last executing test programs: 1m28.574210832s ago: executing program 4 (id=6211): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c", 0x44}], 0x1}, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x6, 0x0, 0xd, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m28.295577922s ago: executing program 4 (id=6216): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001c40)={{r1}, "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"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000007f7f100007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/37}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x7, 0x7, @mcast2, 0x3}, 0x1c, 0x0}, 0x20008b88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020603000000000000000000000000060900020073797a300000000005000100070000001400078008001300560749740800120000000000050005000a000000050004000100000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) (async) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="00fcdbdf25820000000800030000", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044844) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB, @ANYBLOB="08097818cdeda549be7bea939c10e0d04a2e1695fc201564c65646"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x17c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x160, 0x7f, [@mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x50}, @peer_mgmt={0x75, 0x16, {0x1, 0x92e, @void, @val, @val="0b33abefc4f3330e462b23eea9a9529f"}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x11c, {0xc6, 0x12, [{{0x0, 0x1}, @device_a, 0x85, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x13}, {{}, @broadcast, 0x5, @void, 0x31}, {{}, @device_a, 0xa000, @void, 0x32}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x15}, {{}, @device_b, 0x8eb, @void, 0x18}, {{}, @device_b, 0x100, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x3f}, {{}, @broadcast, 0x4f00, @void, 0x42}, {{}, @device_a, 0x9, @void, 0x27}, {{}, @broadcast, 0x5, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x21}, {{}, @device_a, 0x91e0, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x3a}, {{0x0, 0x1}, @device_a, 0xb, @value=@broadcast, 0x36}, {{}, @device_a, 0x7, @void, 0x26}, {{}, @device_a, 0x101, @void, 0x2b}]}}, @dsss={0x3, 0x1, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x17c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x160, 0x7f, [@mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x50}, @peer_mgmt={0x75, 0x16, {0x1, 0x92e, @void, @val, @val="0b33abefc4f3330e462b23eea9a9529f"}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x11c, {0xc6, 0x12, [{{0x0, 0x1}, @device_a, 0x85, @value=@broadcast, 0x8}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x13}, {{}, @broadcast, 0x5, @void, 0x31}, {{}, @device_a, 0xa000, @void, 0x32}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x3e}, {{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x15}, {{}, @device_b, 0x8eb, @void, 0x18}, {{}, @device_b, 0x100, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x3f}, {{}, @broadcast, 0x4f00, @void, 0x42}, {{}, @device_a, 0x9, @void, 0x27}, {{}, @broadcast, 0x5, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x21}, {{}, @device_a, 0x91e0, @void, 0x40}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x3a}, {{0x0, 0x1}, @device_a, 0xb, @value=@broadcast, 0x36}, {{}, @device_a, 0x7, @void, 0x26}, {{}, @device_a, 0x101, @void, 0x2b}]}}, @dsss={0x3, 0x1, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 1m27.154055992s ago: executing program 4 (id=6222): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000b000000400000000300000041000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="184f0d0000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009118f32f85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r9, r8, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xffe, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffffa, 0x12) ioctl$int_in(r2, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000100)={r12, 0x5}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={r12, 0x32, "cce2a0e2727ce8b5d6e8e132251678b056aaecff9cf4a7fbe670f5f9d0f3d04d5b41f74cf1400dcfdc194f3e2f280487e892"}, &(0x7f0000000040)=0x3a) 1m26.141005053s ago: executing program 4 (id=6231): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x4908d13283d17e5f}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e63}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) pipe(&(0x7f0000000040)) recvmmsg$unix(r0, &(0x7f0000003680)=[{{&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/178, 0xb2}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/147, 0x93}, {&(0x7f0000002c00)=""/199, 0xc7}, {&(0x7f0000002d00)=""/89, 0x59}], 0x5, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002e40), 0x6e, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003000)=""/36, 0x24}, {&(0x7f0000003040)=""/119, 0x77}, {&(0x7f00000030c0)=""/30, 0x1e}, {&(0x7f0000003100)=""/98, 0x62}, {&(0x7f0000003180)=""/19, 0x13}, {&(0x7f00000031c0)=""/221, 0xdd}, {&(0x7f00000032c0)=""/129, 0x81}, {&(0x7f0000003380)=""/118, 0x76}, {&(0x7f0000003400)=""/181, 0xb5}, {&(0x7f00000034c0)=""/28, 0x1c}], 0xa, &(0x7f00000035c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x4, 0x40000000, &(0x7f0000003780)) syz_emit_ethernet(0x45, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf25100000000500100001000000eeff0e000200000008000100", @ANYRES32=0x0, @ANYBLOB="06001100a8050000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) socket(0x0, 0x2, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x9}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x27}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x690}, 0x40) 1m25.362961427s ago: executing program 4 (id=6244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.35488923s ago: executing program 4 (id=6257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x2458a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) r6 = socket(0x1, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x600}, 0x38) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x60}}, 0x8000) (async, rerun: 64) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000001b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x1e) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x10) 1m24.183769707s ago: executing program 1 (id=6261): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "23c486d4219ab9"}]}}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "0e3f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x68}}, 0x4000090) 1m23.498748643s ago: executing program 1 (id=6263): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0100000000006111690000000000850000001a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001540)={&(0x7f0000000400)="848d5eb0c0596aa666d4d381be06dbde1016155e89d9d600429ff1b0f0f2ae3efa7eba3be86c5422f82b719eb6bd57df633e997c5112973e72732a04e92aa10fb87fd279a85afc735ac9a252a4ae5beb6f1e47f0c12a87a8d0581da6653a816c755345d132190411dd0659621e08e0227b0ee20ad1c967b255fd4be34492c04e7343ef653ca66a6d65c4acdb0303714d", &(0x7f00000004c0)=""/9, &(0x7f0000000500)="d8b9dd88a6f936757b14fe9d7e10618f93ad9d5941754e3ef1451575b65b9b0f01ab9eb06df0a00c31e73fafab653a8e23d3aaa06236765be702dd9b23bf68a3076cb46705da2329557ee3a6cb5245220fe6eab317248cedd9db4f6c24664c717e4239af4d0eb0a8ee4ab0142baccdc35b702385ab66cf943d29e2e3e608433cfa3150986f8da67111df8cba149b1170257e6a7f183fc298c6d5eb757647ddbd680c2dac3a297be55c4922a56f69da1f4f10d737896e308bc623091e4f488cc9a08f8afd461ba2969f6cab080a842a7ad9b40de31a0a25902b7df94b1951619a8d53a330c093821c06fa920896b10232acbe39a663fe84a8009bcd94da3353126c61f2cc4811cd45986abb0c1368313f0ce2768eaf27b9b688409e533e0afe55f36740bc7c2b4e129910af32153b047fd64e4919a239fdac2420a4c62cdb2cc84693d8398618a76afe996b537107878979a22d1a25b81c783fa89296a869339522391e76f20b20f2b4fff0faa5f899db7c1ed27a3a5736d66fcedfb5c7558e6637e82495d3dfd025ff4c61405ad323782c70993df98f5d9575228c93796e9de31b37bc08d668f64f8276bdad9a55c032d54c48ac8039a22811b52eb96cd9b74fd3be5a0934d328781b4bb068cf0fa2f76f07635d7e05227d74af83c167935e017a1c54ff940afcd3ce26fcb38701bdb6bc867f15ce7750d9fb6a382b85e7c39a701e3164aa4c2926b8b81b9f0e828d5086c62a941fecbf2931078903fdd593b8e8dd3b933515623b23fe93e32471230267d06e991e9b342e34141f923ce6056c312c4b94fde7ccbefb9863932c68829635ab5784148a1b19b743727548f1bc6043562bd3145c2d988d3d4611a709f9c742c09360ec404a1237ca75a75640079a871bce3f6ada6468beaf7e8a1b02e4b13ae18987cc493ab827dce885ffc3772be4e0d79e181db9b31459c857e5be90acc906ebd42d6355cf2ad2e2e214e6c63f750ffb95ba31e19072c1c95a65399d13c0f644056f036766a1fe2e9771134c9d28bfa0d2eb2577335d016a985c7903837fe59c6c3e56a2c3a9ba9b73fb65be26c2ea32b93e4a5cad231e0fa794600713aa4855bbd3dbd7ef49c2d76be89b4c2edf10c371b0c1835f95dd109487284f6d6cf5c1559e5aa58db81c4aac34860bb1560a012f2da1b73b28c61db5433e19b12a6ad2ae938190cc59c92c3dc77f7beef82778a096e2cfb484735086dd7931c942b9e5dafbcd13b6d82b91841ba55fec2f837c0f8c3a52e323e7fc8be25bbfdee8d1347179678788886375aa6647ca2a45131a10a074b339519330598c874cf0cd11fbfd573495f95ca7f071c11954b2e6e87ddddf4d550acf1bcd88daadc2425d478a36edf108515f517791b0f3a0d4fbe48c17e43f2867b3033f896a948b780dc1fd996249baec55e994e306f95c1fbb3ced72d535a62539676735c8bc9894720a96b3f2e0726e6251d77c814cb0dad10552898ffc53f33bfa2ba67a8a92bb36436e4276d23ff70e199e7727e629c989c1f4555f9b2e74b4b5d0d1aef23cc837d520d0a67d7bb2a661f2a29d07d88acf5ccf7cfbbca8488574683ac055d001b522bc978c560b00bc0e764d5b713119a77e4d1af05d0836b46c0eb6f53fa8c7bd9d1d9baac06987f7427a3972e7c7f00a3466325846258220ecf6a113e8de00d59c972f9abc8d6b7cc408794b49e79047f8e5105984cd2336a2b8977bbae197727948691e2a5f8cd445c223c8e2474a5d2c87f410515ac600dedc929394a5dab6856c58611ff750439b883e4ce1c07059e46015b61cfcce451e417aa297a62625a7101ad52a05d0f81c4a7c1c8efb0da46ea051e5d371e4302bac3cb51e5f70d1150ac18df663f4f169919db9c727ba7bd6165967ed059cf978b1fbf12b6aa9ae252d33ac025ed82e4f28cc376d18ffb2698f5e1a032b9ed0b6098703a41a83d32518a257d2acf10b5ddf51d50c84b01179946d590fb5a1ddcca2fe75aade9e0e69d3eb7595ebc152ff18423c01f0ffd2becd4a3c62fc914d15f8be778b99f15bdce3f9b3e8127f4b4c2abe218ed7d6284e3d2e126a7011dfcc4ae6f37c132a492cd3e0dd6c3aa64ec727d43ddaa6101aef89d4a4700d8274d1d0a57e87c1301b929d005c97d9e329758842da5ebfeaeed0960ccc145849e374f514c699d28d8255e1b74a4c155975368f0394f6498c0fa384f0672a35d4ecc5a42529dfd159552ea58d42ed25d036a7bd5c3055f35b545d2def01b65d16f830f3fb324540357b796f79a222da5b868e5cb8f54d4b25e59b980368522898409684f088cf028b09481d813f8c718df0a8328ad3b37eec8825afa79eaac5e7ec36035adb68c8baf47fbb0a3f9807c3bb7c43cae49f73685f03bf3386a4099f7723d1c63579c928d5f28e73c8b714a2f23fb895c55015694e2a59deb55b3198f4b487eb13f18f8cf9e5e5c9841e6b2c1f551aa6572596bba89647c33de6a3ef125d7e1c14e5a263ae378a33950df705c5ee0a428d4678cb6582c4f646821afacf20179c2ab85e9587850030c85980d50debee415ead29198567653b3b186f4cfb2ecd0abd758ebc06570ca21ac7b70a19aee96c0871292f85dc23b5df9cb325ae123950f1d530a9e1c0b68e0ff806a1b1806f3fddf2b69919db8f26959ff12079c809fe4f9b7471ccf6b56e2d6d2320b48a12a17f84dda6f9aa990255b071a1b99ce4e8a933234f0293e63c9d029fb7517dd4bd22032244900ad923f84535013c6d7735f54e48228e8d366b35e57d38ee9fef08334d787c916450a976f356e558fcc7bb3ae0d4e88e67cdb1b1614d3df5d3055df898a2a1058d523fd839bf48f8c154905036c3a5247b82bd5929a7f6ee2aa0ba1e05e574227b82c695919f451abdac82cd2638d3a8497b78df59016647fade382a028e87e3c4b4129a386b5fa258d2e1bd71d77346594743a876bebe1322030ae56486a9ab8f2cb11328492bdbea5368f4c9a245c123dc7f4db97fdd9b375513afb0c01f7a77cd82a36842ea16a79535d8b07f38effb93da72abf8675609cb9df59928831451e61d9863420fe559b03c8050dd32d49e38dcef7a81a84876f9143d9d8f78ad2f83e7f3fb1897e84479060362389ebd00837b45d2a0bc8f99256c8240742dbe26909fbe5e7dbdcf739078d735d882c5afe68f36e780468e8b869a6eb9cd5c0d3e0e6c5b77483974f92ee1c5c0529620c19891d7e0fd7bc53c8b392fc49e23a8e3af086163c91e19bff1d534e82dba66b1ee4a7eaa349185d35371d3e39086fe012730d411f2f51bcee5f22aba8e886cc88e383105648ab5bdfe2906542d7f098d1c85294c66d11c913f17f088c834e036c3c1be0b2e0f1ae62ce1ae6c9507c7861a230268b34ffdb2d380cb0e4548a47ba895dc233e4fd604e8f4e302c905a05537cef2e2f7f4952314891283562edb20f401e4506d5cbecec6b8adaa7f630ef7541879a3a030bb82c7eaea6e47703963be92e0fa9cca18588357f9b9fc527a4c26191a36f21a8598987408f7b141237394be0ce17e3248e2150ffcb4dbd22d5fb13b40a78939e3727330ce9209cff0f47aac6efb2f9ab748b650e4e804e3a0fae490d70de13ae83c71818877e62cb1df4fe5eede9cb8be09c82523ad64bf1fb75a653dd4908d8e4c8e8d52a7cb1eedcbb2d992224ee7c9202cdd8acc5b9415bf076772f04e5d4c094d4e5fcaf951fb8b4b75afd14255fcbc4c5e1dd6fceaaf63fc59535d5049ccc669fa07e63f3d5042fff97d04cffa49dcebfe825a95280d598e43cd4883e0a8a8e5a665ba75105ee798df45b1a10b17992efaee982d01be07d107292e7c49461236ba814fef4187eb77a2d1f9803b671096769bab8dc1e806e661fa22e4b271ae8e5c0779f2eb4e0d2699c4139e482350368e0d317bc59309912d224ff0638bf81e9560dae7b071663ba1b6c14fd2b0dc87b1cd5d0ab6ff73db6da7869318de304fbab31c86c2e32475296277c970d30da9f4c2fca5a453427e0d436b9c6b2c4e819f5bfc302a6e0547904dbe1a1e1814e6fd461f04d95cfc380e50db5bc2e0f802f29edd627c55ad51df476f6b149ad8437d13fdeda135aa94acd978ef5c14ee9281464a90639b9ead7b0487efd51c20383cdd976c3e3f7873d30a6ffaeac92ecf15b810e202f19b91bf4932d3389ea6d2ecfa923a7f9e7b6dc22bab83bd9d56b11e82b6cd0d3881c99013583d962f72f3e5271757b6c8a10f790b84487eed3b906284e0f4323c909cc3853972bbb65aa2715ed07e924085dc197cbb07346c38da4812636056e6870b757e8fabaf3252b0cb40df3ef5a7c67eb54456f10a5477c6722015cd441abd06bc684351ab7062874873af6f000e0a3d906055914e096b82b2ec733ec818e8018beec19ee44d415e7e5437ce5d8920418738d6f8fd918b45b58f4feff4cdd7a8a60a7f75130a9749e6daa3c00376393d28ed28a954510b59cbf4fa2a9f81848f838b7531ae65dc13b52fab09b01af603eb4f94157d21abad8ae3a9b65a09f25205f65956c30af50c5ae214a4f8c1f90303af98901f42ebf531b6f4e4360ae9f11d936e017f7ae9b4cef57fa07d7135da1cee63a2095d986cfacb6754a8f9c79a8c7dda7e915bd93912bc1a09018bcbd36a0b08191a649c00082bd3e0dd7ad96521ca1ec61ecd9a32c8e13f651e5eb88f35a3fad8f1c1690c321b2f21c5e01e694faec591591beaed621eaed6b54a001e01df4df6c25afebe8ec1659bbd0d35a402a3ff9eb59f3ffa90e36739d1d2aa1623dadf252add6cd7be593be740c4c5c1f84987a8a8da183c13129a06ee68a945502d9d9854435951fc036065a428ec63a09fb6997d62fa001bc8999f7ee1ff91d2ef28e05dfde77c6eb15fd577b6618650a96ab32d9208a8f4aae78213564201a2e1521b37bc0ce7ab384490faa512d94a731bac2af78568082fa49519e09f95ca9583cb166d0c6bfb1885e23c1b1eb0dfa4dd39be2995d5499238a594206c9ba5fb77c448c02aeef2239f1cfb9d1d8a1d9cde40b7c03689fb9b66527e59e79b91cd4ddb63757eb9b57fae4d9da02749a28de0910864b44e344972e6e966ef9874d4f6437f94ab4c724212e01346e6c3a33a5108ac1dfc701d5f40f8dc42ea4e21bdab330aed7a880cf443be2059dd1f94b3868e577c8d38179e97318f06427a064e3a92fc1fa18b5c28e0de20ab6e65ad937e4908b6cba2c5ab726174af657cc4f63105a3e9e4acec8f0662b766e38b7f948d0c2e9f5b66d1a580bd5e98f7e9be27a16844b9d7bd374499dc4feaffe90b22566526cf05f3c14ff8480733e33bc6731d6ffd3651505d025a44179e7022213fc73131f280c19aa62236fc321f0a0073b95b5b69d720b8f34893af87737291fe523bcf3dcd85d006c897def5a0213ab52dfe83a3b5683fef7f9c5d684a042fffcecd554d2a4cae341f2bbed37b4437062feaefa1d1af1a9b9e1adfb1017c154e53889f58cebe098c4c136cdf1a50cfac546b6d491e049cf1401d72b5a80b183f83c900a420436a4b5a621cd8e912c38f8c784fc189c05347c05d12ae6f9128cbe094aee70d03a90aff962921ca6f45fa8a41a307755a632b47306fa9546820c394e7a5e2e3749053c9d834617c06655fb9b7e99b761abf0d8cc0812459ef3246cf4a425df5ebd0d14b8744f9305016a9baaaa87f2101f622b59d70f39784db7d0c9ad1f8366d19f6a1d826162f43114920252e186fef73fa7b9aec5eb970b46a27e7ee6411cccba0755cea", &(0x7f0000001500)="53e31a8af7dc2479bd1597c23df1ceea94556157f508", 0x4, 0x1}, 0x38) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x24}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x431}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc010}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m22.967276212s ago: executing program 2 (id=6273): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000003}, {0x0, 0x7, 0x4}, {}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5-generic\x00'}, 0x0, 0xc0}}]}, 0x13c}}, 0x0) 1m22.715889966s ago: executing program 2 (id=6276): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200060005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0xc080) 1m22.608716662s ago: executing program 2 (id=6278): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x70, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x8, 0x8, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x401, 0x5, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1100000000f336, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000ff7f0012040000000100010000120400b761045c1d9f934764c4f6d805264d99a15b52c3a22f1c0103728230ebe9379809132d89d0957968e543d2e43f7d40b769050649dc4e1f28938bbb2adda6024d9e13ecb4bdc55fe403dab56998ab154e3ac40e5c93d4af0dc58965ccbc1b64b5d4cfec156f5b107c94", @ANYRES32=r4, @ANYBLOB='n\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000004000000050000000c00"/28], 0x50) 1m22.468588512s ago: executing program 1 (id=6279): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x24dfc3fb, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2400}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x2, 0x5}}]}, 0x30}}, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x5, 0x1ff, {{0x20, 0x4, 0x0, 0x3d, 0x80, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x55, 0x3, [{0x0, 0x4, "ab41"}, {0x5, 0x7, "40b30f9e36"}, {0x0, 0xa, "f2b7b2e432180797"}, {0x7, 0xb, "2e1f496077b3a3119c"}, {0x6, 0xb, "9c2d32448d9bc3e78a"}, {0x2, 0x3, "cb"}, {0x5, 0xe, "53e921c2579a60b526e01e61"}, {0x6, 0x7, "dee4e626bf"}, {0x7, 0xc, "bad5fa4d804ca7c64c40"}]}, @timestamp={0x44, 0x14, 0x76, 0x0, 0x1, [0x1, 0x3e6a, 0x9, 0x2]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x44, 0x4021}, [@IFLA_PHYS_PORT_ID={0x16, 0x22, "72f3f26f160444cb742db17508e8d0aea984"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x33}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0xa7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x880) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x44, 0x4021}, [@IFLA_PHYS_PORT_ID={0x16, 0x22, "72f3f26f160444cb742db17508e8d0aea984"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x33}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0xa7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x880) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffffffffffffff4b, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x20, 0x800000, 0x0, {0x0, 0x0, 0x0, r11, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c804}, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r9, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r11}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}}, 0x4000) (async) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}}, 0x4000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x18}, 0x40094) 1m21.157980433s ago: executing program 1 (id=6280): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000000)={'bond0\x00', @local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611934000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m21.156128834s ago: executing program 1 (id=6282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000002680)=""/171, 0xab}, {&(0x7f0000002740)=""/86, 0x56}], 0x3) 1m21.155047669s ago: executing program 1 (id=6283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002010300000000000000000002000000100001800c000280050001002f000000e89d0a3b036d55b38c080000"], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES32=r0], 0x5c}}, 0x0) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x160, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x665}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x1}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4008804}, 0x80800) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000002c0)={r7, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x81}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r10) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000740)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="7416831d29fba93be7dc701d9e0086b221eea55b5bad4e003bebbe36ef6cf6e32835fd659145fc58eeca7cbaf3b3165b7a7f8f96f6e0808207fb38c06be8806d29fc6b5a8c755771969806dc9b9a980c5db03291b0f45200e78b8a2fa2bbf9f030e2", @ANYRES16=r13, @ANYBLOB="08002bbd7000fbdbdf250b0000003c00018038000400200001000a004e20000036afff010000000000000000000000000001020000001400020002004e20ffffffff00000000000000002400038008000200060000000800030001f0ffff08000300ff7f00000800010004000000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24044000) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m21.117308649s ago: executing program 3 (id=6289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x378, 0xffffffff, 0xe8, 0x1d0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff], 'erspan0\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x5, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0x7}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0x0, 0xff000000, 0xffffffff], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@mcast2, @private1, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0x0, 0xff, 0xff], 'wg2\x00', 'geneve0\x00', {}, {}, 0x67, 0x4, 0x4, 0xc}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xa, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a08000000000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f25232508d", 0x79, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @remote}, 0x14) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x11}]}}}}}}, 0x46) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x47, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 1m20.965057638s ago: executing program 0 (id=6291): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500060000000c001680"], 0x38}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x8, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe7d, &(0x7f0000000000)={&(0x7f00000001c0)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f00000001c0)={0x60000001}) 1m20.964181927s ago: executing program 0 (id=6292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000001000)="2e9b3d0007e03dd65193dfb6c575963f88641100157097970057", 0x1a}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000ad19c843914bb8ea13853d10da88ec9c494704d4a6ecc2419af46bb44f3783516c78ff6a58fa1ce38a529f61e3bec5a965524686b1fd7a16da1b6b6b680da976867a9247a217865f36763d8a4a14f8039d5343e17e6b7f88e47f2bc7445ca2cd0849669d1e8e72220eb6e32169200ac58396a472c21d4aff16a0b1ae", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$inet(0x2, 0x3, 0x101) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4}, 0x68) 1m20.787248292s ago: executing program 3 (id=6293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9}, 0x48) unshare(0x22020400) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1m20.786309146s ago: executing program 0 (id=6294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f00000009c0)={{0x8bb2, 0x0, 0x6, 0x0, 0x100}, &(0x7f00000006c0)=[{}, {}, {}, {}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0x0, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'erspan0\x00', r3, 0x8, 0x40, 0x9, 0x4, {{0x1d, 0x4, 0x0, 0x13, 0x74, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xe20b, @empty, {[@timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x200}, {@loopback, 0x6}]}, @cipso={0x86, 0x9, 0x1, [{0x6, 0x3, '7'}]}, @rr={0x7, 0x17, 0x79, [@dev={0xac, 0x14, 0x14, 0xf}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x89, [@rand_addr=0x64010101, @rand_addr=0x64010100, @loopback, @loopback]}, @generic={0x86, 0xb, "b83c5f0b825e4f9a9b"}]}}}}}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x80, &(0x7f0000000100)}, 0x20004014) 1m20.689675952s ago: executing program 3 (id=6295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000004000000b73d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000d600"/29], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000004000000b73d000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000d600"/29], 0x48) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) (async) 1m20.617005288s ago: executing program 3 (id=6296): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x24c8c2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES8=r2, @ANYRES16=r1], 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0a000000000000000000000002108c846a939db1"], 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x1010, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={@loopback, @private=0xa010100, 0x5, 0xe}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x600) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x0, [0x6, 0x1, 0x10ac7]}, &(0x7f00000003c0)=0x44) 1m20.585330218s ago: executing program 3 (id=6297): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x16) (async) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket(0x15, 0x80000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000200)=@file={0x1}, 0x6e) (async) connect$unix(r8, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) close(0x3) close(0x4) (async) accept(r1, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a310f1d00000900010073797a31000000001c0003"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) close(0x4) 1m20.457802895s ago: executing program 3 (id=6298): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9f750100001800d434e5962f5b918500000000c70000005f04af5dd7e44d6d00316677af7e00ed00000000000000006e033c5934fbd057bc9c8815097cc6d97304e6"], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfc4e, 0x5, 0x101}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffef, 0x8}, {0x10, 0xffff}, {0xfff1, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "27ddbd03c97a8d06"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1m20.34798737s ago: executing program 0 (id=6299): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x1, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, 0x0, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 1m20.168828709s ago: executing program 0 (id=6300): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYRESOCT], 0x35c}}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x42c, 0x3f3, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x2, 0x1e, [0x1c27, 0x8001, 0xb9, 0x5, 0x4, 0x4000, 0x0, 0xffff, 0x1, 0x8, 0x6, 0x7, 0x7f, 0x5, 0x1e6b, 0x0, 0x7, 0x7, 0x207c721e, 0xf, 0xda, 0x1, 0x8, 0x4, 0x6, 0xfffffffb, 0x0, 0x8000, 0x6, 0x6e, 0x0, 0x3, 0x3, 0x2, 0x5, 0x3ff, 0x6, 0x1, 0x80000000, 0x15200, 0x5, 0x6, 0x84ad, 0x4c, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x7, 0x1, 0xe, 0x4c5, 0x7ca74cdc, 0x0, 0x10, 0x10001, 0x7, 0x7f, 0x3, 0x4, 0x34d, 0x9, 0x1], [0x800, 0x7, 0x0, 0x3, 0x8001, 0x3, 0x9, 0x0, 0xc075, 0x2, 0x6, 0xfffff965, 0x10000, 0x80000001, 0xfffffc00, 0x7, 0x6, 0x0, 0x8000, 0x6, 0x2, 0x8, 0x2, 0x7f, 0x1000, 0x81, 0x10001, 0x1000, 0x1, 0x2b1, 0x8, 0xd, 0x80, 0x3f, 0x233, 0x101, 0x0, 0x81, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x6, 0x87a4, 0xfffffffa, 0x8, 0x2000000, 0x6, 0x7ff, 0x400, 0xd, 0x2, 0x5, 0x8, 0xfffff801, 0x81, 0xf, 0xb2, 0xffffff3b, 0x2, 0x10, 0x3, 0x20000], [0x8, 0x6, 0x4, 0xfffffff8, 0x8, 0x3, 0x2, 0x5, 0xb35, 0x746, 0x4, 0x9, 0x10, 0xe862, 0x2, 0x7fffffff, 0x3, 0x3, 0x6, 0x7, 0x9, 0x3, 0x18000000, 0x9, 0x10001, 0x5, 0x2, 0x77, 0x8, 0x1a89, 0xa, 0x0, 0xff, 0x200, 0x9, 0xd, 0x1, 0x2, 0x400000, 0xff, 0x8, 0x0, 0x80000000, 0x5, 0xfa5, 0x1f1ce376, 0x4, 0x8, 0x4, 0x970b, 0x0, 0xb9, 0xd7ee, 0x1, 0x3, 0x8, 0x6c7, 0x8, 0x800, 0x5, 0x81, 0x3, 0xcc, 0x2], [0x1000, 0xf5, 0xd989, 0xfffffff9, 0x7, 0x6, 0x8, 0x5, 0x3, 0xfffffffd, 0xff, 0x0, 0x3, 0x9, 0x5, 0xc, 0xba, 0x4, 0x6, 0x914b, 0xf0000000, 0x6, 0x5, 0x4, 0xff, 0x6, 0xf2ab, 0x6, 0x7, 0x0, 0x2, 0xa1, 0x100, 0x7, 0x7, 0x9, 0x4, 0x7, 0x6d4, 0x400000, 0x1dfe, 0x0, 0x4bb1, 0x2, 0xe, 0x9, 0x4, 0x5, 0x80000000, 0x81, 0x6, 0x80, 0xc4, 0x8, 0x1, 0xfffffffc, 0x6, 0x9, 0x2, 0x7fff, 0x2, 0x5, 0x2, 0xf8000000], 0xc, [',(%\x00', '%\x00', '&{-%\x00', '\x00']}, ["", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m20.033224734s ago: executing program 0 (id=6301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3}}, 0xf, 0x1}, 0x90) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x54, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfffa, 0xffff}, {0x3, 0xfff3}, {0xf, 0xfff2}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0xbc}, {0x8, 0xb, 0x15}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xc7a}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20008090) 1m19.578849211s ago: executing program 2 (id=6302): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f28015040980102feac198785ba6069a2315b12bcdb555b23ad272136fb0f1b7bf24cbe2475d7e47b567c67e8206764a2b7fe8d24e4511a1217be4d745bf52250ee015697e166f9bfebf6900fe8004007a800cba6006f4bd1742669cffea9c468a302339fdc6e5ebe982f01fca95e5130a030de38ba88c22cabbd5ab444781be3b9ef7354e6110f279d89ed928c3ec7262d99c6ec4b5fed9e3241d1af742772004a1890d48e1d8e17bafdc7dd83637453605ba00000004006880b10135800800d900e000000218d1cc04e027df777f58d2b9f290fc4953808ad1be9a3080380daea68df269cfe7a69abf3f6dbca0e1e6e0947652cb00ef9b36d61ff4dcc0a673b81067bf67a9dbeff194a587f348b7200a4f84de5d77161702671bcce59db97c0118cfedf73d3242c9e3e9d4875ff2cb61d745394c5848687da93ed4ca2f480ee3fa9bba6fb954ac1ef12b8553dcd7ed493536c78bf3aed5e605bcf9ced64c1b1130709d383b65f5383053b1243545f1b559e953f71148cc701d66b22ae26ae98187095816191cd93789b69ce6398095113d3363efb9683805d0b47c5c34", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00d880fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYRES32=r0, @ANYBLOB="0000001400010010"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m19.276874431s ago: executing program 2 (id=6303): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014008d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) unshare(0x22020400) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000480)=0xffffffde) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r7, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1m19.195087942s ago: executing program 2 (id=6304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000040)}], 0x2) 0s ago: executing program 32 (id=6301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0x3}}, 0xf, 0x1}, 0x90) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x54, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfffa, 0xffff}, {0x3, 0xfff3}, {0xf, 0xfff2}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0xbc}, {0x8, 0xb, 0x15}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xc7a}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x20008090) kernel console output (not intermixed with test programs): ttribute type 11 has an invalid length. [ 540.551810][T25038] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5000'. [ 540.621686][T25034] lo speed is unknown, defaulting to 1000 [ 540.628331][T25024] hsr0 speed is unknown, defaulting to 1000 [ 540.660547][T25024] xfrm0 speed is unknown, defaulting to 1000 [ 540.677642][T25043] syzkaller0: entered promiscuous mode [ 540.694456][T25043] syzkaller0: entered allmulticast mode [ 540.934384][T25034] hsr0 speed is unknown, defaulting to 1000 [ 541.045432][T25049] x_tables: duplicate underflow at hook 2 [ 541.069202][T25034] xfrm0 speed is unknown, defaulting to 1000 [ 542.231064][T25064] netlink: 'syz.3.5009': attribute type 12 has an invalid length. [ 542.399859][T25066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5010'. [ 542.544041][T25072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5012'. [ 542.555859][T25072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5012'. [ 542.721141][T25079] RDS: rds_bind could not find a transport for ::ffff:10.9.1.3, load rds_tcp or rds_rdma? [ 542.757314][T24961] Set syz1 is full, maxelem 65536 reached [ 542.895499][T25090] batadv_slave_1: entered promiscuous mode [ 542.904998][T25089] batadv_slave_1: left promiscuous mode [ 542.997522][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5020'. [ 543.248776][T10490] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 543.260261][T10490] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 46394 - 0 [ 543.278480][T10490] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 543.332746][T10490] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 46394 - 0 [ 543.381755][T10490] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 543.406170][T10490] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 46394 - 0 [ 543.422630][T10490] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 543.446561][T10490] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 46394 - 0 [ 543.557612][T25121] lo: Caught tx_queue_len zero misconfig [ 543.785131][T25131] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 543.857135][T25131] netlink: 'syz.1.5028': attribute type 4 has an invalid length. [ 544.022844][T25141] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5031'. [ 544.067457][T25141] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5031'. [ 544.082364][T25144] netlink: 'syz.1.5032': attribute type 10 has an invalid length. [ 544.099501][T25141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5031'. [ 544.114960][T25144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5032'. [ 544.190613][T25144] dummy0: entered promiscuous mode [ 544.401525][T25154] veth0_to_team: entered promiscuous mode [ 544.421093][T25154] gretap0: entered promiscuous mode [ 544.447250][T25157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5036'. [ 544.457007][T25154] debugfs: 'hsr1' already exists in 'hsr' [ 544.457028][T25154] Cannot create hsr debugfs directory [ 544.457900][T25153] syzkaller0: entered promiscuous mode [ 544.457919][T25153] syzkaller0: entered allmulticast mode [ 544.474752][T25153] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 544.503488][T25160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5037'. [ 545.092282][T25175] syzkaller0: entered promiscuous mode [ 545.126443][T25175] syzkaller0: entered allmulticast mode [ 545.160354][T25180] tipc: Enabled bearer , priority 0 [ 545.256157][T25170] tipc: Resetting bearer [ 545.408926][T25170] tipc: Disabling bearer [ 545.438335][T25201] tipc: Enabled bearer , priority 0 [ 545.462939][T25202] netlink: 'syz.2.5046': attribute type 8 has an invalid length. [ 545.471745][T25201] syzkaller0: entered promiscuous mode [ 545.488326][T25201] syzkaller0: entered allmulticast mode [ 545.628654][T25209] wg1: entered promiscuous mode [ 545.646849][T25209] wg1: entered allmulticast mode [ 545.820164][T25201] tipc: Resetting bearer [ 545.849753][T25215] syzkaller0: entered promiscuous mode [ 545.914257][T25215] syzkaller0: entered allmulticast mode [ 546.546581][ T5752] tipc: Node number set to 1721212797 [ 546.822645][T25258] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.879008][T25265] gretap3: entered allmulticast mode [ 546.888188][T25265] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 547.105732][T25279] netlink: 'syz.0.5067': attribute type 4 has an invalid length. [ 547.136198][T25288] netlink: 'syz.4.5070': attribute type 3 has an invalid length. [ 550.124492][T25298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.308620][T25331] tipc: Resetting bearer [ 550.905472][T25356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.149664][T25367] __nla_validate_parse: 110 callbacks suppressed [ 551.149683][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 551.264692][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 551.392659][T25376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.745174][T25382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5093'. [ 552.077302][T25393] netlink: 'syz.1.5097': attribute type 16 has an invalid length. [ 552.120065][T25393] netlink: 'syz.1.5097': attribute type 17 has an invalid length. [ 553.205074][T25425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5108'. [ 553.543056][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'. [ 553.594302][T25438] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 553.689790][T25438] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 553.830705][T25444] syzkaller0: entered promiscuous mode [ 553.853967][T25444] syzkaller0: entered allmulticast mode [ 553.875814][T25446] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5115'. [ 554.176707][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 554.291293][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5116'. [ 554.320445][T25457] batadv_slave_0: Caught tx_queue_len zero misconfig [ 554.598011][T25469] tunl0: entered allmulticast mode [ 554.627518][T25466] nbd: nbd3 already in use [ 554.663006][T25473] sctp: [Deprecated]: syz.1.5120 (pid 25473) Use of int in max_burst socket option. [ 554.663006][T25473] Use struct sctp_assoc_value instead [ 554.780179][T25479] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 554.799450][T25479] netlink: 'syz.0.5122': attribute type 89 has an invalid length. [ 554.861221][T25490] Unsupported ieee802154 address type: 0 [ 554.941268][T25473] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 554.996729][T25473] bond14 (unregistering): Released all slaves [ 555.058885][T25495] netlink: 508 bytes leftover after parsing attributes in process `syz.2.5126'. [ 555.086905][T25495] netlink: 508 bytes leftover after parsing attributes in process `syz.2.5126'. [ 555.410682][T25515] netlink: 996 bytes leftover after parsing attributes in process `syz.3.5132'. [ 555.702151][T25533] tipc: Can't bind to reserved service type 0 [ 555.867869][T25540] nbd: nbd3 already in use [ 555.879650][T25540] block nbd3: NBD_DISCONNECT [ 555.906087][T25540] block nbd3: Send disconnect failed -32 [ 555.933489][T25540] block nbd3: shutting down sockets [ 556.002847][T25542] sit0: left promiscuous mode [ 556.030876][T25542] ip6tnl0: left promiscuous mode [ 556.075929][T25542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.092693][T25542] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.101280][T25542] dummy0: left promiscuous mode [ 556.113361][T25542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.149141][T25542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.161896][T25542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.175614][T25542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.187253][T25542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.201703][T25542] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 556.249833][T10490] vlan2: left allmulticast mode [ 556.255130][T10490] geneve0: left allmulticast mode [ 556.260680][T10490] vlan2: left promiscuous mode [ 556.265554][T10490] geneve0: left promiscuous mode [ 556.271275][T10490] bridge0: port 1(vlan2) entered disabled state [ 556.403477][T10490] xfrm0 (unregistering): left promiscuous mode [ 556.417712][T10490] team0: Port device xfrm0 removed [ 556.438323][T25558] __nla_validate_parse: 1 callbacks suppressed [ 556.438340][T25558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5144'. [ 556.511711][T10490] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 556.602481][T10490] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 556.612456][T10490] bridge9 (unregistering): left promiscuous mode [ 556.633351][T10490] bond1 (unregistering): Released all slaves [ 556.645444][T10490] bond2 (unregistering): Released all slaves [ 556.660862][T10490] bond3 (unregistering): Released all slaves [ 556.673044][T10490] bond4 (unregistering): Released all slaves [ 556.684231][T10490] bond0 (unregistering): Released all slaves [ 556.695799][T10490] bond5 (unregistering): Released all slaves [ 556.708243][T10490] bond6 (unregistering): Released all slaves [ 556.727656][T10490] bond7 (unregistering): (slave bond8): Releasing backup interface [ 556.736473][T10490] bond7 (unregistering): Released all slaves [ 556.747481][T10490] bond8 (unregistering): Released all slaves [ 556.761824][T10490] bond9 (unregistering): Released all slaves [ 556.779605][ T7796] xfrm0 speed is unknown, defaulting to 1000 [ 556.795336][T25546] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 556.808638][ T7796] syz0: Port: 1 Link ACTIVE [ 556.818030][T25546] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 556.866173][ T5719] xfrm0 speed is unknown, defaulting to 1000 [ 556.899748][T10490] : left promiscuous mode [ 556.983697][T25562] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5146'. [ 556.995604][T10490] tipc: Disabling bearer [ 557.035778][T10490] tipc: Left network mode [ 557.053095][T25568] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5147'. [ 557.074266][T25566] tipc: Enabling of bearer rejected, already enabled [ 557.087027][T25562] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5146'. [ 557.362860][T25583] tipc: Enabled bearer , priority 0 [ 557.390968][T25583] syzkaller0: entered promiscuous mode [ 557.406724][T25583] syzkaller0: entered allmulticast mode [ 557.455227][T25583] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 557.483766][T25583] tipc: Resetting bearer [ 557.547378][T25582] tipc: Resetting bearer [ 557.565489][T25582] tipc: Disabling bearer [ 557.607953][T25601] tipc: Enabling of bearer rejected, already enabled [ 557.635008][T25601] netlink: 'syz.3.5159': attribute type 4 has an invalid length. [ 557.654169][T25601] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5159'. [ 557.689239][T25601] .`: renamed from bond0 (while UP) [ 557.742212][T25604] netlink: 'syz.1.5160': attribute type 21 has an invalid length. [ 557.771874][T25604] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 557.805813][T25604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5160'. [ 557.865231][T25608] tipc: Enabling of bearer rejected, already enabled [ 558.280014][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5165'. [ 558.334873][T25628] tunl0: Caught tx_queue_len zero misconfig [ 558.452027][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 558.558867][T25633] syzkaller0: left promiscuous mode [ 558.590080][T25633] syzkaller0: left allmulticast mode [ 558.614783][T25635] ip6gre3: entered promiscuous mode [ 558.623558][T25638] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 558.631645][T25635] ip6gre3: entered allmulticast mode [ 558.801146][T10490] hsr_slave_0: left promiscuous mode [ 558.827367][T10490] hsr_slave_1: left promiscuous mode [ 559.303213][T25642] lo speed is unknown, defaulting to 1000 [ 559.375805][T25672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5178'. [ 559.434669][T25672] nbd: nbd0 already in use [ 559.454572][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'. [ 559.484538][T25672] nbd: must specify an index to disconnect [ 559.617518][T10500] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 559.639873][T10500] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 559.653636][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 559.704636][T25642] hsr0 speed is unknown, defaulting to 1000 [ 559.712380][T25642] xfrm0 speed is unknown, defaulting to 1000 [ 559.926569][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 560.141505][ T13] smbdirect: ib_dev[syz1] removed [ 560.331557][T10490] IPVS: stop unused estimator thread 0... [ 560.657795][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 561.274827][T25732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.375207][T25732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.468368][T25732] team0: Port device netdevsim1 removed [ 561.478365][T25732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.705743][T10500] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.740942][T10500] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.793245][T10493] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.825394][T10493] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.001151][T25747] __nla_validate_parse: 1 callbacks suppressed [ 562.001186][T25747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5193'. [ 562.023093][T25747] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.060605][T25749] netlink: 'syz.1.5194': attribute type 2 has an invalid length. [ 562.068526][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5194'. [ 562.079322][T25747] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.181995][T25747] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.272378][T25747] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.306724][T25753] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 562.454323][T25762] netlink: 'syz.4.5199': attribute type 2 has an invalid length. [ 562.472664][T10493] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.504101][T10500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.516881][T25769] netlink: 'syz.0.5201': attribute type 12 has an invalid length. [ 562.547153][T10493] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.587280][T10493] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.609510][T25776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5200'. [ 562.703970][T25783] 8021q: VLANs not supported on nlmon0 [ 562.968798][T25799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.147443][T25802] netlink: 37 bytes leftover after parsing attributes in process `syz.2.5208'. [ 563.471448][T25825] tipc: Enabling of bearer rejected, already enabled [ 563.674973][T25832] nbd: must specify a size in bytes for the device [ 563.696941][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 563.738049][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5219'. [ 564.155512][T25856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5226'. [ 564.219452][T25856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5226'. [ 564.438205][T25874] syzkaller0: entered promiscuous mode [ 564.447725][T25874] syzkaller0: entered allmulticast mode [ 564.468037][T25874] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 564.601013][T25878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5232'. [ 564.681592][T25880] netlink: 'syz.3.5232': attribute type 1 has an invalid length. [ 564.952979][T25907] netlink: 'syz.0.5240': attribute type 1 has an invalid length. [ 565.301480][T25918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.419894][T25923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5245'. [ 565.472800][T25923] sctp: [Deprecated]: syz.4.5245 (pid 25923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.472800][T25923] Use struct sctp_sack_info instead [ 565.668857][T25931] bond1: option ad_user_port_key: invalid value (65535) [ 565.678720][T25931] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 565.689294][T25931] bond1 (unregistering): Released all slaves [ 565.751269][T25936] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 565.899023][T25950] dummy0: Caught tx_queue_len zero misconfig [ 566.224951][T25974] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 566.249987][T25974] bond0 (unregistering): Released all slaves [ 566.288215][T25978] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.5261'. [ 566.807683][T25992] tipc: Resetting bearer [ 566.866730][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 567.262060][T26009] lo speed is unknown, defaulting to 1000 [ 567.298277][T26012] netlink: 1544 bytes leftover after parsing attributes in process `syz.1.5270'. [ 567.321051][T26013] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5269'. [ 567.339814][T26012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5270'. [ 567.356766][T26013] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5269'. [ 567.508729][T26017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5272'. [ 567.698738][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 567.707064][T26018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5273'. [ 567.735347][T26009] xfrm0 speed is unknown, defaulting to 1000 [ 567.790370][T26029] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5275'. [ 568.037253][T26038] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.5275'. [ 568.118077][T26040] veth0: entered promiscuous mode [ 568.133168][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5276'. [ 568.589874][T26051] netlink: 'syz.0.5280': attribute type 3 has an invalid length. [ 568.931543][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5283'. [ 569.401002][T26079] ip6gretap1: entered allmulticast mode [ 569.565912][T26081] bond1: entered promiscuous mode [ 569.571835][T26081] bond1: entered allmulticast mode [ 569.578530][T26081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 569.585866][T26083] tipc: Enabling of bearer rejected, failed to enable media [ 569.986811][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.022499][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.066005][T26106] netlink: 'syz.0.5296': attribute type 1 has an invalid length. [ 570.297651][T26125] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 570.441648][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.541057][T26139] netlink: 'syz.3.5307': attribute type 1 has an invalid length. [ 570.607971][T26139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.663971][T26139] veth0: entered promiscuous mode [ 570.676011][T26147] žÿ: renamed from team_slave_1 [ 570.706937][T26139] bond0: entered promiscuous mode [ 570.731591][T26151] netlink: 'syz.2.5310': attribute type 1 has an invalid length. [ 570.752908][T26138] bond0: left promiscuous mode [ 570.796878][T26138] veth0: left promiscuous mode [ 570.798757][T26154] netlink: 'syz.2.5311': attribute type 3 has an invalid length. [ 571.137121][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.163150][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.457943][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.097675][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.296942][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.322171][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.496636][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 572.500268][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.619498][T26255] __nla_validate_parse: 27 callbacks suppressed [ 572.619517][T26255] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5334'. [ 572.645144][T26256] bridge0: port 1(vlan3) entered blocking state [ 572.698522][T26256] bridge0: port 1(vlan3) entered disabled state [ 572.711063][T26256] vlan3: entered allmulticast mode [ 572.717295][T26256] geneve0: entered allmulticast mode [ 572.724850][T26256] vlan3: entered promiscuous mode [ 572.730197][T26256] geneve0: entered promiscuous mode [ 573.033371][T26280] Bluetooth: MGMT ver 1.23 [ 573.050845][T26282] sctp: [Deprecated]: syz.3.5345 (pid 26282) Use of int in max_burst socket option. [ 573.050845][T26282] Use struct sctp_assoc_value instead [ 573.226873][T26293] netlink: 'syz.3.5347': attribute type 1 has an invalid length. [ 573.248878][T26293] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5347'. [ 573.273914][T26293] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5347'. [ 573.315217][T26293] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5347'. [ 573.437052][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.463637][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.538050][T26301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5349'. [ 573.571645][T26302] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5350'. [ 573.583309][T26301] ip6tnl0: left allmulticast mode [ 573.605370][T26301] 8021q: adding VLAN 0 to HW filter on device .` [ 574.008432][T26317] Cannot find add_set index 1 as target [ 574.028965][T26315] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5353'. [ 574.046190][T26320] Cannot find add_set index 1 as target [ 574.484374][T26343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5358'. [ 574.612900][T26348] erspan0: entered promiscuous mode [ 574.656087][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5360'. [ 574.835355][T26356] bond10: entered allmulticast mode [ 575.265103][T26380] bridge0: port 1(dummy0) entered blocking state [ 575.295584][T26380] bridge0: port 1(dummy0) entered disabled state [ 575.312894][T26380] dummy0: entered allmulticast mode [ 575.324114][T26380] dummy0: entered promiscuous mode [ 575.353712][T26377] dummy0: left allmulticast mode [ 575.367894][T26377] dummy0: left promiscuous mode [ 575.381292][T26377] bridge0: port 1(dummy0) entered disabled state [ 575.616581][ T5719] net_ratelimit: 6 callbacks suppressed [ 575.616692][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.696860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.705025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.714390][T10490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.749480][T10490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.995851][T26420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.017914][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5375'. [ 576.033266][T26420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.063390][T26420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.099000][T26425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.141695][T26425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.250506][T26431] netlink: 'syz.0.5377': attribute type 2 has an invalid length. [ 576.290785][T26432] netlink: 'syz.4.5376': attribute type 1 has an invalid length. [ 576.353827][T26431] geneve3: entered promiscuous mode [ 576.366121][T26431] geneve3: entered allmulticast mode [ 576.385034][T10493] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 576.489960][T26438] netlink: 'syz.4.5376': attribute type 10 has an invalid length. [ 576.537428][T10493] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 576.567835][T10493] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 576.589750][T26443] nbd: couldn't find a device at index 65546 [ 576.606683][T10493] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 576.765443][T26438] dummy0: entered promiscuous mode [ 577.585268][T26476] bond14 (unregistering): Released all slaves [ 577.829046][T26485] erspan0: left promiscuous mode [ 577.869520][T26487] __nla_validate_parse: 7 callbacks suppressed [ 577.869555][T26487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5389'. [ 577.934593][T26480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5382'. [ 577.999167][T26485] bridge0: left promiscuous mode [ 578.005833][T26485] vlan3: left promiscuous mode [ 578.016908][T26485] geneve0: left promiscuous mode [ 578.030068][T26485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.048640][T26485] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.065578][T26485] dummy0: left promiscuous mode [ 578.084919][T26485] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 578.159814][T26485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.170642][T26485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.450414][T26496] syzkaller0: entered promiscuous mode [ 578.478720][T26496] syzkaller0: entered allmulticast mode [ 579.117844][T26526] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 579.179503][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5402'. [ 580.048760][T26554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5409'. [ 580.476906][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 580.518876][T10476] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.519041][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5412'. [ 580.557315][T26571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5411'. [ 580.594835][T10476] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.629962][T10476] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.640508][T10476] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.663021][T26577] net_ratelimit: 20 callbacks suppressed [ 580.663052][T26577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.701070][T26577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5414'. [ 580.717972][T26575] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5413'. [ 580.762619][T26581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5415'. [ 580.896813][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.205337][T26610] netlink: 'syz.3.5424': attribute type 21 has an invalid length. [ 581.218924][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.233707][T26614] batadv_slave_0: entered promiscuous mode [ 581.251877][T26614] batadv_slave_0: entered allmulticast mode [ 581.309270][T26615] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 581.322005][T26618] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.338186][T10473] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.362113][T10473] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.399695][T10473] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.417677][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.422664][T10473] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.453981][ T8483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.937026][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.271806][T26655] pim6reg1: entered promiscuous mode [ 582.292490][T26655] pim6reg1: entered allmulticast mode [ 582.320811][T26659] geneve2: entered promiscuous mode [ 582.353035][T26661] netlink: 'syz.2.5435': attribute type 1 has an invalid length. [ 582.371220][T26661] netlink: 'syz.2.5435': attribute type 2 has an invalid length. [ 582.581657][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.625159][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.715966][T26678] netlink: 'syz.0.5441': attribute type 16 has an invalid length. [ 582.851387][T26683] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 582.977202][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.611266][T26732] __nla_validate_parse: 12 callbacks suppressed [ 583.611289][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 583.627847][T26727] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 583.776934][T26735] bridge_slave_0: Caught tx_queue_len zero misconfig [ 583.934079][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5462'. [ 583.991072][T26750] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5463'. [ 584.074085][T26750] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5463'. [ 584.140660][T26759] SET target dimension over the limit! [ 584.358769][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5468'. [ 584.542754][T26791] ip6t_REJECT: ECHOREPLY is not supported [ 584.615904][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5472'. [ 584.673022][T26796] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20014 [ 584.852220][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 584.883521][T26809] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5475'. [ 584.923358][T26809] netlink: 8040 bytes leftover after parsing attributes in process `syz.1.5475'. [ 585.107665][T26800] nbd3: detected capacity change from 0 to 549755810944 [ 585.155630][ T5626] block nbd3: Receive control failed (result -32) [ 585.155633][T19076] block nbd3: Receive control failed (result -32) [ 585.170745][T26817] nbd: device at index 3 is going down [ 585.171109][T26817] block nbd3: NBD_DISCONNECT [ 585.171132][T26817] block nbd3: Send disconnect failed -32 [ 585.171151][T26817] block nbd3: Send disconnect failed -32 [ 585.171173][T26817] block nbd3: Disconnected due to user request. [ 585.171186][T26817] block nbd3: shutting down sockets [ 585.451653][T26828] sctp: [Deprecated]: syz.2.5481 (pid 26828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.451653][T26828] Use struct sctp_sack_info instead [ 585.507574][T26831] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 585.544915][T22072] udevd[22072]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 585.554720][T26831] netlink: 'syz.1.5483': attribute type 2 has an invalid length. [ 585.583606][T26840] netlink: 'syz.1.5483': attribute type 4 has an invalid length. [ 585.608967][T22072] udevd[22072]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 585.727854][T26852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5488'. [ 585.755639][T26853] net_ratelimit: 1038 callbacks suppressed [ 585.755659][T26853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.795903][T26853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.932946][T26864] syz_tun: entered allmulticast mode [ 585.968453][T26868] netlink: 'syz.3.5493': attribute type 2 has an invalid length. [ 585.986911][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.002876][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.098852][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.171908][T26881] xt_ecn: cannot match TCP bits for non-tcp packets [ 586.648013][T26907] dummy0: entered promiscuous mode [ 586.655695][T26907] dummy0: entered allmulticast mode [ 587.121656][T26929] lo speed is unknown, defaulting to 1000 [ 587.127822][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.128037][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.146557][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.181503][T26931] netlink: 'syz.1.5507': attribute type 6 has an invalid length. [ 587.197898][T26931] netlink: 'syz.1.5507': attribute type 5 has an invalid length. [ 587.299185][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.663353][T26929] xfrm0 speed is unknown, defaulting to 1000 [ 587.744937][T26955] nbd: couldn't find a device at index 2 [ 587.778495][T26955] nbd: must specify a device to reconfigure [ 588.176794][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.776467][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 591.161610][T27011] tipc: Enabling of bearer rejected, already enabled [ 591.296638][ T7800] net_ratelimit: 9 callbacks suppressed [ 591.296657][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.561352][T27034] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 591.587359][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.622754][T27033] vlan3: entered promiscuous mode [ 591.631120][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.646668][T27033] bridge0: entered promiscuous mode [ 591.785985][T27039] tipc: Enabling of bearer rejected, already enabled [ 591.960082][T27053] __nla_validate_parse: 7 callbacks suppressed [ 591.960133][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5534'. [ 592.035427][T27055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5533'. [ 592.072319][T27068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5536'. [ 592.097115][T27068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5536'. [ 592.339998][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.790465][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.802296][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.899031][T27117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5539'. [ 593.297564][T27137] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 593.377362][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.385854][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.906754][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.915329][T10473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.920525][T27053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.057581][T27144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5547'. [ 595.085169][T27144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5547'. [ 595.107677][T27144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5547'. [ 595.623230][T27183] netlink: 'syz.3.5559': attribute type 111 has an invalid length. [ 595.820757][T27195] netlink: 'syz.0.5564': attribute type 4 has an invalid length. [ 595.836939][T27195] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5564'. [ 596.022495][T27206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5568'. [ 596.104411][T27206] bond3: entered promiscuous mode [ 596.132082][T27206] bond3: entered allmulticast mode [ 596.203787][T27225] netlink: 'syz.3.5572': attribute type 1 has an invalid length. [ 596.281915][T27225] sctp: [Deprecated]: syz.3.5572 (pid 27225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.281915][T27225] Use struct sctp_sack_info instead [ 596.315567][T27232] netlink: 'syz.0.5573': attribute type 1 has an invalid length. [ 596.358845][T27227] xt_CT: No such helper "snmp_trap" [ 596.417127][ T5752] net_ratelimit: 7 callbacks suppressed [ 596.417159][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.496768][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.514085][T27241] netlink: 'syz.4.5577': attribute type 3 has an invalid length. [ 596.757578][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.792459][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.808800][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.820260][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.829936][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.839764][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.851335][T27258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.863223][T27252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.220231][T27274] syzkaller0: entered promiscuous mode [ 597.245455][T27274] syzkaller0: entered allmulticast mode [ 597.270361][T27284] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 598.018913][T27337] veth0: entered promiscuous mode [ 598.139871][T27336] netlink: 'syz.0.5597': attribute type 21 has an invalid length. [ 598.161922][T27336] __nla_validate_parse: 2 callbacks suppressed [ 598.161940][T27336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5597'. [ 598.345398][T27351] batadv0: entered promiscuous mode [ 598.351657][T27351] batadv0: entered allmulticast mode [ 598.359882][T27351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.457804][T27358] netlink: 'syz.1.5602': attribute type 1 has an invalid length. [ 598.457860][T27359] netlink: 'syz.1.5602': attribute type 1 has an invalid length. [ 598.501423][T27358] macvtap2: entered allmulticast mode [ 598.513776][T27358] macvtap3: entered allmulticast mode [ 598.529083][T27358] bond14: (slave bridge11): making interface the new active one [ 598.538400][T27358] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 598.549610][T27312] veth0: left promiscuous mode [ 598.597185][T27362] netlink: 'syz.1.5603': attribute type 58 has an invalid length. [ 600.683823][T27314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.127795][T27400] lo speed is unknown, defaulting to 1000 [ 601.315101][T27420] netlink: 'syz.2.5616': attribute type 61 has an invalid length. [ 601.545276][T27417] sctp: [Deprecated]: syz.2.5616 (pid 27417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.545276][T27417] Use struct sctp_sack_info instead [ 601.614995][T27433] sctp: [Deprecated]: syz.3.5620 (pid 27433) Use of int in max_burst socket option. [ 601.614995][T27433] Use struct sctp_assoc_value instead [ 601.632938][T27400] xfrm0 speed is unknown, defaulting to 1000 [ 601.646984][ T8492] net_ratelimit: 89 callbacks suppressed [ 601.647015][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.667793][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.703783][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.001653][T27452] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0 [ 602.042662][T27453] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5627'. [ 602.193305][T27461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5629'. [ 602.262253][T27465] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 602.320972][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5632'. [ 602.465652][T27473] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.498207][T10838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.704281][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5636'. [ 602.737970][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.782888][T27488] hsr_slave_0: left promiscuous mode [ 602.826677][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.828784][T27488] hsr_slave_1: left promiscuous mode [ 602.872238][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.932643][T27502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.966072][T27505] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5640'. [ 603.606153][T27537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5649'. [ 603.735907][T27542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.746284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.756076][T27540] ip6gre1: entered promiscuous mode [ 603.778182][T27540] ip6gre1: entered allmulticast mode [ 603.806496][ T8492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.830571][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.839865][ T8492] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.921406][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 603.954423][T27553] netlink: 'syz.1.5653': attribute type 11 has an invalid length. [ 604.051675][T27558] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5654'. [ 604.066709][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.309708][ T29] audit: type=1804 audit(1782132582.424:25): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5657" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2479 res=1 errno=0 [ 604.394196][ T29] audit: type=1800 audit(1782132582.424:26): pid=27565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5657" name="cgroup.controllers" dev="tmpfs" ino=2479 res=0 errno=0 [ 604.609287][T27573] netlink: 'syz.1.5659': attribute type 29 has an invalid length. [ 604.644719][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5659'. [ 604.695987][T27573] hsr0: entered promiscuous mode [ 604.781693][T27585] hmó3)ó€: entered promiscuous mode [ 604.818288][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.877438][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5663'. [ 604.908825][T27592] netlink: 'syz.4.5665': attribute type 1 has an invalid length. [ 605.132705][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5671'. [ 605.188464][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5671'. [ 605.255893][T27611] vxlan2: entered promiscuous mode [ 605.262713][T27611] vxlan2: entered allmulticast mode [ 605.379730][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5662'. [ 605.399738][T27582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5662'. [ 605.740679][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'. [ 605.753516][T27641] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 605.855917][T27646] netlink: 'syz.2.5677': attribute type 4 has an invalid length. [ 606.013494][T27663] netlink: 'syz.2.5677': attribute type 10 has an invalid length. [ 606.044250][T27663] dummy0: entered promiscuous mode [ 606.189448][T27673] netlink: 'syz.2.5685': attribute type 10 has an invalid length. [ 606.266732][T27678] netlink: 'syz.2.5685': attribute type 10 has an invalid length. [ 606.335377][T27673] dummy0: left promiscuous mode [ 606.384356][T27673] team0: Port device dummy0 added [ 606.540299][T27668] .`: (slave bond_slave_0): Releasing backup interface [ 606.977024][ T7800] net_ratelimit: 13 callbacks suppressed [ 606.977045][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.356880][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.367948][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.936573][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.016769][ T7796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.476776][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.487456][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.576963][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.953330][T27668] .`: (slave bond_slave_1): Releasing backup interface [ 608.965388][T27668] team0: Port device team_slave_0 removed [ 608.979436][T27668] team0: Port device team_slave_1 removed [ 608.986062][T27668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.994453][T27668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.004381][T27668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.013734][T27668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.024229][T27668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.053596][T27678] team0: Port device dummy0 removed [ 609.077749][T27678] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 609.086554][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.368379][T27711] netlink: 'syz.2.5695': attribute type 23 has an invalid length. [ 609.566036][T27705] ip6gretap1: left allmulticast mode [ 609.589083][T27705] bond1: left promiscuous mode [ 609.601929][T27705] bond1: left allmulticast mode [ 609.608332][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.641634][T27705] bond3: left promiscuous mode [ 609.657956][T27705] bond3: left allmulticast mode [ 609.671917][T27705] ip6gre1: left promiscuous mode [ 609.685404][T27705] ip6gre1: left allmulticast mode [ 609.742782][T27713] veth0: entered promiscuous mode [ 609.752969][T27709] veth0: left promiscuous mode [ 609.911023][T27737] __nla_validate_parse: 4 callbacks suppressed [ 609.911067][T27737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5697'. [ 609.921352][T27734] IPv6: sit3: Disabled Multicast RS [ 610.873516][T27776] vlan4: entered promiscuous mode [ 611.133117][T27794] netlink: 'syz.2.5713': attribute type 21 has an invalid length. [ 611.304911][T27795] veth13: entered allmulticast mode [ 611.320846][T27794] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5713'. [ 611.365127][T27800] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 611.386782][T27800] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 612.182339][ T7796] net_ratelimit: 10 callbacks suppressed [ 612.182367][ T7796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.413474][T27856] netlink: 'syz.1.5723': attribute type 3 has an invalid length. [ 612.490179][T27860] syz_tun: entered allmulticast mode [ 612.883144][T27864] .`: entered promiscuous mode [ 612.940079][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.000310][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.216809][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.404124][T27895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 613.411502][T27895] IPv6: NLM_F_CREATE should be set when creating new route [ 613.418796][T27895] IPv6: NLM_F_CREATE should be set when creating new route [ 613.426058][T27895] IPv6: NLM_F_CREATE should be set when creating new route [ 613.651893][T27907] netlink: 'syz.2.5737': attribute type 1 has an invalid length. [ 613.820116][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5739'. [ 614.106721][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.156915][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.167039][T10493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.263841][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.288843][T27929] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 614.326646][T27929] bond8 (unregistering): Released all slaves [ 614.443590][T27940] netlink: 'syz.1.5744': attribute type 1 has an invalid length. [ 614.657637][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.808170][T27954] netlink: 'syz.1.5745': attribute type 1 has an invalid length. [ 614.849434][T27954] netlink: 476 bytes leftover after parsing attributes in process `syz.1.5745'. [ 614.909168][T27954] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5745'. [ 615.127546][T27964] openvswitch: netlink: Actions may not be safe on all matching packets [ 615.160692][T27966] bond16: option all_slaves_active: invalid value (127) [ 615.174917][T27966] bond16 (unregistering): Released all slaves [ 615.293857][T27969] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 615.489235][T27982] lo speed is unknown, defaulting to 1000 [ 615.935539][T27982] xfrm0 speed is unknown, defaulting to 1000 [ 616.299884][T28005] smc: removing ib device syz2 [ 616.390073][T28005] smbdirect: ib_dev[syz2] removed [ 616.685891][T28020] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5762'. [ 617.040757][T28049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5768'. [ 617.378610][ T7800] net_ratelimit: 6 callbacks suppressed [ 617.378631][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.488187][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.498546][T28068] veth10: entered allmulticast mode [ 617.504197][ T8492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.683898][T28077] macvlan0: Caught tx_queue_len zero misconfig [ 617.704301][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.768681][T28079] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5778'. [ 618.421143][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.647085][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.662527][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.862846][T28149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.871926][T28149] batadv_slave_0: left promiscuous mode [ 619.877798][T28149] batadv_slave_0: left allmulticast mode [ 619.891609][T28149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.929188][T28149] geneve1: left promiscuous mode [ 619.935702][T28149] gretap1: left allmulticast mode [ 619.941891][T28149] geneve2: left promiscuous mode [ 619.948644][T28149] geneve2: left allmulticast mode [ 619.958092][T28149] vlan3: left allmulticast mode [ 619.963176][T28149] bond5: left allmulticast mode [ 619.968789][T28149] geneve3: left allmulticast mode [ 619.977580][T28149] geneve4: left promiscuous mode [ 620.018518][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.027602][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.045704][T28166] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5797'. [ 620.073276][T28166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5797'. [ 620.123367][T28166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5797'. [ 620.159272][T28166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5797'. [ 620.177623][T28169] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 620.192662][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.211158][T28169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5799'. [ 620.223527][T28173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5801'. [ 620.233840][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.243478][T28169] netlink: 'syz.1.5799': attribute type 1 has an invalid length. [ 620.254191][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.278233][T28174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5798'. [ 620.283969][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.334430][T28172] syzkaller1: entered promiscuous mode [ 620.346724][T28172] syzkaller1: entered allmulticast mode [ 620.387542][T28174] geneve4: entered promiscuous mode [ 620.401999][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.446139][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.538182][T28187] IPVS: set_ctl: invalid protocol: 161 255.255.255.255:20002 [ 620.784995][T28200] syzkaller0: entered promiscuous mode [ 620.793328][T28200] syzkaller0: entered allmulticast mode [ 621.056091][T28221] team0: entered promiscuous mode [ 621.872245][T28275] xt_hashlimit: size too large, truncated to 1048576 [ 621.893367][T28276] __nla_validate_parse: 8 callbacks suppressed [ 621.893389][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5831'. [ 621.910061][T28276] nbd: must specify a size in bytes for the device [ 622.100017][T28287] netlink: 'syz.1.5835': attribute type 4 has an invalid length. [ 622.121948][T28289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.179020][T28294] netlink: 'syz.1.5835': attribute type 4 has an invalid length. [ 622.260417][T28287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5835'. [ 622.308562][T28287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5835'. [ 622.416477][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 623.502807][T28378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5856'. [ 623.722132][T28385] hmac(sha224: entered promiscuous mode [ 623.729426][T28386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5860'. [ 623.740838][T28386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5860'. [ 624.195258][T16896] syz_tun (unregistering): left allmulticast mode [ 624.218026][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.225915][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.236479][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.248882][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.259657][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.271202][T28405] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5867'. [ 624.309047][T28405] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5867'. [ 624.480931][T28421] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 624.518396][T28430] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5873'. [ 624.527565][T28421] netlink: 'syz.3.5871': attribute type 2 has an invalid length. [ 624.527587][T28421] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 624.527602][T28421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5871'. [ 624.751201][T28441] netlink: 'syz.2.5877': attribute type 7 has an invalid length. [ 625.130438][T28406] xfrm0 speed is unknown, defaulting to 1000 [ 625.550943][T28484] netlink: 'syz.2.5887': attribute type 1 has an invalid length. [ 625.580113][T28406] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.588365][T28406] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.595694][T28406] bridge_slave_0: entered allmulticast mode [ 625.603802][T28406] bridge_slave_0: entered promiscuous mode [ 625.635778][T28484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.644257][T28406] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.661333][T28406] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.669015][T28406] bridge_slave_1: entered allmulticast mode [ 625.676323][T28406] bridge_slave_1: entered promiscuous mode [ 625.704453][T28406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.729540][T28406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.810339][T28406] team0: Port device team_slave_0 added [ 625.829798][T28406] team0: Port device team_slave_1 added [ 625.889061][T28406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.897248][T28406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.930951][T28406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.963129][T28406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.972605][T28406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.001994][T28406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.085990][T28406] hsr_slave_0: entered promiscuous mode [ 626.096998][T28406] hsr_slave_1: entered promiscuous mode [ 626.105007][T28406] debugfs: 'hsr0' already exists in 'hsr' [ 626.112330][T28406] Cannot create hsr debugfs directory [ 626.338200][ T5626] Bluetooth: hci1: command tx timeout [ 628.416667][ T5626] Bluetooth: hci1: command tx timeout [ 629.074465][T28406] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.173681][T28406] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.245695][T28527] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 629.261415][T28406] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.272170][T28528] netlink: 'syz.3.5898': attribute type 1 has an invalid length. [ 629.336550][T28528] 8021q: adding VLAN 0 to HW filter on device bond11 [ 629.355089][T28530] dummy0: left promiscuous mode [ 629.390984][T28530] dummy0: left allmulticast mode [ 629.394337][T28528] netlink: 'syz.3.5898': attribute type 10 has an invalid length. [ 629.406635][T28528] __nla_validate_parse: 4 callbacks suppressed [ 629.406685][T28528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5898'. [ 629.425820][T28537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.443052][T28530] veth0_virt_wifi: left promiscuous mode [ 629.459926][T28530] veth0_virt_wifi: left allmulticast mode [ 629.481494][T28530] vlan0: left promiscuous mode [ 629.498986][T28530] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 629.515355][T28530] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 629.563547][T28530] mac80211_hwsim hwsim53 syzkaller0: left promiscuous mode [ 629.585157][T28530] mac80211_hwsim hwsim53 syzkaller0: left allmulticast mode [ 629.601291][T28530] geneve2: left promiscuous mode [ 629.607493][T28530] geneve2: left allmulticast mode [ 629.649812][T28530] ip6gre3: left promiscuous mode [ 629.661005][T28530] ip6gre3: left allmulticast mode [ 629.681988][T28530] geneve3: left promiscuous mode [ 629.688216][T28530] geneve3: left allmulticast mode [ 629.703862][T28530] geneve4: left promiscuous mode [ 629.751272][T28532] bond11: (slave veth7): Enslaving as an active interface with a down link [ 629.775323][T28528] dummy0: entered promiscuous mode [ 629.789256][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.803363][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 629.826784][T28406] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.846005][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5904'. [ 629.872309][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.897809][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 629.917992][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.929941][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 629.953521][T28556] netlink: 'syz.2.5903': attribute type 13 has an invalid length. [ 629.966002][T28556] netlink: 'syz.2.5903': attribute type 17 has an invalid length. [ 629.977212][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.987759][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 629.999339][T28561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5905'. [ 630.119790][T28556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.129183][T28556] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.153692][T28556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.201566][T28556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.212392][T28556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.233499][T28556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.244660][T28556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.260023][T28556] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 630.397833][T28406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 630.409146][T28406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.417194][T28406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 630.430419][T28406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.447707][T28406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 630.458301][T28406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.466789][T28406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.477492][T28406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.496583][ T5626] Bluetooth: hci1: command tx timeout [ 630.562560][T28406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.603682][T28406] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.628754][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.636819][T10473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.657792][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.665713][T10473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.097377][T28606] netlink: 37 bytes leftover after parsing attributes in process `syz.2.5916'. [ 631.120857][T28606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.296937][T28617] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5919'. [ 631.587628][T28633] netlink: 'syz.0.5925': attribute type 4 has an invalid length. [ 631.686191][T28633] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 631.736648][T28633] openvswitch: netlink: Missing valid actions attribute. [ 631.752099][T28633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.819217][T28406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.878542][T28645] tun0: tun_chr_ioctl cmd 1074025681 [ 631.892025][T28648] ip6t_srh: unknown srh invflags 4000 [ 631.900452][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'. [ 632.031095][T28406] veth0_vlan: entered promiscuous mode [ 632.086953][T28657] netlink: 'syz.2.5933': attribute type 1 has an invalid length. [ 632.105924][T28657] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5933'. [ 632.129750][T28657] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5933'. [ 632.140380][T28657] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5933'. [ 632.161688][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5933'. [ 632.247565][T28663] bond12: Unable to set up delay as MII monitoring is disabled [ 632.268570][T28663] bond12 (unregistering): Released all slaves [ 632.311597][T28406] veth1_vlan: entered promiscuous mode [ 632.456882][T28676] xt_cgroup: path and classid specified [ 632.499930][T28406] veth0_macvtap: entered promiscuous mode [ 632.558700][T28675] tipc: Resetting bearer [ 632.576953][T19076] Bluetooth: hci1: command tx timeout [ 632.718304][T28691] nbd: nbd4 already in use [ 632.723210][T28691] block nbd4: NBD_DISCONNECT [ 632.733799][T28691] block nbd4: Send disconnect failed -104 [ 632.747088][T28691] block nbd4: shutting down sockets [ 633.152063][T28675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.164653][T28675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.215383][T28682] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 633.269120][T28689] bond9 (unregistering): Released all slaves [ 633.335014][T28678] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.433651][T28406] veth1_macvtap: entered promiscuous mode [ 633.480188][T28678] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.540513][T28406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.574595][T28678] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.617663][T28406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.655759][T28678] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.681984][T10473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.701892][T10473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.730891][T10473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.761515][T10473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.830080][T28721] syzkaller1: entered promiscuous mode [ 633.846044][T28721] syzkaller1: entered allmulticast mode [ 633.881478][T10500] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.922737][T10493] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.040840][T10500] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.100426][T10500] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.129600][T10473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.171027][T10473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.264454][T10493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.300208][T10493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.329346][T28748] geneve1: entered promiscuous mode [ 634.656721][T19076] Bluetooth: hci1: command 0x0405 tx timeout [ 634.828238][T28766] bond9 (unregistering): Released all slaves [ 634.972598][T19076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.984419][T19076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.994262][T19076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 635.002649][T19076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 635.015488][T19076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 635.370052][T28790] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 635.751126][T28809] __nla_validate_parse: 6 callbacks suppressed [ 635.751164][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5966'. [ 635.807515][T28809] xt_TCPMSS: Only works on TCP SYN packets [ 635.967914][T28820] openvswitch: netlink: Key 32 has unexpected len 16 expected 2 [ 636.038980][T28809] bridge_slave_1: left allmulticast mode [ 636.063952][T28809] bridge_slave_1: left promiscuous mode [ 636.081896][T28809] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.083461][T28826] netlink: 'syz.3.5968': attribute type 15 has an invalid length. [ 636.118515][T28809] bridge_slave_0: left allmulticast mode [ 636.131083][T28809] bridge_slave_0: left promiscuous mode [ 636.138413][T28809] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.174847][T28772] xfrm0 speed is unknown, defaulting to 1000 [ 636.392055][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5971'. [ 636.410771][T28837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5972'. [ 636.435858][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5972'. [ 636.644291][T28846] netlink: 'syz.1.5973': attribute type 1 has an invalid length. [ 636.813932][T28853] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5976'. [ 637.056543][T19076] Bluetooth: hci5: command tx timeout [ 637.188573][T28772] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.229450][T28772] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.248921][T28772] bridge_slave_0: entered allmulticast mode [ 637.271403][T28772] bridge_slave_0: entered promiscuous mode [ 637.302054][T28772] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.323469][T28772] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.343599][T28772] bridge_slave_1: entered allmulticast mode [ 637.365977][T28772] bridge_slave_1: entered promiscuous mode [ 637.494763][T28772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.528496][T28772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.624276][T28772] team0: Port device team_slave_0 added [ 637.662314][T28772] team0: Port device team_slave_1 added [ 637.780743][T28772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.806981][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.873223][T28772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.912106][T28772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.946455][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.004306][T28772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.052005][T28896] dummy0: entered allmulticast mode [ 638.098636][T28900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5987'. [ 638.137790][T28772] hsr_slave_0: entered promiscuous mode [ 638.144509][T28772] hsr_slave_1: entered promiscuous mode [ 638.151338][T28772] debugfs: 'hsr0' already exists in 'hsr' [ 638.158280][T28772] Cannot create hsr debugfs directory [ 638.526085][T28908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5990'. [ 638.638417][T28772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.655595][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.674088][T28772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.691756][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.706141][T28772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.723147][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.756900][T28772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.773782][T28772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.810272][T28893] dummy0: left allmulticast mode [ 638.900612][T28922] netlink: 'syz.3.5993': attribute type 9 has an invalid length. [ 638.932783][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'. [ 638.957575][T28772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.992742][T28922] erspan0: entered promiscuous mode [ 639.008659][T28922] macvlan0: entered promiscuous mode [ 639.020652][T28922] macvlan0: entered allmulticast mode [ 639.037371][T28922] erspan0: entered allmulticast mode [ 639.087747][T28772] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.136482][T19076] Bluetooth: hci5: command tx timeout [ 639.147499][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.154678][ T8483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.192425][T10493] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.200574][T10493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.575678][T28942] netlink: 'syz.3.5999': attribute type 1 has an invalid length. [ 639.904279][ T8483] pim6reg: left allmulticast mode [ 640.373407][ T8483] gretap0 (unregistering): left promiscuous mode [ 640.525092][ T8483] bond4 (unregistering): (slave geneve0): Releasing active interface [ 640.717430][T28985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'. [ 640.770974][ T8483] bond0 (unregistering): Released all slaves [ 640.789868][ T8483] bond1 (unregistering): Released all slaves [ 640.803091][ T8483] bond2 (unregistering): Released all slaves [ 640.820762][ T8483] bond3 (unregistering): Released all slaves [ 640.843801][ T8483] bond4 (unregistering): Released all slaves [ 640.877323][ T8483] bond5 (unregistering): (slave dummy0): Releasing active interface [ 640.888624][ T8483] bond5 (unregistering): (slave veth3): Releasing active interface [ 640.901795][ T8483] bond5 (unregistering): Released all slaves [ 640.915894][ T8483] bond6 (unregistering): Released all slaves [ 640.930416][ T8483] bond7 (unregistering): Released all slaves [ 640.945105][ T8483] bond8 (unregistering): Released all slaves [ 640.960930][T28959] netlink: 'syz.1.6002': attribute type 29 has an invalid length. [ 640.973615][T28961] netlink: 'syz.1.6002': attribute type 29 has an invalid length. [ 641.083758][ T8483] : left promiscuous mode [ 641.131068][T28994] No such timeout policy "syz0" [ 641.168274][ T8483] hmó3)ó€: left promiscuous mode [ 641.217094][T19076] Bluetooth: hci5: command tx timeout [ 641.283561][ T8483] tipc: Disabling bearer [ 641.303604][ T8483] tipc: Left network mode [ 641.321238][T29003] mac80211_hwsim hwsim60 wlan1: Caught tx_queue_len zero misconfig [ 641.839267][T28772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.954478][T29029] netlink: 'syz.1.6015': attribute type 4 has an invalid length. [ 641.982906][T29029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6015'. [ 642.050390][T28772] veth0_vlan: entered promiscuous mode [ 642.112390][T28772] veth1_vlan: entered promiscuous mode [ 642.349920][T28772] veth0_macvtap: entered promiscuous mode [ 642.353561][T29045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6020'. [ 642.382039][T28772] veth1_macvtap: entered promiscuous mode [ 642.464300][T28772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.480731][T28772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.499170][ T8483] veth0_to_team: left promiscuous mode [ 642.850046][T29045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.914015][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.929578][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.975859][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.012311][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 643.019979][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.095072][T29070] netlink: 'syz.2.6027': attribute type 8 has an invalid length. [ 643.126885][T29070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 643.245355][T10500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.256142][ T8483] IPVS: stop unused estimator thread 0... [ 643.282794][T10500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.296824][T19076] Bluetooth: hci5: command tx timeout [ 643.330287][T29083] netlink: 'syz.2.6031': attribute type 62 has an invalid length. [ 643.372823][T10500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.399349][T10500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.448336][T29085] syzkaller0: entered promiscuous mode [ 643.465313][T29085] syzkaller0: entered allmulticast mode [ 643.547976][T29092] syzkaller1: entered promiscuous mode [ 643.553815][T29092] syzkaller1: entered allmulticast mode [ 643.562051][T29092] xt_TPROXY: Can be used only with -p tcp or -p udp [ 643.719975][T29103] netlink: 'syz.0.6037': attribute type 1 has an invalid length. [ 643.728087][T29103] netlink: 'syz.0.6037': attribute type 4 has an invalid length. [ 643.735888][T29103] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6037'. [ 643.781926][T29106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6038'. [ 643.955076][T29110] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 643.967976][T29110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 644.080731][T29112] Unsupported ieee802154 address type: 0 [ 644.114433][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 644.122672][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.130268][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.140117][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.151963][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.278216][T17426] syz_tun (unregistering): left allmulticast mode [ 644.332302][T10500] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.351933][T29120] netlink: 'syz.2.6043': attribute type 5 has an invalid length. [ 644.432738][T10500] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.522338][T29131] netlink: 'syz.1.6045': attribute type 1 has an invalid length. [ 644.537980][T10500] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.639469][T10500] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.654106][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6047'. [ 644.685807][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6047'. [ 644.735330][T10490] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.735368][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6047'. [ 644.735389][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6047'. [ 644.760034][T10490] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.811891][T10490] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.864842][T29138] veth0_macvtap: entered allmulticast mode [ 644.893069][T29138] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 644.930556][T10490] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.951133][T29148] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 644.969652][T29149] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 645.022116][T29149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 645.342660][T29171] netlink: 'syz.2.6055': attribute type 21 has an invalid length. [ 645.368936][T29113] xfrm0 speed is unknown, defaulting to 1000 [ 645.479904][T10500] tunl0: left allmulticast mode [ 645.531806][T10500] tipc: Resetting bearer [ 645.868839][T10500] erspan0 (unregistering): left allmulticast mode [ 645.885290][T10490] smc: removing ib device syz0 [ 645.909835][T10490] smbdirect: ib_dev[syz0] removed [ 645.922093][T10500] bond8 (unregistering): (slave gretap2): Releasing active interface [ 645.963933][T10500] bond9 (unregistering): (slave gretap3): Releasing backup interface [ 646.140569][T10500] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 646.168935][T10500] bridge2 (unregistering): left promiscuous mode [ 646.186428][ T5626] Bluetooth: hci3: command tx timeout [ 646.245566][T10500] tipc: Disabling bearer [ 646.318772][T10500] .` (unregistering): Released all slaves [ 646.349438][T10500] bond1 (unregistering): Released all slaves [ 646.414856][T10500] bond2 (unregistering): Released all slaves [ 646.447054][T10500] bond3 (unregistering): Released all slaves [ 646.512613][T10500] bond4 (unregistering): Released all slaves [ 646.544854][T10500] bond5 (unregistering): Released all slaves [ 646.600980][T10500] bond6 (unregistering): Released all slaves [ 646.711396][T10500] bond7 (unregistering): Released all slaves [ 646.772691][T10500] bond8 (unregistering): Released all slaves [ 646.833973][T10500] bond9 (unregistering): Released all slaves [ 646.875958][T10500] bond0 (unregistering): Released all slaves [ 646.938991][T10500] bond10 (unregistering): Released all slaves [ 646.979725][T10500] bond11 (unregistering): (slave veth7): Releasing active interface [ 647.031026][T10500] bond11 (unregistering): Released all slaves [ 647.118376][T29172] bridge9: entered promiscuous mode [ 647.155839][T29172] bridge9: entered allmulticast mode [ 647.185239][T29172] team0: Port device bridge9 added [ 647.260797][T29182] bridge10: entered promiscuous mode [ 647.300490][T29182] bridge10: entered allmulticast mode [ 647.318103][T29182] team0: Port device bridge10 added [ 647.358836][T10846] xfrm0 speed is unknown, defaulting to 1000 [ 647.393424][T10846] syz0: Port: 1 Link DOWN [ 647.908128][T29219] validate_nla: 2 callbacks suppressed [ 647.908163][T29219] netlink: 'syz.4.6063': attribute type 3 has an invalid length. [ 647.921988][T29220] netlink: 'syz.4.6063': attribute type 3 has an invalid length. [ 648.257260][ T5626] Bluetooth: hci3: command tx timeout [ 648.404808][T29232] pim6reg: entered allmulticast mode [ 648.608208][T29242] __nla_validate_parse: 4 callbacks suppressed [ 648.608230][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6067'. [ 648.669598][T10500] tipc: Left network mode [ 648.681433][T10500] IPVS: stopping master sync thread 27452 ... [ 648.706155][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 648.835579][T29248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6069'. [ 648.885661][T29255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 648.906558][T29258] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 649.052744][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 649.062924][T29113] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.071020][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.082198][T29113] bridge_slave_0: entered allmulticast mode [ 649.100295][T29113] bridge_slave_0: entered promiscuous mode [ 649.112262][T29250] veth0_to_team (unregistering): left promiscuous mode [ 649.150211][T29250] team0: Failed to send options change via netlink (err -105) [ 649.172141][T29250] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 649.183494][T29250] team0: Port device team_slave_0 removed [ 649.204135][T29113] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.221112][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.242340][T29113] bridge_slave_1: entered allmulticast mode [ 649.265259][T29113] bridge_slave_1: entered promiscuous mode [ 649.308711][T29270] netlink: 'syz.1.6072': attribute type 11 has an invalid length. [ 649.342631][T10500] hsr_slave_0: left promiscuous mode [ 649.354906][T10500] hsr_slave_1: left promiscuous mode [ 649.781174][T29287] netlink: 'syz.4.6075': attribute type 1 has an invalid length. [ 650.125902][T29291] macvtap1: entered allmulticast mode [ 650.140580][T29294] macvtap2: entered allmulticast mode [ 650.157462][T29297] bond4: (slave bridge11): making interface the new active one [ 650.166970][T29297] bond4: (slave bridge11): Enslaving as an active interface with an up link [ 650.317354][T29311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 650.324581][T29310] sctp: [Deprecated]: syz.4.6077 (pid 29310) Use of int in maxseg socket option. [ 650.324581][T29310] Use struct sctp_assoc_value instead [ 650.341576][ T5626] Bluetooth: hci3: command tx timeout [ 650.357563][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 650.376918][T29113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.433381][T29113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.612532][T29113] team0: Port device team_slave_0 added [ 650.632006][T29113] team0: Port device team_slave_1 added [ 650.641243][T29320] netlink: 'syz.2.6081': attribute type 1 has an invalid length. [ 650.661710][T29320] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6081'. [ 650.700674][T29113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.714992][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.774117][T29113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.809625][T10500] IPVS: stop unused estimator thread 0... [ 650.827033][T29113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.834657][T29332] xt_CONNSECMARK: invalid mode: 0 [ 650.859336][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.887196][T29324] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 650.908479][T29332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6082'. [ 650.944220][T29113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.996895][T29331] vlan2: entered allmulticast mode [ 651.026912][T29331] bond0: entered allmulticast mode [ 651.042825][T29331] bond_slave_0: entered allmulticast mode [ 651.065352][T29331] bond_slave_1: entered allmulticast mode [ 651.139895][T29332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.171730][T29332] bond_slave_0: left allmulticast mode [ 651.206695][T29332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.247620][T29332] bond_slave_1: left allmulticast mode [ 651.280075][T29332] bond0 (unregistering): Released all slaves [ 651.349675][T29345] netlink: 'syz.2.6083': attribute type 12 has an invalid length. [ 651.437795][T29113] hsr_slave_0: entered promiscuous mode [ 651.454542][T29113] hsr_slave_1: entered promiscuous mode [ 651.473711][T29113] debugfs: 'hsr0' already exists in 'hsr' [ 651.490484][T29113] Cannot create hsr debugfs directory [ 651.554915][T29349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6083'. [ 651.615808][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6085'. [ 651.674646][T29345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6083'. [ 652.331844][T29113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 652.356396][T29113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.401962][T29113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 652.418160][ T5626] Bluetooth: hci3: command tx timeout [ 652.453010][T29113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.494889][T29113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 652.521325][T29113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.541803][T29113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 652.559115][T29113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.925359][T29113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.014685][T29113] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.184451][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.191664][ T8492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.424319][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.431491][T10490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.832313][T29467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6107'. [ 653.898930][T29475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6107'. [ 654.188773][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6112'. [ 654.233139][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6112'. [ 654.309955][T29496] nbd: nbd0 already in use [ 654.419922][T29494] block nbd0: NBD_DISCONNECT [ 654.440432][T29494] block nbd0: Send disconnect failed -32 [ 654.469043][T29494] block nbd0: shutting down sockets [ 654.655643][T10476] bridge_slave_1: left promiscuous mode [ 654.671824][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.712741][T10476] bridge_slave_0: left allmulticast mode [ 654.727983][T10476] bridge_slave_0: left promiscuous mode [ 654.742462][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.778973][T10476] pim6reg: left allmulticast mode [ 655.025359][T10476] bond12 (unregistering): (slave gretap3): Releasing backup interface [ 655.097607][T10476] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 655.151109][T10476] team0: Port device bridge0 removed [ 655.173872][T10476] bond5 (unregistering): (slave bridge3): Releasing active interface [ 655.184553][T10476] bridge3 (unregistering): left promiscuous mode [ 655.191469][T10476] bridge3 (unregistering): left allmulticast mode [ 655.211244][T10476] bond7 (unregistering): (slave bridge6): Releasing active interface [ 655.230008][T10476] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 655.242283][T10476] bridge8 (unregistering): left promiscuous mode [ 655.270217][T10476] bond11 (unregistering): (slave bridge9): Releasing active interface [ 655.288898][T10476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.308586][T10476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.320392][T10476] bond0 (unregistering): Released all slaves [ 655.336051][T10476] bond1 (unregistering): Released all slaves [ 655.351626][T10476] bond3 (unregistering): Released all slaves [ 655.365637][T10476] bond2 (unregistering): Released all slaves [ 655.384121][T10476] bond4 (unregistering): Released all slaves [ 655.426372][T10476] bond5 (unregistering): Released all slaves [ 655.452960][T10476] bond6 (unregistering): Released all slaves [ 655.535027][T10476] bond7 (unregistering): Released all slaves [ 655.566801][T10476] bond8 (unregistering): Released all slaves [ 655.592576][T10476] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 655.605930][T10476] bond9 (unregistering): Released all slaves [ 655.623145][T10476] bond10 (unregistering): (slave veth15): Releasing active interface [ 655.635266][T10476] bond10 (unregistering): Released all slaves [ 655.653416][T10476] bond11 (unregistering): Released all slaves [ 655.683611][T10476] bond12 (unregistering): (slave bond13): Releasing backup interface [ 655.694066][T10476] bond12 (unregistering): Released all slaves [ 655.719043][T10476] bond13 (unregistering): Released all slaves [ 655.750668][T10476] bond14 (unregistering): Released all slaves [ 655.770761][T10476] bond15 (unregistering): Released all slaves [ 656.067871][T29536] syzkaller0: entered promiscuous mode [ 656.082364][T29536] syzkaller0: entered allmulticast mode [ 656.099421][T10476] : left promiscuous mode [ 656.148150][T29538] dvmrp0: entered allmulticast mode [ 656.293878][T10476] tipc: Disabling bearer [ 656.312597][T10476] tipc: Left network mode [ 656.565938][T29113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.830457][T29113] veth0_vlan: entered promiscuous mode [ 656.882783][T29113] veth1_vlan: entered promiscuous mode [ 657.099782][T29113] veth0_macvtap: entered promiscuous mode [ 657.123540][T29606] ip6t_srh: unknown srh invflags 4000 [ 657.131461][T29113] veth1_macvtap: entered promiscuous mode [ 657.233430][T29113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.248750][T29614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6131'. [ 657.301025][T29113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.350670][T10493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.376896][ T42] page_pool_release_retry() stalled pool shutdown: id 306, 1 inflight 60 sec [ 657.412660][T10493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.455487][T10493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.490770][T10493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.714034][T10493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.760500][T10493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.881565][T10473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.923106][T10473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.998738][T29630] sctp: [Deprecated]: syz.0.6133 (pid 29630) Use of int in max_burst socket option deprecated. [ 657.998738][T29630] Use struct sctp_assoc_value instead [ 658.091058][T10476] hsr_slave_0: left promiscuous mode [ 658.110057][T10476] hsr_slave_1: left promiscuous mode [ 658.121355][T10476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.144012][T10476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.153834][T29645] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6039'. [ 658.172788][T10476] batman_adv: batadv0: Removing interface: dummy0 [ 658.215566][T29646] netlink: 'syz.3.6039': attribute type 4 has an invalid length. [ 658.260107][T29646] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6039'. [ 658.584888][T29670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6141'. [ 658.850329][T10476] team0 (unregistering): Port device team_slave_1 removed [ 658.900164][T10476] team0 (unregistering): Port device team_slave_0 removed [ 659.230328][T19076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.238219][T19076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.245583][T19076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.254076][T19076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.263156][T19076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.283892][T29670] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 659.870931][T10476] IPVS: stop unused estimator thread 0... [ 660.422684][T29740] tap0: tun_chr_ioctl cmd 1074025672 [ 660.450164][T29740] tap0: ignored: set checksum disabled [ 660.495956][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6151'. [ 660.521232][T29740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6151'. [ 660.553901][T10476] dvmrp0: left allmulticast mode [ 660.742358][T10476] erspan0 (unregistering): left promiscuous mode [ 660.800190][T10476] bond1 (unregistering): (slave gretap1): Releasing active interface [ 660.839414][T10476] batman_adv: batadv0: Removing interface: gretap2 [ 660.866156][T10476] tipc: Disabling bearer [ 660.905535][T10476] bond5 (unregistering): (slave geneve3): Releasing active interface [ 660.972436][T10476] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 661.023169][T10476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.035552][T10476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.053703][T10476] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 661.064560][T10476] bond0 (unregistering): Released all slaves [ 661.075599][T10476] bond1 (unregistering): Released all slaves [ 661.090016][T10476] bond2 (unregistering): Released all slaves [ 661.104036][T10476] bond3 (unregistering): Released all slaves [ 661.121032][T10476] bond4 (unregistering): Released all slaves [ 661.145598][T10476] bond5 (unregistering): Released all slaves [ 661.160531][T10476] bond6 (unregistering): (slave veth5): Releasing active interface [ 661.175986][T10476] bond6 (unregistering): Released all slaves [ 661.190797][T10476] bond7 (unregistering): Released all slaves [ 661.205986][T10476] bond8 (unregistering): Released all slaves [ 661.298415][T19076] Bluetooth: hci0: command tx timeout [ 661.368906][T10473] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.401672][T10473] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.482551][T10476] hmó3)ó€: left promiscuous mode [ 661.519068][T10473] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.545783][T10473] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.588903][T10476] tipc: Disabling bearer [ 661.608899][T10476] tipc: Left network mode [ 661.759035][T29797] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6161'. [ 661.768681][T29785] tipc: Started in network mode [ 661.786851][T29779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6158'. [ 661.821693][T29785] tipc: Node identity ac14140f, cluster identity 4711 [ 661.863888][T29785] tipc: New replicast peer: 255.255.255.255 [ 661.958943][T29785] tipc: Enabled bearer , priority 10 [ 661.968900][T29806] netlink: 'syz.4.6162': attribute type 6 has an invalid length. [ 661.996805][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6159'. [ 662.959446][T29845] netlink: 'syz.0.6168': attribute type 11 has an invalid length. [ 662.994167][T29845] netlink: 212028 bytes leftover after parsing attributes in process `syz.0.6168'. [ 663.109006][ T24] tipc: Node number set to 2886997007 [ 663.279085][T29859] netlink: 'syz.1.6169': attribute type 1 has an invalid length. [ 663.314042][T29690] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.327891][T29690] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.340020][T29690] bridge_slave_0: entered allmulticast mode [ 663.350348][T29690] bridge_slave_0: entered promiscuous mode [ 663.362270][T29690] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.371638][T29690] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.374786][T29861] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6169'. [ 663.389873][T19076] Bluetooth: hci0: command tx timeout [ 663.397390][T29690] bridge_slave_1: entered allmulticast mode [ 663.409857][T29690] bridge_slave_1: entered promiscuous mode [ 663.435732][T29868] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6169'. [ 663.518829][T29690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.565105][T29690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.632165][T10476] hsr_slave_0: left promiscuous mode [ 663.686198][T10476] hsr_slave_1: left promiscuous mode [ 663.703922][T10476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.716486][T10476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.234473][T10476] team0 (unregistering): Port device 76žÿ removed [ 664.542077][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 664.591467][T29690] team0: Port device team_slave_0 added [ 664.624281][T29690] team0: Port device team_slave_1 added [ 664.700816][T29690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.708159][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.737854][T29690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.839877][T29690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.848082][T29690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.875277][T29690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.893361][T29917] x_tables: duplicate underflow at hook 1 [ 664.951428][T29690] hsr_slave_0: entered promiscuous mode [ 664.968966][T29690] hsr_slave_1: entered promiscuous mode [ 664.983077][T29690] debugfs: 'hsr0' already exists in 'hsr' [ 665.011476][T29690] Cannot create hsr debugfs directory [ 665.133805][T10476] IPVS: stop unused estimator thread 0... [ 665.456371][ T5626] Bluetooth: hci0: command tx timeout [ 666.443141][T29873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.961895][T29949] batman_adv: batadv0: Adding interface: ipvlan2 [ 667.000454][T29949] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.066573][T29949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.105601][T29949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.139152][T29949] batman_adv: batadv0: Interface activated: ipvlan2 [ 667.167269][T29946] batman_adv: batadv0: Adding interface: ipvlan3 [ 667.173832][T29946] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.202986][T29946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.222821][T29946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.239079][T29946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2 [ 667.299067][T29946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.309503][T29946] batman_adv: batadv0: Interface activated: ipvlan3 [ 667.356088][T29957] bond5: option arp_interval: invalid value (18446744073709551615) [ 667.385181][T29957] bond5: option arp_interval: allowed values 0 - 2147483647 [ 667.429589][T29957] bond5 (unregistering): Released all slaves [ 667.538017][ T5626] Bluetooth: hci0: command tx timeout [ 667.582325][T29958] syzkaller0: entered promiscuous mode [ 667.599797][T29958] syzkaller0: entered allmulticast mode [ 667.698658][T29990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6194'. [ 668.076981][T29997] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.087363][T29997] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.162926][T29690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.205703][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.273905][T29999] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.281129][T29999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.302302][T29999] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.309536][T29999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.390817][T29690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.433052][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.474898][T29690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.522601][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.551671][T29690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.745046][T29690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.812763][T30031] tap0: tun_chr_ioctl cmd 1074025677 [ 668.838535][T30031] tap0: linktype set to 787 [ 669.067508][T30054] netlink: 'syz.0.6205': attribute type 126 has an invalid length. [ 669.105364][T29690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.196703][T29690] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.249662][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.258014][ T8492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.309264][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.317261][ T8492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.528376][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'. [ 669.923163][T30087] FAULT_INJECTION: forcing a failure. [ 669.923163][T30087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 670.049414][T30087] CPU: 0 UID: 0 PID: 30087 Comm: syz.1.6215 Not tainted syzkaller #0 PREEMPT(full) [ 670.049444][T30087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.049458][T30087] Call Trace: [ 670.049467][T30087] [ 670.049476][T30087] dump_stack_lvl+0xe8/0x150 [ 670.049505][T30087] should_fail_ex+0x40c/0x560 [ 670.049531][T30087] _copy_from_user+0x2d/0xb0 [ 670.049560][T30087] bpf_test_init+0xd8/0x150 [ 670.049593][T30087] bpf_prog_test_run_skb+0x31e/0x2230 [ 670.049623][T30087] ? __fget_files+0x2a/0x420 [ 670.049651][T30087] ? __might_fault+0xaf/0x130 [ 670.049675][T30087] ? rcu_is_watching+0x15/0xb0 [ 670.049699][T30087] ? __fget_files+0x3a2/0x420 [ 670.049721][T30087] ? __fget_files+0x2a/0x420 [ 670.049747][T30087] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 670.049778][T30087] bpf_prog_test_run+0x2c5/0x340 [ 670.049811][T30087] __sys_bpf+0x643/0x950 [ 670.049841][T30087] ? __pfx___sys_bpf+0x10/0x10 [ 670.049877][T30087] ? ksys_write+0x242/0x270 [ 670.049906][T30087] ? __pfx_ksys_write+0x10/0x10 [ 670.049943][T30087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.049965][T30087] __x64_sys_bpf+0x7c/0x90 [ 670.049991][T30087] do_syscall_64+0x174/0x580 [ 670.050019][T30087] ? clear_bhb_loop+0x40/0x90 [ 670.050043][T30087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.050063][T30087] RIP: 0033:0x7f180039ce59 [ 670.050082][T30087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.050116][T30087] RSP: 002b:00007f1801209028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.050139][T30087] RAX: ffffffffffffffda RBX: 00007f1800615fa0 RCX: 00007f180039ce59 [ 670.050172][T30087] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 670.050186][T30087] RBP: 00007f1801209090 R08: 0000000000000000 R09: 0000000000000000 [ 670.050199][T30087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.050212][T30087] R13: 00007f1800616038 R14: 00007f1800615fa0 R15: 00007fff0f7b7378 [ 670.050238][T30087] [ 670.393652][T30103] syzkaller0: entered promiscuous mode [ 670.402541][T30103] syzkaller0: entered allmulticast mode [ 670.418500][T30103] tipc: Started in network mode [ 670.426744][T30103] tipc: Node identity f2af96926697, cluster identity 4711 [ 670.437833][T30103] tipc: Enabled bearer , priority 0 [ 670.762145][T30106] bond2 (unregistering): Released all slaves [ 671.048429][T30127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6220'. [ 671.077386][T30133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6221'. [ 671.220209][T30144] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 671.354608][T29690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.402070][T30154] FAULT_INJECTION: forcing a failure. [ 671.402070][T30154] name failslab, interval 1, probability 0, space 0, times 1 [ 671.416167][T30154] CPU: 1 UID: 0 PID: 30154 Comm: syz.3.6227 Not tainted syzkaller #0 PREEMPT(full) [ 671.416193][T30154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.416211][T30154] Call Trace: [ 671.416219][T30154] [ 671.416226][T30154] dump_stack_lvl+0xe8/0x150 [ 671.416254][T30154] should_fail_ex+0x40c/0x560 [ 671.416278][T30154] should_failslab+0xa8/0x100 [ 671.416307][T30154] __kmalloc_noprof+0xe8/0x750 [ 671.416334][T30154] ? rcu_is_watching+0x15/0xb0 [ 671.416364][T30154] ? sk_prot_alloc+0xe7/0x210 [ 671.416390][T30154] ? lock_release+0x4b/0x3c0 [ 671.416418][T30154] sk_prot_alloc+0xe7/0x210 [ 671.416443][T30154] ? sk_alloc+0x27/0x390 [ 671.416468][T30154] sk_alloc+0x3a/0x390 [ 671.416494][T30154] bpf_prog_test_run_skb+0x3a6/0x2230 [ 671.416524][T30154] ? __fget_files+0x2a/0x420 [ 671.416548][T30154] ? __might_fault+0xaf/0x130 [ 671.416569][T30154] ? rcu_is_watching+0x15/0xb0 [ 671.416589][T30154] ? __fget_files+0x3a2/0x420 [ 671.416609][T30154] ? __fget_files+0x2a/0x420 [ 671.416632][T30154] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 671.416662][T30154] bpf_prog_test_run+0x2c5/0x340 [ 671.416693][T30154] __sys_bpf+0x643/0x950 [ 671.416721][T30154] ? __pfx___sys_bpf+0x10/0x10 [ 671.416757][T30154] ? ksys_write+0x242/0x270 [ 671.416785][T30154] ? __pfx_ksys_write+0x10/0x10 [ 671.416815][T30154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.416836][T30154] __x64_sys_bpf+0x7c/0x90 [ 671.416862][T30154] do_syscall_64+0x174/0x580 [ 671.416888][T30154] ? trace_irq_disable+0x3b/0x140 [ 671.416917][T30154] ? clear_bhb_loop+0x40/0x90 [ 671.416940][T30154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.416960][T30154] RIP: 0033:0x7f4e07b9ce59 [ 671.416979][T30154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.416997][T30154] RSP: 002b:00007f4e08ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.417020][T30154] RAX: ffffffffffffffda RBX: 00007f4e07e15fa0 RCX: 00007f4e07b9ce59 [ 671.417036][T30154] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 671.417050][T30154] RBP: 00007f4e08ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 671.417063][T30154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.417074][T30154] R13: 00007f4e07e16038 R14: 00007f4e07e15fa0 R15: 00007fff6f02ed38 [ 671.417098][T30154] [ 671.672381][ T5711] tipc: Node number set to 2486736530 [ 671.678894][T29690] veth0_vlan: entered promiscuous mode [ 671.692750][T29690] veth1_vlan: entered promiscuous mode [ 671.715125][T29690] veth0_macvtap: entered promiscuous mode [ 671.723716][T29690] veth1_macvtap: entered promiscuous mode [ 671.738255][T29690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.749651][T29690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.782526][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.796700][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.805682][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.842564][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.879220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.887109][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.897101][T30102] tipc: Resetting bearer [ 671.905433][T30102] tipc: Disabling bearer [ 671.928278][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.936231][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.043916][T30165] netlink: 'syz.2.6143': attribute type 12 has an invalid length. [ 672.065597][T30168] netlink: 'syz.3.6229': attribute type 1 has an invalid length. [ 672.076531][T30167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6230'. [ 672.124140][T30168] bond1: entered promiscuous mode [ 672.129713][T30168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.214616][T30174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6231'. [ 672.227228][T30163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.234372][T30163] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 672.244478][T30163] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 672.255595][T30163] bond1: (slave ipip0): making interface the new active one [ 672.263098][T30163] ipip0: entered promiscuous mode [ 672.269944][T30163] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 672.358095][T30170] bond5: Unable to set up delay as MII monitoring is disabled [ 672.428919][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 672.440163][T30170] bond5 (unregistering): Released all slaves [ 672.776810][T30218] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.786185][T30218] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.873731][T30220] syzkaller0: entered promiscuous mode [ 672.879254][T30220] syzkaller0: entered allmulticast mode [ 672.985563][T30226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6245'. [ 673.038039][T30228] netlink: 'syz.3.6247': attribute type 1 has an invalid length. [ 673.045826][T30228] netlink: 'syz.3.6247': attribute type 2 has an invalid length. [ 673.290639][T30237] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6251'. [ 673.327094][T30238] netlink: 'syz.2.6250': attribute type 4 has an invalid length. [ 673.839895][T30261] bond5: entered promiscuous mode [ 673.899246][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6258'. [ 673.917049][T30268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6258'. [ 674.082958][T30279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.093328][T30279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.100828][T30279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.109210][T30279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.116821][T30279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.310834][T30259] nbd0: detected capacity change from 0 to 63 [ 674.324049][T30266] block nbd0: NBD_DISCONNECT [ 674.329659][T30266] block nbd0: Disconnected due to user request. [ 674.336446][T30266] block nbd0: shutting down sockets [ 674.337811][T28518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.350783][T28518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 674.467379][ T1736] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 674.476558][ T1736] Buffer I/O error on dev nbd0, logical block 1, async page read [ 674.484338][ T1736] Buffer I/O error on dev nbd0, logical block 2, async page read [ 674.492200][ T1736] Buffer I/O error on dev nbd0, logical block 3, async page read [ 674.500385][T28518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.509599][T28518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 674.529593][T28518] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.538815][T28518] Buffer I/O error on dev nbd0, logical block 1, async page read [ 674.546675][T28518] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.555798][T28518] Buffer I/O error on dev nbd0, logical block 2, async page read [ 674.563838][T28518] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.573007][T28518] Buffer I/O error on dev nbd0, logical block 3, async page read [ 674.583681][T28518] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.593173][T28518] Buffer I/O error on dev nbd0, logical block 0, async page read [ 674.601357][T28518] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.610758][T28518] Buffer I/O error on dev nbd0, logical block 1, async page read [ 674.619757][T28518] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.629625][T28518] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.640815][T28518] ldm_validate_partition_table(): Disk read failed. [ 674.652482][T28518] Dev nbd0: unable to read RDB block 0 [ 674.660122][T28518] nbd0: unable to read partition table [ 674.710750][T28518] ldm_validate_partition_table(): Disk read failed. [ 674.734891][T28518] Dev nbd0: unable to read RDB block 0 [ 674.752916][T28518] nbd0: unable to read partition table [ 674.822933][T10841] IPVS: starting estimator thread 0... [ 674.977144][T30304] IPVS: using max 37 ests per chain, 88800 per kthread [ 675.003457][T30315] macvlan1: entered allmulticast mode [ 675.003864][T30321] IPv6: NLM_F_CREATE should be specified when creating new route [ 675.010680][T30315] veth1_vlan: entered allmulticast mode [ 675.036947][T30277] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.046919][T30277] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.060899][T30277] bridge_slave_0: entered allmulticast mode [ 675.068419][T30277] bridge_slave_0: entered promiscuous mode [ 675.076731][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.083922][T30277] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.092215][T30277] bridge_slave_1: entered allmulticast mode [ 675.099572][T30277] bridge_slave_1: entered promiscuous mode [ 675.138602][T30327] netlink: 'syz.0.6270': attribute type 1 has an invalid length. [ 675.165664][T30277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.185494][T30277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.221831][T30277] team0: Port device team_slave_0 added [ 675.238568][T30277] team0: Port device team_slave_1 added [ 675.287837][T30277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.297460][T30277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.325311][T30277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.338530][T30277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.345710][T30277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.375079][T30277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.392107][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6274'. [ 675.470083][T30277] hsr_slave_0: entered promiscuous mode [ 675.481317][T30277] hsr_slave_1: entered promiscuous mode [ 675.487797][T30277] debugfs: 'hsr0' already exists in 'hsr' [ 675.499508][T30277] Cannot create hsr debugfs directory [ 675.531175][ T8492] vlan3: left allmulticast mode [ 675.536243][ T8492] geneve0: left allmulticast mode [ 675.542058][ T8492] bridge0: port 1(vlan3) entered disabled state [ 675.569958][ T8492] dvmrp8: left allmulticast mode [ 675.672089][T30351] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6274'. [ 675.694005][ T8492] team0: Port device bridge1 removed [ 675.755109][ T8492] team0: Port device bridge6 removed [ 675.764094][ T8492] bond2 (unregistering): (slave bridge7): Releasing backup interface [ 675.803623][ T8492] team0: Port device bridge9 removed [ 675.812046][ T8492] team0: Port device bridge10 removed [ 675.819987][ T8492] bond4 (unregistering): (slave bridge11): Releasing active interface [ 675.831682][ T8492] bond0 (unregistering): Released all slaves [ 675.840050][ T8492] bond1 (unregistering): Released all slaves [ 675.850028][ T8492] bond2 (unregistering): Released all slaves [ 675.860052][ T8492] bond3 (unregistering): Released all slaves [ 675.875136][ T8492] bond4 (unregistering): Released all slaves [ 675.885985][T30360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6279'. [ 675.902992][ T8492] bond5 (unregistering): Released all slaves [ 675.918886][T30344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6274'. [ 676.119121][ T5626] Bluetooth: hci2: command tx timeout [ 676.175088][T30376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6282'. [ 676.273268][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6283'. [ 676.325879][ T8492] hmac(sha224: left promiscuous mode [ 676.403520][T30380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.440267][T30380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.493602][T30393] sock: sock_timestamping_bind_phc: sock not bind to device [ 676.528431][T30400] tipc: Enabling of bearer rejected, media not registered [ 676.576215][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 676.731702][ T8492] tipc: Disabling bearer [ 676.737263][ T8492] tipc: Left network mode [ 676.744134][ T8492] IPVS: stopping backup sync thread 18552 ... [ 676.877672][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 677.065555][T30423] 8021q: VLANs not supported on ip6_vti0 [ 677.074581][T30423] syzkaller1: entered promiscuous mode [ 677.080442][T30423] syzkaller1: entered allmulticast mode [ 677.428640][T30448] syzkaller0: entered promiscuous mode [ 677.440388][T30448] syzkaller0: entered allmulticast mode [ 677.764670][T30477] syzkaller0: entered promiscuous mode [ 677.778347][T30477] syzkaller0: entered allmulticast mode [ 677.823505][T30277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 677.840961][T30277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.848726][T30277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 677.864576][T30277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.908369][T30277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 677.923379][T30277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.931638][T30277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 677.962934][T30277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.225165][ T5626] Bluetooth: hci2: command tx timeout [ 678.348433][T30277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.363208][T30277] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.394454][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.401611][T10476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.410731][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.417854][T10476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.633668][T30511] netlink: 'syz.2.6302': attribute type 1 has an invalid length. [ 678.641451][T30511] __nla_validate_parse: 4 callbacks suppressed [ 678.641467][T30511] netlink: 476 bytes leftover after parsing attributes in process `syz.2.6302'. [ 678.708158][T30511] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6302'. [ 680.517545][ T5626] Bluetooth: hci2: command tx timeout [ 683.204210][ T5626] Bluetooth: hci2: command tx timeout [ 684.366987][ C0] sched: DL replenish lagged too much [ 845.604910][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 845.612030][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29113/1:b..l [ 845.620060][ C0] rcu: (detected by 0, t=10502 jiffies, g=140477, q=1454241 ncpus=2) [ 845.628254][ C0] task:syz-executor state:R running task stack:22808 pid:29113 tgid:29113 ppid:29108 task_flags:0x400140 flags:0x00080000 [ 845.641843][ C0] Call Trace: [ 845.645194][ C0] [ 845.648164][ C0] __schedule+0x17d9/0x56c0 [ 845.652706][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.657873][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.663039][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.668201][ C0] ? __pfx___schedule+0x10/0x10 [ 845.673093][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.678244][ C0] ? rcu_is_watching+0x15/0xb0 [ 845.683045][ C0] preempt_schedule_irq+0x4d/0xa0 [ 845.688106][ C0] irqentry_exit+0x14f/0x8f0 [ 845.692734][ C0] ? trace_irq_disable+0x3b/0x140 [ 845.697793][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 845.703808][ C0] RIP: 0010:unwind_next_frame+0x1baa/0x2550 [ 845.709733][ C0] Code: a4 0e 01 48 c7 c7 40 a3 c9 8b be 66 03 00 00 48 c7 c2 e0 a3 c9 8b e8 55 4d 2b 00 48 c7 c7 20 9a 95 8e 4c 89 ee e8 d6 33 2b 00 01 e2 34 00 89 e8 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d e9 [ 845.729372][ C0] RSP: 0018:ffffc9000348f4a0 EFLAGS: 00000282 [ 845.735489][ C0] RAX: 3f2c9c1764284800 RBX: ffffc9000348f558 RCX: 0000000080000001 [ 845.743504][ C0] RDX: ffffc9000348f501 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 845.751511][ C0] RBP: 1ffffffff21a7701 R08: ffffc9000348f930 R09: 0000000000000000 [ 845.759515][ C0] R10: ffffc9000348f598 R11: fffff52000691eb5 R12: ffffc90003488000 [ 845.767526][ C0] R13: ffffffff8176a21f R14: ffffc9000348f548 R15: ffffc9000348f940 [ 845.775534][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.780695][ C0] ? qlist_free_all+0x99/0x100 [ 845.785495][ C0] ? unwind_next_frame+0x8f/0x2550 [ 845.790667][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 845.796864][ C0] arch_stack_walk+0x11b/0x150 [ 845.801670][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 845.807339][ C0] stack_trace_save+0xa9/0x100 [ 845.812163][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 845.817572][ C0] ? stack_depot_save_flags+0x33/0x800 [ 845.823069][ C0] save_stack+0x122/0x230 [ 845.827440][ C0] ? __pfx_save_stack+0x10/0x10 [ 845.832331][ C0] ? __free_frozen_pages+0xc0d/0xd20 [ 845.837656][ C0] ? __slab_free+0x274/0x2c0 [ 845.842285][ C0] ? qlist_free_all+0x99/0x100 [ 845.847091][ C0] ? lock_release+0x4b/0x3c0 [ 845.851732][ C0] ? page_ext_get+0x22/0x2e0 [ 845.856364][ C0] __reset_page_owner+0x71/0x1f0 [ 845.861346][ C0] __free_frozen_pages+0xc0d/0xd20 [ 845.866499][ C0] __slab_free+0x274/0x2c0 [ 845.870970][ C0] qlist_free_all+0x99/0x100 [ 845.875598][ C0] kasan_quarantine_reduce+0x148/0x160 [ 845.881087][ C0] __kasan_kmalloc+0x22/0xb0 [ 845.885729][ C0] __kmalloc_noprof+0x358/0x750 [ 845.890617][ C0] ? tomoyo_realpath_from_path+0xef/0x640 [ 845.896379][ C0] ? __kmalloc_noprof+0x1b4/0x750 [ 845.901443][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 845.907027][ C0] ? rcu_is_watching+0x15/0xb0 [ 845.911827][ C0] tomoyo_path_perm+0x283/0x560 [ 845.916713][ C0] ? tomoyo_path_perm+0x251/0x560 [ 845.921782][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 845.927224][ C0] ? try_to_unlazy+0x67a/0xb50 [ 845.932066][ C0] ? __asan_memset+0x22/0x50 [ 845.936699][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 845.942887][ C0] ? lock_release+0x4b/0x3c0 [ 845.947514][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 845.952663][ C0] ? __d_lookup+0x6f3/0x790 [ 845.957210][ C0] tomoyo_path_unlink+0xaa/0xf0 [ 845.962133][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 845.967722][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.973946][ C0] ? d_lookup+0x80/0xa0 [ 845.978225][ C0] security_path_unlink+0x15f/0x330 [ 845.983458][ C0] filename_unlinkat+0x349/0x610 [ 845.988437][ C0] ? lock_release+0x4b/0x3c0 [ 845.993067][ C0] ? __might_fault+0xaf/0x130 [ 845.997784][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 846.003284][ C0] ? do_getname+0x151/0x250 [ 846.007820][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.013915][ C0] __se_sys_unlink+0x2e/0x140 [ 846.018621][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.024893][ C0] do_syscall_64+0x174/0x580 [ 846.029521][ C0] ? trace_irq_disable+0x3b/0x140 [ 846.034577][ C0] ? clear_bhb_loop+0x40/0x90 [ 846.039286][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.045292][ C0] RIP: 0033:0x7f4e07b9bf47 [ 846.049737][ C0] RSP: 002b:00007fff6f02dfa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 846.058186][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e07b9bf47 [ 846.066197][ C0] RDX: 00007fff6f02dfd0 RSI: 00007fff6f02e060 RDI: 00007fff6f02e060 [ 846.074229][ C0] RBP: 00007fff6f02e060 R08: 00007fff6f02f060 R09: 00000000ffffffff [ 846.082231][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff6f02f0f0 [ 846.090245][ C0] R13: 00007f4e07c322ca R14: 00000000000a5aa4 R15: 00007fff6f02f130 [ 846.098253][ C0] [ 846.101302][ C0] rcu: rcu_preempt kthread starved for 1361 jiffies! g140477 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 846.112525][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 846.122545][ C0] rcu: RCU grace-period kthread stack dump: [ 846.128457][ C0] task:rcu_preempt state:R running task stack:28024 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 846.141983][ C0] Call Trace: [ 846.145292][ C0] [ 846.148249][ C0] __schedule+0x17d9/0x56c0 [ 846.152798][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.157596][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.162392][ C0] ? __pfx___schedule+0x10/0x10 [ 846.167269][ C0] ? schedule+0x90/0x360 [ 846.171542][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.176330][ C0] ? lock_release+0x4b/0x3c0 [ 846.180958][ C0] schedule+0x164/0x360 [ 846.185171][ C0] schedule_timeout+0x152/0x2c0 [ 846.190054][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 846.195461][ C0] ? __pfx_process_timeout+0x10/0x10 [ 846.200784][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 846.206614][ C0] ? prepare_to_swait_event+0x322/0x350 [ 846.212193][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 846.217094][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 846.223295][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 846.228629][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 846.233894][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 846.238560][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 846.243791][ C0] ? __kthread_parkme+0x71/0x1f0 [ 846.248794][ C0] ? __kthread_parkme+0x196/0x1f0 [ 846.253875][ C0] kthread+0x388/0x470 [ 846.257970][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 846.263220][ C0] ? __pfx_kthread+0x10/0x10 [ 846.267837][ C0] ret_from_fork+0x514/0xb70 [ 846.272467][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 846.277617][ C0] ? __switch_to+0xc89/0x1420 [ 846.282341][ C0] ? __pfx_kthread+0x10/0x10 [ 846.286963][ C0] ret_from_fork_asm+0x1a/0x30 [ 846.291771][ C0] [ 846.294815][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 846.301291][ C0] CPU: 0 UID: 0 PID: 10847 Comm: kworker/0:18 Not tainted syzkaller #0 PREEMPT(full) [ 846.310893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.320981][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 846.328224][ C0] RIP: 0010:__rcu_read_unlock+0x6/0xe0 [ 846.333737][ C0] Code: 03 38 c1 7c dc 48 89 df e8 67 ab 85 00 eb d2 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d a9 [ 846.353395][ C0] RSP: 0018:ffffc90000006ed0 EFLAGS: 00000282 [ 846.359505][ C0] RAX: 3e8edd44e7cf6b00 RBX: ffffffff90c05cb4 RCX: 0000000080000102 [ 846.367512][ C0] RDX: ffffffff90c05cb0 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 846.375519][ C0] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 846.383514][ C0] R10: ffffc90000006fd8 R11: ffffffff81b10630 R12: dffffc0000000000 [ 846.391512][ C0] R13: ffffffff8176a21f R14: ffffc90000006f88 R15: 1ffff92000000df1 [ 846.399515][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 846.408477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.415094][ C0] CR2: 00007f1e8b2aceb8 CR3: 0000000094ae0000 CR4: 00000000003526f0 [ 846.423114][ C0] Call Trace: [ 846.426414][ C0] [ 846.429285][ C0] unwind_next_frame+0x1baf/0x2550 [ 846.434437][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 846.439409][ C0] ? unwind_next_frame+0x8f/0x2550 [ 846.444563][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 846.450755][ C0] arch_stack_walk+0x11b/0x150 [ 846.455555][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 846.460528][ C0] stack_trace_save+0xa9/0x100 [ 846.465343][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 846.470750][ C0] ? stack_trace_save+0xa9/0x100 [ 846.475718][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 846.481125][ C0] kasan_save_track+0x3e/0x80 [ 846.485833][ C0] ? kasan_save_track+0x3e/0x80 [ 846.490722][ C0] ? kasan_save_free_info+0x40/0x50 [ 846.495946][ C0] ? __kasan_slab_free+0x5c/0x80 [ 846.500916][ C0] ? kfree+0x1c5/0x640 [ 846.505107][ C0] ? skb_release_data+0x85e/0xab0 [ 846.510175][ C0] ? __kfree_skb+0x5d/0x210 [ 846.514733][ C0] ? nft_synproxy_eval_v4+0x383/0x530 [ 846.520143][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 846.525552][ C0] ? nft_do_chain+0x48d/0x1b10 [ 846.530353][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 846.535502][ C0] ? nf_hook_slow+0xc5/0x220 [ 846.540121][ C0] ? NF_HOOK+0x21f/0x3c0 [ 846.544393][ C0] ? NF_HOOK+0x336/0x3c0 [ 846.548663][ C0] ? process_backlog+0xa34/0x1860 [ 846.553733][ C0] ? __napi_poll+0xaa/0x330 [ 846.558266][ C0] ? net_rx_action+0x61d/0xf50 [ 846.563064][ C0] ? handle_softirqs+0x225/0x840 [ 846.568041][ C0] ? do_softirq+0x76/0xd0 [ 846.572400][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 846.577711][ C0] ? wg_pubkey_hashtable_lookup+0x315/0x360 [ 846.583637][ C0] ? wg_noise_handshake_consume_initiation+0x3ee/0x9b0 [ 846.590523][ C0] ? wg_packet_handshake_receive_worker+0x674/0x10c0 [ 846.597248][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 846.603004][ C0] ? worker_thread+0xa47/0xfb0 [ 846.607813][ C0] ? kthread+0x388/0x470 [ 846.612089][ C0] ? ret_from_fork+0x514/0xb70 [ 846.616886][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 846.621887][ C0] kasan_save_free_info+0x40/0x50 [ 846.626950][ C0] __kasan_slab_free+0x5c/0x80 [ 846.631762][ C0] kfree+0x1c5/0x640 [ 846.635690][ C0] ? skb_release_data+0x85e/0xab0 [ 846.640755][ C0] skb_release_data+0x85e/0xab0 [ 846.645661][ C0] __kfree_skb+0x5d/0x210 [ 846.650038][ C0] nft_synproxy_eval_v4+0x383/0x530 [ 846.655280][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 846.661039][ C0] ? nf_ip_checksum+0x13c/0x510 [ 846.665929][ C0] nft_synproxy_do_eval+0x335/0x550 [ 846.671163][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 846.676922][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.681890][ C0] nft_do_chain+0x48d/0x1b10 [ 846.686516][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 846.691843][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 846.696990][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 846.701808][ C0] nft_do_chain_inet+0x360/0x4b0 [ 846.706790][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 846.712285][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 846.717179][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 846.722591][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 846.728083][ C0] nf_hook_slow+0xc5/0x220 [ 846.732535][ C0] NF_HOOK+0x21f/0x3c0 [ 846.736628][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 846.741690][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 846.747702][ C0] ? NF_HOOK+0x9e/0x3c0 [ 846.751889][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 846.756507][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 846.762516][ C0] ? ip_local_deliver+0x113/0x190 [ 846.767566][ C0] NF_HOOK+0x336/0x3c0 [ 846.771661][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 846.776798][ C0] ? NF_HOOK+0x9e/0x3c0 [ 846.780995][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 846.785610][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 846.790753][ C0] ? ip_rcv_core+0x88d/0xd50 [ 846.795374][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 846.799905][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 846.804447][ C0] process_backlog+0xa34/0x1860 [ 846.809333][ C0] ? process_backlog+0x3c3/0x1860 [ 846.814420][ C0] __napi_poll+0xaa/0x330 [ 846.818786][ C0] net_rx_action+0x61d/0xf50 [ 846.823469][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 846.828610][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 846.833843][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 846.839172][ C0] handle_softirqs+0x225/0x840 [ 846.843982][ C0] ? do_softirq+0x76/0xd0 [ 846.848353][ C0] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 846.854198][ C0] do_softirq+0x76/0xd0 [ 846.858386][ C0] [ 846.861341][ C0] [ 846.864300][ C0] __local_bh_enable_ip+0xf8/0x130 [ 846.869449][ C0] ? wg_pubkey_hashtable_lookup+0x1e/0x360 [ 846.875295][ C0] wg_pubkey_hashtable_lookup+0x315/0x360 [ 846.881060][ C0] wg_noise_handshake_consume_initiation+0x3ee/0x9b0 [ 846.887767][ C0] ? stack_trace_save+0xa9/0x100 [ 846.892745][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 846.898153][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 846.905390][ C0] ? stack_depot_save_flags+0x33/0x800 [ 846.910888][ C0] ? __asan_memset+0x22/0x50 [ 846.915518][ C0] ? blake2s_final+0x145/0x260 [ 846.920350][ C0] ? __crypto_memneq+0x42/0x470 [ 846.925249][ C0] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 846.931963][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.936786][ C0] ? trace_irq_enable+0x3b/0x140 [ 846.941779][ C0] wg_packet_handshake_receive_worker+0x674/0x10c0 [ 846.948345][ C0] ? wg_packet_handshake_receive_worker+0x72f/0x10c0 [ 846.955069][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 846.962050][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.966862][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 846.972015][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 846.977874][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 846.983629][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.988426][ C0] ? lock_acquire+0x5f/0x350 [ 846.993062][ C0] ? rcu_is_watching+0x15/0xb0 [ 846.997858][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 847.003606][ C0] process_scheduled_works+0xa8e/0x14e0 [ 847.009233][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.015252][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 847.020315][ C0] ? assign_work+0x3cf/0x5d0 [ 847.024938][ C0] worker_thread+0xa47/0xfb0 [ 847.029589][ C0] ? __kthread_parkme+0x71/0x1f0 [ 847.034566][ C0] kthread+0x388/0x470 [ 847.038661][ C0] ? __pfx_worker_thread+0x10/0x10 [ 847.043803][ C0] ? __pfx_kthread+0x10/0x10 [ 847.048416][ C0] ret_from_fork+0x514/0xb70 [ 847.053036][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 847.058184][ C0] ? __switch_to+0xc89/0x1420 [ 847.062894][ C0] ? __pfx_kthread+0x10/0x10 [ 847.067514][ C0] ret_from_fork_asm+0x1a/0x30 [ 847.072321][ C0]