last executing test programs: 13.787843586s ago: executing program 2 (id=3415): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x308, 0x0, 0x3, 0xa1, 0x9, @multicast}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000380)={0x7ff, 0x2, 0x5, 0xb0}, 0x8) sendfile(r0, r3, 0x0, 0xffffffff000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@'], 0x40}}, 0x8084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r7) write(r5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x11, r9, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000580)=""/165, &(0x7f00000000c0)=0xa5) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000000780)={0x24, 0x12, 0x1, 0x70bd26, 0x25dfdbff, "", [@generic="29ac32cccd9ee776e4de7ff999249ba142"]}, 0x24}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000100)={0x200, 0x1, 0x6, 0xffff, 0x6}) 11.749580081s ago: executing program 2 (id=3430): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x1, 0x1070bd28, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 10.128377371s ago: executing program 2 (id=3442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, 0xfffffffffffffffd, 0x44000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)=@newae={0x1338, 0x1e, 0x1, 0x70bd28, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4d5, 0x2, 0x2b}, @in6=@mcast1, 0x8634}, [@migrate={0xe8, 0x11, [{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x33, 0x0, 0x0, 0x3504, 0x2, 0x14}, {@in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in=@local, @in=@loopback, 0x32, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, @in=@multicast1, @in=@multicast2, 0x6c, 0x2, 0x0, 0x0, 0x0, 0xa}]}, @algo_aead={0x104c, 0x12, {{'ccm(anubis)\x00'}, 0x8000, 0x180, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in6=@mcast2, 0x0, 0xa}}, @tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d3, 0x33}, 0xa, @in6=@empty, 0x3507, 0x3, 0x2, 0xf4, 0x0, 0x8}]}, @policy_type={0xa}, @algo_comp={0xde, 0x3, {{'deflate\x00'}, 0x4b0, "58194d6c06c950eb176880c91ce0d9aaf36b6d1738eac535f5bfb2be3b87cc5c271838f1908fe163dddf36c3ae4aaacc1695040b6cc05b2bf29868bb030d1fcab318cb7ba521fef3df14109bac5e4db3b5d16a3725a03624f85c8db938273d300a07f2301eb2a1f809d2ae948fc6312604e8efa0c1c7765564d9bdee2eefbf92ebfc4a5b18fffd27b079bd453ad44372b310dc588dc3"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @lifetime_val={0x24, 0x9, {0x2, 0x5, 0x3}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd2c, 0x70bd2d, 0x70bd2c, 0x7f, [0x3d41, 0x7ff, 0x7, 0x1, 0x8, 0x3e, 0x4, 0x5]}}]}, 0x1338}, 0x1, 0x0, 0x0, 0x885}, 0x24040800) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048000}, 0x881) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001680)={&(0x7f0000001580), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x80}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7ff}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x14d8}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xfa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001840), 0x8) sendmsg$nl_netfilter(r7, &(0x7f0000001d80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f00000018c0)={0x470, 0x9, 0x5, 0x201, 0x70bd2d, 0x25dfdbfc, {0x1, 0x0, 0x2}, [@nested={0x155, 0x4e, 0x0, 0x1, [@nested={0x4, 0x14}, @generic="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", @generic="bef3d25e287f7305", @generic="cff0b899b8d62b539747551da4c6c228da0d14b2639ee99baa1a17ab18b8b4c9f0c9cef9259805bc0616ac552cdd8783435817ac00aa0ccbf45cfb8ab129d46639cc751d3fc1380a4900df"]}, @typed={0xc, 0xce, 0x0, 0x0, @u64=0xc406}, @typed={0x56, 0x131, 0x0, 0x0, @binary="3fe2c9a2a810dbfb94264091b322e0fe14867c18a75242b00cf2c473b8ab137d86151e98cf84d81ed2373b8c938e15be4deaa7dbe2ef33b87ac89ded930456b926892f779abdcaf850dfa5651f5970d49494"}, @generic="7ac92f48790688489ded50a8979a41085cf726c064715b8d9dee4ce813c7fd93025a167964afce22fc27d91d7c681e0fcb4af31f6208b7ffce23dd1e8e3ca963ec9c4094065be7295be59a8dc26862933e20968833d009fcfc8e0612ed3515bd5ddc660c9d472b9e4fbcdcb99ed5e6f25715d2812a4be0c2d852c4c8048003bfd1bd2dd6", @generic="04c8241728f0c97c837fbbe98b9c5d78bb8698c5add97f0a2b92411895b0b77d978dc501aba7d39c937f23fdbe2724df0257f439f825c7488984a8c04b7b0a3fa09256e8d7ccf075e13901bcbc54c35e", @nested={0xb8, 0x71, 0x0, 0x1, [@generic="06fc407c1c650570c91362714fdf797ccbc49035cc6dc0dd8b4109823f551b93beee0e12654a18f77f855f3a513607370097422cb075246cdb276852daa76ebfd42104a2bb7661e3f8afcd72420076010f632442dd391596d760ddc902395cfcc0c061edcc0c10cd73b30ddb1c", @generic="3b6ffed5972f98e5a233ac7c217dd00fc41323f504ac90b78d8a1437b2224be2304883e9663517f7ad70a49f9f38948ad1cdb2a91018ff1bb54b89c1b2a31b5556bf7a100d14f4"]}, @generic="d35330e1b9023e7dae73d3c28be2a8152deb32ac5ccf354c56b6cb7aa0f834993b29136b7d50bd8ada37920fd2c7f2964f9c1d4705bb6874f88fb44dea2f3619434abd9be6ade10a50120a204c72956017ef4b7eda89858f0704f2c104e803958a4a6e5ff516d017950f69ee673c9da87fe7ceb69eec2299e263bf4ac1366b2c16aabfe31414c841ce0df3f1b4463a891533014de9df528c635144d32b67473be0ee0905661c4bcc0cb1af53a1592d", @typed={0x8, 0x6a, 0x0, 0x0, @fd=r1}, @generic="4ec3b79bc2e8d73080e43b0974483e35801fa1c0e35094a37e8b1d1692c99cb091ff6a80114053935fcb7f70ea9358f69388cd81cced378d585eaf755ef33822b03de8d6f5a8a1b771431dc173455b8701eab6fecd84c16108d74840"]}, 0x470}, 0x1, 0x0, 0x0, 0x841}, 0x40880) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001dc0), r0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e40), r4) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x88, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x200088c0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002140)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x6c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000800) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r6, 0xce8595f68d2987db, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000002280)={0x0, 0x4}, &(0x7f00000022c0)=0x8) (async) write$cgroup_subtree(r7, &(0x7f0000002300)={[{0x2d, 'freezer'}, {0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'perf_event'}, {0x2b, 'perf_event'}, {0x2b, 'net'}]}, 0x49) (async) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002400)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000002440)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000002540)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x4c, r11, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x48, 0x0, 0x10, 0x70bd25, 0x8000, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 9.741821633s ago: executing program 2 (id=3445): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c) r3 = socket$key(0xf, 0x3, 0x2) unshare(0x26020480) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 5.871388119s ago: executing program 0 (id=3464): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001140)=0x40) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/88, 0xffffff45}, {&(0x7f0000000780)=""/83, 0x53}], 0x2, 0x0, 0xf00}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000040) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000fc0)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0xa, 0x7, 0x7f2a, 0x1ff, 0x1]}, &(0x7f0000000000)=0x78) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000000)="dd", 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) 4.583543488s ago: executing program 1 (id=3470): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x80000004, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x3, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0xc, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.37152669s ago: executing program 1 (id=3471): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(0x0, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) sendmsg$nl_route_sched(r3, 0x0, 0x4000090) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x14, 0x601, 0x0, 0x0, {0x29, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c0c8) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44850}, 0x20044844) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, 0x0, 0x404c894) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, &(0x7f0000000040)) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3}, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xfffffffffffffffa, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0xc4, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in6=@private2, 0xffffffff, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18) (async, rerun: 64) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_newroute={0x30, 0x18, 0x100, 0x0, 0x8000003, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 4.177117158s ago: executing program 3 (id=3472): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000140)=0x5, 0x4) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000004}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000004}) 4.057698152s ago: executing program 1 (id=3473): socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1, @ANYRES32], 0x7c}}, 0x0) 4.036473992s ago: executing program 0 (id=3474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, &(0x7f00000000c0)=0x4) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e68bd1805ae07b41faef517790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c11d000000e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621742664d291f3438ba31b57842446f6aa2fbfff010000264d5b90146b17bc3c0af4eb4c183105af0bf545dc7319b1d15df85b74782fa3ee9ab265ad12d233294e264185a4db3eb0d4c67c7c9f6b8274075dcc548a732bfec549e667222434c994038db46f9580557ead9e92b0ec15bb7af49fd95943f77365def17240bf76611100eacf76c14159d07ddd28fe4bedf9f9f1cc352a5ac349ba0eadd1d9179e26cc83fdb29b0db84695b0c4789bed03b6", 0x1ab}, {&(0x7f0000003240)="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", 0xe62}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) 4.034443455s ago: executing program 2 (id=3475): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x17}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f00000002c0)={0x55, 0x200, 0x5, 0x0, 0x3, 0x8, 0x0, &(0x7f0000000200)=[{0x14, 0x101, 0x200}, {0xd, 0x101, 0xfffffff9}, {0x1a, 0x1ff, 0xfff}, {0x3, 0x101, 0x2}, {0xb, 0x1ff, 0x1}, {0x17, 0xfe, 0x6}, {0x11, 0x1ff, 0x3}, {0x15, 0x1ff, 0xc0}]}) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000"], 0x40}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000380)}, 0x20) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$packet(r5, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000180)=0x7) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x800, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x2b5, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x400c011}, 0x0) write$nci(r2, &(0x7f0000000140)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x45, {0x1, 0x1, 0x6}}, 0x6) 3.961027306s ago: executing program 4 (id=3476): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (fail_nth: 3) 3.519601807s ago: executing program 1 (id=3477): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60000160, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000006f80)={&(0x7f0000006e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006f40)={&(0x7f0000006e80)={0x98, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7b}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040050}, 0x885) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 3.415046574s ago: executing program 4 (id=3478): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x80003, 0xc, 0x1, 0x4}}]}}]}, 0x44}}, 0x24040004) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000001c0)) 3.344940619s ago: executing program 3 (id=3479): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0xa}}], 0x5, 0x4040000) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}}, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'hsr0\x00', 0x3}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@delnexthop={0x58, 0x69, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0xa}}], 0x5, 0x4040000) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x64, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'hsr0\x00', 0x3}, 0x18) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@delnexthop={0x58, 0x69, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) 3.241273984s ago: executing program 0 (id=3480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x2a, 0x0, &(0x7f00000000c0)="c1188e99b95d02ff4284860186dd8a2cd3818eeedc374bafbae18b852c7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000400) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1}, 0x100}], 0x1, 0x22222, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3.041520564s ago: executing program 3 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0xc270}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x4000f3cd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x7f, @loopback, 0x2}}, 0x3a0, 0xff}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x1000, 0x5}, &(0x7f0000000180)=0x8) 2.820789123s ago: executing program 4 (id=3482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0xfffffffffffffffd, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000001c0)=0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000020) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100007000000d40f7f9efc27929ec3bc58980380000000081a1600000000", @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close(r5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x80000000}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{r3, &(0x7f0000000180)='xfrm0\x00', 0x101801, &(0x7f00000001c0)={@align=0x2800000000, {0x8000, 0x23, 0x2, 0x45a}}, 0xeaa, 0x0, 0x0}, 0x0, 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) unshare(0x22020400) (async) r8 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x1, @empty, 0xfffffffe}}, [0x9673, 0x2, 0xf94, 0x7, 0xc, 0x200, 0xa0, 0x2, 0xfffffffffffffff7, 0x2, 0x8, 0x5, 0x100, 0xffffffffffffff01, 0x3]}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f00000000c0)=ANY=[], 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2.82039609s ago: executing program 3 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11, 0x0, 0x700}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.651407662s ago: executing program 3 (id=3484): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000640)={@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, {0x0}, 0x0, 0x59}, 0xa0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r8, 0x215eb000) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x2000000, 0x0, 0x2700}}) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58bd2c6197bbff7b0000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078005001500080000000500050002000000050004000000000011000300686173683a69702c6d"], 0x58}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) 2.620084294s ago: executing program 1 (id=3485): sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x701, 0x2070bd24, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/78, 0x4e, 0x0, &(0x7f0000000240)=""/13, 0xd}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f0000001000000004"], 0x20) 2.268788571s ago: executing program 1 (id=3486): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c) r3 = socket$key(0xf, 0x3, 0x2) unshare(0x26020480) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.223416982s ago: executing program 4 (id=3487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000016c0)=""/4132, &(0x7f0000000000)=0x1024) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a8", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000016c0)=""/4132, &(0x7f0000000000)=0x1024) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000f40)=""/250, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a8", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) 1.974230599s ago: executing program 0 (id=3488): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (fail_nth: 4) 1.232057505s ago: executing program 0 (id=3489): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) recvmsg$can_j1939(r0, &(0x7f0000000600)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40010000) sendmmsg$inet6(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="000013af8ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a124193fc02d43af311f9c972380c3aeec9dba1b682ee2736e6cc03bd079eb8d325ed46d305ec62", 0x67}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xdb, 0xf2, 0x62, 0x0, @mcast2, @loopback, 0x8000, 0x10, 0x5, 0x8}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a3c000000120a09000000000000000000020000030900020073797a310000000008000340000000070900010073797a30000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', r2, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000034ed617de93273e5df839f4fe1ceddd000003473b1e016ef20000"], 0x1c}}, 0x4001) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 1.136743425s ago: executing program 2 (id=3490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="80e58d98983dd62c4aec119aee5aa01e94294a20318d89bd44abb900000008000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22000019}, 0x24004005) shutdown(r3, 0x8c5d47e95537ac9b) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0xa8, 0x150, 0xffffffff, 0x0, 0x150, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000140), {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff000000, 'veth0_macvtap\x00', 'hsr0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x63}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@ip={@loopback, @private=0x7, 0xff000000, 0xffffff00, 'team_slave_1\x00', 'erspan0\x00', {0xff}, {}, 0x1, 0x0, 0xd}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0x0, 'veth1_macvtap\x00', 'veth0_vlan\x00', {}, {}, 0x89, 0x1, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @gre_key=0xb, @icmp_id=0x68}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffffff, 0xffffff00, 'nr0\x00', 'ip6_vti0\x00', {}, {}, 0xc, 0x2, 0x25}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x7, 0x4, 0x1, 0x7, 0x7], 0x3, 0x2}}}, @common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x2, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000008c0)=0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = epoll_create1(0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x8) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000840), 0x4) listen(r8, 0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0xf000871003ef06ee}) openat$cgroup_procs(r6, &(0x7f0000000940)='cgroup.threads\x00', 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYRESDEC=r11, @ANYRES32=r1, @ANYRES16=r3], 0xfdef) 585.732462ms ago: executing program 4 (id=3491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000002c0)=0x7ff, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6, 0x1, 0x3, 0x5, 0x4, 0x1}, &(0x7f00000000c0)=0x20) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r2, 0x7}, &(0x7f00000000c0)=0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000004c0)=""/17, &(0x7f00000003c0)=0x11) 373.162649ms ago: executing program 4 (id=3492): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c000180"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/24], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r13, 0x8010661b, &(0x7f0000000100)) 351.188007ms ago: executing program 0 (id=3493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x600000d, 0x8031, 0xffffffffffffffff, 0x2a9000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) 0s ago: executing program 3 (id=3494): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) kernel console output (not intermixed with test programs): 13997] bridge8: entered allmulticast mode [ 432.371761][T14008] gretap0: entered promiscuous mode [ 432.624819][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.680661][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.696018][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.733539][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.763938][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.791048][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.823925][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.849968][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.875184][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 432.894519][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 432.903947][T14018] netlink: 'syz.0.2100': attribute type 2 has an invalid length. [ 433.474520][T14041] syzkaller1: entered promiscuous mode [ 433.508271][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 433.510260][T14041] syzkaller1: entered allmulticast mode [ 433.646098][T14053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 433.951281][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 434.259502][T14065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.510591][T14062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.543887][T14062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 434.588787][T14064] gretap0: left promiscuous mode [ 434.635576][T14064] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 434.826516][T14090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2115'. [ 435.209051][T14100] FAULT_INJECTION: forcing a failure. [ 435.209051][T14100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.251184][T14100] CPU: 0 UID: 0 PID: 14100 Comm: syz.2.2118 Not tainted syzkaller #0 PREEMPT(full) [ 435.251214][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.251226][T14100] Call Trace: [ 435.251234][T14100] [ 435.251243][T14100] dump_stack_lvl+0xe8/0x150 [ 435.251279][T14100] should_fail_ex+0x40c/0x560 [ 435.251313][T14100] _copy_from_iter+0x1d3/0x1660 [ 435.251337][T14100] ? trace_irq_disable+0x3b/0x140 [ 435.251376][T14100] ? __pfx__copy_from_iter+0x10/0x10 [ 435.251401][T14100] ? netlink_sendmsg+0x650/0xb40 [ 435.251425][T14100] ? kasan_check_range+0x1c7/0x2c0 [ 435.251458][T14100] ? netlink_sendmsg+0x650/0xb40 [ 435.251476][T14100] ? skb_put+0x112/0x210 [ 435.251573][T14100] netlink_sendmsg+0x6c0/0xb40 [ 435.251612][T14100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.251638][T14100] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.251664][T14100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.251683][T14100] sock_sendmsg_nosec+0x13a/0x180 [ 435.251712][T14100] ____sys_sendmsg+0x54e/0x850 [ 435.251748][T14100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.251788][T14100] ? import_iovec+0x73/0xa0 [ 435.251819][T14100] ___sys_sendmsg+0x2a5/0x360 [ 435.251849][T14100] ? __lock_acquire+0x683/0x2cf0 [ 435.251880][T14100] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.251947][T14100] ? __fget_files+0x2a/0x420 [ 435.251973][T14100] ? __fget_files+0x3a2/0x420 [ 435.252010][T14100] __x64_sys_sendmsg+0x1b1/0x290 [ 435.252043][T14100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.252092][T14100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.252113][T14100] do_syscall_64+0x174/0x580 [ 435.252142][T14100] ? trace_irq_disable+0x3b/0x140 [ 435.252166][T14100] ? clear_bhb_loop+0x40/0x90 [ 435.252190][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.252210][T14100] RIP: 0033:0x7f4f47b9de99 [ 435.252231][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.252248][T14100] RSP: 002b:00007f4f48ad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.252271][T14100] RAX: ffffffffffffffda RBX: 00007f4f47e25fa0 RCX: 00007f4f47b9de99 [ 435.252285][T14100] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 435.252298][T14100] RBP: 00007f4f48ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 435.252309][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.252321][T14100] R13: 00007f4f47e26038 R14: 00007f4f47e25fa0 R15: 00007ffdaa9ec9d8 [ 435.252353][T14100] [ 435.613043][T14109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.930228][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 436.966099][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 437.002401][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 437.032902][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2132'. [ 437.050366][T14164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.200736][T14167] FAULT_INJECTION: forcing a failure. [ 437.200736][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 437.251354][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 437.267950][T14167] CPU: 0 UID: 0 PID: 14167 Comm: syz.4.2135 Not tainted syzkaller #0 PREEMPT(full) [ 437.267978][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.267990][T14167] Call Trace: [ 437.267997][T14167] [ 437.268006][T14167] dump_stack_lvl+0xe8/0x150 [ 437.268041][T14167] should_fail_ex+0x40c/0x560 [ 437.268070][T14167] should_failslab+0xa8/0x100 [ 437.268101][T14167] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 437.268131][T14167] ? local_lock_release+0x9c/0x160 [ 437.268160][T14167] ? __alloc_skb+0x1d7/0x7a0 [ 437.268185][T14167] ? __alloc_skb+0x1d7/0x7a0 [ 437.268217][T14167] __alloc_skb+0x1d7/0x7a0 [ 437.268249][T14167] netlink_ack+0x136/0xb30 [ 437.268278][T14167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.268383][T14167] ? __lock_acquire+0x683/0x2cf0 [ 437.268422][T14167] netlink_rcv_skb+0x2a4/0x4a0 [ 437.268453][T14167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.268481][T14167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.268523][T14167] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.268542][T14167] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.268564][T14167] netlink_unicast+0x7bb/0x940 [ 437.268603][T14167] netlink_sendmsg+0x813/0xb40 [ 437.268631][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.268655][T14167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.268681][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.268699][T14167] sock_sendmsg_nosec+0x13a/0x180 [ 437.268724][T14167] ____sys_sendmsg+0x54e/0x850 [ 437.268761][T14167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.268800][T14167] ? import_iovec+0x73/0xa0 [ 437.268832][T14167] ___sys_sendmsg+0x2a5/0x360 [ 437.268861][T14167] ? __lock_acquire+0x683/0x2cf0 [ 437.268890][T14167] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.268956][T14167] ? __fget_files+0x2a/0x420 [ 437.268984][T14167] ? __fget_files+0x3a2/0x420 [ 437.269019][T14167] __x64_sys_sendmsg+0x1b1/0x290 [ 437.269052][T14167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.269100][T14167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.269130][T14167] do_syscall_64+0x174/0x580 [ 437.269157][T14167] ? trace_irq_disable+0x3b/0x140 [ 437.269182][T14167] ? clear_bhb_loop+0x40/0x90 [ 437.269206][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.269226][T14167] RIP: 0033:0x7f1e5a19de99 [ 437.269245][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.269263][T14167] RSP: 002b:00007f1e5b100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.269285][T14167] RAX: ffffffffffffffda RBX: 00007f1e5a425fa0 RCX: 00007f1e5a19de99 [ 437.269299][T14167] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 437.269311][T14167] RBP: 00007f1e5b100090 R08: 0000000000000000 R09: 0000000000000000 [ 437.269323][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.269335][T14167] R13: 00007f1e5a426038 R14: 00007f1e5a425fa0 R15: 00007ffe360fbfa8 [ 437.269368][T14167] [ 437.713470][T14187] bond0: Error: Cannot enslave bond to itself. [ 438.096551][T14194] openvswitch: netlink: Unknown nsh attribute 0 [ 438.129518][T14195] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 439.078541][T14223] tipc: Enabled bearer , priority 0 [ 439.102595][T14223] syzkaller0: entered promiscuous mode [ 439.127183][T14223] syzkaller0: entered allmulticast mode [ 439.152699][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 439.172830][T14223] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.203163][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 439.491930][T14221] tipc: Resetting bearer [ 439.566330][T14221] tipc: Disabling bearer [ 439.815880][T14247] validate_nla: 57 callbacks suppressed [ 439.815923][T14247] netlink: 'syz.2.2158': attribute type 2 has an invalid length. [ 439.912034][T14249] syzkaller0: entered promiscuous mode [ 439.943952][T14249] syzkaller0: entered allmulticast mode [ 440.019105][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.235888][T14259] xt_hashlimit: size too large, truncated to 1048576 [ 440.620062][T14278] netlink: 'syz.0.2164': attribute type 3 has an invalid length. [ 441.143927][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 441.218516][T14295] bond0: entered promiscuous mode [ 441.239862][T14295] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 441.376191][T14295] gretap0: entered promiscuous mode [ 441.405207][T14295] hsr1: entered promiscuous mode [ 441.458556][T14304] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2171'. [ 442.294491][T14323] syzkaller0: entered promiscuous mode [ 442.311756][T14323] syzkaller0: entered allmulticast mode [ 442.519984][T14344] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2181'. [ 442.709106][T14339] vlan3: entered allmulticast mode [ 442.714519][T14339] bond0: entered allmulticast mode [ 442.722135][T14339] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 442.879876][T14344] bond0 (unregistering): left promiscuous mode [ 442.916775][T14344] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 442.928663][T14344] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 442.940604][T14344] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 442.966448][T14344] bond0 (unregistering): Released all slaves [ 443.205110][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.212429][ C0] bridge0: topology change detected, propagating [ 443.219870][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.227148][ C0] bridge0: topology change detected, propagating [ 443.508855][T14376] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 443.545513][T14376] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 443.651581][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2190'. [ 443.834454][T14378] bond_slave_0: entered promiscuous mode [ 443.871527][T14378] bond_slave_0: entered allmulticast mode [ 444.371304][T14410] netlink: 'syz.1.2195': attribute type 40 has an invalid length. [ 445.256962][T14419] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 445.296488][T14419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2197'. [ 501.450179][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.687334][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 560.724286][T14514] netlink: 'syz.2.2206': attribute type 5 has an invalid length. [ 560.849691][T14519] vti0: entered promiscuous mode [ 560.883683][T14519] vti0: entered allmulticast mode [ 561.148069][T14526] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 561.366704][T14533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2213'. [ 561.373444][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 561.389447][T14533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2213'. [ 561.482559][T14536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2215'. [ 561.853010][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 562.158780][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 562.233464][T14558] syzkaller0: entered promiscuous mode [ 562.241552][T14558] syzkaller0: entered allmulticast mode [ 562.495382][T14574] IPVS: length: 17 != 8 [ 562.892114][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.527897][T14601] netlink: 'syz.2.2231': attribute type 9 has an invalid length. [ 563.917643][T14611] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2234'. [ 563.970728][T14611] netlink: 'syz.3.2234': attribute type 11 has an invalid length. [ 564.008985][T14617] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 564.018506][T14617] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 564.033247][T14617] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 564.463672][T14626] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 564.474920][T14626] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 564.601430][T14628] syzkaller0: entered promiscuous mode [ 564.625348][T14628] syzkaller0: entered allmulticast mode [ 565.144636][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2244'. [ 565.529934][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 565.935597][T14669] __nla_validate_parse: 1 callbacks suppressed [ 565.935620][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 565.995888][T14678] syz_tun: entered allmulticast mode [ 566.128810][T14669] syzkaller0: entered promiscuous mode [ 566.149433][T14669] syzkaller0: entered allmulticast mode [ 566.211360][T14684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2252'. [ 566.520359][T14695] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 566.538795][T14695] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2253'. [ 566.553816][T14697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 566.565824][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 567.499325][T14708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2258'. [ 570.818383][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2263'. [ 571.136890][T14734] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2264'. [ 571.307165][T14738] netlink: 'syz.3.2267': attribute type 62 has an invalid length. [ 571.462541][T14743] netlink: 'syz.3.2267': attribute type 62 has an invalid length. [ 571.888350][T14770] netlink: 'syz.2.2271': attribute type 2 has an invalid length. [ 571.918475][T14770] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 571.957399][T14770] nbd: illegal input index 65544 [ 572.572869][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 572.648560][T14793] netlink: 'syz.3.2280': attribute type 12 has an invalid length. [ 572.922057][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 574.139357][T14842] netlink: 'syz.1.2292': attribute type 1 has an invalid length. [ 574.201583][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 574.557100][T14855] netlink: 'syz.0.2294': attribute type 4 has an invalid length. [ 574.638907][T14855] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.2294'. [ 575.406885][T14877] netlink: 'syz.0.2300': attribute type 10 has an invalid length. [ 575.437706][T14880] netlink: 'syz.2.2302': attribute type 11 has an invalid length. [ 575.469976][T14881] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 575.502224][T14881] ipt_ECN: cannot use operation on non-tcp rule [ 575.650263][T14888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2301'. [ 575.703966][T14877] dummy0: entered allmulticast mode [ 576.693708][T14913] syzkaller0: entered promiscuous mode [ 576.708816][T14913] syzkaller0: entered allmulticast mode [ 577.029434][T14847] dvmrp0: entered allmulticast mode [ 577.098921][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'. [ 577.135939][T14924] netlink: 'syz.0.2313': attribute type 21 has an invalid length. [ 577.173016][T14924] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2313'. [ 577.217183][T14924] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 577.263415][T14924] netlink: 'syz.0.2313': attribute type 5 has an invalid length. [ 577.317299][T14924] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2313'. [ 577.960754][T14953] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2320'. [ 578.681882][T14962] syzkaller1: entered promiscuous mode [ 578.713417][T14962] syzkaller1: entered allmulticast mode [ 578.850258][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2323'. [ 580.113694][T14989] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.479221][T14999] veth1: entered allmulticast mode [ 580.868170][T15013] netlink: 'syz.2.2335': attribute type 58 has an invalid length. [ 581.165573][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.292863][T15019] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.329234][T15019] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.371667][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2338'. [ 581.552607][T15035] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 581.783528][T15039] : renamed from dummy0 [ 581.938865][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 582.056902][T15054] netlink: 'syz.3.2345': attribute type 27 has an invalid length. [ 582.103017][T15054] netlink: 'syz.3.2345': attribute type 4 has an invalid length. [ 582.162317][T15054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2345'. [ 582.191388][T15064] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2343'. [ 583.296479][T15097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 583.391905][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'. [ 583.514883][T15104] tipc: Enabling of bearer rejected, failed to enable media [ 583.544212][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 583.599140][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2354'. [ 583.629153][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2354'. [ 584.054894][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 584.153116][T15118] hsr_slave_0: left promiscuous mode [ 584.217059][T15118] hsr_slave_1: left promiscuous mode [ 584.477502][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2357'. [ 584.541457][T15134] netlink: 'syz.1.2357': attribute type 30 has an invalid length. [ 584.615513][T15136] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 584.689884][T15136] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2358'. [ 584.722437][T15143] netlink: 'syz.1.2357': attribute type 30 has an invalid length. [ 584.766060][T15136] netlink: 'syz.4.2358': attribute type 2 has an invalid length. [ 584.850242][T15129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 584.917362][T15146] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 585.410496][T15152] bond9: (slave geneve3): making interface the new active one [ 585.440925][T15152] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 585.638417][ T5915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 585.690065][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.737351][ T5915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 585.821511][ T5915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 585.874568][ T5915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 586.946197][T15208] veth0: entered promiscuous mode [ 587.607523][T15227] bond5: option min_links: invalid value (18446744073709551612) [ 587.618624][T15227] bond5: option min_links: allowed values 0 - 2147483647 [ 587.646178][T15227] bond5 (unregistering): Released all slaves [ 587.739010][T15228] lo: entered allmulticast mode [ 587.750013][T15230] lo: left allmulticast mode [ 588.602288][T15257] vlan3: left promiscuous mode [ 588.658152][T15257] gretap0: left promiscuous mode [ 588.824412][T15258] __nla_validate_parse: 7 callbacks suppressed [ 588.824434][T15258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2388'. [ 588.846392][T15271] netlink: 'syz.1.2392': attribute type 10 has an invalid length. [ 588.897755][T11400] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.929143][T11400] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.001476][T11400] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.033643][T11400] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 589.389526][T15285] tipc: Enabling of bearer rejected, failed to enable media [ 590.042601][T15295] syzkaller0: entered promiscuous mode [ 590.067052][T15295] syzkaller0: entered allmulticast mode [ 590.903070][T15320] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 590.963892][T15311] syzkaller0: entered promiscuous mode [ 590.994094][T15311] syzkaller0: entered allmulticast mode [ 591.169327][T15320] bond10: entered promiscuous mode [ 591.177162][T15320] 8021q: adding VLAN 0 to HW filter on device bond10 [ 591.573045][T15337] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 591.652320][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2396'. [ 591.827213][T15342] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.2408'. [ 591.879374][T15338] netlink: 'syz.1.2407': attribute type 24 has an invalid length. [ 591.944483][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 591.985768][T15338] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 592.932624][T15367] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 593.719617][T15363] tipc: Enabled bearer , priority 0 [ 593.756769][T15353] syzkaller0: entered promiscuous mode [ 593.775130][T15353] syzkaller0: entered allmulticast mode [ 593.835834][T15355] tipc: Resetting bearer [ 594.090099][T15396] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 594.197423][T15355] tipc: Resetting bearer [ 594.355782][T15355] tipc: Disabling bearer [ 594.666834][T15409] gre0: MTU too low for tipc bearer [ 594.686471][T15409] tipc: Enabling of bearer rejected, failed to enable media [ 596.027475][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 596.130254][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 597.204235][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 597.449471][T15496] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.481227][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 597.816343][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 598.021088][T15523] C: renamed from veth1_to_team [ 598.030568][T15523] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2443'. [ 598.109594][T15532] pimreg: tun_chr_ioctl cmd 1074025673 [ 598.141568][T15533] pimreg: tun_chr_ioctl cmd 2147767520 [ 598.306149][T15540] xt_cluster: node mask cannot exceed total number of nodes [ 598.367239][T15539] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 598.538539][T15546] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2450'. [ 598.836584][T15557] xt_hl: Unknown Hop Limit match mode: 206 [ 599.114142][T15574] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2456'. [ 599.429808][T15589] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.2459'. [ 599.455470][T15589] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.2459'. [ 601.676510][T15564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.932080][T15626] __nla_validate_parse: 1 callbacks suppressed [ 601.932103][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 601.965906][T15626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2470'. [ 602.058961][T15630] netlink: 'syz.1.2471': attribute type 2 has an invalid length. [ 602.481410][T15636] No such timeout policy "syz1" [ 602.668923][T15631] netlink: zone id is out of range [ 602.679893][T15640] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2474'. [ 602.704670][T15631] netlink: zone id is out of range [ 602.710838][T15631] netlink: zone id is out of range [ 602.722300][T15631] netlink: zone id is out of range [ 602.737048][T15631] netlink: zone id is out of range [ 602.755360][T15631] netlink: zone id is out of range [ 602.771326][T15631] netlink: zone id is out of range [ 602.795739][T15631] netlink: zone id is out of range [ 602.816149][T15631] netlink: zone id is out of range [ 602.969974][T15649] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 602.995531][T15649] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2479'. [ 603.386983][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 603.401040][T15664] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2482'. [ 604.369233][T15696] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 604.961137][T15712] vlan0: entered allmulticast mode [ 604.984438][T15712] bond0: entered allmulticast mode [ 605.001528][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2497'. [ 605.263473][T15726] netlink: 'syz.0.2499': attribute type 2 has an invalid length. [ 605.543282][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2491'. [ 605.777547][T15737] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2500'. [ 605.908163][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2500'. [ 606.817082][T15767] netlink: 'syz.2.2504': attribute type 15 has an invalid length. [ 607.502949][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2509'. [ 608.166380][T15815] syzkaller0: entered promiscuous mode [ 608.264237][T15815] syzkaller0: entered allmulticast mode [ 608.324103][T15793] xt_hashlimit: size too large, truncated to 1048576 [ 608.503610][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 609.561119][T15845] netlink: 'syz.1.2516': attribute type 1 has an invalid length. [ 609.592115][T15847] netlink: 'syz.0.2514': attribute type 32 has an invalid length. [ 610.556422][T15782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.620279][T15882] IPVS: length: 198 != 24 [ 611.724602][T15882] syzkaller0: entered promiscuous mode [ 611.763677][T15882] syzkaller0: entered allmulticast mode [ 611.827286][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 613.002671][T15911] sctp: [Deprecated]: syz.1.2529 (pid 15911) Use of int in max_burst socket option. [ 613.002671][T15911] Use struct sctp_assoc_value instead [ 614.767265][T15940] x_tables: duplicate underflow at hook 3 [ 614.866508][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'. [ 617.090794][T15978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2548'. [ 617.126701][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2548'. [ 617.194308][T15978] netlink: 'syz.4.2548': attribute type 1 has an invalid length. [ 617.251172][T15978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2548'. [ 617.412736][T15975] No such timeout policy "syz1" [ 617.454165][T15975] net_ratelimit: 13 callbacks suppressed [ 617.454189][T15975] netlink: zone id is out of range [ 617.490901][T15975] netlink: zone id is out of range [ 617.511183][T15975] netlink: zone id is out of range [ 617.537391][T15975] netlink: zone id is out of range [ 617.566757][T15975] netlink: zone id is out of range [ 617.588406][T15975] netlink: zone id is out of range [ 617.608298][T15975] netlink: zone id is out of range [ 617.637473][T15975] netlink: zone id is out of range [ 617.649451][T15975] netlink: zone id is out of range [ 617.674441][T15975] netlink: zone id is out of range [ 618.159582][T15999] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 619.151845][T16026] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2562'. [ 619.220189][T16029] netlink: 'syz.2.2564': attribute type 2 has an invalid length. [ 619.249467][T16029] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2564'. [ 619.385789][T16029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.496087][T16029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.944377][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2570'. [ 620.089151][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 620.133943][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 620.310223][T16077] sctp: [Deprecated]: syz.0.2574 (pid 16077) Use of int in max_burst socket option. [ 620.310223][T16077] Use struct sctp_assoc_value instead [ 620.731829][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 620.753148][T16088] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2576'. [ 622.821580][T16052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.847046][T16092] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 623.087310][T16092] bond5 (unregistering): Released all slaves [ 623.329675][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 623.354342][T16116] bridge_slave_1: default FDB implementation only supports local addresses [ 623.382722][T16122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2578'. [ 623.851582][T16117] bridge0: port 1(team0) entered disabled state [ 624.332286][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.541710][T16117] bridge_slave_1: left allmulticast mode [ 624.885022][T16117] veth1_to_hsr: left promiscuous mode [ 624.958305][T16117] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 624.980569][T16117] vlan2: left allmulticast mode [ 624.986727][T16117] bond0: left allmulticast mode [ 624.992302][T16117] bond_slave_0: left allmulticast mode [ 624.998668][T16117] bond_slave_1: left allmulticast mode [ 625.010125][T16117] geneve2: left promiscuous mode [ 625.016601][T16117] geneve3: left promiscuous mode [ 625.021623][T16117] geneve3: left allmulticast mode [ 625.027386][T16117] bond5: left promiscuous mode [ 625.044498][T16117] bridge8: left allmulticast mode [ 625.121632][T16121] tipc: Enabled bearer , priority 0 [ 625.135970][T16130] syzkaller0: entered promiscuous mode [ 625.142071][T16130] syzkaller0: entered allmulticast mode [ 625.155961][T16155] tipc: Resetting bearer [ 625.322389][T16155] tipc: Resetting bearer [ 625.413936][T16155] tipc: Disabling bearer [ 625.709534][T16183] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2588'. [ 625.719782][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 625.752177][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 625.776236][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 626.237039][T16206] tipc: Enabled bearer , priority 0 [ 626.284312][T16205] syzkaller0: entered promiscuous mode [ 626.316095][T16205] syzkaller0: entered allmulticast mode [ 626.532932][T16205] tipc: Resetting bearer [ 626.704411][T16205] tipc: Disabling bearer [ 626.919836][T16238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 626.992892][T16243] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 627.052599][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2601'. [ 627.628933][T16261] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 627.697044][T16261] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 627.853433][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'. [ 627.946802][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2609'. [ 628.032818][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2609'. [ 628.184847][T16268] bridge0: entered allmulticast mode [ 628.263827][T16268] macvlan0: left allmulticast mode [ 628.285581][T16268] macvlan0: left promiscuous mode [ 628.342373][T16268] bridge0: port 1(macvlan0) entered disabled state [ 629.433741][T16308] netlink: 'syz.2.2618': attribute type 11 has an invalid length. [ 629.485171][T16308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2618'. [ 630.389075][T16330] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.171314][T16328] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 631.492085][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2633'. [ 631.884112][T16369] pim6reg99999999: entered allmulticast mode [ 631.902198][T16373] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.958170][T16371] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2636'. [ 631.982758][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 632.114203][T16377] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2637'. [ 632.546950][T16375] veth1_vlan: left promiscuous mode [ 632.584508][T16375] veth0_vlan: left promiscuous mode [ 632.625893][T16375] veth0_vlan: entered promiscuous mode [ 632.680567][T16375] veth1_vlan: entered promiscuous mode [ 632.954153][T16375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.164346][T16375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.244303][T16375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 633.324294][T16375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.376276][T16375] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 633.668044][T16375] bridge0: port 3(vlan0) entered blocking state [ 633.677429][T16375] bridge0: port 3(vlan0) entered listening state [ 633.745659][T16375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.246699][T16375] geneve2: left promiscuous mode [ 634.251729][T16375] net_ratelimit: 32 callbacks suppressed [ 634.251748][T16375] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 634.344249][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.352686][ T5915] bridge0: port 2(bridge_slave_1) entered listening state [ 634.549763][T10497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.592189][T10497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.644270][T10497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.667548][T10497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.743711][T16408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2643'. [ 634.757829][T11398] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 634.806715][T11398] bond1: (slave veth3): making interface the new active one [ 634.839251][T11398] bond1: active interface up! [ 634.991551][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 635.304620][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 635.357349][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 635.392648][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 635.520619][T16425] veth5: entered allmulticast mode [ 635.597884][T16425] bond11 (unregistering): Released all slaves [ 635.894852][T16437] openvswitch: netlink: Missing key (keys=40, expected=100) [ 636.264595][T16442] atomic_op ffff888052a48198 conn xmit_atomic 0000000000000000 [ 636.307152][T16448] pim6reg99999999: entered allmulticast mode [ 636.906642][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 636.913684][T16467] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2659'. [ 636.935998][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 636.956002][T16468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2661'. [ 637.242470][T16476] x_tables: unsorted underflow at hook 4 [ 638.591466][T16510] netlink: 'syz.3.2670': attribute type 11 has an invalid length. [ 639.103640][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 639.206765][T16525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.266532][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 639.291826][T16525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.500336][T16538] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 639.543489][T16538] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 640.236414][T16548] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 640.273247][T16548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2676'. [ 641.707442][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 642.128088][T16598] netlink: 'syz.3.2686': attribute type 4 has an invalid length. [ 642.190408][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 642.223055][T16598] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2686'. [ 642.465755][T16605] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 642.754625][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 642.960101][T16622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.244032][T16627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.252588][T16629] netlink: 'syz.1.2696': attribute type 111 has an invalid length. [ 643.293893][T16627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'. [ 643.353713][T16631] nft_compat: unsupported protocol 0 [ 645.193135][T16661] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2703'. [ 645.590719][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'. [ 645.603467][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'. [ 645.648097][T16668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 645.978117][T16679] batadv0: entered promiscuous mode [ 645.995208][T16679] batadv0: entered allmulticast mode [ 646.208165][T16685] netlink: 528 bytes leftover after parsing attributes in process `syz.2.2710'. [ 646.353611][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2712'. [ 646.686473][T16688] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.241485][T16702] bond11: (slave syz_tun): Enslaving as an active interface with an up link [ 647.393693][T16712] xt_time: unknown flags 0xf4 [ 647.857676][T16725] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 647.876842][T16725] __nla_validate_parse: 1 callbacks suppressed [ 647.876879][T16725] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2721'. [ 647.935696][T16728] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 648.024867][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 648.106070][T16728] 8021q: adding VLAN 0 to HW filter on device bond6 [ 648.259230][T16730] bond6: (slave geneve2): making interface the new active one [ 648.271186][T16730] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 648.313275][T10497] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.346784][T10497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.383952][T10497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.420134][T10497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.542792][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.568627][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.584650][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.634226][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.679315][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.716278][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.757350][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 648.793629][T16752] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2726'. [ 649.122015][T16759] team0 (unregistering): Port device bridge1 removed [ 649.354523][T16758] veth0_virt_wifi: left allmulticast mode [ 649.387769][T16758] veth0_virt_wifi: left promiscuous mode [ 649.406326][T16758] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 649.553010][T16770] syzkaller0: entered promiscuous mode [ 649.568837][T16770] syzkaller0: entered allmulticast mode [ 650.209243][T16792] bond11: option tlb_dynamic_lb: invalid value (128) [ 650.222806][T16792] bond11 (unregistering): Released all slaves [ 650.238995][T16797] netlink: 'syz.2.2738': attribute type 1 has an invalid length. [ 650.266015][T16795] tcf_pedit_act: 22 callbacks suppressed [ 650.266100][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.279836][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.285985][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.292083][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.298256][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.302276][T16797] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 650.304363][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.304400][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.304415][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.304428][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.304439][T16795] tc action pedit 'at' offset 5 out of bounds [ 650.304466][T16795] 0: reclassify loop, rule prio 0, protocol 800 [ 651.166956][T16818] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 652.320476][T16852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.410417][T16855] netlink: 'syz.0.2753': attribute type 1 has an invalid length. [ 652.513251][T16855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.084402][T16875] netlink: 'syz.0.2758': attribute type 4 has an invalid length. [ 653.135678][T16876] netlink: 'syz.0.2758': attribute type 4 has an invalid length. [ 653.617672][T16886] __nla_validate_parse: 70 callbacks suppressed [ 653.617695][T16886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2762'. [ 653.650765][T16888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2761'. [ 654.601590][T16909] netlink: 'syz.3.2766': attribute type 159 has an invalid length. [ 654.643624][T16909] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2766'. [ 654.764101][T16912] IPVS: Scheduler module ip_vs_sip not found [ 655.095861][T16912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2767'. [ 655.478808][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 655.593540][T16926] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2772'. [ 655.959564][T16928] netlink: 'syz.0.2774': attribute type 13 has an invalid length. [ 656.026366][T16928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2774'. [ 656.072811][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2774'. [ 656.122955][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2774'. [ 656.199201][T16932] netlink: 'syz.2.2776': attribute type 4 has an invalid length. [ 656.219181][T16932] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2776'. [ 657.071501][T16960] xt_limit: Overflow, try lower: 324382443/0 [ 657.094149][T16960] netlink: 'syz.4.2781': attribute type 2 has an invalid length. [ 657.106205][T16960] netlink: 'syz.4.2781': attribute type 5 has an invalid length. [ 657.162460][T16972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.698093][T16979] pim6reg1: entered promiscuous mode [ 657.712703][T16979] pim6reg1: entered allmulticast mode [ 658.721191][T17007] __nla_validate_parse: 1 callbacks suppressed [ 658.721212][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2789'. [ 658.804261][T17007] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2789'. [ 659.149914][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'. [ 659.317998][T17021] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.2793'. [ 659.841748][T17031] sock: sock_set_timeout: `syz.3.2797' (pid 17031) tries to set negative timeout [ 659.902840][T17036] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 660.228982][T17051] netlink: 'syz.2.2804': attribute type 1 has an invalid length. [ 660.326935][T17038] bond9: (slave bridge10): making interface the new active one [ 660.355831][T17038] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 660.409375][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2804'. [ 660.700321][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'. [ 660.790070][T17060] lo speed is unknown, defaulting to 1000 [ 660.829838][T17060] lo speed is unknown, defaulting to 1000 [ 660.855815][T17035] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 660.876465][T17035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2799'. [ 660.881616][T17060] lo speed is unknown, defaulting to 1000 [ 660.905926][T17070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2807'. [ 660.961480][T17060] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 660.988114][T17060] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 661.009659][T17060] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 661.035213][T17060] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 661.098977][T17070] 8021q: adding VLAN 0 to HW filter on device bond11 [ 661.185753][T17060] lo speed is unknown, defaulting to 1000 [ 661.296672][T17060] lo speed is unknown, defaulting to 1000 [ 661.314541][T17060] lo speed is unknown, defaulting to 1000 [ 661.344320][T17060] lo speed is unknown, defaulting to 1000 [ 661.370504][T17060] lo speed is unknown, defaulting to 1000 [ 661.512598][T17076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2808'. [ 662.160143][T17100] --map-set only usable from mangle table [ 662.612870][T17111] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 662.862365][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802949e800: rx timeout, send abort [ 663.362626][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802949fc00: rx timeout, send abort [ 663.373220][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802949e800: abort rx timeout. Force session deactivation [ 663.406395][T17118] lo speed is unknown, defaulting to 1000 [ 663.871164][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802949fc00: abort rx timeout. Force session deactivation [ 664.018394][ C1] bridge0: port 3(vlan0) entered learning state [ 664.373316][T17137] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2823'. [ 664.561732][T17156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2827'. [ 664.645195][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 664.922285][T17173] netlink: 'syz.3.2828': attribute type 13 has an invalid length. [ 665.078287][T17180] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 669.007019][T17227] syzkaller0: entered promiscuous mode [ 669.019317][T17231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2843'. [ 669.029865][T17227] syzkaller0: entered allmulticast mode [ 669.044377][T17231] siw: device registration error -23 [ 669.055703][T17227] tipc: Enabled bearer , priority 0 [ 669.084158][T17232] tipc: Resetting bearer [ 669.122771][T17226] tipc: Resetting bearer [ 669.180950][T17226] tipc: Disabling bearer [ 669.269324][T17238] bond0: Caught tx_queue_len zero misconfig [ 669.558845][T17243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.674352][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 669.716340][T17255] bridge11: entered promiscuous mode [ 669.746184][T17255] bridge11: entered allmulticast mode [ 669.796664][T17255] team0: Port device bridge11 added [ 669.902034][T17262] syzkaller0: entered promiscuous mode [ 669.913571][T17262] syzkaller0: entered allmulticast mode [ 670.769967][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 670.788175][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 670.798380][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 670.811209][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 670.826642][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 670.911805][T17287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2860'. [ 670.953263][T17284] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2858'. [ 671.399740][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 672.512117][T17330] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2870'. [ 672.916215][T17345] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 672.975629][ T5637] Bluetooth: hci5: command tx timeout [ 673.082801][T17348] syzkaller0: entered promiscuous mode [ 673.099732][T17348] syzkaller0: entered allmulticast mode [ 673.516677][T17280] lo speed is unknown, defaulting to 1000 [ 673.755764][T17376] netlink: 'syz.4.2880': attribute type 4 has an invalid length. [ 673.799857][T17374] lo speed is unknown, defaulting to 1000 [ 674.182049][T17382] lo speed is unknown, defaulting to 1000 [ 674.678603][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2887'. [ 674.757719][T17403] xfrm1: entered promiscuous mode [ 674.784588][T17403] xfrm1: entered allmulticast mode [ 674.817877][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2887'. [ 675.028545][T17410] bond7: option packets_per_slave: invalid value (1048582) [ 675.046601][ T5637] Bluetooth: hci5: command tx timeout [ 675.063184][T17410] bond7: option packets_per_slave: allowed values 0 - 65535 [ 675.092588][T17410] bond7 (unregistering): Released all slaves [ 675.602365][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'. [ 675.870534][T17424] batadv_slave_1: entered promiscuous mode [ 675.903446][T17427] batadv_slave_1 (unregistering): left promiscuous mode [ 676.197066][T17280] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.204381][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.212574][T17280] bridge_slave_0: entered allmulticast mode [ 676.237162][T17280] bridge_slave_0: entered promiscuous mode [ 676.268363][T17280] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.298120][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.350771][T17280] bridge_slave_1: entered allmulticast mode [ 676.405367][T17280] bridge_slave_1: entered promiscuous mode [ 676.495901][T17448] netlink: 'syz.1.2893': attribute type 4 has an invalid length. [ 676.717759][T17460] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 676.738239][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.779857][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.991253][T17464] netlink: 'syz.0.2896': attribute type 13 has an invalid length. [ 677.016678][T17280] team0: Port device team_slave_0 added [ 677.046462][T17280] team0: Port device team_slave_1 added [ 677.136475][ T5637] Bluetooth: hci5: command tx timeout [ 677.570249][ T9] lo speed is unknown, defaulting to 1000 [ 677.632994][ T9] syz2: Port: 1 Link DOWN [ 677.667740][T17474] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 677.729071][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.750723][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.824687][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.885608][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.920792][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.023097][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 678.048799][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.984187][T17280] hsr_slave_0: entered promiscuous mode [ 679.036773][T17280] hsr_slave_1: entered promiscuous mode [ 679.099101][T17280] debugfs: 'hsr0' already exists in 'hsr' [ 679.142060][T17280] Cannot create hsr debugfs directory [ 679.219462][ T5637] Bluetooth: hci5: command tx timeout [ 680.563668][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'. [ 680.669754][T17571] netlink: 'syz.1.2913': attribute type 11 has an invalid length. [ 680.707286][T17570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 680.713764][T17571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2913'. [ 680.746432][T17566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'. [ 680.784684][T17574] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 680.819962][T17566] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 680.857672][T17563] lo speed is unknown, defaulting to 1000 [ 681.804197][T17572] lo speed is unknown, defaulting to 1000 [ 681.937563][T17586] smbdirect: ib_dev[syz2] removed [ 682.156258][T17590] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 682.200233][T17590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 682.213175][T17590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 682.444490][T17597] netlink: 'syz.1.2920': attribute type 13 has an invalid length. [ 682.602143][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2920'. [ 682.713607][T17608] netlink: 'syz.4.2921': attribute type 1 has an invalid length. [ 682.903847][T17605] gretap1: entered allmulticast mode [ 683.240472][T17280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.281645][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.296216][T17616] Unsupported ieee802154 address type: 0 [ 683.316313][T17280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.368297][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.397093][T17280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.434690][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.479430][T17280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.517455][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.948395][T17280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.974464][T17636] tipc: Enabled bearer , priority 0 [ 684.004810][T17636] syzkaller0: entered promiscuous mode [ 684.012401][T17636] syzkaller0: entered allmulticast mode [ 684.039644][T17636] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 684.079013][T17280] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.122488][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.129871][T11400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.195976][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.203627][T11400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.285987][T17649] tipc: Resetting bearer [ 684.657129][T17635] tipc: Resetting bearer [ 684.769406][T17635] tipc: Disabling bearer [ 684.787540][T17660] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 684.904430][T17663] netlink: 'syz.2.2937': attribute type 25 has an invalid length. [ 685.021159][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2936'. [ 685.048178][T17660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.139784][T17660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.189898][T17660] bond7: (slave geneve3): making interface the new active one [ 685.222889][T17660] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 685.247493][T11396] netdevsim netdevsim4 €Â: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.272321][T11396] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.302728][T11396] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.333729][T11396] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 685.426300][T17675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.433631][T17675] IPv6: NLM_F_CREATE should be set when creating new route [ 685.440976][T17675] IPv6: NLM_F_CREATE should be set when creating new route [ 685.769755][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 686.033107][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 686.045608][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 686.128443][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.329878][T17280] veth0_vlan: entered promiscuous mode [ 686.399152][T17280] veth1_vlan: entered promiscuous mode [ 686.572389][T17280] veth0_macvtap: entered promiscuous mode [ 686.625667][T17280] veth1_macvtap: entered promiscuous mode [ 686.633975][T17712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2947'. [ 686.722551][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.805784][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.856902][T11400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.891441][T11400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.998589][T11400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.064598][T11400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.762963][T17741] veth0_vlan: left promiscuous mode [ 687.768967][T17741] vlan1: entered promiscuous mode [ 687.774065][T17741] veth0_vlan: entered promiscuous mode [ 687.808341][T11399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.834028][T11399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.126127][T11399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.167845][T11399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.248043][T17754] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2956'. [ 688.280454][T17754] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2956'. [ 688.341875][T17756] x_tables: unsorted entry at hook 2 [ 688.432057][T17756] netlink: 'syz.0.2958': attribute type 8 has an invalid length. [ 688.612823][T17758] team0 (unregistering): Port device team_slave_0 removed [ 688.651117][T17758] team0 (unregistering): Port device team_slave_1 removed [ 688.678063][T17758] team0 (unregistering): Port device netdevsim1 removed [ 688.744857][T17768] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 689.244871][T17787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2856'. [ 689.971950][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 689.992294][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.015645][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.058704][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.074381][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.184675][ T5644] Bluetooth: hci3: command tx timeout [ 692.816885][T17764] gre0: entered promiscuous mode [ 692.840021][T17764] gre0: entered allmulticast mode [ 693.024065][ T5621] bond11: (slave syz_tun): Releasing backup interface [ 693.058612][ T5621] syz_tun (unregistering): left allmulticast mode [ 693.420923][T17820] xt_hashlimit: size too large, truncated to 1048576 [ 693.743545][T17827] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 694.039730][T11402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.087661][ C1] bridge0: port 3(vlan0) entered forwarding state [ 694.095573][ C1] bridge0: topology change detected, propagating [ 694.113261][T11402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.244486][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 694.260592][ T5644] Bluetooth: hci3: command tx timeout [ 694.577739][T17842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.725052][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.732384][ C0] bridge0: topology change detected, propagating [ 694.883208][T11402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.952148][T11402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.202145][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 695.236506][T17879] sctp: [Deprecated]: syz.3.2977 (pid 17879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.236506][T17879] Use struct sctp_sack_info instead [ 695.261099][T11402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.302021][T11402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.330239][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 695.381490][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 695.620146][T17879] vxcan0: entered promiscuous mode [ 695.639885][T17879] vxcan0: entered allmulticast mode [ 695.673953][T17882] vxcan0: left promiscuous mode [ 695.696347][T17882] vxcan0: left allmulticast mode [ 696.336603][ T5644] Bluetooth: hci3: command tx timeout [ 696.347019][T17907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2983'. [ 698.034547][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 698.071615][T17939] netlink: set zone limit has 4 unknown bytes [ 698.083689][T17933] No such timeout policy "syz1" [ 698.109895][T17933] netlink: zone id is out of range [ 698.121826][T17933] netlink: zone id is out of range [ 698.130574][T17933] netlink: zone id is out of range [ 698.139624][T17933] netlink: zone id is out of range [ 698.146962][T17933] netlink: zone id is out of range [ 698.153324][T17933] netlink: zone id is out of range [ 698.165933][T17933] netlink: zone id is out of range [ 698.174000][T17933] netlink: zone id is out of range [ 698.181987][T17933] netlink: zone id is out of range [ 698.300400][T11402] gretap0 (unregistering): left promiscuous mode [ 698.405809][ T5644] Bluetooth: hci3: command tx timeout [ 698.529708][T11402] bond10 (unregistering): (slave geneve3): Releasing active interface [ 698.540236][T11402] geneve3 (unregistering): left allmulticast mode [ 698.751717][T11402] bond4 (unregistering): (slave bridge3): Releasing active interface [ 698.869282][T11402] bond1 (unregistering): (slave bond2): Releasing backup interface [ 698.884220][T11402] bond1 (unregistering): Released all slaves [ 698.924660][T11402] bond2 (unregistering): Released all slaves [ 698.991944][T11402] bond3 (unregistering): Released all slaves [ 699.041485][T11402] bond4 (unregistering): Released all slaves [ 699.109520][T11402] bond5 (unregistering): Released all slaves [ 699.142344][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 699.170532][T11402] bond6 (unregistering): Released all slaves [ 699.233682][T11402] bond7 (unregistering): Released all slaves [ 699.310162][T11402] bond8 (unregistering): Released all slaves [ 699.354242][T11402] bond9 (unregistering): Released all slaves [ 699.423117][T11402] bond10 (unregistering): Released all slaves [ 699.462533][T11402] bond0 (unregistering): Released all slaves [ 699.494057][T11402] bond11 (unregistering): Released all slaves [ 699.790068][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 699.876053][T17962] vlan2: entered promiscuous mode [ 699.891847][T17962] hsr0: entered promiscuous mode [ 699.918457][T17962] vlan2: entered allmulticast mode [ 699.926319][T17962] hsr0: entered allmulticast mode [ 699.933625][T17962] hsr_slave_0: entered allmulticast mode [ 699.941723][T17962] hsr_slave_1: entered allmulticast mode [ 700.002492][T17964] hsr_slave_0: left promiscuous mode [ 700.022239][T17964] hsr_slave_1: left promiscuous mode [ 700.099571][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2995'. [ 700.259164][T11402] tipc: Left network mode [ 700.337963][T11402] IPVS: stopping master sync thread 16243 ... [ 701.110965][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3002'. [ 701.253610][T17998] dummy0: entered allmulticast mode [ 702.051088][ T5915] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 702.461757][T17997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.729491][T17997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.101367][T17997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.305781][T17997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.454457][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 703.491506][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.508491][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.516550][T17796] bridge_slave_0: entered allmulticast mode [ 703.529860][T17796] bridge_slave_0: entered promiscuous mode [ 703.572823][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.580785][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.589038][T17796] bridge_slave_1: entered allmulticast mode [ 703.597418][T17796] bridge_slave_1: entered promiscuous mode [ 703.700351][T11400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.734764][T11402] hsr_slave_0: left promiscuous mode [ 703.742502][T11402] hsr_slave_1: left promiscuous mode [ 704.348720][T17796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.373609][ T5915] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.390074][T17796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.466820][T17796] team0: Port device team_slave_0 added [ 704.473734][T11400] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.487597][T17796] team0: Port device team_slave_1 added [ 704.521257][T11396] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.602984][T17796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.610931][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.640060][T17796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.663168][T17796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.671705][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.698875][T17796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.805279][T17796] hsr_slave_0: entered promiscuous mode [ 704.812518][T17796] hsr_slave_1: entered promiscuous mode [ 704.822042][T17796] debugfs: 'hsr0' already exists in 'hsr' [ 704.828732][T17796] Cannot create hsr debugfs directory [ 704.847074][T11402] IPVS: stop unused estimator thread 0... [ 704.920384][T18030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.651198][T18097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3016'. [ 705.687747][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'. [ 705.752795][T18101] netlink: 'syz.2.3017': attribute type 10 has an invalid length. [ 705.851049][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3018'. [ 705.869118][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3018'. [ 705.885451][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3018'. [ 706.136583][T18090] syzkaller0: entered promiscuous mode [ 706.175070][T18090] syzkaller0: entered allmulticast mode [ 706.418826][T18117] Bluetooth: MGMT ver 1.23 [ 706.423880][T18101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.160236][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.383626][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 707.624638][T18147] syzkaller1: entered allmulticast mode [ 707.762570][T18152] syzkaller0: entered promiscuous mode [ 707.771000][T18152] syzkaller0: entered allmulticast mode [ 708.212738][T18175] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 711.886577][T18175] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 711.892663][T18179] team0: left allmulticast mode [ 711.933435][T18179] team_slave_0: left allmulticast mode [ 711.956015][T18179] team_slave_1: left allmulticast mode [ 711.980322][T18179] bridge1: left allmulticast mode [ 711.995952][T18179] bridge2: left allmulticast mode [ 712.012081][T18179] bridge3: left allmulticast mode [ 712.018573][T18179] bridge7: left allmulticast mode [ 712.029150][T18179] team0: left promiscuous mode [ 712.034752][T18179] team_slave_0: left promiscuous mode [ 712.047309][T18179] team_slave_1: left promiscuous mode [ 712.054159][T18179] bridge1: left promiscuous mode [ 712.064279][T18179] bridge2: left promiscuous mode [ 712.072381][T18179] bridge3: left promiscuous mode [ 712.080340][T18179] bridge7: left promiscuous mode [ 712.088520][T18179] bridge0: port 1(team0) entered disabled state [ 712.108278][T18179] bond6: (slave veth0_to_bond): Releasing backup interface [ 712.127401][T18179] bond0: (slave bond_slave_0): Releasing backup interface [ 712.148518][T18179] bond0: (slave bond_slave_1): Releasing backup interface [ 712.162442][T18179] team0: Port device team_slave_0 removed [ 712.179744][T18179] team0: Port device team_slave_1 removed [ 712.195932][T18179] net_ratelimit: 13 callbacks suppressed [ 712.195951][T18179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 712.471026][T18206] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3034'. [ 712.522866][T18206] openvswitch: netlink: Message has 16 unknown bytes. [ 712.618443][T18206] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3034'. [ 712.666612][T18217] netlink: 'syz.2.3037': attribute type 1 has an invalid length. [ 712.702037][T18217] netlink: 'syz.2.3037': attribute type 2 has an invalid length. [ 712.907173][T18218] syzkaller0: entered promiscuous mode [ 712.924207][T18218] syzkaller0: entered allmulticast mode [ 713.140613][T17796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 713.652164][T17796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.671451][T17796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 713.698162][T17796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.786534][T17796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 713.817630][T17796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.843142][T17796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 713.900084][T17796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.293074][T17796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.394038][T17796] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.447551][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.454785][T11400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.522873][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.530146][T11400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.557422][T18308] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 715.617035][T18308] bond10: entered promiscuous mode [ 715.622842][T18308] 8021q: adding VLAN 0 to HW filter on device bond10 [ 715.651740][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 715.748989][T18314] syzkaller0: entered promiscuous mode [ 715.797730][T18314] syzkaller0: entered allmulticast mode [ 715.819612][T18321] netlink: 'syz.3.3055': attribute type 3 has an invalid length. [ 716.969103][T18352] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 717.001136][T18352] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 717.357878][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 717.538683][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.972883][T17796] veth0_vlan: entered promiscuous mode [ 718.081777][T18389] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 718.119645][T17796] veth1_vlan: entered promiscuous mode [ 718.562327][T17796] veth0_macvtap: entered promiscuous mode [ 718.643441][T17796] veth1_macvtap: entered promiscuous mode [ 718.932431][T18413] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3077'. [ 719.241177][T18432] netlink: 'syz.3.3081': attribute type 11 has an invalid length. [ 719.314058][T18436] netlink: 'syz.2.3083': attribute type 1 has an invalid length. [ 719.443239][T18436] bond5: entered promiscuous mode [ 719.450319][T18436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 719.876564][T18440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 719.896525][T18440] bond5: (slave bond6): making interface the new active one [ 719.904111][T18440] bond6: entered promiscuous mode [ 719.913988][T18440] bond5: (slave bond6): Enslaving as an active interface with an up link [ 719.969447][T18448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3085'. [ 720.108875][T17796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.262442][T17796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.376777][ T5915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.383989][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 720.406589][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.459598][ T5915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.549498][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.623758][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3088'. [ 720.668171][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3088'. [ 720.887761][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.914031][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.108060][ T5915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.151188][ T5915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.733006][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 722.800882][T18541] can: request_module (can-proto-0) failed. [ 722.951745][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 722.967823][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 722.979900][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.000534][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.010666][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.962423][T18571] bridge5: entered promiscuous mode [ 724.011892][T18571] bridge5: entered allmulticast mode [ 724.663982][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3110'. [ 724.689259][T18571] bridge5: entered promiscuous mode [ 724.729799][T18571] bridge5: entered allmulticast mode [ 724.881278][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 724.906645][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3111'. [ 724.926884][T18602] netlink: 'syz.3.3111': attribute type 14 has an invalid length. [ 724.989138][T18602] netlink: 'syz.3.3111': attribute type 13 has an invalid length. [ 725.126198][ T5637] Bluetooth: hci0: command tx timeout [ 725.564487][T18620] netlink: 'syz.0.3115': attribute type 3 has an invalid length. [ 725.881601][T18544] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.907201][T18544] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.946751][T18544] bridge_slave_0: entered allmulticast mode [ 725.981718][T18544] bridge_slave_0: entered promiscuous mode [ 726.037607][ T5626] IPVS: starting estimator thread 0... [ 726.073329][T18544] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.106799][T18544] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.140866][T18544] bridge_slave_1: entered allmulticast mode [ 726.149752][T18646] IPVS: using max 28 ests per chain, 67200 per kthread [ 726.182729][T18544] bridge_slave_1: entered promiscuous mode [ 726.477995][T18544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.551474][T18544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.913155][T18544] team0: Port device team_slave_0 added [ 726.948801][T18544] team0: Port device team_slave_1 added [ 727.081516][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 727.126702][T18544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.157059][T18544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.207283][ T5637] Bluetooth: hci0: command tx timeout [ 727.258019][T18544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.375597][T18544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.394553][T18544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.495202][T18544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.570416][T18683] syzkaller0: entered promiscuous mode [ 727.585897][T18683] syzkaller0: entered allmulticast mode [ 728.276405][T18544] hsr_slave_0: entered promiscuous mode [ 728.317308][T18544] hsr_slave_1: entered promiscuous mode [ 728.362887][T18544] debugfs: 'hsr0' already exists in 'hsr' [ 728.375591][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3135'. [ 728.386510][T18544] Cannot create hsr debugfs directory [ 728.592760][T18718] macsec1: entered promiscuous mode [ 728.623795][T18718] bridge0: entered promiscuous mode [ 729.107627][T18730] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 729.288390][ T5637] Bluetooth: hci0: command tx timeout [ 729.344734][T18736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3138'. [ 729.420671][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3138'. [ 729.517365][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3139'. [ 730.410228][T18770] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3144'. [ 730.411748][T18544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.473302][T18544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.670946][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 730.685305][T18777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3146'. [ 730.830845][T18544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.843083][T18544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.962945][T18794] netlink: 'syz.4.3147': attribute type 10 has an invalid length. [ 731.071454][T18765] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 731.179244][T18544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.206182][T18544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.230861][T18802] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 731.302767][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 731.365927][ T5637] Bluetooth: hci0: command tx timeout [ 731.376156][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'. [ 731.523510][T18794] bond0 (unregistering): Released all slaves [ 731.652071][T18813] IPVS: Unknown mcast interface: vcan0 [ 731.681151][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 731.692122][T18799] tc_dump_action: action bad kind [ 731.727799][T18544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.739907][T18544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.774786][T18816] macvtap0: entered allmulticast mode [ 731.847422][T18818] bond11: (slave vti0): refused to change device type [ 731.991849][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3152'. [ 732.429572][T18838] netlink: 'syz.3.3156': attribute type 11 has an invalid length. [ 732.923207][T18864] netlink: 'syz.0.3159': attribute type 5 has an invalid length. [ 732.944740][T18834] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 733.446209][ T5637] Bluetooth: hci0: command 0x0401 tx timeout [ 733.939454][T18893] syzkaller0: entered promiscuous mode [ 733.974734][T18893] syzkaller0: entered allmulticast mode [ 734.093332][T18544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 734.156872][T18544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.257892][T18902] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3164'. [ 734.273126][T18544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 734.301442][T18544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.470422][T18899] macsec2: entered promiscuous mode [ 734.518603][T18544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 734.583753][T18544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.911733][T18544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 734.992408][T18544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.218058][T18928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3170'. [ 735.295937][T18928] netlink: 'syz.4.3170': attribute type 39 has an invalid length. [ 736.229498][T18544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.361283][T18544] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.422810][T11403] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.430050][T11403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.548420][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.555702][ T5915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.623438][T18975] IPVS: length: 88 != 24 [ 737.274848][T18990] syzkaller0: entered promiscuous mode [ 737.301921][T18990] syzkaller0: entered allmulticast mode [ 737.971507][T19023] netlink: 'syz.1.3189': attribute type 6 has an invalid length. [ 738.017631][T19023] netlink: 'syz.1.3189': attribute type 7 has an invalid length. [ 738.065312][T19023] netlink: 'syz.1.3189': attribute type 8 has an invalid length. [ 738.624014][T19040] IPv6: NLM_F_CREATE should be specified when creating new route [ 739.242585][T19057] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 739.455581][T18544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.667618][T18544] veth0_vlan: entered promiscuous mode [ 739.729489][T18544] veth1_vlan: entered promiscuous mode [ 739.746108][T19070] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 739.798573][T19070] netlink: 'syz.0.3197': attribute type 5 has an invalid length. [ 739.829896][T19070] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 739.884460][T19070] netlink: 'syz.0.3197': attribute type 5 has an invalid length. [ 739.929895][T18544] veth0_macvtap: entered promiscuous mode [ 739.930240][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3199'. [ 739.985553][T18544] veth1_macvtap: entered promiscuous mode [ 740.066439][T19085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3201'. [ 740.081311][T18544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.179841][T18544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.270580][T11398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.318708][T11398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.318907][T19087] netlink: 'syz.1.3201': attribute type 11 has an invalid length. [ 740.400769][T11398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.445627][T11398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.958267][T19106] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 740.980285][T11405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.995954][T19106] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3206'. [ 741.027578][T11405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.208723][T11396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.263518][T11396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.755492][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3210'. [ 742.367984][T19145] syz_tun: entered allmulticast mode [ 742.415361][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.432137][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.447142][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.462018][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.470624][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.532531][T19145] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 742.679710][T19147] syzkaller0: entered promiscuous mode [ 742.724264][T19147] syzkaller0: entered allmulticast mode [ 742.976493][T19164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 743.006644][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 743.165652][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 743.179720][T19162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3216'. [ 743.231479][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 743.585718][T19169] team0: Port device team_slave_0 removed [ 744.571143][ T5644] Bluetooth: hci1: command tx timeout [ 744.618134][T19217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 745.731500][T19234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3228'. [ 745.845560][T19237] Bluetooth: MGMT ver 1.23 [ 745.973354][T19148] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.982993][T19148] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.993953][T19148] bridge_slave_0: entered allmulticast mode [ 746.041085][T19148] bridge_slave_0: entered promiscuous mode [ 746.089999][T19148] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.121066][T19148] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.149468][T19148] bridge_slave_1: entered allmulticast mode [ 746.176793][T19148] bridge_slave_1: entered promiscuous mode [ 746.335717][T19148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.379449][T19148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.546414][T19148] team0: Port device team_slave_0 added [ 746.597874][T19148] team0: Port device team_slave_1 added [ 746.645461][ T5644] Bluetooth: hci1: command tx timeout [ 746.683114][T19148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.690203][T19148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.716905][T19148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.732447][T19148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.740498][T19148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.782124][T19148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.070695][T19148] hsr_slave_0: entered promiscuous mode [ 747.094412][T19148] hsr_slave_1: entered promiscuous mode [ 747.114810][T19148] debugfs: 'hsr0' already exists in 'hsr' [ 747.135216][T19148] Cannot create hsr debugfs directory [ 747.209926][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.274063][T19261] gre0: left promiscuous mode [ 747.761595][T19261] 8021q: adding VLAN 0 to HW filter on device eth0 [ 747.779312][T19261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 747.801662][T19261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 747.818027][T19261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 748.036076][T11402] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.139037][T11402] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.172148][T11398] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.243387][T11398] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.660717][T19291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3240'. [ 748.725427][ T5644] Bluetooth: hci1: command tx timeout [ 749.320056][T19148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.370491][T19148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.438736][T19148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 749.861376][T19148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.918873][T19148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.960342][T19148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 750.231186][T19148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.264502][T19148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.300464][T19148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 750.833214][ T5644] Bluetooth: hci1: command tx timeout [ 750.843043][T19148] netdevsim netdevsim4 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.885860][T19148] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.922365][T19148] netdevsim netdevsim4 €Â (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 751.213199][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 751.825800][T19354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3257'. [ 752.112829][T19148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 752.179450][T19148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.216481][T19148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 752.270813][T19148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.310687][T19148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 752.381080][T19148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.400016][T19148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 752.449531][T19148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.037841][T19148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.204122][T19148] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.296228][T11403] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.303460][T11403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.401913][T11403] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.409183][T11403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.588807][T19402] sctp: [Deprecated]: syz.1.3269 (pid 19402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.588807][T19402] Use struct sctp_sack_info instead [ 755.484364][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 755.642496][T19458] vlan2: entered promiscuous mode [ 755.679505][T19458] bridge0: entered promiscuous mode [ 755.722467][T19470] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 755.808123][T19467] gre0: left allmulticast mode [ 756.340144][T19488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3289'. [ 756.482525][T19467] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.490992][T19467] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.828585][T19467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.881005][T19467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.330932][T19467] vlan2: left promiscuous mode [ 757.336949][T19467] bridge0: left promiscuous mode [ 757.527158][T19481] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.536652][T19481] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.603818][T19481] bridge_slave_0: left allmulticast mode [ 757.611153][T19481] bridge_slave_0: left promiscuous mode [ 757.620255][T19481] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.648293][T19481] bridge_slave_1: left allmulticast mode [ 757.654873][T19481] bridge_slave_1: left promiscuous mode [ 757.668182][T19481] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.730932][T19481] bond0: (slave bond_slave_0): Releasing backup interface [ 757.748813][T19481] bond0: (slave bond_slave_1): Releasing backup interface [ 757.768512][T19481] team0: Port device team_slave_0 removed [ 757.786901][T19481] team0: Port device team_slave_1 removed [ 757.800596][T19481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.812802][T19481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.827776][T19481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.839443][T19481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.193104][T19481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 758.228620][ T57] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.238006][ T57] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.248109][ T57] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.257764][ T57] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.279034][ T57] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.289343][ T57] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.305590][ T57] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.326232][ T57] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.341116][T19148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.350570][ T57] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.386500][ T57] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.416284][ T57] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.435440][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 758.675515][T19472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.011376][T19148] veth0_vlan: entered promiscuous mode [ 759.060997][T19148] veth1_vlan: entered promiscuous mode [ 759.169433][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 759.208854][T19148] veth0_macvtap: entered promiscuous mode [ 759.256613][T19148] veth1_macvtap: entered promiscuous mode [ 759.339007][T19148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.384716][T19148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.427174][ T5915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.457087][ T5915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.503244][ T5915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.713724][ T5915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.826543][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 760.051860][T19553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3302'. [ 760.131803][T11405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.155317][T11405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.365108][T11405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.399246][T11405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.475801][T19569] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 760.661044][T19574] syzkaller0: entered promiscuous mode [ 760.679902][T19574] syzkaller0: entered allmulticast mode [ 760.994217][T19591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3311'. [ 761.404445][T19598] syzkaller0: entered promiscuous mode [ 761.443028][T19598] syzkaller0: entered allmulticast mode [ 761.651404][T19607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 761.759527][T19613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3315'. [ 761.873075][T19610] veth3: entered promiscuous mode [ 761.976531][T19610] bond1: (slave veth3): Enslaving as an active interface with an up link [ 762.080552][T19613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.131816][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.147244][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.167355][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.181921][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.197089][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 763.061364][T19627] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 763.131309][T19636] batadv1: entered promiscuous mode [ 763.158997][T19636] batadv1: entered allmulticast mode [ 763.203429][T19606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3316'. [ 763.313870][T16133] IPVS: starting estimator thread 0... [ 763.495329][T19638] IPVS: using max 28 ests per chain, 67200 per kthread [ 763.717272][T19640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.917817][T19644] netlink: 'syz.3.3324': attribute type 2 has an invalid length. [ 763.962616][T19644] netlink: 'syz.3.3324': attribute type 21 has an invalid length. [ 764.199010][T19655] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3326'. [ 764.243651][T19654] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3326'. [ 764.253632][ T5644] Bluetooth: hci4: command tx timeout [ 765.058294][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 765.088894][T19674] tipc: Started in network mode [ 765.122305][T19674] tipc: Node identity 4246, cluster identity 4711 [ 765.158882][T19674] tipc: Node number set to 16966 [ 765.199958][T19618] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.229163][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.237758][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 765.255298][T19618] bridge_slave_0: entered allmulticast mode [ 765.274726][T19618] bridge_slave_0: entered promiscuous mode [ 765.321492][T19618] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.348737][T19618] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.375602][T19618] bridge_slave_1: entered allmulticast mode [ 765.393576][T19618] bridge_slave_1: entered promiscuous mode [ 765.440726][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 765.482671][T19690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3332'. [ 765.504617][T19618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.531499][T19692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3333'. [ 765.552658][T19618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.731224][T19618] team0: Port device team_slave_0 added [ 765.750956][T19618] team0: Port device team_slave_1 added [ 765.950906][T19618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.960941][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.993410][T19618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.009004][T19618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.018546][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.048677][T19618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.261759][T19618] hsr_slave_0: entered promiscuous mode [ 766.274015][T19618] hsr_slave_1: entered promiscuous mode [ 766.281952][T19618] debugfs: 'hsr0' already exists in 'hsr' [ 766.290134][T19618] Cannot create hsr debugfs directory [ 766.328054][ T5644] Bluetooth: hci4: command tx timeout [ 767.360636][T19723] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3342'. [ 768.405201][ T5644] Bluetooth: hci4: command tx timeout [ 768.598579][T16139] IPVS: starting estimator thread 0... [ 768.705612][T19741] IPVS: using max 30 ests per chain, 72000 per kthread [ 769.047465][T19724] veth1_to_bond: entered allmulticast mode [ 769.100174][T19723] veth1_to_bond: entered promiscuous mode [ 769.152603][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 769.361762][T19723] veth1_to_bond (unregistering): left allmulticast mode [ 769.389438][T19723] veth1_to_bond (unregistering): left promiscuous mode [ 769.431254][T19723] bond0: (slave bond_slave_1): Releasing backup interface [ 770.261493][T19779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3356'. [ 770.427298][T19778] xfrm1: entered allmulticast mode [ 770.485374][ T5644] Bluetooth: hci4: command tx timeout [ 770.512778][T19618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 770.536042][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.550023][T19618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 770.565929][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.574653][T19618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 770.591861][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.607267][T19618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 770.653307][T19618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.081561][T19618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.280964][T19809] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 771.362074][T19618] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.425546][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.432827][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.470579][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.477877][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.522492][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 771.650261][T19818] xt_bpf: check failed: parse error [ 772.779802][T19841] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 772.827843][T19827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.902377][T19845] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3370'. [ 772.996057][T19827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.108567][T19847] geneve2: entered promiscuous mode [ 773.140648][T19847] geneve2: entered allmulticast mode [ 773.401295][T19827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.632254][T19827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.271320][T19891] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3380'. [ 774.333506][ T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.399200][T19891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3380'. [ 774.419299][T11398] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.442927][T19891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3380'. [ 774.481940][T11396] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.633741][T11396] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.746525][T19898] netlink: 'syz.1.3381': attribute type 4 has an invalid length. [ 774.799065][T19888] pim6reg1: entered promiscuous mode [ 774.813613][T19888] pim6reg1: entered allmulticast mode [ 774.836081][T19618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.923340][T19904] netlink: 'syz.4.3383': attribute type 5 has an invalid length. [ 775.166041][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 775.335903][T19907] bond1 (unregistering): Released all slaves [ 775.930661][T19618] veth0_vlan: entered promiscuous mode [ 776.103901][T19922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3387'. [ 776.364158][T19618] veth1_vlan: entered promiscuous mode [ 776.447755][T19618] veth0_macvtap: entered promiscuous mode [ 776.474250][T19618] veth1_macvtap: entered promiscuous mode [ 776.547949][T19618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.591890][T19618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.644592][ T5915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.688057][ T5915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.731597][ T5915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.811790][T19938] netlink: 'syz.4.3392': attribute type 10 has an invalid length. [ 776.847699][ T5915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.364705][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.399607][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.681128][T11405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.720613][T11405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.731603][T19950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3396'. [ 778.222144][T19963] vlan2: entered allmulticast mode [ 778.239097][T19963] bond0: entered allmulticast mode [ 778.632528][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'. [ 778.939868][T19993] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 779.190258][T19998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3410'. [ 779.609642][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 780.236610][T20031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 780.596836][T20042] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 780.625790][T20043] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 780.751289][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3419'. [ 781.009471][T20051] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 781.096081][T20054] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 781.301928][T20057] syzkaller0: entered promiscuous mode [ 781.319831][T20057] syzkaller0: entered allmulticast mode [ 781.585581][T20062] vlan2: entered promiscuous mode [ 781.591658][T20062] bridge0: entered promiscuous mode [ 782.443372][T20087] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3431'. [ 782.512962][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 782.761608][T20099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3434'. [ 782.987439][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 783.109603][T20107] netlink: 'syz.0.3437': attribute type 11 has an invalid length. [ 783.347682][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 783.392120][T20114] openvswitch: netlink: Flow actions attr not present in new flow. [ 784.335945][T20138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.523753][T20144] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3447'. [ 785.059222][T20138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.621374][T20171] syzkaller0: entered promiscuous mode [ 785.640901][T20171] syzkaller0: entered allmulticast mode [ 785.985206][T20186] FAULT_INJECTION: forcing a failure. [ 785.985206][T20186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.999024][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.1.3454 Not tainted syzkaller #0 PREEMPT(full) [ 785.999052][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.999064][T20186] Call Trace: [ 785.999072][T20186] [ 785.999081][T20186] dump_stack_lvl+0xe8/0x150 [ 785.999123][T20186] should_fail_ex+0x40c/0x560 [ 785.999156][T20186] _copy_from_user+0x2d/0xb0 [ 785.999187][T20186] ___sys_sendmsg+0x1c6/0x360 [ 785.999221][T20186] ? __lock_acquire+0x683/0x2cf0 [ 785.999255][T20186] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.999325][T20186] ? __fget_files+0x2a/0x420 [ 785.999354][T20186] ? __fget_files+0x3a2/0x420 [ 785.999390][T20186] __x64_sys_sendmsg+0x1b1/0x290 [ 785.999423][T20186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.999474][T20186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.999498][T20186] do_syscall_64+0x174/0x580 [ 785.999532][T20186] ? clear_bhb_loop+0x40/0x90 [ 785.999558][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.999578][T20186] RIP: 0033:0x7faa1a79de99 [ 785.999599][T20186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.999616][T20186] RSP: 002b:00007faa1b607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.999639][T20186] RAX: ffffffffffffffda RBX: 00007faa1aa25fa0 RCX: 00007faa1a79de99 [ 785.999653][T20186] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 785.999667][T20186] RBP: 00007faa1b607090 R08: 0000000000000000 R09: 0000000000000000 [ 785.999679][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.999691][T20186] R13: 00007faa1aa26038 R14: 00007faa1aa25fa0 R15: 00007ffc734cc318 [ 785.999735][T20186] [ 786.474538][T20138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.751263][T20138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.949519][T20200] bridge1: entered promiscuous mode [ 786.963075][T20200] bridge1: entered allmulticast mode [ 787.392887][T11400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.420314][T20217] xt_hashlimit: max too large, truncated to 1048576 [ 787.500144][T20138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.804498][T20234] FAULT_INJECTION: forcing a failure. [ 787.804498][T20234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.821176][T20234] CPU: 0 UID: 0 PID: 20234 Comm: syz.3.3465 Not tainted syzkaller #0 PREEMPT(full) [ 787.821205][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 787.821217][T20234] Call Trace: [ 787.821225][T20234] [ 787.821234][T20234] dump_stack_lvl+0xe8/0x150 [ 787.821270][T20234] should_fail_ex+0x40c/0x560 [ 787.821299][T20234] _copy_from_user+0x2d/0xb0 [ 787.821329][T20234] __copy_msghdr+0x390/0x590 [ 787.821365][T20234] ___sys_sendmsg+0x213/0x360 [ 787.821394][T20234] ? __lock_acquire+0x683/0x2cf0 [ 787.821426][T20234] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.821494][T20234] ? __fget_files+0x2a/0x420 [ 787.821519][T20234] ? __fget_files+0x3a2/0x420 [ 787.821561][T20234] __x64_sys_sendmsg+0x1b1/0x290 [ 787.821595][T20234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.821645][T20234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.821668][T20234] do_syscall_64+0x174/0x580 [ 787.821696][T20234] ? trace_irq_disable+0x3b/0x140 [ 787.821722][T20234] ? clear_bhb_loop+0x40/0x90 [ 787.821747][T20234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.821784][T20234] RIP: 0033:0x7f0373d9de99 [ 787.821804][T20234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.821821][T20234] RSP: 002b:00007f0374c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.821843][T20234] RAX: ffffffffffffffda RBX: 00007f0374025fa0 RCX: 00007f0373d9de99 [ 787.821857][T20234] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 787.821870][T20234] RBP: 00007f0374c37090 R08: 0000000000000000 R09: 0000000000000000 [ 787.821883][T20234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.821894][T20234] R13: 00007f0374026038 R14: 00007f0374025fa0 R15: 00007ffe97877528 [ 787.821929][T20234] [ 788.668855][T20248] netlink: 'syz.3.3469': attribute type 49 has an invalid length. [ 789.016836][T20248] ip6gretap0: entered promiscuous mode [ 789.040551][T20248] ip6gretap0: entered allmulticast mode [ 789.682063][T20265] FAULT_INJECTION: forcing a failure. [ 789.682063][T20265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.699984][T20265] CPU: 0 UID: 0 PID: 20265 Comm: syz.4.3476 Not tainted syzkaller #0 PREEMPT(full) [ 789.700012][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 789.700024][T20265] Call Trace: [ 789.700032][T20265] [ 789.700041][T20265] dump_stack_lvl+0xe8/0x150 [ 789.700077][T20265] should_fail_ex+0x40c/0x560 [ 789.700106][T20265] _copy_from_user+0x2d/0xb0 [ 789.700135][T20265] ____sys_sendmsg+0x303/0x850 [ 789.700172][T20265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 789.700220][T20265] ? import_iovec+0x73/0xa0 [ 789.700252][T20265] ___sys_sendmsg+0x2a5/0x360 [ 789.700280][T20265] ? __lock_acquire+0x683/0x2cf0 [ 789.700312][T20265] ? __pfx____sys_sendmsg+0x10/0x10 [ 789.700378][T20265] ? __fget_files+0x2a/0x420 [ 789.700403][T20265] ? __fget_files+0x3a2/0x420 [ 789.700438][T20265] __x64_sys_sendmsg+0x1b1/0x290 [ 789.700470][T20265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 789.700518][T20265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.700539][T20265] do_syscall_64+0x174/0x580 [ 789.700568][T20265] ? clear_bhb_loop+0x40/0x90 [ 789.700595][T20265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.700613][T20265] RIP: 0033:0x7fd7a419de99 [ 789.700633][T20265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.700650][T20265] RSP: 002b:00007fd7a50f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.700672][T20265] RAX: ffffffffffffffda RBX: 00007fd7a4425fa0 RCX: 00007fd7a419de99 [ 789.700686][T20265] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 789.700702][T20265] RBP: 00007fd7a50f4090 R08: 0000000000000000 R09: 0000000000000000 [ 789.700714][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.700725][T20265] R13: 00007fd7a4426038 R14: 00007fd7a4425fa0 R15: 00007ffda8ccb6e8 [ 789.700756][T20265] [ 789.995661][T20271] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3473'. [ 790.017829][T20275] sctp: [Deprecated]: syz.0.3474 (pid 20275) Use of int in maxseg socket option. [ 790.017829][T20275] Use struct sctp_assoc_value instead [ 790.830071][T20309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3482'. [ 790.832929][T20307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3482'. [ 790.917006][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3482'. [ 791.822011][T20337] FAULT_INJECTION: forcing a failure. [ 791.822011][T20337] name failslab, interval 1, probability 0, space 0, times 0 [ 791.870117][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.0.3488 Not tainted syzkaller #0 PREEMPT(full) [ 791.870149][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.870162][T20337] Call Trace: [ 791.870170][T20337] [ 791.870180][T20337] dump_stack_lvl+0xe8/0x150 [ 791.870218][T20337] should_fail_ex+0x40c/0x560 [ 791.870247][T20337] should_failslab+0xa8/0x100 [ 791.870304][T20337] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 791.870345][T20337] ? rxrpc_alloc_call+0x27a/0xd90 [ 791.870482][T20337] ? rxrpc_alloc_call+0x27a/0xd90 [ 791.870518][T20337] ? rxrpc_alloc_call+0x79/0xd90 [ 791.870546][T20337] rxrpc_alloc_call+0x27a/0xd90 [ 791.870582][T20337] rxrpc_new_client_call+0x11d/0x1500 [ 791.870626][T20337] rxrpc_do_sendmsg+0xe8a/0x1280 [ 791.870698][T20337] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 791.870752][T20337] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 791.870796][T20337] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 791.870823][T20337] sock_sendmsg_nosec+0x13a/0x180 [ 791.870852][T20337] ____sys_sendmsg+0x54e/0x850 [ 791.870888][T20337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.870928][T20337] ? import_iovec+0x73/0xa0 [ 791.870961][T20337] ___sys_sendmsg+0x2a5/0x360 [ 791.870990][T20337] ? __lock_acquire+0x683/0x2cf0 [ 791.871023][T20337] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.871094][T20337] ? __fget_files+0x2a/0x420 [ 791.871119][T20337] ? __fget_files+0x3a2/0x420 [ 791.871156][T20337] __x64_sys_sendmsg+0x1b1/0x290 [ 791.871189][T20337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.871240][T20337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.871263][T20337] do_syscall_64+0x174/0x580 [ 791.871292][T20337] ? trace_irq_disable+0x3b/0x140 [ 791.871317][T20337] ? clear_bhb_loop+0x40/0x90 [ 791.871343][T20337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.871362][T20337] RIP: 0033:0x7f365d19de99 [ 791.871384][T20337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.871401][T20337] RSP: 002b:00007f365e04d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.871424][T20337] RAX: ffffffffffffffda RBX: 00007f365d425fa0 RCX: 00007f365d19de99 [ 791.871438][T20337] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 791.871451][T20337] RBP: 00007f365e04d090 R08: 0000000000000000 R09: 0000000000000000 [ 791.871463][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.871475][T20337] R13: 00007f365d426038 R14: 00007f365d425fa0 R15: 00007ffcf08b9158 [ 791.871510][T20337] [ 792.508625][T20330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.538674][T20330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 792.581289][T20345] netlink: 'syz.0.3489': attribute type 11 has an invalid length. [ 792.957191][T20330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.987521][T20330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 793.329879][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3492'. [ 793.486107][T20330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.550376][T20330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 793.709495][T20363] INFO: trying to register non-static key. [ 793.715390][T20363] The code is fine but needs lockdep annotation, or maybe [ 793.722740][T20363] you didn't initialize this object before use? [ 793.729059][T20363] turning off the locking correctness validator. [ 793.735457][T20363] CPU: 0 UID: 0 PID: 20363 Comm: syz.3.3494 Not tainted syzkaller #0 PREEMPT(full) [ 793.735486][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.735498][T20363] Call Trace: [ 793.735509][T20363] [ 793.735519][T20363] dump_stack_lvl+0xe8/0x150 [ 793.735555][T20363] assign_lock_key+0x133/0x150 [ 793.735586][T20363] register_lock_class+0xcc/0x2e0 [ 793.735614][T20363] __lock_acquire+0xab/0x2cf0 [ 793.735640][T20363] ? kmem_cache_free+0x182/0x650 [ 793.735665][T20363] ? kern_path+0xd1/0x150 [ 793.735688][T20363] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 793.735745][T20363] ? genl_family_rcv_msg_doit+0x233/0x340 [ 793.735802][T20363] ? genl_rcv_msg+0x614/0x7a0 [ 793.735822][T20363] ? netlink_rcv_skb+0x226/0x4a0 [ 793.735850][T20363] ? genl_rcv+0x28/0x40 [ 793.735871][T20363] ? netlink_unicast+0x7bb/0x940 [ 793.735896][T20363] ? netlink_sendmsg+0x813/0xb40 [ 793.735914][T20363] ? sock_sendmsg_nosec+0x13a/0x180 [ 793.735936][T20363] ? ____sys_sendmsg+0x54e/0x850 [ 793.735964][T20363] ? ___sys_sendmsg+0x2a5/0x360 [ 793.735991][T20363] ? __x64_sys_sendmsg+0x1b1/0x290 [ 793.736019][T20363] ? do_syscall_64+0x174/0x580 [ 793.736047][T20363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.736072][T20363] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 793.736096][T20363] lock_acquire+0x106/0x350 [ 793.736119][T20363] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 793.736146][T20363] ? net_generic+0x1e/0x240 [ 793.736175][T20363] ? net_generic+0x1e/0x240 [ 793.736196][T20363] ? net_generic+0x1e/0x240 [ 793.736219][T20363] _raw_spin_lock+0x2e/0x40 [ 793.736292][T20363] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 793.736317][T20363] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 793.736341][T20363] ? kasan_quarantine_put+0xbb/0x1f0 [ 793.736366][T20363] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.736415][T20363] ? kern_path+0xd1/0x150 [ 793.736438][T20363] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 793.736466][T20363] ? kern_path+0xd1/0x150 [ 793.736491][T20363] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 793.736513][T20363] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 793.736533][T20363] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 793.736558][T20363] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 793.736586][T20363] genl_family_rcv_msg_doit+0x233/0x340 [ 793.736615][T20363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 793.736646][T20363] ? bpf_lsm_capable+0x9/0x20 [ 793.736688][T20363] ? security_capable+0x7e/0x2c0 [ 793.736768][T20363] genl_rcv_msg+0x614/0x7a0 [ 793.736795][T20363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.736818][T20363] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 793.736845][T20363] netlink_rcv_skb+0x226/0x4a0 [ 793.736876][T20363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.736900][T20363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.736936][T20363] ? down_read+0x2be/0x330 [ 793.736956][T20363] genl_rcv+0x28/0x40 [ 793.736978][T20363] netlink_unicast+0x7bb/0x940 [ 793.737012][T20363] netlink_sendmsg+0x813/0xb40 [ 793.737035][T20363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.737055][T20363] ? aa_sock_msg_perm+0xf1/0x1b0 [ 793.737077][T20363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.737095][T20363] sock_sendmsg_nosec+0x13a/0x180 [ 793.737119][T20363] ____sys_sendmsg+0x54e/0x850 [ 793.737150][T20363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.737184][T20363] ? import_iovec+0x73/0xa0 [ 793.737213][T20363] ___sys_sendmsg+0x2a5/0x360 [ 793.737247][T20363] ? __lock_acquire+0x683/0x2cf0 [ 793.737272][T20363] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.737302][T20363] ? futex_wait+0x2a2/0x390 [ 793.737349][T20363] ? __fget_files+0x2a/0x420 [ 793.737371][T20363] ? __fget_files+0x3a2/0x420 [ 793.737399][T20363] __x64_sys_sendmsg+0x1b1/0x290 [ 793.737429][T20363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.737465][T20363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.737485][T20363] do_syscall_64+0x174/0x580 [ 793.737511][T20363] ? trace_irq_disable+0x3b/0x140 [ 793.737535][T20363] ? clear_bhb_loop+0x40/0x90 [ 793.737557][T20363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.737576][T20363] RIP: 0033:0x7f0373d9de99 [ 793.737594][T20363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.737612][T20363] RSP: 002b:00007f0374c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.737634][T20363] RAX: ffffffffffffffda RBX: 00007f0374025fa0 RCX: 00007f0373d9de99 [ 793.737649][T20363] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 793.737663][T20363] RBP: 00007f0373e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 793.737675][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.737686][T20363] R13: 00007f0374026038 R14: 00007f0374025fa0 R15: 00007ffe97877528 [ 793.737708][T20363] [ 794.201633][T20363] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 794.213687][T20363] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 794.222122][T20363] CPU: 0 UID: 0 PID: 20363 Comm: syz.3.3494 Not tainted syzkaller #0 PREEMPT(full) [ 794.231513][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 794.241572][T20363] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 794.247837][T20363] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 794.267462][T20363] RSP: 0018:ffffc9000418f280 EFLAGS: 00010246 [ 794.273667][T20363] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100fb7d00d [ 794.281781][T20363] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000418f200 [ 794.289779][T20363] RBP: ffffc9000418f370 R08: 0000000000000003 R09: 0000000000000004 [ 794.297764][T20363] R10: dffffc0000000000 R11: fffff52000831e40 R12: ffffc9000418f300 [ 794.305749][T20363] R13: 1ffff92000831e98 R14: dffffc0000000000 R15: 1ffff92000831e5c [ 794.313750][T20363] FS: 00007f0374c376c0(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 794.322697][T20363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.329294][T20363] CR2: 00002000000012c0 CR3: 000000007861e000 CR4: 00000000003526f0 [ 794.337280][T20363] Call Trace: [ 794.340571][T20363] [ 794.343533][T20363] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.348846][T20363] ? kern_path+0xd1/0x150 [ 794.353214][T20363] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 794.359217][T20363] ? kern_path+0xd1/0x150 [ 794.363572][T20363] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 794.369768][T20363] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 794.376365][T20363] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 794.382707][T20363] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 794.389050][T20363] genl_family_rcv_msg_doit+0x233/0x340 [ 794.394619][T20363] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 794.400710][T20363] ? bpf_lsm_capable+0x9/0x20 [ 794.405428][T20363] ? security_capable+0x7e/0x2c0 [ 794.410388][T20363] genl_rcv_msg+0x614/0x7a0 [ 794.414910][T20363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.419953][T20363] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 794.426585][T20363] netlink_rcv_skb+0x226/0x4a0 [ 794.431368][T20363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.437532][T20363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.442846][T20363] ? down_read+0x2be/0x330 [ 794.447270][T20363] genl_rcv+0x28/0x40 [ 794.451264][T20363] netlink_unicast+0x7bb/0x940 [ 794.456064][T20363] netlink_sendmsg+0x813/0xb40 [ 794.460874][T20363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.466193][T20363] ? aa_sock_msg_perm+0xf1/0x1b0 [ 794.471155][T20363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.476458][T20363] sock_sendmsg_nosec+0x13a/0x180 [ 794.481500][T20363] ____sys_sendmsg+0x54e/0x850 [ 794.486285][T20363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.491592][T20363] ? import_iovec+0x73/0xa0 [ 794.496125][T20363] ___sys_sendmsg+0x2a5/0x360 [ 794.500838][T20363] ? __lock_acquire+0x683/0x2cf0 [ 794.505792][T20363] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.511020][T20363] ? futex_wait+0x2a2/0x390 [ 794.515544][T20363] ? __fget_files+0x2a/0x420 [ 794.520153][T20363] ? __fget_files+0x3a2/0x420 [ 794.524872][T20363] __x64_sys_sendmsg+0x1b1/0x290 [ 794.529857][T20363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.535342][T20363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.541419][T20363] do_syscall_64+0x174/0x580 [ 794.546029][T20363] ? trace_irq_disable+0x3b/0x140 [ 794.551066][T20363] ? clear_bhb_loop+0x40/0x90 [ 794.555765][T20363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.561675][T20363] RIP: 0033:0x7f0373d9de99 [ 794.566201][T20363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.585858][T20363] RSP: 002b:00007f0374c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.594301][T20363] RAX: ffffffffffffffda RBX: 00007f0374025fa0 RCX: 00007f0373d9de99 [ 794.602283][T20363] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 794.610268][T20363] RBP: 00007f0373e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 794.618249][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.626239][T20363] R13: 00007f0374026038 R14: 00007f0374025fa0 R15: 00007ffe97877528 [ 794.634230][T20363] [ 794.637257][T20363] Modules linked in: [ 794.642441][T20363] ---[ end trace 0000000000000000 ]--- [ 794.648278][T20363] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 794.654575][T20363] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 794.674535][T20363] RSP: 0018:ffffc9000418f280 EFLAGS: 00010246 [ 794.680712][T20363] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100fb7d00d [ 794.689308][T20363] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000418f200 [ 794.697694][T20363] RBP: ffffc9000418f370 R08: 0000000000000003 R09: 0000000000000004 [ 794.705773][T20363] R10: dffffc0000000000 R11: fffff52000831e40 R12: ffffc9000418f300 [ 794.713784][T20363] R13: 1ffff92000831e98 R14: dffffc0000000000 R15: 1ffff92000831e5c [ 794.721858][T20363] FS: 00007f0374c376c0(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 794.731296][T20363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.738007][T20363] CR2: 00002000000012c0 CR3: 000000007861e000 CR4: 00000000003526f0 [ 794.746131][T20363] Kernel panic - not syncing: Fatal exception [ 794.752359][T20363] Kernel Offset: disabled [ 794.756695][T20363] Rebooting in 86400 seconds..