.2637': attribute type 3 has an invalid length. [ 517.369227][T16720] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2643'. [ 517.520030][T16722] netlink: 'syz.3.2644': attribute type 2 has an invalid length. [ 517.540089][T16722] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2644'. [ 517.668816][T16726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2645'. [ 517.687908][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2645'. [ 517.737541][T16729] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2645'. [ 517.956079][T16737] delete_channel: no stack [ 517.979754][T16739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2649'. [ 518.310324][T16751] ip6gre3: entered promiscuous mode [ 518.315614][T16751] ip6gre3: entered allmulticast mode [ 518.492709][T16763] sock: sock_timestamping_bind_phc: sock not bind to device [ 518.772747][T16779] bpq0: left promiscuous mode [ 519.491687][T16809] __nla_validate_parse: 7 callbacks suppressed [ 519.491709][T16809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2668'. [ 520.511218][T16796] bridge6: entered promiscuous mode [ 520.516603][T16796] bridge6: entered allmulticast mode [ 520.527055][T16796] team0: Port device bridge6 added [ 520.533357][T16805] bridge0: port 1(team0) entered blocking state [ 520.541772][T16805] bridge0: port 1(team0) entered disabled state [ 520.548607][T16805] team0: entered allmulticast mode [ 520.561293][T16805] team0: left allmulticast mode [ 520.566478][T16807] netlink: 'syz.3.2668': attribute type 4 has an invalid length. [ 520.881888][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2672'. [ 521.121904][T16840] lo speed is unknown, defaulting to 1000 [ 521.152031][T16840] lo speed is unknown, defaulting to 1000 [ 521.185819][T16845] lo speed is unknown, defaulting to 1000 [ 521.409847][T16845] lo speed is unknown, defaulting to 1000 [ 521.479649][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2680'. [ 521.528235][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2680'. [ 521.850085][T16870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2683'. [ 522.324142][T16883] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2686'. [ 522.475196][T16882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2685'. [ 522.573027][T16895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2687'. [ 522.588958][T16895] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 522.768104][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2689'. [ 522.796818][T16900] nbd: must specify at least one socket [ 522.980112][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 523.642975][T16937] netlink: 'syz.3.2701': attribute type 3 has an invalid length. [ 523.695652][T16937] block nbd3: NBD_DISCONNECT [ 523.742387][T16927] infiniband !yz!: set down [ 523.747035][T16927] infiniband !yz!: added team_slave_0 [ 523.812912][T16927] RDS/IB: !yz!: added [ 523.820832][T16927] smc: adding ib device !yz! with port count 1 [ 523.889525][T16927] smc: ib device !yz! port 1 has no pnetid [ 524.559296][T16968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2711'. [ 524.597308][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 525.152796][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 525.513711][T17011] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2722'. [ 525.544638][T17011] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 525.553301][T17011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2722'. [ 525.570683][T17015] bond0: Caught tx_queue_len zero misconfig [ 525.799022][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 526.231133][T17030] syzkaller1: entered promiscuous mode [ 526.236688][T17030] syzkaller1: entered allmulticast mode [ 526.384669][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2732'. [ 526.415691][T17043] netlink: 'syz.2.2731': attribute type 21 has an invalid length. [ 526.494022][T17043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2731'. [ 526.529468][T17045] bridge7: port 1(geneve4) entered blocking state [ 526.543418][T17045] bridge7: port 1(geneve4) entered disabled state [ 526.550699][T17045] geneve4: entered allmulticast mode [ 526.559352][T17045] geneve4: entered promiscuous mode [ 526.638414][T17041] lo speed is unknown, defaulting to 1000 [ 526.671932][T17041] lo speed is unknown, defaulting to 1000 [ 526.705636][T17053] netlink: 'syz.0.2735': attribute type 13 has an invalid length. [ 526.713683][T17053] netlink: 'syz.0.2735': attribute type 17 has an invalid length. [ 526.740412][T17053] gre0: left allmulticast mode [ 526.832221][T17053] syz_tun: left promiscuous mode [ 526.886358][T17053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.916429][T17053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.341337][T17073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2740'. [ 528.744865][T17103] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2748'. [ 528.798460][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.808845][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.817566][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.825793][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.834337][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.870608][T17105] bridge0: entered allmulticast mode [ 529.626240][T17102] lo speed is unknown, defaulting to 1000 [ 529.727870][T17102] lo speed is unknown, defaulting to 1000 [ 529.875738][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.045117][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.193185][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.389605][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.899505][ T5845] Bluetooth: hci5: command tx timeout [ 530.949392][ T13] geneve4: left allmulticast mode [ 530.955276][ T13] geneve4: left promiscuous mode [ 530.984303][ T13] bridge7: port 1(geneve4) entered disabled state [ 531.208168][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2762'. [ 531.249401][ T13] ip6gretap0 (unregistering): left promiscuous mode [ 531.275394][ T13] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 531.286910][ T13] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 531.295642][ T13] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 46:c2:d0:4b:c0:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 531.433805][ T13] bond5 (unregistering): (slave erspan1): Releasing active interface [ 531.442225][ T13] erspan1 (unregistering): left promiscuous mode [ 531.469779][ T13] gretap0 (unregistering): left promiscuous mode [ 531.682172][ T13] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 531.690906][ T13] bridge3 (unregistering): left promiscuous mode [ 531.838779][ T13] team0: Port device bridge6 removed [ 531.924591][ T13] bond0 (unregistering): Released all slaves [ 531.936572][ T13] bond1 (unregistering): (slave lo): Releasing backup interface [ 531.945500][ T13] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 531.962727][ T13] bond1 (unregistering): Released all slaves [ 531.980287][ T13] bond2 (unregistering): Released all slaves [ 532.002102][ T13] bond3 (unregistering): Released all slaves [ 532.023177][ T13] bond4 (unregistering): Released all slaves [ 532.038512][ T13] bond5 (unregistering): Released all slaves [ 532.054347][ T13] bond6 (unregistering): Released all slaves [ 532.076060][ T13] bond7 (unregistering): Released all slaves [ 532.093445][ T13] bond8 (unregistering): (slave veth17): Releasing backup interface [ 532.104323][ T13] bond8 (unregistering): Released all slaves [ 532.130978][T17153] netlink: 'syz.0.2761': attribute type 9 has an invalid length. [ 532.202317][ T795] lo speed is unknown, defaulting to 1000 [ 532.217223][T14377] lo speed is unknown, defaulting to 1000 [ 532.334830][ T13] tipc: Disabling bearer [ 532.342022][ T13] tipc: Disabling bearer [ 532.404101][T17169] xt_ecn: cannot match TCP bits for non-tcp packets [ 532.430188][ T13] tipc: Left network mode [ 532.451715][T17172] tipc: Resetting bearer [ 532.493953][T17180] tipc: Enabled bearer , priority 0 [ 532.523514][T17169] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.573976][ T13] IPVS: stopping backup sync thread 15765 ... [ 532.583920][T17169] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.620893][T17172] tipc: Resetting bearer [ 532.729129][T17169] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.765091][T17169] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.980275][ T5845] Bluetooth: hci5: command tx timeout [ 532.982563][T17169] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.019919][T17169] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.153479][ T145] tipc: Resetting bearer [ 533.179021][T17169] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.224862][T17169] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.295702][T17214] x9: renamed from bridge_slave_0 [ 533.511043][T17102] chnl_net:caif_netlink_parms(): no params data found [ 533.642266][ T6587] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.677260][ T6587] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.684266][T17232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.881381][T17121] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.924194][T17121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.117335][T17253] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 534.139179][T17121] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.160626][T17121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.233963][T17253] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 534.348892][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.366794][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 534.406595][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.415585][T17102] bridge_slave_0: entered allmulticast mode [ 534.427956][T17102] bridge_slave_0: entered promiscuous mode [ 534.445763][T17121] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.467455][T17121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.514266][T17272] xt_ecn: cannot match TCP bits for non-tcp packets [ 534.518587][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.531940][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.568201][T17102] bridge_slave_1: entered allmulticast mode [ 534.673627][T17102] bridge_slave_1: entered promiscuous mode [ 534.699657][T17279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2784'. [ 534.744680][T17290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2784'. [ 534.904021][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.991853][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.067633][ T5845] Bluetooth: hci5: command tx timeout [ 535.250268][ T13] hsr_slave_0: left promiscuous mode [ 535.264798][ T13] hsr_slave_1: left promiscuous mode [ 535.688143][T17323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.973396][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 536.054973][T17102] team0: Port device team_slave_0 added [ 536.080312][T17102] team0: Port device team_slave_1 added [ 536.187739][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.207365][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.242041][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.262269][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.276285][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.306616][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.404452][T17337] IPVS: set_ctl: invalid protocol: 39555 229.182.219.106:43509 [ 536.430421][T17102] hsr_slave_0: entered promiscuous mode [ 536.439109][T17102] hsr_slave_1: entered promiscuous mode [ 536.445883][T17102] debugfs: 'hsr0' already exists in 'hsr' [ 536.473326][T17102] Cannot create hsr debugfs directory [ 536.598019][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 536.644037][T17345] netlink: 'syz.0.2792': attribute type 4 has an invalid length. [ 536.874460][ T13] IPVS: stop unused estimator thread 0... [ 537.137279][ T5845] Bluetooth: hci5: command tx timeout [ 537.321356][T17387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 537.349535][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 537.837548][T17414] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 538.026681][T17423] lo speed is unknown, defaulting to 1000 [ 538.450533][T17102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 538.636142][T17102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 538.737911][T17102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 538.763249][T17102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.813978][T17446] netlink: 632 bytes leftover after parsing attributes in process `syz.4.2809'. [ 538.845647][T17446] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 538.859992][T17446] netlink: 174 bytes leftover after parsing attributes in process `syz.4.2809'. [ 538.944529][T17455] lo speed is unknown, defaulting to 1000 [ 539.006080][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.060962][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.093509][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.100754][T17121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.118127][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2810'. [ 539.223462][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.230928][T17121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.524867][T17473] netlink: 'syz.3.2814': attribute type 11 has an invalid length. [ 540.002678][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.136050][T17102] veth0_vlan: entered promiscuous mode [ 540.164347][T17102] veth1_vlan: entered promiscuous mode [ 540.248393][T17102] veth0_macvtap: entered promiscuous mode [ 540.273325][T17102] veth1_macvtap: entered promiscuous mode [ 540.318991][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.355740][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.394271][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.418517][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.460775][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.487612][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.529685][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2820'. [ 540.980904][ T974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.004481][ T974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.367511][T17121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.395404][T17540] netlink: 'syz.3.2823': attribute type 13 has an invalid length. [ 541.408738][T17121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.525499][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 541.570096][T17540] tipc: Resetting bearer [ 541.861078][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 542.065432][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 542.169296][T17561] netlink: 'syz.4.2827': attribute type 1 has an invalid length. [ 542.221539][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2826'. [ 542.333543][T17561] bond12: entered promiscuous mode [ 542.354547][T17561] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.455227][T17568] bond12: (slave bridge9): making interface the new active one [ 542.466206][T17568] bridge9: entered promiscuous mode [ 542.476814][T17568] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 542.493699][T17557] bond0: entered promiscuous mode [ 542.519246][T17557] gretap0: entered promiscuous mode [ 542.527697][T17557] hsr1: entered promiscuous mode [ 542.549063][T17574] syzkaller1: left promiscuous mode [ 542.554355][T17574] syzkaller1: left allmulticast mode [ 542.593112][T17578] 8021q: VLANs not supported on syzkaller1 [ 542.764847][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'. [ 543.034825][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 543.343903][T17617] netlink: 'syz.2.2840': attribute type 21 has an invalid length. [ 543.382036][T17617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'. [ 543.648827][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 543.711123][T17637] bond5: option xmit_hash_policy: invalid value (10) [ 543.746900][T17637] bond5 (unregistering): Released all slaves [ 543.845545][T17636] hsr_slave_1 (unregistering): left promiscuous mode [ 543.863262][T17659] netlink: 'syz.1.2850': attribute type 21 has an invalid length. [ 543.939999][T17659] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2850'. [ 543.995882][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 544.107330][T17663] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 544.115180][T17663] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2852'. [ 544.513695][T17683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.640190][T17681] syzkaller0: entered promiscuous mode [ 544.665606][T17681] syzkaller0: entered allmulticast mode [ 545.473901][T17739] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 547.125699][T17741] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 547.137982][T17741] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 547.146633][T17741] tipc: Resetting bearer [ 547.153353][T17743] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 547.167430][T17743] netlink: 'syz.0.2872': attribute type 3 has an invalid length. [ 547.208191][ T3553] tipc: Resetting bearer [ 547.644888][T17780] __nla_validate_parse: 12 callbacks suppressed [ 547.644911][T17780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2879'. [ 547.688534][T17780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2879'. [ 547.814720][T17789] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2881'. [ 547.834870][T17790] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2881'. [ 547.914452][T17794] netlink: 'syz.1.2882': attribute type 2 has an invalid length. [ 547.946725][T17794] vcan0: tx address claim with dlc 1 [ 548.072639][T17798] tipc: Enabled bearer , priority 0 [ 548.112303][T17797] tipc: Disabling bearer [ 548.479344][T17821] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2891'. [ 548.509456][T17825] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2892'. [ 548.539403][T17828] netlink: 'syz.1.2893': attribute type 5 has an invalid length. [ 548.557640][ T5492] eql: remember to turn off Van-Jacobson compression on your slave devices [ 548.815213][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 549.682219][T17884] batadv_slave_0: Caught tx_queue_len zero misconfig [ 549.864066][T17892] syzkaller0: entered promiscuous mode [ 549.881685][T17892] syzkaller0: entered allmulticast mode [ 549.954807][T17894] lo speed is unknown, defaulting to 1000 [ 550.078855][T17905] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2906'. [ 550.090752][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2906'. [ 550.100813][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2906'. [ 550.314872][T17910] ip6gre4: entered promiscuous mode [ 550.320442][T17910] ip6gre4: entered allmulticast mode [ 550.328001][T17121] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 550.353640][ T8644] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 550.362109][T17121] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 550.759152][T17929] syzkaller0: entered promiscuous mode [ 550.764709][T17929] syzkaller0: entered allmulticast mode [ 550.792101][T17935] veth0: entered promiscuous mode [ 550.887612][ T8644] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 551.148762][ T8644] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 551.255534][T17931] veth0: left promiscuous mode [ 552.602152][T18003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.899994][ T3553] wlan1: Trigger new scan to find an IBSS to join [ 552.912701][T18015] bond6: option mode: invalid value (254) [ 552.948896][T18015] bond6 (unregistering): Released all slaves [ 553.017941][T18012] __nla_validate_parse: 9 callbacks suppressed [ 553.017963][T18012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2933'. [ 553.072496][T18039] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000 [ 553.159404][T18022] lo speed is unknown, defaulting to 1000 [ 553.330344][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2943'. [ 553.684168][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 553.716660][T18075] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2949'. [ 553.739017][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 553.840538][T18077] tipc: Resetting bearer [ 553.922392][T18081] xt_hashlimit: size too large, truncated to 1048576 [ 554.205275][T18090] bond0: entered promiscuous mode [ 554.212149][T18090] syz_tun: entered promiscuous mode [ 554.218968][T18090] debugfs: 'hsr0' already exists in 'hsr' [ 554.224898][T18090] Cannot create hsr debugfs directory [ 554.231267][T18090] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 554.242275][T18090] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 554.521550][T18099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.737511][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 555.208154][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.230688][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.239665][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.256084][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.271261][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 555.359583][T18132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'. [ 555.705618][T18139] bridge9: entered allmulticast mode [ 555.759472][T18128] lo speed is unknown, defaulting to 1000 [ 555.902750][T17121] tipc: Subscription rejected, illegal request [ 555.941969][T18154] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 555.998140][T18154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2966'. [ 556.979071][T18182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2969'. [ 557.000547][T18182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.106452][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2969'. [ 557.278640][T18194] netlink: 'syz.0.2969': attribute type 11 has an invalid length. [ 557.340421][T18197] netlink: 'syz.3.2973': attribute type 1 has an invalid length. [ 557.547357][ T5845] Bluetooth: hci0: command tx timeout [ 557.591691][T18211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2974'. [ 557.651139][T18197] bond6: entered promiscuous mode [ 557.660961][T18197] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.781881][T18206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 557.810822][T18220] netlink: Conntrack attr has 3 unknown bytes [ 557.824917][T18206] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 557.848002][T18206] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 557.867567][ T6593] wlan1: Trigger new scan to find an IBSS to join [ 557.886041][T18206] bond6: (slave wireguard0): making interface the new active one [ 557.897855][T18206] wireguard0: entered promiscuous mode [ 557.909600][T18206] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 557.944342][T18207] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 557.974890][T18207] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 558.013909][T18228] unsupported nlmsg_type 40 [ 558.416646][T18242] lo speed is unknown, defaulting to 1000 [ 558.800834][ T6593] wlan1: Creating new IBSS network, BSSID e2:44:a2:d4:78:f2 [ 558.940484][T18266] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 559.299174][ T13] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 559.627843][ T5845] Bluetooth: hci0: command tx timeout [ 559.657596][ T13] bond10 (unregistering): (slave gretap2): Releasing active interface [ 560.121992][ T13] bond12 (unregistering): (slave bridge9): Releasing backup interface [ 560.130471][ T13] bridge9 (unregistering): left promiscuous mode [ 560.245974][ T13] bond0 (unregistering): Released all slaves [ 560.256738][ T13] bond1 (unregistering): Released all slaves [ 560.274028][ T13] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 560.285558][ T13] bond2 (unregistering): Released all slaves [ 560.307733][ T13] bond3 (unregistering): Released all slaves [ 560.322392][ T13] bond4 (unregistering): Released all slaves [ 560.339248][ T13] bond5 (unregistering): Released all slaves [ 560.360507][ T13] bond6 (unregistering): (slave veth9): Releasing active interface [ 560.377148][ T13] bond6 (unregistering): (slave veth11): Releasing active interface [ 560.386960][ T13] bond6 (unregistering): Released all slaves [ 560.402427][ T13] bond7 (unregistering): Released all slaves [ 560.416889][ T13] bond8 (unregistering): Released all slaves [ 560.435040][ T13] bond9 (unregistering): Released all slaves [ 560.449612][ T13] bond10 (unregistering): Released all slaves [ 560.472785][ T13] bond11 (unregistering): Released all slaves [ 560.495599][ T13] bond12 (unregistering): Released all slaves [ 560.511061][T18266] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 560.590151][T18128] chnl_net:caif_netlink_parms(): no params data found [ 560.729959][T18289] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 560.768013][ T13] : left promiscuous mode [ 561.088069][ T13] tipc: Left network mode [ 561.094120][T18305] bridge0: port 3(gretap0) entered blocking state [ 561.123063][T18305] bridge0: port 3(gretap0) entered disabled state [ 561.166433][T18305] gretap0: entered allmulticast mode [ 561.188578][ T13] IPVS: stopping backup sync thread 8733 ... [ 561.222042][T18305] gretap0: entered promiscuous mode [ 561.228144][T18305] bridge0: port 3(gretap0) entered blocking state [ 561.234802][T18305] bridge0: port 3(gretap0) entered forwarding state [ 561.697308][ T5845] Bluetooth: hci0: command tx timeout [ 561.752041][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.798092][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.805492][T18128] bridge_slave_0: entered allmulticast mode [ 561.840498][T18128] bridge_slave_0: entered promiscuous mode [ 562.027552][T18342] dummy0: entered promiscuous mode [ 562.043215][T18342] dummy0: entered allmulticast mode [ 562.053588][T18345] __nla_validate_parse: 4 callbacks suppressed [ 562.053612][T18345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2995'. [ 562.092320][T18128] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.133137][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.148099][T18128] bridge_slave_1: entered allmulticast mode [ 562.191787][T18128] bridge_slave_1: entered promiscuous mode [ 562.206504][T18347] Bluetooth: MGMT ver 1.23 [ 562.364766][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.412874][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.520737][T18355] netlink: 'syz.0.2999': attribute type 1 has an invalid length. [ 562.717072][T18364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.775262][T18355] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.912990][T18356] bond11: (slave veth7): Enslaving as an active interface with a down link [ 562.925114][T18128] team0: Port device team_slave_0 added [ 563.009333][T18355] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 563.025932][T18355] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 563.067077][T18128] team0: Port device team_slave_1 added [ 563.230429][T18356] sch_tbf: burst 2097152 is lower than device lo mtu (11337746) ! [ 563.413622][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.431047][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.487672][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.502679][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.520949][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.547383][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 563.597531][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.777343][ T5845] Bluetooth: hci0: command tx timeout [ 563.863827][T18393] lo: Caught tx_queue_len zero misconfig [ 563.935203][T18128] hsr_slave_0: entered promiscuous mode [ 563.958766][T18128] hsr_slave_1: entered promiscuous mode [ 563.965301][T18128] debugfs: 'hsr0' already exists in 'hsr' [ 563.971958][T18128] Cannot create hsr debugfs directory [ 564.513528][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3014'. [ 564.526777][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3014'. [ 564.668554][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 564.715421][T18432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3015'. [ 565.128520][T18452] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3020'. [ 565.225619][T18456] macvtap1: mtu less than device minimum [ 565.296121][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3021'. [ 565.594119][T18473] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 565.721442][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3024'. [ 565.892359][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 566.064922][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3024'. [ 566.173511][T18476] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 566.184889][T18476] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 566.224525][T18479] bond6: (slave gretap1): making interface the new active one [ 566.233563][T18479] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 566.302173][T18495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.379585][T18495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.441082][ T13] hsr_slave_0: left promiscuous mode [ 566.924061][ T6587] smc: removing ib device !yz! [ 567.297543][T18524] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3031'. [ 567.705467][T18128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 567.825623][T18552] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3034'. [ 568.313542][T18128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 568.776401][T18128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 568.922360][T18542] lo speed is unknown, defaulting to 1000 [ 568.941334][T18128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 569.135453][T18585] bond0: entered promiscuous mode [ 569.154915][T18585] bond_slave_0: entered promiscuous mode [ 569.172363][T18585] bond_slave_1: entered promiscuous mode [ 569.210287][T18585] syz_tun: entered promiscuous mode [ 569.372880][T18128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.461659][T18128] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.506181][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.513481][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.524159][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 569.681843][T18604] x_tables: duplicate underflow at hook 1 [ 569.736652][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.744265][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.204722][T18620] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 570.351018][T18620] syz_tun: entered promiscuous mode [ 570.394802][T18620] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 570.963624][T18630] bond0: left promiscuous mode [ 570.973494][T18630] bond_slave_0: left promiscuous mode [ 570.997640][T18630] bond_slave_1: left promiscuous mode [ 571.003316][T18630] syz_tun: left promiscuous mode [ 571.065248][T18630] xfrm0: left promiscuous mode [ 571.097989][T18630] xfrm0: left allmulticast mode [ 571.113186][T18630] macsec1: left allmulticast mode [ 571.128527][T18630] bridge0: left allmulticast mode [ 571.141115][T18630] bond5: left promiscuous mode [ 571.150091][T18641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'. [ 571.160065][T18630] bond8: left promiscuous mode [ 571.177293][T18630] bond8: left allmulticast mode [ 571.182919][T18630] vlan2: left allmulticast mode [ 571.191059][T18630] bond0: left allmulticast mode [ 571.198717][T18630] bond_slave_0: left allmulticast mode [ 571.209320][T18630] bond_slave_1: left allmulticast mode [ 571.215160][T18630] syz_tun: left allmulticast mode [ 571.223290][T18630] bond10: left promiscuous mode [ 571.228909][T18630] bond10: left allmulticast mode [ 571.234738][T18630] ip6gre2: left promiscuous mode [ 571.240548][T18630] ip6gre2: left allmulticast mode [ 571.311674][T18630] geneve3: left promiscuous mode [ 571.321216][T18630] ip6gre3: left promiscuous mode [ 571.326419][T18630] ip6gre3: left allmulticast mode [ 571.342544][T18630] ip6gre4: left promiscuous mode [ 571.350431][T18630] ip6gre4: left allmulticast mode [ 571.381761][T18637] lo: left allmulticast mode [ 571.386928][T18637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.529731][T18544] lo speed is unknown, defaulting to 1000 [ 571.566701][T17121] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.587288][T17121] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.617940][T17121] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.642418][T17121] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.660748][T17121] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.679638][T17121] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.697659][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.710786][ T13] IPVS: stop unused estimator thread 0... [ 571.717056][T17121] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.737846][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.757355][T17121] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.785336][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.817282][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'. [ 571.976998][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.113549][T18666] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3051'. [ 572.167502][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 572.470105][T18678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.111938][T18128] veth0_vlan: entered promiscuous mode [ 573.148043][T18128] veth1_vlan: entered promiscuous mode [ 573.310973][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 573.333992][T18128] veth0_macvtap: entered promiscuous mode [ 573.388220][T18128] veth1_macvtap: entered promiscuous mode [ 573.456113][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.516935][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.580155][T17121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.612528][T17121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.637896][T17121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.646858][T17121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.906249][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.948799][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.011746][T17121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.039837][T17121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.132098][T18740] netlink: 4360 bytes leftover after parsing attributes in process `syz.0.3070'. [ 574.575392][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 574.595613][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 574.605541][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 574.615682][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 574.623860][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.674245][T18756] lo speed is unknown, defaulting to 1000 [ 574.864285][T18766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3075'. [ 574.972387][ T5837] syz_tun (unregistering): left promiscuous mode [ 575.219951][T18772] lo speed is unknown, defaulting to 1000 [ 575.375907][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 575.579892][T18789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.605576][T18789] batadv_slave_0: entered promiscuous mode [ 575.643655][T18795] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 575.664901][T18789] batadv_slave_0: entered allmulticast mode [ 575.845249][T18802] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3082'. [ 575.866272][T18789] macsec1: entered promiscuous mode [ 575.873329][T18789] macsec1: entered allmulticast mode [ 575.921423][T18801] netlink: 'syz.4.3083': attribute type 1 has an invalid length. [ 575.933412][T18756] chnl_net:caif_netlink_parms(): no params data found [ 576.096951][T18813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3085'. [ 576.254359][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.261926][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.272449][T18756] bridge_slave_0: entered allmulticast mode [ 576.291388][T18756] bridge_slave_0: entered promiscuous mode [ 576.316277][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.350412][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.407489][T18756] bridge_slave_1: entered allmulticast mode [ 576.495854][T18756] bridge_slave_1: entered promiscuous mode [ 576.583150][T18835] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3091'. [ 576.611419][T18834] xt_connbytes: Forcing CT accounting to be enabled [ 576.620300][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.657848][ T5845] Bluetooth: hci1: command tx timeout [ 576.675717][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.950921][T18847] ipvlan0: entered promiscuous mode [ 577.054110][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 577.071234][T18756] team0: Port device team_slave_0 added [ 577.118208][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 577.188714][T18756] team0: Port device team_slave_1 added [ 577.283304][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.293384][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.321096][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.345879][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.354672][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.386164][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.506390][T18756] hsr_slave_0: entered promiscuous mode [ 577.526106][T18756] hsr_slave_1: entered promiscuous mode [ 577.668512][T18867] veth1: entered promiscuous mode [ 577.673814][T18867] veth1: entered allmulticast mode [ 577.711487][T18875] pim6reg1: entered allmulticast mode [ 577.812343][T18880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.960467][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3106'. [ 578.125774][T18890] netlink: 'syz.3.3107': attribute type 29 has an invalid length. [ 578.249471][T18896] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 578.497553][T18908] __nla_validate_parse: 1 callbacks suppressed [ 578.497574][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3112'. [ 578.520745][T18898] lo speed is unknown, defaulting to 1000 [ 578.739607][ T5845] Bluetooth: hci1: command tx timeout [ 578.746223][T18905] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.170697][T18756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.235148][T18756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.370109][T18756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.449426][T18756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.724746][T18756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.807500][T18954] bridge0: port 3(gretap0) entered disabled state [ 579.814231][T18954] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.822057][T18954] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.838396][T18954] bridge0: entered allmulticast mode [ 579.884933][T18756] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.935311][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.942590][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.973185][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.980488][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.030968][T18959] gretap0: left allmulticast mode [ 580.036171][T18959] gretap0: left promiscuous mode [ 580.042189][T18959] bridge0: port 3(gretap0) entered disabled state [ 580.052787][T18959] bridge_slave_1: left allmulticast mode [ 580.058688][T18959] bridge_slave_1: left promiscuous mode [ 580.064899][T18959] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.076058][T18959] bridge_slave_0: left allmulticast mode [ 580.082108][T18959] bridge_slave_0: left promiscuous mode [ 580.088546][T18959] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.153557][T18966] bond1: option lp_interval: invalid value (0) [ 580.160013][T18966] bond1: option lp_interval: allowed values 1 - 2147483647 [ 580.173470][T18966] bond1 (unregistering): Released all slaves [ 580.294107][T18972] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3126'. [ 580.318756][T18972] netlink: 'syz.1.3126': attribute type 2 has an invalid length. [ 580.326559][T18972] netlink: 'syz.1.3126': attribute type 1 has an invalid length. [ 580.376988][T18973] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 580.382950][T18756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.407574][T18973] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 580.765274][T18756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.818518][ T5845] Bluetooth: hci1: command tx timeout [ 580.852791][T18987] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3129'. [ 580.884317][T18756] veth0_vlan: entered promiscuous mode [ 580.923158][T18756] veth1_vlan: entered promiscuous mode [ 581.019019][T18991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3130'. [ 581.071488][T18756] veth0_macvtap: entered promiscuous mode [ 581.099889][T18756] veth1_macvtap: entered promiscuous mode [ 581.174710][T18756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.226206][T18756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.289163][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.320024][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.356665][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.375810][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.542537][T19010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3137'. [ 581.611295][T19010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 581.620952][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.639452][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.709919][T19010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 581.759549][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.799879][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.865414][T19024] netlink: 'syz.3.3140': attribute type 21 has an invalid length. [ 581.937836][T19024] netlink: 'syz.3.3140': attribute type 20 has an invalid length. [ 582.099156][T19035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.215264][T19039] bond9: option mode: invalid value (254) [ 582.250935][T19039] bond9 (unregistering): Released all slaves [ 582.329188][T19042] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 582.431964][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.454022][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.463917][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.473181][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.481610][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.623789][ T5828] bond0: (slave syz_tun): Releasing backup interface [ 582.741410][T19058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3148'. [ 582.792713][T19061] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3148'. [ 582.843035][T19048] lo speed is unknown, defaulting to 1000 [ 582.898791][ T5835] Bluetooth: hci1: command tx timeout [ 583.112298][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 583.121696][T19075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3152'. [ 583.400758][T19093] openvswitch: netlink: IP tunnel dst address not specified [ 583.651182][ T6593] gretap0: left allmulticast mode [ 583.663484][ T6593] gretap0: left promiscuous mode [ 583.678073][ T6593] bridge0: port 1(gretap0) entered disabled state [ 584.085342][ T6593] bond9 (unregistering): (slave gretap1): Releasing active interface [ 584.113182][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 584.577779][ T5835] Bluetooth: hci4: command tx timeout [ 584.614151][ T6593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.624945][ T6593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.635150][ T6593] bond0 (unregistering): Released all slaves [ 584.650700][ T6593] bond1 (unregistering): Released all slaves [ 584.674183][ T6593] bond2 (unregistering): Released all slaves [ 584.697130][ T6593] bond3 (unregistering): Released all slaves [ 584.716994][ T6593] bond4 (unregistering): Released all slaves [ 584.753769][ T6593] bond5 (unregistering): Released all slaves [ 584.775733][ T6593] bond6 (unregistering): Released all slaves [ 584.802140][ T6593] bond7 (unregistering): Released all slaves [ 584.821370][ T6593] bond8 (unregistering): Released all slaves [ 584.842939][ T6593] bond9 (unregistering): Released all slaves [ 584.872447][ T6593] bond10 (unregistering): Released all slaves [ 584.888820][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3171'. [ 584.907069][ T6593] bond11 (unregistering): (slave veth7): Releasing active interface [ 584.924409][ T6593] bond11 (unregistering): Released all slaves [ 584.959356][T19109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'. [ 584.999506][T19137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3171'. [ 585.155508][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3171'. [ 585.230700][ T6593] !9: left promiscuous mode [ 585.385222][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 585.437032][ T6593] tipc: Left network mode [ 585.933269][T19048] chnl_net:caif_netlink_parms(): no params data found [ 586.241919][T19180] team0: entered promiscuous mode [ 586.247113][T19180] team_slave_0: entered promiscuous mode [ 586.280877][T19180] team_slave_1: entered promiscuous mode [ 586.337981][T19186] netlink: 'syz.2.3181': attribute type 2 has an invalid length. [ 586.364327][T19186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.613332][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 586.657611][ T5835] Bluetooth: hci4: command tx timeout [ 586.798370][T19204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3183'. [ 586.882983][T19204] netlink: 'syz.1.3183': attribute type 4 has an invalid length. [ 586.891044][T19204] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 586.899799][T19204] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3183'. [ 586.956661][T19207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3186'. [ 586.962693][T19048] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.987660][T19048] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.005859][T19048] bridge_slave_0: entered allmulticast mode [ 587.028560][T19048] bridge_slave_0: entered promiscuous mode [ 587.162051][T19048] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.193630][T19048] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.220495][T19048] bridge_slave_1: entered allmulticast mode [ 587.271599][T19048] bridge_slave_1: entered promiscuous mode [ 587.631464][T19236] xt_CT: No such helper "netbios-ns" [ 587.712975][T19211] syzkaller1: entered promiscuous mode [ 587.730069][T19211] syzkaller1: entered allmulticast mode [ 587.979456][T19048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.037127][T19048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.124013][T19048] team0: Port device team_slave_0 added [ 588.136350][T19048] team0: Port device team_slave_1 added [ 588.297647][T19048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.304668][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.387268][T19048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.447887][T19048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.454905][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.547455][T19048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.604624][ T6593] hsr_slave_0: left promiscuous mode [ 588.614829][ T6593] hsr_slave_1: left promiscuous mode [ 588.621506][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.635534][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.737362][ T5835] Bluetooth: hci4: command tx timeout [ 588.868910][ T1123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.887261][ T6593] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 589.138743][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.146682][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.236779][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.251721][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.414231][ T6587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.455512][ T6587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.474610][T19048] hsr_slave_0: entered promiscuous mode [ 589.483767][T19048] hsr_slave_1: entered promiscuous mode [ 589.491328][T19048] debugfs: 'hsr0' already exists in 'hsr' [ 589.498502][T19048] Cannot create hsr debugfs directory [ 589.504215][ T6587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.514277][ T6587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.729408][ T6593] IPVS: stop unused estimator thread 0... [ 589.965299][T19278] __nla_validate_parse: 2 callbacks suppressed [ 589.965323][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 589.983066][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'. [ 590.354634][T19230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.406827][T19048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 590.518319][T19284] netlink: 'syz.1.3203': attribute type 3 has an invalid length. [ 590.554016][T19048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 590.632997][T19048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 590.692631][T19048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.817729][ T5835] Bluetooth: hci4: command tx timeout [ 591.027696][T19314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3209'. [ 591.044415][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3207'. [ 591.081937][T19317] openvswitch: netlink: Message has 2 unknown bytes. [ 591.110252][T19307] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3207'. [ 591.192630][T19048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.285237][T19048] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.318340][T19327] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3210'. [ 591.398994][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.406271][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.449632][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 591.631360][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.638593][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.687675][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 591.696832][T19335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 591.737507][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 591.785590][T19048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.868686][T19048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.038857][T19355] x_tables: duplicate underflow at hook 3 [ 592.535522][T19048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.680714][T19048] veth0_vlan: entered promiscuous mode [ 592.691947][T19375] netlink: 'syz.2.3219': attribute type 1 has an invalid length. [ 592.724544][T19048] veth1_vlan: entered promiscuous mode [ 592.960189][T19048] veth0_macvtap: entered promiscuous mode [ 592.994450][T19048] veth1_macvtap: entered promiscuous mode [ 593.026161][T19048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.060250][T19048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.108897][ T6589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.128523][ T6589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.158452][ T6589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.222662][ T6589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.329561][T19394] 8021q: VLANs not supported on nlmon0 [ 593.347523][T19395] 8021q: VLANs not supported on nlmon0 [ 593.410086][T17121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.441004][T17121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.545521][T17121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.567488][T17121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.222663][T19427] lo speed is unknown, defaulting to 1000 [ 594.922872][T19472] x_tables: duplicate underflow at hook 1 [ 595.995003][T19504] ipvlan2: entered promiscuous mode [ 596.118798][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.134912][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.146977][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.159740][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.167721][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.299885][T19511] lo speed is unknown, defaulting to 1000 [ 597.139673][T19534] bond1: option primary_reselect: invalid value (4) [ 597.209701][T19534] bond1 (unregistering): Released all slaves [ 597.959722][T17121] bridge_slave_1: left allmulticast mode [ 597.976021][T17121] bridge_slave_1: left promiscuous mode [ 597.988232][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.018085][T17121] x9: left allmulticast mode [ 598.025244][T17121] x9: left promiscuous mode [ 598.042000][T17121] bridge0: port 1(1x9) entered disabled state [ 598.083879][T17121] veth0_to_bond: left allmulticast mode [ 598.092967][T17121] veth0_to_bond: left promiscuous mode [ 598.108273][T17121] bridge2: port 2(veth0_to_bond) entered disabled state [ 598.132901][T17121] veth6: left allmulticast mode [ 598.138449][T17121] veth6: left promiscuous mode [ 598.143730][T17121] bridge2: port 1(veth6) entered disabled state [ 598.180127][T17121] pimreg: left allmulticast mode [ 598.260687][ T5835] Bluetooth: hci2: command tx timeout [ 598.323546][T19585] xt_HMARK: spi-set and port-set can't be combined [ 598.462022][T17121] gretap0 (unregistering): left promiscuous mode [ 598.492929][T17121] bond4 (unregistering): (slave gretap1): Releasing active interface [ 598.988675][T17121] bond1 (unregistering): Released all slaves [ 599.003996][T17121] bond2 (unregistering): Released all slaves [ 599.020427][T17121] bond3 (unregistering): Released all slaves [ 599.035216][T17121] bond4 (unregistering): Released all slaves [ 599.050618][T17121] bond0 (unregistering): left promiscuous mode [ 599.065716][T17121] bond0 (unregistering): Released all slaves [ 599.108714][T17121] bond5 (unregistering): Released all slaves [ 599.133059][T17121] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 599.142628][T17121] wireguard0: left promiscuous mode [ 599.157015][T17121] bond6 (unregistering): (slave wireguard1): Releasing backup interface [ 599.167116][T17121] bond6 (unregistering): Released all slaves [ 599.185328][T17121] bond7 (unregistering): Released all slaves [ 599.203420][T17121] bond8 (unregistering): Released all slaves [ 599.313697][T19511] chnl_net:caif_netlink_parms(): no params data found [ 599.446324][T19597] __nla_validate_parse: 6 callbacks suppressed [ 599.446345][T19597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3265'. [ 599.522999][T19601] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 599.542875][T17121] : left promiscuous mode [ 599.593686][T19589] lo speed is unknown, defaulting to 1000 [ 599.751677][T17121] tipc: Disabling bearer [ 599.767649][T17121] tipc: Disabling bearer [ 599.776166][T17121] tipc: Left network mode [ 600.165345][T19511] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.172959][T19511] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.181920][T19511] bridge_slave_0: entered allmulticast mode [ 600.199633][T19511] bridge_slave_0: entered promiscuous mode [ 600.295095][T19511] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.304956][T19511] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.339283][ T5835] Bluetooth: hci2: command tx timeout [ 600.345426][T19511] bridge_slave_1: entered allmulticast mode [ 600.368880][T19511] bridge_slave_1: entered promiscuous mode [ 600.603049][T19511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.624330][T19511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.746806][T19511] team0: Port device team_slave_0 added [ 600.780923][T19511] team0: Port device team_slave_1 added [ 600.878591][T19511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.885604][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.911928][T19511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.924608][T19511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.931754][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.959390][T19511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.204408][T19511] hsr_slave_0: entered promiscuous mode [ 601.213320][T19511] hsr_slave_1: entered promiscuous mode [ 601.220323][T19511] debugfs: 'hsr0' already exists in 'hsr' [ 601.226285][T19511] Cannot create hsr debugfs directory [ 601.698438][T19650] netlink: 'syz.4.3273': attribute type 16 has an invalid length. [ 601.708550][T19650] netlink: 'syz.4.3273': attribute type 3 has an invalid length. [ 601.716338][T19650] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3273'. [ 601.729644][T17121] hsr_slave_0: left promiscuous mode [ 601.735697][T17121] hsr_slave_1: left promiscuous mode [ 601.746153][T17121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.754806][T17121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.008227][T17121] team0 (unregistering): Port device team_slave_1 removed [ 602.028702][T17121] team0 (unregistering): Port device team_slave_0 removed [ 602.155403][ T6587] smc: removing ib device syz0 [ 602.421071][ T5835] Bluetooth: hci2: command tx timeout [ 603.314872][T17121] IPVS: stop unused estimator thread 0... [ 603.384700][T19627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.421609][T19511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 603.525521][T19511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 603.597842][T19511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 603.619619][T19654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.652972][T19511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 603.665356][T19656] xt_connbytes: Forcing CT accounting to be enabled [ 603.735101][T19658] netlink: 'syz.4.3276': attribute type 10 has an invalid length. [ 603.795917][T19658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.811711][T19668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.860966][T19658] team0: Port device bond0 added [ 603.936570][T19668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.997862][T19668] macvtap0: entered promiscuous mode [ 604.159593][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 604.227621][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 604.394014][T19511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.504626][ T5835] Bluetooth: hci2: command tx timeout [ 604.524691][T19511] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.650281][T17121] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.657544][T17121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.702585][T17121] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.709839][T17121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.961783][T19726] netlink: 'syz.2.3287': attribute type 13 has an invalid length. [ 604.996055][T19726] netlink: 'syz.2.3287': attribute type 17 has an invalid length. [ 605.129489][T19726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.142339][T19726] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.168719][T19726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.266394][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3288'. [ 605.302030][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3288'. [ 605.517561][T19511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.796983][T19511] veth0_vlan: entered promiscuous mode [ 605.942211][T19511] veth1_vlan: entered promiscuous mode [ 606.053107][T19758] syzkaller0: entered promiscuous mode [ 606.062232][T19758] syzkaller0: entered allmulticast mode [ 606.319300][T19777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3296'. [ 606.434156][T19511] veth0_macvtap: entered promiscuous mode [ 606.468482][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'. [ 606.481074][T19511] veth1_macvtap: entered promiscuous mode [ 606.575424][T19788] team1: entered promiscuous mode [ 606.588362][T19788] team1: entered allmulticast mode [ 606.594262][T19788] 8021q: adding VLAN 0 to HW filter on device team1 [ 606.630187][T19791] tipc: Started in network mode [ 606.657968][T19791] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 606.684602][T19791] tipc: Enabling of bearer rejected, failed to enable media [ 606.731623][T19511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.783706][T19511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.868352][T17121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.901806][T17121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.925422][T17121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.944460][T17121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.986287][T19812] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3304'. [ 607.216868][T19822] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 607.269203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.289494][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.351546][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.373040][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.525480][T19831] netlink: 'syz.3.3240': attribute type 2 has an invalid length. [ 607.546173][T19831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3240'. [ 607.852459][T19850] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3313'. [ 608.036701][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 608.189810][T19866] batadv0: entered promiscuous mode [ 608.216045][T19866] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 608.256753][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'. [ 608.279011][T19868] bond0: Device is already in use. [ 608.387549][T19873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3320'. [ 609.068093][T19901] IPv6: sit1: Disabled Multicast RS [ 609.074535][T19901] sit1: entered allmulticast mode [ 609.124872][T19903] tipc: Enabling of bearer rejected, failed to enable media [ 609.289083][T19906] bond1 (unregistering): Released all slaves [ 609.800724][T19926] syz_tun: left promiscuous mode [ 609.815363][T19926] team0: left promiscuous mode [ 609.820766][T19926] team_slave_0: left promiscuous mode [ 609.826439][T19926] team_slave_1: left promiscuous mode [ 609.836932][T19926] batadv0: left promiscuous mode [ 609.894413][T19926] batadv_slave_0: left promiscuous mode [ 609.900259][T19926] batadv_slave_0: left allmulticast mode [ 610.127056][T19926] macsec1: left promiscuous mode [ 610.146601][T19926] macsec1: left allmulticast mode [ 610.298543][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.320642][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.590223][T19948] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.598212][T19948] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.784390][T19948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.799666][T19948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.027333][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.044667][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.195857][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.297950][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.307627][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.316601][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.538380][T19976] __nla_validate_parse: 9 callbacks suppressed [ 611.538403][T19976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3347'. [ 611.690416][T19980] syzkaller0: entered promiscuous mode [ 611.695973][T19980] syzkaller0: entered allmulticast mode [ 611.735050][ T29] audit: type=1800 audit(1773666638.763:11): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3349" name=CB dev="tmpfs" ino=300 res=0 errno=0 [ 611.935508][T19989] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 612.042823][ T145] bond0: (slave bond_slave_0): interface is now down [ 612.061436][ T145] bond0: (slave bond_slave_1): interface is now down [ 612.082226][ T145] bond0: now running without any active interface! [ 612.094066][ T13] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 612.103501][T20005] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 612.108104][T20006] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 612.122462][ T13] bond0: active interface up! [ 612.471343][T20017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.492953][T20023] netlink: 'syz.4.3359': attribute type 7 has an invalid length. [ 612.536795][T20025] --map-set only usable from mangle table [ 612.681732][T20017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.820296][T20017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.962313][T20017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.069413][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 613.161873][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 613.180202][T20055] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3366'. [ 613.198502][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 613.230943][T20055] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3366'. [ 613.249836][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 614.122544][ T1123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.196584][T17121] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.352784][T17121] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.400373][ T1123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.688455][T20099] netlink: 'syz.2.3374': attribute type 9 has an invalid length. [ 614.696303][T20099] netlink: 'syz.2.3374': attribute type 6 has an invalid length. [ 614.841885][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3380'. [ 614.878326][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 615.343795][T20129] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 615.698348][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 615.747724][T20149] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 615.784205][T20149] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 616.322543][T20176] bond2: invalid ARP target 0.0.0.0 specified for addition [ 616.341324][T20176] bond2: option arp_ip_target: invalid value (0) [ 616.352748][T20176] bond2 (unregistering): Released all slaves [ 616.759631][T20195] syzkaller0: entered promiscuous mode [ 616.765453][T20195] syzkaller0: entered allmulticast mode [ 616.988984][T20179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 617.004149][T20179] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 617.131129][T20179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 617.148046][T20179] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 617.278657][T20179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 617.292601][T20179] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 617.331332][T20179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 617.338024][T20179] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 617.497352][T20179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 617.509807][T20179] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 617.621524][T20229] x_tables: duplicate underflow at hook 4 [ 617.630012][T20230] __nla_validate_parse: 1 callbacks suppressed [ 617.630034][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'. [ 617.666900][T20230] netlink: 'syz.0.3407': attribute type 7 has an invalid length. [ 617.677283][T20230] netlink: 'syz.0.3407': attribute type 8 has an invalid length. [ 617.717323][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 617.835402][T20230] erspan0: entered promiscuous mode [ 617.848109][T20230] gretap0: entered promiscuous mode [ 617.905659][T20230] erspan0: left promiscuous mode [ 617.961791][T20230] gretap0: left promiscuous mode [ 618.100320][T20244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3412'. [ 618.513260][T20270] x_tables: duplicate underflow at hook 2 [ 618.524130][T20269] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 618.540152][T20269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3418'. [ 618.561133][T20269] NCSI netlink: No device for ifindex 3840 [ 618.656906][T20272] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 618.707101][T20272] bond1 (unregistering): Released all slaves [ 618.766494][T20281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3422'. [ 618.820202][T20278] syzkaller0: entered promiscuous mode [ 618.826029][T20278] syzkaller0: entered allmulticast mode [ 618.894473][T20287] netlink: 'syz.1.3423': attribute type 3 has an invalid length. [ 618.904864][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3421'. [ 618.916785][T20278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.016680][T20290] netlink: 'syz.3.3425': attribute type 2 has an invalid length. [ 619.052050][T20290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3425'. [ 619.198354][T20297] tipc: Started in network mode [ 619.203310][T20297] tipc: Node identity 46e81bcae711, cluster identity 4711 [ 619.249231][T20297] tipc: Enabled bearer , priority 0 [ 619.286993][T20298] syzkaller0: entered allmulticast mode [ 619.350952][T20302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3429'. [ 619.367532][T20297] tipc: Resetting bearer [ 619.417305][T20297] tipc: Resetting bearer [ 619.485230][T20297] tipc: Disabling bearer [ 619.664406][T20311] lo speed is unknown, defaulting to 1000 [ 619.708655][T20311] lo speed is unknown, defaulting to 1000 [ 619.725817][T20307] syzkaller1: entered promiscuous mode [ 619.742416][T20307] syzkaller1: entered allmulticast mode [ 619.764933][T20311] lo speed is unknown, defaulting to 1000 [ 619.901930][T20314] syzkaller0: entered promiscuous mode [ 619.927400][T20314] syzkaller0: entered allmulticast mode [ 620.314457][T20332] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 620.325461][T20311] infiniband syz0: set down [ 620.330286][T14383] lo speed is unknown, defaulting to 1000 [ 620.336942][T20332] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3436'. [ 620.340330][T20311] infiniband syz0: added lo [ 620.420127][T20311] RDS/IB: syz0: added [ 620.426682][T20311] smc: adding ib device syz0 with port count 1 [ 620.448888][T20341] vlan2: entered allmulticast mode [ 620.454098][T20341] bridge_slave_0: entered allmulticast mode [ 620.475980][T20311] smc: ib device syz0 port 1 has no pnetid [ 620.531389][ T8644] lo speed is unknown, defaulting to 1000 [ 620.539267][T20311] lo speed is unknown, defaulting to 1000 [ 620.916032][T20311] lo speed is unknown, defaulting to 1000 [ 621.228148][T20369] Cannot find set identified by id 0 to match [ 621.239221][T20369] openvswitch: netlink: Actions may not be safe on all matching packets [ 621.409623][T20311] lo speed is unknown, defaulting to 1000 [ 621.549734][T20383] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 621.670241][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 621.827949][T20311] lo speed is unknown, defaulting to 1000 [ 621.854336][T20398] netlink: 'syz.1.3458': attribute type 11 has an invalid length. [ 622.138380][T20411] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 622.313915][T20311] lo speed is unknown, defaulting to 1000 [ 622.911928][T20311] lo speed is unknown, defaulting to 1000 [ 623.985058][T20467] tipc: Enabled bearer , priority 0 [ 623.998934][T20469] syzkaller0: entered promiscuous mode [ 624.006384][T20469] syzkaller0: entered allmulticast mode [ 624.078230][T20467] tipc: Resetting bearer [ 624.105445][T20478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.128426][T20478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.432258][T20469] tipc: Resetting bearer [ 624.482040][T20469] tipc: Disabling bearer [ 624.495856][T20495] tipc: New replicast peer: 0.0.0.0 [ 624.503650][T20495] tipc: Enabled bearer , priority 10 [ 624.523478][T20495] __nla_validate_parse: 3 callbacks suppressed [ 624.523499][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'. [ 624.588282][T20501] syzkaller1: entered promiscuous mode [ 624.606666][T20501] syzkaller1: entered allmulticast mode [ 625.076252][T20520] bond0: Device is already in use. [ 625.311312][T20528] lo speed is unknown, defaulting to 1000 [ 625.333885][T20524] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 625.380478][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 625.497385][T14384] tipc: Node number set to 4278321153 [ 625.630220][T20535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 626.031906][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 626.045580][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 626.055405][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 626.068316][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 626.079203][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3493'. [ 626.118537][T20545] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 626.422100][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 626.479714][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 626.517495][T20552] tipc: Enabled bearer , priority 0 [ 626.584686][T20561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3495'. [ 626.616665][T20561] [ 626.619074][T20561] ====================================================== [ 626.626122][T20561] WARNING: possible circular locking dependency detected [ 626.633286][T20561] syzkaller #0 Not tainted [ 626.637914][T20561] ------------------------------------------------------ [ 626.644963][T20561] syz.3.3495/20561 is trying to acquire lock: [ 626.651070][T20561] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 626.660588][T20561] [ 626.660588][T20561] but task is already holding lock: [ 626.668166][T20561] ffff8880350ee570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 626.677643][T20561] [ 626.677643][T20561] which lock already depends on the new lock. [ 626.677643][T20561] [ 626.688080][T20561] [ 626.688080][T20561] the existing dependency chain (in reverse order) is: [ 626.697131][T20561] [ 626.697131][T20561] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 626.705276][T20561] _raw_spin_lock_bh+0x36/0x50 [ 626.710708][T20561] nr_rt_device_down+0x153/0x860 [ 626.716206][T20561] nr_device_event+0x137/0x150 [ 626.721623][T20561] notifier_call_chain+0x1be/0x400 [ 626.727447][T20561] netif_close_many+0x2ae/0x420 [ 626.733134][T20561] netif_close+0x160/0x220 [ 626.739416][T20561] dev_close+0x10a/0x220 [ 626.745037][T20561] bpq_device_event+0x377/0x6a0 [ 626.750874][T20561] notifier_call_chain+0x1be/0x400 [ 626.756659][T20561] netif_close_many+0x2ae/0x420 [ 626.762095][T20561] netif_close+0x160/0x220 [ 626.767908][T20561] dev_close+0x10a/0x220 [ 626.772777][T20561] bond_setup_by_slave+0x5f/0x3e0 [ 626.778861][T20561] bond_enslave+0x847/0x3c10 [ 626.784102][T20561] bond_do_ioctl+0x6ec/0x8d0 [ 626.789244][T20561] dev_ifsioc+0x961/0x1280 [ 626.794304][T20561] dev_ioctl+0x7b4/0x1150 [ 626.799272][T20561] sock_do_ioctl+0x23e/0x320 [ 626.804415][T20561] sock_ioctl+0x5c6/0x7f0 [ 626.809301][T20561] __se_sys_ioctl+0xfc/0x170 [ 626.814480][T20561] do_syscall_64+0x14d/0xf80 [ 626.819650][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.826090][T20561] [ 626.826090][T20561] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 626.833935][T20561] _raw_spin_lock_bh+0x36/0x50 [ 626.839341][T20561] nr_rt_device_down+0xbe/0x860 [ 626.844758][T20561] nr_device_event+0x137/0x150 [ 626.850101][T20561] notifier_call_chain+0x1be/0x400 [ 626.855782][T20561] netif_close_many+0x2ae/0x420 [ 626.861188][T20561] netif_close+0x160/0x220 [ 626.866347][T20561] dev_close+0x10a/0x220 [ 626.871351][T20561] bpq_device_event+0x377/0x6a0 [ 626.877278][T20561] notifier_call_chain+0x1be/0x400 [ 626.882947][T20561] netif_close_many+0x2ae/0x420 [ 626.888349][T20561] netif_close+0x160/0x220 [ 626.893310][T20561] dev_close+0x10a/0x220 [ 626.898105][T20561] bond_setup_by_slave+0x5f/0x3e0 [ 626.903680][T20561] bond_enslave+0x847/0x3c10 [ 626.908840][T20561] bond_do_ioctl+0x6ec/0x8d0 [ 626.914042][T20561] dev_ifsioc+0x961/0x1280 [ 626.919025][T20561] dev_ioctl+0x7b4/0x1150 [ 626.923904][T20561] sock_do_ioctl+0x23e/0x320 [ 626.929047][T20561] sock_ioctl+0x5c6/0x7f0 [ 626.933938][T20561] __se_sys_ioctl+0xfc/0x170 [ 626.939090][T20561] do_syscall_64+0x14d/0xf80 [ 626.944238][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.950714][T20561] [ 626.950714][T20561] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 626.958764][T20561] __lock_acquire+0x15a5/0x2cf0 [ 626.964179][T20561] lock_acquire+0xf0/0x2e0 [ 626.969190][T20561] _raw_spin_lock_bh+0x36/0x50 [ 626.974938][T20561] nr_remove_neigh+0x25/0xe0 [ 626.980076][T20561] nr_add_node+0x1e41/0x2630 [ 626.985217][T20561] nr_rt_ioctl+0xe59/0xf90 [ 626.990205][T20561] sock_do_ioctl+0x101/0x320 [ 626.995347][T20561] sock_ioctl+0x5c6/0x7f0 [ 627.000223][T20561] __se_sys_ioctl+0xfc/0x170 [ 627.005354][T20561] do_syscall_64+0x14d/0xf80 [ 627.010590][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.017022][T20561] [ 627.017022][T20561] other info that might help us debug this: [ 627.017022][T20561] [ 627.027274][T20561] Chain exists of: [ 627.027274][T20561] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 627.027274][T20561] [ 627.041132][T20561] Possible unsafe locking scenario: [ 627.041132][T20561] [ 627.048692][T20561] CPU0 CPU1 [ 627.054192][T20561] ---- ---- [ 627.060272][T20561] lock(&nr_node->node_lock); [ 627.065336][T20561] lock(nr_node_list_lock); [ 627.072479][T20561] lock(&nr_node->node_lock); [ 627.080326][T20561] lock(nr_neigh_list_lock); [ 627.085310][T20561] [ 627.085310][T20561] *** DEADLOCK *** [ 627.085310][T20561] [ 627.093497][T20561] 1 lock held by syz.3.3495/20561: [ 627.098726][T20561] #0: ffff8880350ee570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 627.108879][T20561] [ 627.108879][T20561] stack backtrace: [ 627.114814][T20561] CPU: 1 UID: 0 PID: 20561 Comm: syz.3.3495 Not tainted syzkaller #0 PREEMPT(full) [ 627.114840][T20561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.114852][T20561] Call Trace: [ 627.114862][T20561] [ 627.114873][T20561] dump_stack_lvl+0xe8/0x150 [ 627.114910][T20561] print_circular_bug+0x2e1/0x300 [ 627.114941][T20561] check_noncircular+0x12e/0x150 [ 627.114971][T20561] __lock_acquire+0x15a5/0x2cf0 [ 627.115004][T20561] lock_acquire+0xf0/0x2e0 [ 627.115026][T20561] ? nr_remove_neigh+0x25/0xe0 [ 627.115054][T20561] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 627.115071][T20561] ? nr_remove_neigh+0x25/0xe0 [ 627.115097][T20561] _raw_spin_lock_bh+0x36/0x50 [ 627.115119][T20561] ? nr_remove_neigh+0x25/0xe0 [ 627.115144][T20561] nr_remove_neigh+0x25/0xe0 [ 627.115171][T20561] nr_add_node+0x1e41/0x2630 [ 627.115198][T20561] ? dev_get_by_name+0x21/0x200 [ 627.115217][T20561] ? dev_get_by_name+0x21/0x200 [ 627.115235][T20561] ? nr_call_to_digi+0x136/0x1b0 [ 627.115260][T20561] nr_rt_ioctl+0xe59/0xf90 [ 627.115288][T20561] ? kasan_quarantine_put+0xbb/0x1f0 [ 627.115305][T20561] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 627.115334][T20561] ? apparmor_capable+0x126/0x170 [ 627.115365][T20561] ? capable+0x88/0xe0 [ 627.115387][T20561] ? nr_ioctl+0x1b1/0x3b0 [ 627.115409][T20561] sock_do_ioctl+0x101/0x320 [ 627.115432][T20561] ? __pfx_sock_do_ioctl+0x10/0x10 [ 627.115451][T20561] ? do_futex+0x333/0x420 [ 627.115479][T20561] sock_ioctl+0x5c6/0x7f0 [ 627.115499][T20561] ? __pfx_sock_ioctl+0x10/0x10 [ 627.115519][T20561] ? __fget_files+0x2a/0x420 [ 627.115544][T20561] ? __fget_files+0x3a0/0x420 [ 627.115569][T20561] ? __fget_files+0x2a/0x420 [ 627.115596][T20561] ? bpf_lsm_file_ioctl+0x9/0x20 [ 627.115618][T20561] ? __pfx_sock_ioctl+0x10/0x10 [ 627.115637][T20561] __se_sys_ioctl+0xfc/0x170 [ 627.115658][T20561] do_syscall_64+0x14d/0xf80 [ 627.115683][T20561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.115701][T20561] ? clear_bhb_loop+0x40/0x90 [ 627.115721][T20561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.115738][T20561] RIP: 0033:0x7f322519c799 [ 627.115757][T20561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.115775][T20561] RSP: 002b:00007f32260c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.115796][T20561] RAX: ffffffffffffffda RBX: 00007f3225416270 RCX: 00007f322519c799 [ 627.115809][T20561] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000009 [ 627.115821][T20561] RBP: 00007f3225232c99 R08: 0000000000000000 R09: 0000000000000000 [ 627.115833][T20561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.115844][T20561] R13: 00007f3225416308 R14: 00007f3225416270 R15: 00007ffe9b3f03b8 [ 627.115865][T20561] [ 627.516347][T20547] team0: Port device team_slave_0 removed [ 627.564972][T20551] lo speed is unknown, defaulting to 1000 [ 627.637239][ T9] tipc: Node number set to 2717457354