last executing test programs: 5.086721785s ago: executing program 2 (id=7109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80003, 0x3381) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/25, 0x19}}], 0x1, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/25, 0x19}}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 2.883369904s ago: executing program 2 (id=7114): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000680)={{r2, &(0x7f0000000200)='-^\x00', 0x60042, &(0x7f0000000240)={@_ha_fsid={[0x5, 0x5]}, {0x6, 0x8, 0x3, 0x4b}}, 0x1, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x200}, 0x6, &(0x7f0000000c00)=[{0x7, 0x6, &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000003c0)="d2ae5afc56ce682f072b6b8ce3d93e1f6f7951efb91698c5ce295716aa2bdfdd71530953a3c21d75d40d88356efef949bb82155e702c", 0x36, 0x20}, {0x0, 0x40, &(0x7f0000000400)='-)#]!,}\x00', &(0x7f0000001900)="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", 0x1000, 0x32}, {0x3, 0x6, &(0x7f0000000440)='\x00', &(0x7f0000000480)="dae6510bd0270edc62efb97d", 0xc}, {0x2, 0x3, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="42429e2746a430d06c55a9e0940e461dffe1d0567dfd1e9a3038375e2217b1c2b9bb1f4e8be1e7f6864a04c7391ee6942afcf23775ba66df21488220ec76296a5284bec4c27b0359db41c52a986ac452378fa13ea6198cb3d20d94281696f648f825cf9fff2bd6508a2337fc662cdeaf167739d7f1098a25357bc7c7f6233d7bb5ebe7e33fd2bbddd6898a02b0547b252e441db62b68e34fc8e68af1713ec6236625ce02480bba53f4384aa532838852f0f3f8435b4caf05c6b10fe7727400cdd521d876e94929b8cb0ad3a76fc261b5f9551bdcf9c59ce3bb4bbd236c7a6ddb", 0xe0, 0xa}, {0x2, 0x9, &(0x7f0000000600)='^-\x00', &(0x7f0000002900)="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", 0x1000, 0x32}, {0x3, 0x7, &(0x7f0000000640)='\a\x00', &(0x7f0000000b00)="5fb39d3dde65a4770cb7280539f6787ae477e15b9f591be8d73ea66ff43365f224af4d0a86de2ca34373dca3c9ff6f82f062519a42eca4d03dab5605837354879c31497b022dec11678d134a5ba3e6e2dca87ae96efe701018f7ef750bf9be052d2ef73bd3fc983df0818f4c89e759ad0c893bedcb666d0704bd255e70c5758e479a4cdcdcbbd803defbd3e239527b0423e8a6ede909ddbf869dab8bf1aaeb8bdc7ca3e934c9fa5c799601f3f9a808f2152c73aadba0348f5e2c10356d2f8972ce25195dc55647b05484076ff26fda8a6891e7d24b", 0xd5}]}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newlink={0x39c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}, @IFLA_VF_PORTS={0x7c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f6d9b5019e76c2c9a99ab8c887a5ce8f"}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "46866a859ce5519dc3bb5b2de188a321"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "679579512bcaebdb43c107bc6574ed8a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "09b0f4b8449c2cd69fa31e89ef75c902"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}]}, @IFLA_VFINFO_LIST={0x1d0, 0x16, 0x0, 0x1, [{0x15c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x9542}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x9b2, 0x2, 0x8100}}, {0x14, 0x1, {0x1, 0x127, 0x9, 0xc828}}, {0x14, 0x1, {0xff, 0xb96, 0x1, 0x88a8}}, {0x14, 0x1, {0x5, 0x6cd, 0x0, 0x88a8}}, {0x14, 0x1, {0x1, 0x25c, 0x101, 0x8100}}, {0x14, 0x1, {0x9, 0x825, 0xf, 0x8100}}, {0x14, 0x1, {0x5b, 0xe5a, 0x2, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffeff, 0x1fb2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x7fff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6a5, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x61b, 0x0, 0x8100}}, {0x14, 0x1, {0x4, 0x770, 0x3, 0x8100}}, {0x14, 0x1, {0x2a7299a7, 0x5fb, 0x8, 0x88a8}}, {0x14, 0x1, {0x9, 0x16e, 0x36b7df75, 0x8100}}, {0x14, 0x1, {0x0, 0x6a1, 0x1, 0x1cefc}}, {0x14, 0x1, {0x7, 0x8ab, 0x158, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x1000}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7ff, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xa00}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x1000000000000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x8}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0xfc}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_VFINFO_LIST={0xdc, 0x16, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0x401}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xe11, 0xabb3, 0x88a8}}, {0x14, 0x1, {0x3ff, 0x6ac, 0x3e9d, 0x8100}}, {0x14, 0x1, {0x7, 0xa2b, 0x280000, 0x8100}}, {0x14, 0x1, {0x4fe150fc, 0xf7f, 0x6, 0x88a8}}, {0x14, 0x1, {0x2ae9, 0x6ac, 0x2ce3b691, 0x8100}}, {0x14, 0x1, {0x81, 0x7e1, 0x7, 0x30069a3259cb1a64}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3ff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1e, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xf, 0x4}}]}]}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x39c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) socket$kcm(0x29, 0xa, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x10040) 2.690099694s ago: executing program 2 (id=7122): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f"], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x8b, 0x1, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x10, 0x7, 0x6ba9, 0x200}}) sendto$packet(r1, &(0x7f0000000080)="aadc0139d10dfff321b74af7a8ad7173294e352eba0cf2795d0670b6a3e39495666f61fb462ca6b9fe66167a92c65c04267f7690735aedba68c6bb7ac4a3a60cc01d8f19402379c9a87e77dbe719c1fb8228420f67ad2584d35499009de50f865caf9f4496faf8b8ed443947e886e1", 0x6f, 0xc0, &(0x7f0000000340)={0x11, 0xf8, r2, 0x1, 0x6, 0x6, @random="56b46df0cd63"}, 0x14) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000600)={r1, &(0x7f00000003c0)='])\x00', 0x1c1000, &(0x7f0000000440)={@_ha_fsid={[0x1]}, {0x0, 0xb, 0xf50, 0x4}}, 0x4, &(0x7f0000000480), &(0x7f00000005c0)=0xffffff81}) (async, rerun: 64) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/mnt\x00') (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/uts\x00') (async) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/ipc\x00') (async) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f0000000380), 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x13c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc001}, 0x800) (async) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xfc, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80000001}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd5f2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcbd1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}}}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x200040d4) 2.078863532s ago: executing program 4 (id=7131): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40010002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) (async) sendto$packet(r5, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendfile(r4, r3, 0x0, 0xf03a0005) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x2, 0xff, 0xf, 0x9, 0x6}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x0, 0x3, {{0x10, 0x4, 0x2, 0x24, 0x40, 0x65, 0x0, 0x28, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x8, 0xdc, 0x0, 0x4, [0x10001]}, @lsrr={0x83, 0x23, 0x58, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.895245071s ago: executing program 4 (id=7134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x39}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x6, 0x9, 0xc, 0xf, 0x1, 0xa, 0xf, 0x1, 0x10, 0x9, 0x3, 0xb, 0x8, 0x5, 0x0, 0xa], 0x1, [0x4, 0x8, 0x81, 0x5, 0x9, 0x40, 0x4, 0xf, 0x8000, 0x6, 0x3, 0x7, 0x0, 0x5, 0x9, 0x8], [0x2, 0x6df, 0x3, 0xf, 0x8001, 0x5, 0xeaa, 0x8, 0x20, 0x2, 0x1, 0x200, 0x3, 0x4, 0xfff9, 0x80]}}}}]}, 0x88}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)={0x3, [0xffff, 0x1, 0x8000]}, 0xa) 1.7400149s ago: executing program 0 (id=7136): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0xcd, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0xe8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.696387466s ago: executing program 4 (id=7138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x414840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000088) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a1e6f78608890f912f087214dac0638", 0xc1}, {&(0x7f0000003040)="9fd6d9a732334b49b6550973263da755b8c2aa4a669216abd731bb5dc1fb2879", 0x20}], 0x2) 1.567825325s ago: executing program 1 (id=7139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8050d88ed791904d598042f31daacce80aba94fcfb7ebd023ccf4626568c2037", "065e95c36085b2ec717dc3cacda0b34c27b0458907549f2a4a627b771677d36f40d730331c0fcdab6942717a0f9d65fc", "b490f8a879a8f703303805b728c689932eac8143ef41434265d7aec1", {"37991f7b18ccdaab7cad8aa6c625297f", "cb69accdbeee565c08be5a0e081811ac"}}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e21, 0x7, @mcast1, 0x9}, 0x0, {[0xb965, 0x8, 0xb, 0x2, 0xfffffffb, 0x9, 0xd75d, 0x81]}}, 0x5c) 1.473537242s ago: executing program 0 (id=7141): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xf0, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791a187b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ecb8b70}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc503de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e31440}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a04fae1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d47f9e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e9534b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2900892c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6848482f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cbedc86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748f0b62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2601d8f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}]}]}, 0xf0}}, 0x4040085) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xf0, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x791a187b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ecb8b70}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfc503de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e31440}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a04fae1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d47f9e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e9534b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2900892c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6848482f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cbedc86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748f0b62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2601d8f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}]}]}]}, 0xf0}}, 0x4040085) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x30, 0x0, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x11, 0x0, 0x7fff, 0x2, 0x2080, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000540)=@raw=[@generic={0x7f, 0x4, 0xe, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x8, 0x16, &(0x7f0000000740)=""/22, 0x41100, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x2, 0xff, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r8, r9], 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000540)=@raw=[@generic={0x7f, 0x4, 0xe, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x8, 0x16, &(0x7f0000000740)=""/22, 0x41100, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x2, 0xff, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r8, r9], 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r11, {0x11, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r11, {0x11, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0x36) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.447661871s ago: executing program 2 (id=7142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.430696805s ago: executing program 4 (id=7143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, 0xfffffffffffffffd, &(0x7f0000000440)) 1.343634801s ago: executing program 1 (id=7144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000140)=""/135, 0x87, 0xc0000011, &(0x7f0000000040)={0x1a, 0x8, 0xe0, 0x9, 0xfa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.315804372s ago: executing program 2 (id=7145): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x40050}, 0x44040850) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000001080)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) 1.159622524s ago: executing program 3 (id=7147): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) 1.159038517s ago: executing program 1 (id=7148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x24, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044811}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xfffb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000003d00)=ANY=[@ANYBLOB="b4150000", @ANYRES16=r4, @ANYBLOB="09589175160cf826fb3f85862d0c23e55c722b1c014a992c4eabe90a1087ec0f446e368f3e1b3eb40df673e761e2cca89d7e51f6566298163dae6f8ea3291b350f589858c6a97719b25d45bbdc3734e71bf18e7c35769b3b22e26fb18965e2befb98214f22f2e9a9fe9b940c276677994d32816465b5ad7e62be151a2f49f5556c50f11ca18023b53b7fad1e158b61b090d7", @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r5, @ANYBLOB="140002007465616d5f736c6176655f31000000006c000180140002006970766c616e31000000000000000000140002007866726d300000000000000000000000140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="24000180080003000300000008000100", @ANYRESHEX=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000700004105eb9900600096096ddd3ce287c6d945fd05a773018000000100", @ANYRES32=r5, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15b4}}, 0x40000000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[], 0x2a4}, 0x1, 0x0, 0x0, 0x29ffd50c7220bff0}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac1414bb06000e000200000073d24748b7ef7bdf546ad7479239169fdc26a42633e9ab500effc8d118c657c51ab2b75e0c75c9cbc750030f525016da962dd0b5dfa421cc884168d5468d8d46faca39a9cfb839"], 0x40}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r13) sendmsg$SMC_PNETID_ADD(r13, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x530c523e68d3e4b2, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008844) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904020000020000000000000000", @ANYRES32=r10, @ANYBLOB="40100000004104002000128008000100677265001400028008000700ac1414aa0600030081000000"], 0x40}}, 0x4040005) socket$netlink(0x10, 0x3, 0xe) 1.092674897s ago: executing program 3 (id=7149): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xa56, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "fca06311b404bf722cf06364ee49d1d33a69558cc4936aebf2f1a80d6cdb1d0cc17701e6152374fdc4bb7a24209117725839d0ee30d0041ab3b6cf4f16ab09546170b32b4ab35c624c848255416456abe7162b45ec1e8b42d7bba878ec610a8a03778931b49f53519887ee05795451ac3c3ca2d222e1a6fea611cd9f08adbb777e0cd67de188d27c0ee5e8bd2c76cff7ff14a4e249588ab5acd79044c61daf71fb88560d7fb1237c98a0707d84197b5b0605962c7a08f76b5a6f8ca28404a7a23f69aebcbb7ce8a992b52aee42756ba453856d6d187af7f62d4efbea4d1afccd1137e7f445233158ead8173baf8df610197656743854ffd52fa1aab3c5977422aca53d8ce83529638a997d9a9cca7402d939c39dec79ed274a586b69d798fb8649bb92dd78ed08c6518afcb196511b3e111826d4f1ef8e92d1e1c033160160a0dedea1baaed7eaa86adb4cb6c509116d66c5bde183defc33a4f907084ad89b92fea3cf60cce9aefceaa8a251fa5dc57ea1e648bf0a7a5b943f73291001790ccb1397d1b3e526ef30cbcc3204678063ffb9c4c07978b880a44e75a3be56f2029912631a1bc9d2e4f72127292dee3a98b1ebc03941a46475e8cacb75afa0e7d159bf83d925d1ea1849623eb3bc52acbf3f1be85c56ad2ae1c600b0e1124eaad8c21ba91878f9ceb9454352b0fe93856bb52bde7e08d14e5ac49e20e5af020c61de8fa2ca182bb1aa8049747e067011a553ce3bf7bd82c14cb4c90404c9b0451b590966c424918e0d582573c12a1c65aea5987350df5995fd38343be3a227f03f905a3c36102bbca9ccafb331e5f674b773e8f833919afbc0f8250da29a53dc260e0dcad772e542502924075ef5511cacd6fc533093f337d5a1ed93b50f2c186a86f6a2cd5ee37e77204fb99749a219ec6405e3860283ea41a2e69a1c48af70d4c56f6df00a2dd51acd29d1cae523ac9eeaaf3ea806395515bbb2c9a0168ff8c59c2975f2eee1f7b60e6fb9d0ef04f2940d956155fb0777e8be5a30debb690e243d4cf2663ddf7fa6f0ace86d0d881da1d8d7c08c62d08483661cd496771c42f7663d82ebfdb9f4caf2650f9d69c87e6867e426ce4521231d04efd516020b17b4e4bd7df8b33a6a6bdf6af4f2463f1ce96ede77d4dc9f89843ba7205e0e451933c0dc806896028beee7104b7792301e005806b0b06f652b91d96d5966f67d6a97631825851bc6c45f4a91a2a83e65c7df0048d167c4ecd3699b828f71358e4ca3f6918f30a981fcfe262bea444c6148577c9f1c76bf4d7111490110edae4b02b9cb43a79e34d96e93ac7d3351e151c1de3a8b2d4e73e92a08bec730d915bebe3f9c8d7f9e75f0e851ff63551b9b73547766827135fc683d8bf68199cad26910bea7a466153b22f6a7b48b8c34453ccc0ddd010d6cdff56023f5654fa6c3008bb7b33bf1db5634b47ca58e460285b1b4f4e32777c38f622fdd95bedabf3d5199d727ebbd4b9f2f396c7f43a29269afca56cfcd19d3a5dd1b316b8f4b0640f118df0518f6efceaa58cec88d581ff294b0cf5e9e5b8839e45d508c07f5fa7a9f91fd90fad1c9dc2110abda4eec60d60822be669f10e307dd1379284e956c59838020e8660cf5f852f92b8e0f43b98e9b3df23c69e16e8a3e7e3432620e8d6c3ca0d9b1b8d62da27bf73ec0fc32f6e3230375a2c4773838309966b8ba20cda4be78cfeb05629f34b539532cc625252b326b953cf0bd1292adc5893f93196548b3dedb6d0850cf187be05ddbaf19e36ceb5575c38b2b68992564988e4fa7d5e4b610917d4af1179ab4102d4dc73035ca709e7566f2e4f815ab4a702f6e2f5c917d77511d591965a587193e4d4e8ec9c330e5a76c8940b9521718f7c6af215efb77d308a3c23357b325840cdd53fc598e5e93f1b6c5a558c0522dbfeb9d23cf3b348c170ce18a58422eaf4fb59ba55fc3f808f9e1b6c817ea003e159ab064ee6beebc067be398c31d7248f2e31d41dcab766deffe603be89481d734d3af6e51ffa8cefdcfbcd27871162c66447edaa1bd8b3df8e061694592cd0cd1ac1a6329734ebb678ec84993fefd90e3f85a625e326b9d7817bd6c268b071fd5d5bb385bb478d56126cb2166948eabecb529d766c6900a5a7a897f0f1d898d295eeb9dc72e6fa521b86b2a604208b91016c1a08927a5944b1daa996500c4bccff47da146f389b03b02e6905ae8fdfc49d4848acad0e5f4ddd48f8e16cee2120fbfe6196133d4ee8d"}]}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0xa56, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) 982.73062ms ago: executing program 3 (id=7150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x409, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x2400c090) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xd4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = socket(0x10, 0x803, 0x0) r4 = accept$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r8, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x8000) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r6, 0x852dd6c070cd7e4d, 0xfffffff8, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x4, 0x700000000000000, 0x0, 0x20084094}, 0x4010) 679.412976ms ago: executing program 3 (id=7151): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x8001, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 671.394833ms ago: executing program 0 (id=7152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000700)="cc93c71880d3555dfcdd57fa71fe23bf60a3c8827356507ed788e530e18db704de0f7e2ad78a7f668c6d29d2353c8a2310b3293ef758a6215aacebe872f33d89cc5a6473795af1b10cda8719916e32b8ff1b713ab8c3887cab7da10f9d64145ca10427186e5246077e5aec1efaa260d1f301e5e7f84e373187e79de1911a7f45fbe05022809ea5ab60277c94491820155e135a1b876941b103d414958aa05520c035c06230243a807470", 0xaa) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 670.121721ms ago: executing program 1 (id=7153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="170900000100000008000a000200000008000900000000000500210000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb08000a0003000000"], 0x64}}, 0x4810) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 598.649461ms ago: executing program 3 (id=7154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) sendmsg$inet(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002140)="e909e72825dc04b01fc4d08fe1702a80c0c8d43908c55e8342a6b71dbd6598715ec3f67ec602ac2a648aa198b121f2", 0x2f}], 0x1}, 0x44080) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r5, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x12}, {&(0x7f0000000100)='\x00\x00', 0x12}], 0x2) 500.057272ms ago: executing program 0 (id=7155): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) r3 = accept$ax25(r2, &(0x7f0000000300)={{}, [@default, @default, @remote, @default, @default, @remote, @netrom]}, &(0x7f0000000040)=0x48) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 499.683906ms ago: executing program 4 (id=7156): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x42004011) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r1, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 417.904754ms ago: executing program 1 (id=7157): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)={r1, 0x3, 0x3, "2a9a9e"}, 0xb) 360.980632ms ago: executing program 2 (id=7158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 263.510695ms ago: executing program 4 (id=7159): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) 263.133793ms ago: executing program 1 (id=7160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x200, 0x101, 0xc203, 0x8, 0x2, 0x1ff, 0x9, 0x71}, &(0x7f0000000500)=0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r6, 0x29, 0x24, 0x0, 0x2000005d) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/140, 0x8c, 0x0, &(0x7f00000000c0)=""/25, 0x19}, &(0x7f0000000340)=0x40) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r10, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7050000000000008500000094000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = epoll_create1(0x0) close(r11) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 189.716158ms ago: executing program 0 (id=7161): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x2}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00', @local}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="13c7f20ddc000aaf4681aa643e6136fdb16adb136a9006f26b3862f76dd48390f90f15d4e2b9029992f84f39ebbbb665326fe42de4666c54f80128a5cf8422a190de439aa8ac7c91bfb55abfa13f0eb369eacbbab8c4ccb757af5a3b7ea445842484219b1563dcfb0dcc38060c0ee7fa729c50c417e428d579b5247f639eaf58621e456f44c7bb98a3548606316fa7c04d4fe98b5066f443e608300ee668957b138f5d747a458277d6ae6500827308b943b5c6f5d5158da3d42186cb0983942682478500d3ff41fb9fc90adfe510e94b12ed", 0xd2) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x80003) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 93.835139ms ago: executing program 3 (id=7162): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x56}, 0x20) syz_emit_ethernet(0xf7, &(0x7f0000001fc0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4a3ff2", 0xc1, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}, {"d77010bccc638e41d335ff361ce886173572c1c6089e36cd551c13256174146b9ec3297ed6f7e4e855a2a473476a1f8f7842a7b9d5baa28f23d342e9d4c3ca479f46646411f3ae97c5c20a618be50ed5efa2acc9ffa20881cdb562d8d2afc05cc12d32916de708b279c53a377fb7e598643430e476a62642336ec479540ecc7239330f6ca802f72bd956c845bff0ad0116e6c290ba25c4833c826f5d1b2f16151638e676e08ef63a200e503f04"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d04000000000000000000000000c78b659809431e75b9b8da9831b298152a7cf9eb7d8951c340273f670eae1f78a211f0e85b9a950e95c8f1611525fbe806f4d2c38e160056ff4250c885f256ffca65f30a9ec1f0f0349c124484", @ANYRES32=0x0, @ANYBLOB="46060900000000001400350065727370616e300000000000000000000500210002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080), 0x10) listen(r5, 0x0) read(r5, &(0x7f00000000c0)=""/208, 0xd0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x44090) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'macvlan0\x00', 0x3}) 0s ago: executing program 0 (id=7163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000500)={{0x2, 0x4e21, @private=0xa010100}, {0x6}, 0x30, {0x2, 0x4e23, @loopback}, 'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000400)) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x2a0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x268, 0x2, [@TCA_FLOW_EMATCHES={0x264, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0x9203}, {0x6, 0xd, 0x7, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x79}}, @TCA_EMATCH_TREE_LIST={0x1b0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3155, 0x1, 0xcfbc}, {0x8, 0x3, 0x8, 0x0, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x5, 0x101, 0x9, 0x4, 0x3, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x44, 0x2, 0x4}, {0xcf, 0x7, 0x1, "8db2b871c6ed9f"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x7}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfffd, 0x3, 0x7f}, {0xffffff4d, 0x330, 0x8f, 0x7f}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0xff01}, {0xd, 0x9, 0x2, "a61441e5da04945d4e"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x6}, {0x9, 0x5, 0x2, "b4e40ef4a1"}}}, @TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0xb, 0x0, 0x21d}, "0a1c6368972a302a77c6475d9d093b44367d943c27ad6d6b864440157c977f0d1cbe249a49ade47b6e77ae5e84039aaa1e0a9c894d8b44497d1bc4eb1641dfc045c24d6c06bf1c59bccd314ae9b1626cf3787a3209b437f8a74358c0e13e9e991a671b5d4b4f4989df4062f4c58fb8929bae15901cb5aecd557a833127c0650ef2625a594e4460ac38f5aae4e324a62f6feae574db5fdcff16e23cba656698c49d36a6462905e84a26d1"}}, @TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x81}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x703}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xff}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x6}, {0x3, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x2a0}, 0x1, 0x4000000}, 0x0) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): devsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 586.930823][ T7974] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 587.010656][T26191] FAULT_INJECTION: forcing a failure. [ 587.010656][T26191] name failslab, interval 1, probability 0, space 0, times 0 [ 587.027104][ T7974] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.035873][ T7974] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.047887][T26191] CPU: 1 UID: 0 PID: 26191 Comm: syz.4.5598 Not tainted syzkaller #0 PREEMPT(full) [ 587.047910][T26191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.047921][T26191] Call Trace: [ 587.047927][T26191] [ 587.047934][T26191] dump_stack_lvl+0xe8/0x150 [ 587.047963][T26191] should_fail_ex+0x412/0x560 [ 587.047988][T26191] should_failslab+0xa8/0x100 [ 587.048008][T26191] ? skb_clone+0x212/0x3a0 [ 587.048031][T26191] kmem_cache_alloc_noprof+0x87/0x650 [ 587.048055][T26191] ? __netlink_lookup+0xc6/0x8b0 [ 587.048082][T26191] skb_clone+0x212/0x3a0 [ 587.048110][T26191] __netlink_deliver_tap+0x404/0x850 [ 587.048141][T26191] ? netlink_deliver_tap+0x2e/0x1b0 [ 587.048163][T26191] netlink_deliver_tap+0x19c/0x1b0 [ 587.048184][T26191] netlink_unicast+0x7e3/0x9b0 [ 587.048220][T26191] ? __pfx_netlink_unicast+0x10/0x10 [ 587.048241][T26191] ? netlink_sendmsg+0x650/0xb40 [ 587.048259][T26191] ? skb_put+0x11b/0x210 [ 587.048284][T26191] netlink_sendmsg+0x813/0xb40 [ 587.048314][T26191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.048338][T26191] ? aa_sock_msg_perm+0xf1/0x1b0 [ 587.048361][T26191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.048381][T26191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.048400][T26191] ____sys_sendmsg+0xa68/0xad0 [ 587.048433][T26191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.048464][T26191] ? import_iovec+0x73/0xa0 [ 587.048490][T26191] ___sys_sendmsg+0x2a5/0x360 [ 587.048520][T26191] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.048578][T26191] ? __fget_files+0x2a/0x420 [ 587.048600][T26191] ? __fget_files+0x3a0/0x420 [ 587.048633][T26191] __x64_sys_sendmsg+0x1bd/0x2a0 [ 587.048660][T26191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.048693][T26191] ? __pfx_ksys_write+0x10/0x10 [ 587.048723][T26191] do_syscall_64+0x14d/0xf80 [ 587.048747][T26191] ? trace_irq_disable+0x3b/0x150 [ 587.048769][T26191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.048787][T26191] ? clear_bhb_loop+0x40/0x90 [ 587.048808][T26191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.048825][T26191] RIP: 0033:0x7fd00e99c629 [ 587.048842][T26191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.048857][T26191] RSP: 002b:00007fd00f90c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.048876][T26191] RAX: ffffffffffffffda RBX: 00007fd00ec16090 RCX: 00007fd00e99c629 [ 587.048889][T26191] RDX: 0000000000000880 RSI: 0000200000000200 RDI: 0000000000000004 [ 587.048900][T26191] RBP: 00007fd00f90c090 R08: 0000000000000000 R09: 0000000000000000 [ 587.048910][T26191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.048919][T26191] R13: 00007fd00ec16128 R14: 00007fd00ec16090 R15: 00007fffa85639d8 [ 587.048949][T26191] [ 587.392854][ T7974] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.404251][ T7974] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.552847][T26217] netlink: 'syz.1.5608': attribute type 75 has an invalid length. [ 587.554955][T26214] netlink: 'syz.3.5605': attribute type 12 has an invalid length. [ 587.570626][T26217] __nla_validate_parse: 11 callbacks suppressed [ 587.570645][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'. [ 587.765081][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5612'. [ 587.866422][T26243] netlink: 'syz.2.5616': attribute type 1 has an invalid length. [ 587.976182][T26243] 8021q: adding VLAN 0 to HW filter on device bond11 [ 588.016610][T26244] vlan4: entered promiscuous mode [ 588.045618][T26244] bond11: entered promiscuous mode [ 588.056637][T26244] vlan4: entered allmulticast mode [ 588.072788][T26244] bond11: entered allmulticast mode [ 588.074406][T26265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'. [ 588.097332][T26270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5619'. [ 588.102289][T26261] syzkaller0: entered promiscuous mode [ 588.127790][T26261] syzkaller0: entered allmulticast mode [ 588.307447][T26279] mac80211_hwsim hwsim42 : renamed from wlan1 [ 588.322455][T26277] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 589.273313][T26353] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 589.334921][T26358] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.684509][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'. [ 589.729868][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 589.761354][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5647'. [ 589.779970][T26390] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 589.781211][T26384] netlink: 'syz.4.5647': attribute type 12 has an invalid length. [ 589.798650][T26384] netlink: 'syz.4.5647': attribute type 11 has an invalid length. [ 589.849828][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5651'. [ 589.879463][T26393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5651'. [ 590.034061][T26398] openvswitch: netlink: IP tunnel dst address not specified [ 590.855880][T26429] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 590.980879][T26435] FAULT_INJECTION: forcing a failure. [ 590.980879][T26435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.009956][T26435] CPU: 1 UID: 0 PID: 26435 Comm: syz.2.5665 Not tainted syzkaller #0 PREEMPT(full) [ 591.009982][T26435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.009992][T26435] Call Trace: [ 591.010000][T26435] [ 591.010007][T26435] dump_stack_lvl+0xe8/0x150 [ 591.010036][T26435] should_fail_ex+0x412/0x560 [ 591.010062][T26435] _copy_to_user+0x31/0xb0 [ 591.010087][T26435] simple_read_from_buffer+0xe1/0x170 [ 591.010115][T26435] proc_fail_nth_read+0x1bb/0x230 [ 591.010141][T26435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.010165][T26435] ? rw_verify_area+0x2a6/0x4d0 [ 591.010179][T26435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.010202][T26435] vfs_read+0x20c/0xa70 [ 591.010216][T26435] ? fdget_pos+0x246/0x320 [ 591.010244][T26435] ? __pfx___mutex_lock+0x10/0x10 [ 591.010261][T26435] ? __pfx_vfs_read+0x10/0x10 [ 591.010280][T26435] ? __fget_files+0x2a/0x420 [ 591.010306][T26435] ? __fget_files+0x3a0/0x420 [ 591.010327][T26435] ? __fget_files+0x2a/0x420 [ 591.010357][T26435] ksys_read+0x150/0x270 [ 591.010377][T26435] ? __pfx_ksys_read+0x10/0x10 [ 591.010405][T26435] do_syscall_64+0x14d/0xf80 [ 591.010428][T26435] ? trace_irq_disable+0x3b/0x150 [ 591.010451][T26435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.010468][T26435] ? clear_bhb_loop+0x40/0x90 [ 591.010489][T26435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.010506][T26435] RIP: 0033:0x7fa21295cece [ 591.010523][T26435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.010536][T26435] RSP: 002b:00007fa2137a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.010555][T26435] RAX: ffffffffffffffda RBX: 00007fa2137a56c0 RCX: 00007fa21295cece [ 591.010567][T26435] RDX: 000000000000000f RSI: 00007fa2137a50a0 RDI: 0000000000000005 [ 591.010577][T26435] RBP: 00007fa2137a5090 R08: 0000000000000000 R09: 0000000000000000 [ 591.010588][T26435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.010598][T26435] R13: 00007fa212c16038 R14: 00007fa212c15fa0 R15: 00007ffc4ab60f08 [ 591.010627][T26435] [ 591.345764][T26456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5670'. [ 591.589905][T26464] netlink: 'syz.2.5675': attribute type 13 has an invalid length. [ 592.121549][T26505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 592.145736][T26505] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.154259][T26505] gretap2: entered promiscuous mode [ 592.162236][T26505] gretap2: entered allmulticast mode [ 592.326367][T26518] syzkaller1: entered promiscuous mode [ 592.347100][T26518] syzkaller1: entered allmulticast mode [ 592.569419][T26530] syz_tun: entered promiscuous mode [ 592.582836][T26530] syz_tun: left promiscuous mode [ 593.074959][T26571] __nla_validate_parse: 11 callbacks suppressed [ 593.074981][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 593.103248][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 593.136812][T26574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5704'. [ 593.150668][T26575] block nbd0: not configured, cannot reconfigure [ 593.320975][T26594] netlink: 'syz.0.5710': attribute type 9 has an invalid length. [ 593.533532][T26608] rdma_rxe: rxe_newlink: failed to add lo [ 593.619170][T26613] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 593.630642][T26613] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 593.857499][T26631] team0: Device gtp2 is up. Set it down before adding it as a team port [ 593.889543][T26637] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5720'. [ 593.925801][T26637] syzkaller0: entered promiscuous mode [ 593.932093][T26637] syzkaller0: entered allmulticast mode [ 594.073881][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 594.089843][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5724'. [ 594.113494][T26647] netlink: 'syz.0.5725': attribute type 11 has an invalid length. [ 594.125328][T26647] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5725'. [ 594.195728][T26650] 9: Caught tx_queue_len zero misconfig [ 594.424847][T26677] : entered promiscuous mode [ 594.441989][T26679] netlink: 'syz.4.5735': attribute type 4 has an invalid length. [ 594.459016][T26679] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5735'. [ 594.541217][T26684] bond6: option mode: invalid value (133) [ 594.549686][T26684] bond6 (unregistering): Released all slaves [ 594.695563][T26696] syzkaller0: Caught tx_queue_len zero misconfig [ 594.757485][T26703] syzkaller0: entered promiscuous mode [ 594.803588][T26703] syzkaller0: entered allmulticast mode [ 594.871594][T26714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5744'. [ 595.216858][T26734] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5752'. [ 595.521853][T26757] netlink: 'syz.0.5757': attribute type 25 has an invalid length. [ 595.775915][T26786] block nbd0: Unsupported socket: should be TCP or UNIX. [ 596.126519][T26813] netlink: 'syz.3.5770': attribute type 1 has an invalid length. [ 596.156407][T26813] netlink: 'syz.3.5770': attribute type 2 has an invalid length. [ 596.257819][T26821] xt_hashlimit: size too large, truncated to 1048576 [ 596.389083][T26829] syzkaller1: entered promiscuous mode [ 596.395089][T26829] syzkaller1: entered allmulticast mode [ 596.639414][T26821] xt_hashlimit: size too large, truncated to 1048576 [ 597.043490][T26821] xt_hashlimit: size too large, truncated to 1048576 [ 597.221595][T26865] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.627860][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 597.685461][T26891] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 598.597774][T26907] __nla_validate_parse: 6 callbacks suppressed [ 598.597793][T26907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5788'. [ 598.639065][T26909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.734818][T26916] syzkaller0: entered promiscuous mode [ 598.764026][T26916] syzkaller0: entered allmulticast mode [ 598.816793][T26919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5793'. [ 599.072372][T26932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5796'. [ 599.101150][T26935] team0: Port device ip6gre2 added [ 599.340190][T26937] bond13: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 599.386351][T26937] bond13 (unregistering): Released all slaves [ 599.488348][T26954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.497950][T26955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.644600][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5803'. [ 599.708273][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 599.785721][T26974] netlink: 'syz.3.5806': attribute type 2 has an invalid length. [ 599.826113][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'. [ 599.952301][T26984] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5811'. [ 599.979513][T26987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5812'. [ 600.007431][T26987] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 600.092258][T26998] netlink: 'syz.1.5815': attribute type 26 has an invalid length. [ 600.109808][T26998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5815'. [ 600.192743][T27004] netlink: 'syz.2.5819': attribute type 4 has an invalid length. [ 600.265273][T27007] macsec2: entered promiscuous mode [ 600.710880][T27048] netlink: 'syz.4.5830': attribute type 10 has an invalid length. [ 600.731109][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5831'. [ 600.742824][T27048] team0: Device ipvlan1 failed to register rx_handler [ 600.762680][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5831'. [ 600.825568][T27057] SET target dimension over the limit! [ 601.148926][T27082] netlink: 'syz.0.5838': attribute type 10 has an invalid length. [ 601.157341][T27082] veth1_macvtap: left promiscuous mode [ 601.165344][T27082] team0: Device veth1_macvtap failed to register rx_handler [ 601.190431][T27088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.519223][T27100] syzkaller0: entered promiscuous mode [ 601.555221][T27100] syzkaller0: entered allmulticast mode [ 603.741515][T27161] __nla_validate_parse: 4 callbacks suppressed [ 603.741535][T27161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5860'. [ 603.792178][T27161] netlink: 'syz.0.5860': attribute type 63 has an invalid length. [ 603.800876][T27161] netlink: 'syz.0.5860': attribute type 63 has an invalid length. [ 603.818525][T27161] syzkaller0: entered promiscuous mode [ 603.828369][T27161] syzkaller0: entered allmulticast mode [ 603.943550][T27173] macvtap1: entered promiscuous mode [ 603.951074][T27173] macvtap1: entered allmulticast mode [ 603.956597][T27173] veth1_vlan: entered allmulticast mode [ 603.966448][ T5903] IPVS: starting estimator thread 0... [ 604.022913][T27180] macvtap2: entered promiscuous mode [ 604.031758][T27180] macvtap2: entered allmulticast mode [ 604.077245][T27179] IPVS: using max 34 ests per chain, 81600 per kthread [ 604.292960][T27205] netlink: 163212 bytes leftover after parsing attributes in process `syz.0.5876'. [ 604.311525][T27203] tipc: Enabling of bearer rejected, failed to enable media [ 604.412587][T27211] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5878'. [ 604.449365][T27211] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5878'. [ 604.789184][T27253] netlink: 'syz.0.5886': attribute type 15 has an invalid length. [ 604.833628][T27256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5888'. [ 604.933470][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5892'. [ 604.943293][T27269] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5892'. [ 605.035114][T27277] sit0: left promiscuous mode [ 605.063223][T27277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 605.104431][T27281] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 605.173241][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 605.185867][T27286] netlink: 'syz.1.5898': attribute type 21 has an invalid length. [ 605.196890][T27286] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5898'. [ 605.648113][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 605.660138][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.669365][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.679296][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 605.688207][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 605.726183][T27313] ip6_vti0 speed is unknown, defaulting to 1000 [ 606.016357][T27328] veth0_to_bond: entered allmulticast mode [ 606.070336][T27332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5911'. [ 606.186577][T27300] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 606.290041][ T7974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.329096][ T7974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.462085][ T7974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.474090][ T7974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.506722][T27359] bond7: option mode: unable to set because the bond device is up [ 606.517547][T27360] bond7: option mode: unable to set because the bond device is up [ 606.552634][T27362] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 606.569732][T27362] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.583621][T27362] bond7: (slave lo): making interface the new active one [ 606.600002][T27362] bond7: (slave lo): Enslaving as an active interface with an up link [ 606.611061][T27362] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 606.666734][ T7974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.680218][ T7974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.748723][ T7974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.763414][ T7974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.842494][T27378] netlink: 'syz.2.5923': attribute type 21 has an invalid length. [ 606.865115][T27378] netlink: 'syz.2.5923': attribute type 4 has an invalid length. [ 606.873717][T27378] netlink: 'syz.2.5923': attribute type 5 has an invalid length. [ 606.986812][T27378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 607.150378][ T7974] bridge_slave_0: left promiscuous mode [ 607.158583][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.388380][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 607.602115][ T7974] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 607.791883][ T50] Bluetooth: hci2: command tx timeout [ 608.021015][ T7974] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 608.029704][ T7974] bridge4 (unregistering): left promiscuous mode [ 608.102470][ T7974] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 608.111200][ T7974] bridge6 (unregistering): left promiscuous mode [ 608.300989][ T7974] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 608.309701][ T7974] bridge10 (unregistering): left promiscuous mode [ 608.391240][ T7974] bond1 (unregistering): Released all slaves [ 608.403658][ T7974] bond2 (unregistering): Released all slaves [ 608.416356][ T7974] bond3 (unregistering): Released all slaves [ 608.431033][ T7974] bond4 (unregistering): Released all slaves [ 608.443510][ T7974] bond0 (unregistering): Released all slaves [ 608.463394][ T7974] bond5 (unregistering): Released all slaves [ 608.476035][ T7974] bond6 (unregistering): Released all slaves [ 608.494093][ T7974] bond7 (unregistering): Released all slaves [ 608.506582][ T7974] bond8 (unregistering): Released all slaves [ 608.519420][ T7974] bond9 (unregistering): Released all slaves [ 608.531842][ T7974] bond10 (unregistering): Released all slaves [ 608.708002][ T7974] tipc: Left network mode [ 608.755138][T27313] chnl_net:caif_netlink_parms(): no params data found [ 608.929740][T27450] netlink: 'syz.1.5936': attribute type 10 has an invalid length. [ 608.999229][T27450] team0: Device dummy0 is of different type [ 609.439279][T27313] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.446452][T27313] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.476395][T27313] bridge_slave_0: entered allmulticast mode [ 609.491629][T27313] bridge_slave_0: entered promiscuous mode [ 609.665519][T27313] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.685816][T27499] netlink: 'syz.2.5941': attribute type 1 has an invalid length. [ 609.691632][T27313] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.720959][T27313] bridge_slave_1: entered allmulticast mode [ 609.748881][T27313] bridge_slave_1: entered promiscuous mode [ 609.878262][ T50] Bluetooth: hci2: command tx timeout [ 610.051423][T27313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.171931][T27313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.185717][T27517] __nla_validate_parse: 4 callbacks suppressed [ 610.185738][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5947'. [ 610.357263][T27517] xfrm0: entered allmulticast mode [ 610.428961][T27313] team0: Port device team_slave_0 added [ 610.479096][T27313] team0: Port device team_slave_1 added [ 610.612470][T27313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.637499][T27313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.702832][T27313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.746667][ T7974] hsr_slave_0: left promiscuous mode [ 610.756782][ T7974] hsr_slave_1: left promiscuous mode [ 610.778604][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.786078][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.804823][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.814338][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.824555][ T7974] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 610.837195][ T7974] batman_adv: batadv0: Removing interface: ipvlan4 [ 610.851662][ T7974] veth1_macvtap: left promiscuous mode [ 610.867295][ T7974] veth0_macvtap: left promiscuous mode [ 610.873049][ T7974] veth1_vlan: left promiscuous mode [ 611.225969][ T7974] team0 (unregistering): Port device 2C removed [ 611.242166][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 611.335456][ T7974] smc: removing net device team0 with user defined pnetid SYZ2 [ 611.363831][T27313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.378248][T27313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.406184][T27313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.496286][T27551] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5957'. [ 611.615796][T27529] ip6_vti0 speed is unknown, defaulting to 1000 [ 611.639912][T27313] hsr_slave_0: entered promiscuous mode [ 611.646656][T27313] hsr_slave_1: entered promiscuous mode [ 611.732953][T27555] bond8 (unregistering): Released all slaves [ 611.947754][ T50] Bluetooth: hci2: command tx timeout [ 612.227025][T27583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5966'. [ 612.252307][T27578] bond13: (slave bond_slave_1): Device is not bonding slave [ 612.272700][T27578] bond13: option active_slave: invalid value (bond_slave_1) [ 612.292787][T27578] bond13 (unregistering): Released all slaves [ 612.566047][ T7974] IPVS: stop unused estimator thread 0... [ 612.880997][T27611] bond0: Caught tx_queue_len zero misconfig [ 613.019478][T27618] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 613.057500][T27618] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5973'. [ 613.066544][T27618] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 613.130593][T27621] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.140853][T27618] netlink: 'syz.3.5973': attribute type 8 has an invalid length. [ 613.154685][T27618] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5973'. [ 613.164952][T27618] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5973'. [ 613.360009][T27637] xt_l2tp: v2 doesn't support IP mode [ 613.499114][T27313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.535337][T27313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.568480][T27313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.595793][T27313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 613.606173][T27647] netlink: 'syz.0.5978': attribute type 1 has an invalid length. [ 613.627737][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'. [ 613.718159][T27658] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5979'. [ 613.732848][T27658] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5979'. [ 613.881460][T27313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.947437][T27313] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.986460][T19887] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.993689][T19887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.027823][ T50] Bluetooth: hci2: command tx timeout [ 614.065981][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.073224][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.532531][T27686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.710249][T27313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.397358][T27313] veth0_vlan: entered promiscuous mode [ 615.412037][T27718] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5988'. [ 615.442426][T27313] veth1_vlan: entered promiscuous mode [ 615.557874][T27313] veth0_macvtap: entered promiscuous mode [ 615.583924][T27313] veth1_macvtap: entered promiscuous mode [ 615.651472][T27313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.691711][T27313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.709765][ T194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.747903][ T194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.806696][ T194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.826509][ T194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.883009][T27739] netlink: 'syz.1.5993': attribute type 1 has an invalid length. [ 616.076551][T27751] veth0_to_bond: entered allmulticast mode [ 616.160151][T19873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.173326][T19873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.284274][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.296459][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.345663][T27768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.386191][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6001'. [ 616.495354][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 616.685902][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6005'. [ 616.835169][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6008'. [ 616.840938][T27803] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6007'. [ 617.040330][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.051981][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.060477][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.070113][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.081786][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.216328][T27811] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.328160][T27830] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 617.360649][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'. [ 617.377911][T27830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 617.386899][T27830] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 617.437825][T27830] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 617.459038][T27830] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 617.553652][T19902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.597041][T19902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.636616][T19902] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.749113][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6016'. [ 617.986042][T27858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6016'. [ 618.117803][T27864] netlink: 'syz.0.6016': attribute type 10 has an invalid length. [ 618.451449][T19902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.477818][T19902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.505125][T19902] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.571895][T27864] : mtu less than device minimum [ 618.581236][T27864] `: (slave ): Error -22 calling dev_set_mtu [ 618.755543][T19902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.772820][T19902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.797159][T19902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.900225][T27896] macsec1: entered promiscuous mode [ 619.148203][ T50] Bluetooth: hci1: command tx timeout [ 619.203430][T27913] bridge1: entered promiscuous mode [ 619.237211][T27913] bridge1: entered allmulticast mode [ 619.245470][T27913] team0: Port device bridge1 added [ 619.341733][T27932] bond0: Error: Cannot enslave bond to itself. [ 619.656013][T27811] chnl_net:caif_netlink_parms(): no params data found [ 619.686567][T27952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.904581][T19902] bridge_slave_0: left allmulticast mode [ 619.911172][T19902] bridge_slave_0: left promiscuous mode [ 619.916948][T19902] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.559365][ T7974] smc: removing ib device syz0 [ 620.566261][T19902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.580073][T19902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.595930][T19902] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 620.606689][T19902] bond0 (unregistering): Released all slaves [ 620.617371][T19902] bond1 (unregistering): Released all slaves [ 620.630655][T19902] bond2 (unregistering): Released all slaves [ 620.643360][T19902] bond3 (unregistering): Released all slaves [ 620.661641][T19902] bond4 (unregistering): Released all slaves [ 620.679753][T19902] bond5 (unregistering): Released all slaves [ 620.710499][T27811] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.721394][T27811] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.731337][T27811] bridge_slave_0: entered allmulticast mode [ 620.762888][T27811] bridge_slave_0: entered promiscuous mode [ 620.832238][T27976] tipc: New replicast peer: 255.255.255.255 [ 620.862814][T27976] tipc: Enabled bearer , priority 10 [ 620.885793][T27811] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.903393][T27811] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.928102][T27811] bridge_slave_1: entered allmulticast mode [ 620.948806][T27811] bridge_slave_1: entered promiscuous mode [ 621.107534][T27992] __nla_validate_parse: 5 callbacks suppressed [ 621.107553][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6044'. [ 621.165276][T27984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6044'. [ 621.230621][ T5835] Bluetooth: hci1: command tx timeout [ 621.244239][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6044'. [ 621.352273][T28001] xt_TPROXY: Can be used only with -p tcp or -p udp [ 621.363486][T27811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.439097][T27811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.693721][T27811] team0: Port device team_slave_0 added [ 621.751694][T27811] team0: Port device team_slave_1 added [ 621.895226][T28021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6052'. [ 621.988636][T28034] netlink: 'syz.0.6055': attribute type 2 has an invalid length. [ 622.009788][T27811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.046203][T27811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.121219][T27811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.155161][T27811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.199726][T27811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.262075][T27811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.542075][T28062] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 622.653969][T27811] hsr_slave_0: entered promiscuous mode [ 622.702449][T27811] hsr_slave_1: entered promiscuous mode [ 622.718380][T27811] debugfs: 'hsr0' already exists in 'hsr' [ 622.726934][T27811] Cannot create hsr debugfs directory [ 622.794144][T28071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6062'. [ 622.953246][T28078] nbd: must specify a size in bytes for the device [ 623.116829][T28071] bond1: Invalid ad_actor_system MAC address. [ 623.122015][T28089] nbd: must specify a device to reconfigure [ 623.139477][T28089] nbd: must specify a device to reconfigure [ 623.159349][T28071] bond1: option ad_actor_system: invalid value (1) [ 623.194259][T28071] bond1 (unregistering): Released all slaves [ 623.307397][ T5835] Bluetooth: hci1: command tx timeout [ 623.344117][T28078] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 623.644642][T28116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6072'. [ 623.779096][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6072'. [ 624.230829][T28151] netlink: 'syz.4.6079': attribute type 2 has an invalid length. [ 624.295449][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6079'. [ 624.372555][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 624.378881][ T1300] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.576870][T28152] netlink: 'syz.4.6079': attribute type 12 has an invalid length. [ 624.593090][T19902] tipc: Disabling bearer [ 624.601972][T19902] tipc: Left network mode [ 624.933622][T28178] netlink: 'syz.0.6088': attribute type 1 has an invalid length. [ 625.046611][T28178] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.072330][T28185] bond8: (slave geneve5): making interface the new active one [ 625.085598][T28185] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 625.175268][ T84] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.199251][T19887] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.319810][T19887] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.347202][T19887] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.388022][ T5835] Bluetooth: hci1: command tx timeout [ 625.956061][T27811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.010458][T27811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.067579][T27811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 626.108909][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6101'. [ 626.129247][T27811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 626.236463][T28248] bond10: entered promiscuous mode [ 626.263599][T28248] 8021q: adding VLAN 0 to HW filter on device bond10 [ 626.553242][T28273] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 626.741433][T27811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.793598][T28286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6108'. [ 626.865855][T27811] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.963154][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.970338][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.990527][T28295] netlink: 'syz.0.6112': attribute type 2 has an invalid length. [ 627.201886][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.209071][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.424221][T27811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.491167][T28321] team0: Cannot enslave team device to itself [ 628.007741][T19902] hsr_slave_0: left promiscuous mode [ 628.039388][T19902] hsr_slave_1: left promiscuous mode [ 628.045501][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.071048][T19902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.091040][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.100623][T19902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.309576][T28365] delete_channel: no stack [ 628.323111][T19902] team0 (unregistering): Port device team_slave_1 removed [ 628.336810][T19902] team0 (unregistering): Port device team_slave_0 removed [ 628.566426][T27811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.708325][T27811] veth0_vlan: entered promiscuous mode [ 628.733715][T27811] veth1_vlan: entered promiscuous mode [ 628.810203][T28385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6135'. [ 628.826830][T27811] veth0_macvtap: entered promiscuous mode [ 628.826888][T28382] netlink: 'syz.0.6133': attribute type 2 has an invalid length. [ 628.848812][T27811] veth1_macvtap: entered promiscuous mode [ 628.859466][T28382] netlink: 'syz.0.6133': attribute type 1 has an invalid length. [ 628.904441][T27811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.965727][T27811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.033754][ T29] audit: type=1800 audit(1771958782.701:6): pid=28395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6139" name="memory.events" dev="tmpfs" ino=3086 res=0 errno=0 [ 629.068595][ T7974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.097124][ T29] audit: type=1804 audit(1771958782.701:7): pid=28395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6139" name="/newroot/602/memory.events" dev="tmpfs" ino=3086 res=1 errno=0 [ 629.136576][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6142'. [ 629.141430][ T7974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.166937][ T7974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.175775][ T7974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.269253][T19902] IPVS: stop unused estimator thread 0... [ 629.337523][T19895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.388862][T19895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.431893][T28421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6146'. [ 629.466343][T19887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.491192][T19887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.671788][T28441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6152'. [ 629.718716][T28438] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6151'. [ 629.779846][T28449] netlink: 'syz.4.6154': attribute type 12 has an invalid length. [ 629.866999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 629.875125][ C0] lec:lec_tx_timeout: lec0 [ 630.025155][T28468] netlink: 'syz.3.6158': attribute type 1 has an invalid length. [ 630.048774][T28468] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6158'. [ 630.062669][T28468] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6158'. [ 630.271541][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.285890][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.305263][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.314634][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.327459][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.460075][T28485] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 630.485803][T28486] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 630.493911][T28485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6165'. [ 630.517250][T28485] openvswitch: netlink: Flow key attr not present in new flow. [ 630.554582][T28478] ip6_vti0 speed is unknown, defaulting to 1000 [ 630.676652][T28492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6168'. [ 630.733630][T28501] netlink: 'syz.3.6171': attribute type 3 has an invalid length. [ 630.760764][T28500] netlink: 'syz.4.6170': attribute type 1 has an invalid length. [ 630.918375][T28511] netlink: 'syz.1.6174': attribute type 29 has an invalid length. [ 630.956219][T28512] syzkaller1: entered promiscuous mode [ 630.979541][T28512] syzkaller1: entered allmulticast mode [ 630.988339][T28511] netlink: 'syz.1.6174': attribute type 29 has an invalid length. [ 631.468976][T28478] chnl_net:caif_netlink_parms(): no params data found [ 631.513148][T28543] syzkaller0: entered allmulticast mode [ 631.942180][T28565] : renamed from xfrm0 (while UP) [ 631.954522][T28478] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.971295][T28478] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.981194][T28478] bridge_slave_0: entered allmulticast mode [ 631.992198][T28478] bridge_slave_0: entered promiscuous mode [ 632.011113][T28478] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.019121][T28478] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.026404][T28478] bridge_slave_1: entered allmulticast mode [ 632.038834][T28478] bridge_slave_1: entered promiscuous mode [ 632.082072][T28478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.110911][T28478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.240630][T28478] team0: Port device team_slave_0 added [ 632.253084][T28587] netlink: 'syz.4.6191': attribute type 21 has an invalid length. [ 632.253084][T28588] netlink: 'syz.4.6191': attribute type 21 has an invalid length. [ 632.256014][T28478] team0: Port device team_slave_1 added [ 632.262522][T28589] netlink: 'syz.0.6190': attribute type 1 has an invalid length. [ 632.286429][T28588] __nla_validate_parse: 7 callbacks suppressed [ 632.286446][T28588] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6191'. [ 632.329560][T28589] bond9: entered promiscuous mode [ 632.335112][T28589] 8021q: adding VLAN 0 to HW filter on device bond9 [ 632.343581][T28587] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6191'. [ 632.423158][T28584] bond9: (slave bridge12): making interface the new active one [ 632.431527][ T5835] Bluetooth: hci5: command tx timeout [ 632.445003][T28584] bridge12: entered promiscuous mode [ 632.454396][T28584] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 632.467540][T28478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.474921][T28478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.510756][T28478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.532348][T28604] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 632.540241][T28604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 632.559784][T28608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6195'. [ 632.560284][T28478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.595784][T28478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.624312][T28478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.733405][T28616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.761839][T28478] hsr_slave_0: entered promiscuous mode [ 632.782346][T28478] hsr_slave_1: entered promiscuous mode [ 632.791799][T28478] debugfs: 'hsr0' already exists in 'hsr' [ 632.798649][T28478] Cannot create hsr debugfs directory [ 632.904978][T28623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6202'. [ 632.930401][T28619] netlink: 'syz.3.6199': attribute type 2 has an invalid length. [ 633.080017][T28478] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.107740][T28634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6204'. [ 633.183551][T28640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6205'. [ 633.274592][T28478] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.354505][T28652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6207'. [ 633.373000][T28478] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.460298][T28478] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.760909][T28675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.943945][T28478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 633.990908][T28478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 634.104327][T28478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 634.123560][T28478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 634.137417][T28699] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 634.510109][ T5835] Bluetooth: hci5: command tx timeout [ 634.597887][T28730] dvmrp0: entered allmulticast mode [ 634.626523][T28478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.694638][T28735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6227'. [ 634.721491][T28680] infiniband syz0: set active [ 634.732456][T28478] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.739897][T28680] infiniband syz0: added bond0 [ 634.782486][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.789706][T19895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.829915][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.837124][T19895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.919681][T28741] syzkaller0: entered promiscuous mode [ 634.925198][T28741] syzkaller0: entered allmulticast mode [ 634.939066][T28680] RDS/IB: syz0: added [ 634.943144][T28680] smc: adding ib device syz0 with port count 1 [ 634.963522][T28680] smc: ib device syz0 port 1 has no pnetid [ 635.408712][T28762] bond0: (slave dummy0): Device is not bonding slave [ 635.422280][T28762] bond0: option active_slave: invalid value (dummy0) [ 635.556186][T28765] 9: renamed from lo (while UP) [ 635.671299][T28478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.789912][T28771] bridge2: entered promiscuous mode [ 635.795342][T28771] bridge2: entered allmulticast mode [ 635.811335][T28772] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6238'. [ 635.835347][T28772] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6238'. [ 635.893457][T28478] veth0_vlan: entered promiscuous mode [ 635.934302][T28478] veth1_vlan: entered promiscuous mode [ 635.985692][T28478] veth0_macvtap: entered promiscuous mode [ 636.014989][T28478] veth1_macvtap: entered promiscuous mode [ 636.145397][T28478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.182149][T28478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.211709][T19888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.240771][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.251925][ T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.286702][ T84] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.405598][T28792] bond2: option lp_interval: invalid value (0) [ 636.412224][T28792] bond2: option lp_interval: allowed values 1 - 2147483647 [ 636.433169][T28792] bond2 (unregistering): Released all slaves [ 636.521840][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.550191][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.587495][ T5835] Bluetooth: hci5: command tx timeout [ 636.644907][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.676282][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.845354][T28808] xt_hashlimit: size too large, truncated to 1048576 [ 636.858687][T28810] validate_nla: 1 callbacks suppressed [ 636.858705][T28810] netlink: 'syz.2.6160': attribute type 4 has an invalid length. [ 636.914992][T28806] netlink: 'syz.2.6160': attribute type 4 has an invalid length. [ 637.125875][T28817] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 637.279572][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.299716][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.309426][ T7493] lec:lec_start_xmit: lec0:No lecd attached [ 637.315520][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.323835][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.332192][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.342283][T28822] __nla_validate_parse: 2 callbacks suppressed [ 637.342300][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6250'. [ 637.520333][T28819] ip6_vti0 speed is unknown, defaulting to 1000 [ 637.572006][T19902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.605622][T19902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.623539][T19902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.773134][T28834] netlink: 'syz.1.6254': attribute type 1 has an invalid length. [ 637.819590][T19902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.834601][T28837] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6256'. [ 637.837278][T19902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.856823][T19902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.040476][T19902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.071303][T19902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.098013][T19902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.130961][T28843] netlink: 'syz.4.6258': attribute type 5 has an invalid length. [ 638.141167][T28843] netlink: 'syz.4.6258': attribute type 1 has an invalid length. [ 638.190346][T19902] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 638.212471][T19902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.230368][T19902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.241463][T19902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.305269][T28857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6262'. [ 638.426917][T16241] IPVS: starting estimator thread 0... [ 638.527462][T28862] IPVS: using max 37 ests per chain, 88800 per kthread [ 638.669011][ T50] Bluetooth: hci5: command tx timeout [ 638.849706][T28884] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 639.021131][T28893] xt_CONNSECMARK: invalid mode: 0 [ 639.041534][T28893] tipc: Can't bind to reserved service type 1 [ 639.095699][T19902] bond8 (unregistering): (slave geneve5): Releasing active interface [ 639.134992][T19902] bond1 (unregistering): (slave geneve2): Releasing active interface [ 639.273453][T19902] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 639.387461][ T50] Bluetooth: hci0: command tx timeout [ 639.731467][T19902] bond9 (unregistering): (slave bridge12): Releasing backup interface [ 639.739918][T19902] bridge12 (unregistering): left promiscuous mode [ 639.770871][T19902] ` (unregistering): Released all slaves [ 639.780343][T19902] bond1 (unregistering): Released all slaves [ 639.794262][T19902] bond2 (unregistering): Released all slaves [ 639.808506][T19902] bond3 (unregistering): Released all slaves [ 639.821488][T19902] bond4 (unregistering): Released all slaves [ 639.837431][T19902] bond5 (unregistering): Released all slaves [ 639.853881][T19902] bond6 (unregistering): Released all slaves [ 639.866268][T19902] bond0 (unregistering): Released all slaves [ 639.884815][T19902] bond7 (unregistering): (slave lo): Releasing active interface [ 639.893530][T19902] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 639.906662][T19902] bond7 (unregistering): Released all slaves [ 639.919590][T19902] bond8 (unregistering): Released all slaves [ 639.932277][T19902] bond9 (unregistering): Released all slaves [ 640.196875][T19902] tipc: Left network mode [ 640.765571][T28819] chnl_net:caif_netlink_parms(): no params data found [ 641.338070][T28819] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.347256][T28819] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.354554][T28819] bridge_slave_0: entered allmulticast mode [ 641.370896][T28819] bridge_slave_0: entered promiscuous mode [ 641.445441][T28819] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.459533][T28819] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.467178][ T50] Bluetooth: hci0: command tx timeout [ 641.480739][T28819] bridge_slave_1: entered allmulticast mode [ 641.495965][T28819] bridge_slave_1: entered promiscuous mode [ 641.696666][T28819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.760492][T28819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.801447][T28984] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6291'. [ 641.928864][T28987] syzkaller0: entered promiscuous mode [ 641.934388][T28987] syzkaller0: entered allmulticast mode [ 641.937437][T28990] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6291'. [ 641.959756][T28819] team0: Port device team_slave_0 added [ 642.016413][T28819] team0: Port device team_slave_1 added [ 642.155293][T28819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.189095][T28819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.216316][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 642.302135][T28819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.435219][T28819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.463260][T28819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.480750][T29003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6296'. [ 642.536947][T28819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.566901][T29010] netlink: 'syz.3.6297': attribute type 4 has an invalid length. [ 642.585810][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6296'. [ 642.825953][T29021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6296'. [ 642.864255][T19902] hsr_slave_0: left promiscuous mode [ 642.879910][T19902] hsr_slave_1: left promiscuous mode [ 642.908297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 642.916365][ C0] lec:lec_tx_timeout: lec0 [ 642.945410][T19902] pimreg3 (unregistering): left allmulticast mode [ 643.353476][T19902] team0 (unregistering): Port device dummy0 removed [ 643.378341][T19902] lo (unregistering): left allmulticast mode [ 643.417684][T29057] netlink: 'syz.2.6310': attribute type 12 has an invalid length. [ 643.451709][T29057] netlink: 'syz.2.6310': attribute type 29 has an invalid length. [ 643.468325][T29057] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6310'. [ 643.477490][T29057] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6310'. [ 643.544267][T29057] vlan2: entered promiscuous mode [ 643.550164][ T50] Bluetooth: hci0: command tx timeout [ 643.558546][T29057] bridge0: entered promiscuous mode [ 643.576110][T29057] vlan2: entered allmulticast mode [ 643.582205][T29057] bridge0: entered allmulticast mode [ 643.610634][T29063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.693396][T28819] hsr_slave_0: entered promiscuous mode [ 643.708427][T28819] hsr_slave_1: entered promiscuous mode [ 643.725331][T29067] nbd0: detected capacity change from 0 to 127 [ 643.732137][T28819] debugfs: 'hsr0' already exists in 'hsr' [ 643.732161][T28819] Cannot create hsr debugfs directory [ 643.791465][ T50] block nbd0: Receive control failed (result -104) [ 643.978512][T29077] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 644.039675][T19902] IPVS: stop unused estimator thread 0... [ 644.087141][T29085] netlink: 'syz.1.6320': attribute type 1 has an invalid length. [ 644.133802][T29088] ip6_vti0 speed is unknown, defaulting to 1000 [ 644.931727][T29116] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 644.948217][T29116] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 645.065821][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6328'. [ 645.092539][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6328'. [ 645.597671][T28819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 645.628018][ T50] Bluetooth: hci0: command tx timeout [ 645.712274][T28819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 645.772585][T28819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 645.863870][T28819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 645.868561][T29161] sctp: [Deprecated]: syz.1.6335 (pid 29161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.868561][T29161] Use struct sctp_sack_info instead [ 645.895013][T29161] sctp: [Deprecated]: syz.1.6335 (pid 29161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.895013][T29161] Use struct sctp_sack_info instead [ 645.923246][T29161] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6335'. [ 646.020223][T29175] syzkaller0: entered promiscuous mode [ 646.025878][T29175] syzkaller0: entered allmulticast mode [ 646.073190][T29169] ip6_vti0 speed is unknown, defaulting to 1000 [ 646.260883][T28819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.320552][T28819] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.363182][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.370863][T19895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.427613][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.434823][T19895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.638228][T29208] netlink: 'syz.4.6340': attribute type 1 has an invalid length. [ 646.711251][T29215] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6340'. [ 646.913159][T29224] syzkaller1: entered promiscuous mode [ 646.930211][T29224] syzkaller1: entered allmulticast mode [ 647.012106][T29229] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6343'. [ 647.029533][T29229] netlink: Conntrack attr has 4 unknown bytes [ 647.090438][T28819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.221039][T29238] netlink: 'syz.1.6345': attribute type 1 has an invalid length. [ 647.259068][T29236] dvmrp0: entered allmulticast mode [ 647.313774][T29239] netlink: 'syz.2.6344': attribute type 3 has an invalid length. [ 647.338155][T28819] veth0_vlan: entered promiscuous mode [ 647.366867][T29241] bond13: (slave bridge10): making interface the new active one [ 647.432097][T29241] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 647.554552][T29238] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 647.580772][T29248] macvlan2: entered promiscuous mode [ 647.586401][T29248] macvlan2: entered allmulticast mode [ 647.606668][T29248] bond13: entered promiscuous mode [ 647.638162][T29248] bridge10: entered promiscuous mode [ 647.644306][T29248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.658084][T29248] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 647.675990][T29248] bond13: left promiscuous mode [ 647.681805][T29248] bridge10: left promiscuous mode [ 647.754921][T28819] veth1_vlan: entered promiscuous mode [ 648.091150][T28819] veth0_macvtap: entered promiscuous mode [ 648.163929][T28819] veth1_macvtap: entered promiscuous mode [ 648.202438][T29290] __nla_validate_parse: 1 callbacks suppressed [ 648.202457][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6351'. [ 648.213401][T28819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.263993][T28819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.309256][T19895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.367615][T19895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.379591][T19895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.409159][T19895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.557751][T19895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.565785][T19895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.704638][T19895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.721662][T19895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.983598][T29311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6354'. [ 649.430386][T29342] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6361'. [ 649.640383][T29352] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 649.864571][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.898759][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.917448][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.937619][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.962296][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.036075][T29364] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.113744][T29377] syzkaller0: entered promiscuous mode [ 650.121824][T29377] syzkaller0: entered allmulticast mode [ 650.132654][T29381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6371'. [ 650.626031][T29402] tipc: Invalid UDP bearer configuration [ 650.626085][T29402] tipc: Enabling of bearer rejected, failed to enable media [ 650.844529][T29417] netlink: 'syz.4.6378': attribute type 1 has an invalid length. [ 650.877598][T29422] netlink: 'syz.3.6380': attribute type 4 has an invalid length. [ 651.145483][T29439] sctp: [Deprecated]: syz.3.6383 (pid 29439) Use of int in max_burst socket option. [ 651.145483][T29439] Use struct sctp_assoc_value instead [ 651.195057][T29439] Cannot find add_set index 0 as target [ 651.491366][T29451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6387'. [ 651.510610][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6387'. [ 651.551360][T29364] chnl_net:caif_netlink_parms(): no params data found [ 651.693795][T29364] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.702268][T29364] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.712486][T29364] bridge_slave_0: entered allmulticast mode [ 651.722946][T29364] bridge_slave_0: entered promiscuous mode [ 651.733599][T29364] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.742141][T29364] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.749966][T29364] bridge_slave_1: entered allmulticast mode [ 651.757687][T29364] bridge_slave_1: entered promiscuous mode [ 651.800234][T29364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.813477][T29364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.850527][T29464] syzkaller0: entered promiscuous mode [ 651.856017][T29464] syzkaller0: entered allmulticast mode [ 651.966899][T29467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6391'. [ 652.032625][ T50] Bluetooth: hci3: command tx timeout [ 653.086196][T29475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 653.702042][T29364] team0: Port device team_slave_0 added [ 653.761559][T29364] team0: Port device team_slave_1 added [ 653.817580][T29478] 8021q: VLANs not supported on lo [ 653.842505][T29364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.861471][T29364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.890637][T29364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.920258][T29364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.960921][T29364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.989153][T29364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.121073][ T50] Bluetooth: hci3: command tx timeout [ 654.289046][T29364] hsr_slave_0: entered promiscuous mode [ 654.301976][T29364] hsr_slave_1: entered promiscuous mode [ 654.328339][T29364] debugfs: 'hsr0' already exists in 'hsr' [ 654.334120][T29364] Cannot create hsr debugfs directory [ 654.446745][T29526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6403'. [ 654.902765][T29364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.938523][T29364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 654.965022][T29533] netlink: 'syz.3.6406': attribute type 5 has an invalid length. [ 654.983650][T29536] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6408'. [ 655.019526][T29536] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6408'. [ 655.043626][T29536] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6408'. [ 655.054860][T29364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.065582][T29364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 655.093310][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6409'. [ 655.138975][T29543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6409'. [ 655.184469][T29364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.203897][T29364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 655.235439][T29552] netlink: 'syz.2.6412': attribute type 5 has an invalid length. [ 655.290537][T29364] bond0: (slave netdevsim0): Releasing backup interface [ 655.302826][T29364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.322836][T29364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 655.734515][T29364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 655.756552][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6418'. [ 655.756818][T29364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.785619][T29579] netlink: 'syz.4.6418': attribute type 14 has an invalid length. [ 655.799778][T29579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6418'. [ 655.823466][T29364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 655.843863][T29582] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 655.908293][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6418'. [ 655.921379][T29364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.927454][T29579] netlink: 'syz.4.6418': attribute type 14 has an invalid length. [ 655.939519][T29579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6418'. [ 655.953639][T19887] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.967620][T19887] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.014235][T19887] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.092537][T19887] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.110560][T29598] netlink: 'syz.3.6420': attribute type 1 has an invalid length. [ 656.187780][ T50] Bluetooth: hci3: command tx timeout [ 656.246689][T29364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.270215][T29364] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.288461][T19887] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.295647][T19887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.336424][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.343632][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.772158][T29636] bond4: option fail_over_mac: invalid value (16) [ 656.814650][T29636] bond4 (unregistering): Released all slaves [ 656.980312][T29364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.989112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 657.036870][T29655] Cannot find set identified by id 0 to match [ 657.120748][T29364] veth0_vlan: entered promiscuous mode [ 657.153669][T29364] veth1_vlan: entered promiscuous mode [ 657.226696][T29364] veth0_macvtap: entered promiscuous mode [ 657.241726][T29668] Cannot find add_set index 0 as target [ 657.245938][T29364] veth1_macvtap: entered promiscuous mode [ 657.293807][T29364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.373362][T29364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.408904][ T194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.423680][T29666] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.423694][ T194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.481077][T19895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.500407][ T7974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.682010][T19895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.694927][T19895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.771460][T19895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.781212][T19895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.264493][T29707] FAULT_INJECTION: forcing a failure. [ 658.264493][T29707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.285742][ T50] Bluetooth: hci3: command tx timeout [ 658.302710][T29707] CPU: 1 UID: 0 PID: 29707 Comm: syz.1.6451 Not tainted syzkaller #0 PREEMPT(full) [ 658.302735][T29707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.302747][T29707] Call Trace: [ 658.302755][T29707] [ 658.302763][T29707] dump_stack_lvl+0xe8/0x150 [ 658.302793][T29707] should_fail_ex+0x412/0x560 [ 658.302818][T29707] _copy_from_iter+0x1d3/0x1670 [ 658.302843][T29707] ? rcu_is_watching+0x15/0xb0 [ 658.302880][T29707] ? __pfx__copy_from_iter+0x10/0x10 [ 658.302910][T29707] ? netlink_sendmsg+0x650/0xb40 [ 658.302931][T29707] ? skb_put+0x11b/0x210 [ 658.302956][T29707] netlink_sendmsg+0x6c0/0xb40 [ 658.302986][T29707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.303011][T29707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.303033][T29707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.303054][T29707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.303074][T29707] ____sys_sendmsg+0xa68/0xad0 [ 658.303108][T29707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.303140][T29707] ? import_iovec+0x73/0xa0 [ 658.303167][T29707] ___sys_sendmsg+0x2a5/0x360 [ 658.303196][T29707] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.303254][T29707] ? __fget_files+0x2a/0x420 [ 658.303278][T29707] ? __fget_files+0x3a0/0x420 [ 658.303310][T29707] __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.303337][T29707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.303370][T29707] ? __pfx_ksys_write+0x10/0x10 [ 658.303400][T29707] do_syscall_64+0x14d/0xf80 [ 658.303424][T29707] ? trace_irq_disable+0x3b/0x150 [ 658.303448][T29707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.303466][T29707] ? clear_bhb_loop+0x40/0x90 [ 658.303488][T29707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.303506][T29707] RIP: 0033:0x7fc89279c629 [ 658.303524][T29707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.303540][T29707] RSP: 002b:00007fc893651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.303560][T29707] RAX: ffffffffffffffda RBX: 00007fc892a15fa0 RCX: 00007fc89279c629 [ 658.303573][T29707] RDX: 00000000040400d0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 658.303585][T29707] RBP: 00007fc893651090 R08: 0000000000000000 R09: 0000000000000000 [ 658.303597][T29707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.303607][T29707] R13: 00007fc892a16038 R14: 00007fc892a15fa0 R15: 00007fff04be6c18 [ 658.303636][T29707] [ 658.314896][T29709] netlink: 'syz.3.6454': attribute type 15 has an invalid length. [ 659.183727][T29724] netlink: 'syz.1.6458': attribute type 2 has an invalid length. [ 659.567988][T29753] FAULT_INJECTION: forcing a failure. [ 659.567988][T29753] name failslab, interval 1, probability 0, space 0, times 0 [ 659.627374][T29753] CPU: 1 UID: 0 PID: 29753 Comm: syz.1.6465 Not tainted syzkaller #0 PREEMPT(full) [ 659.627400][T29753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.627410][T29753] Call Trace: [ 659.627416][T29753] [ 659.627423][T29753] dump_stack_lvl+0xe8/0x150 [ 659.627451][T29753] should_fail_ex+0x412/0x560 [ 659.627486][T29753] should_failslab+0xa8/0x100 [ 659.627505][T29753] ? skb_clone+0x212/0x3a0 [ 659.627530][T29753] kmem_cache_alloc_noprof+0x87/0x650 [ 659.627556][T29753] ? __netlink_lookup+0xc6/0x8b0 [ 659.627583][T29753] skb_clone+0x212/0x3a0 [ 659.627609][T29753] __netlink_deliver_tap+0x404/0x850 [ 659.627641][T29753] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.627662][T29753] netlink_deliver_tap+0x19c/0x1b0 [ 659.627683][T29753] netlink_unicast+0x7e3/0x9b0 [ 659.627710][T29753] ? __pfx_netlink_unicast+0x10/0x10 [ 659.627730][T29753] ? netlink_sendmsg+0x650/0xb40 [ 659.627749][T29753] ? skb_put+0x11b/0x210 [ 659.627775][T29753] netlink_sendmsg+0x813/0xb40 [ 659.627805][T29753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.627830][T29753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.627852][T29753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.627873][T29753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.627893][T29753] ____sys_sendmsg+0xa68/0xad0 [ 659.627927][T29753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.627961][T29753] ? import_iovec+0x73/0xa0 [ 659.627988][T29753] ___sys_sendmsg+0x2a5/0x360 [ 659.628018][T29753] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.628079][T29753] ? __fget_files+0x2a/0x420 [ 659.628102][T29753] ? __fget_files+0x3a0/0x420 [ 659.628136][T29753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 659.628163][T29753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.628195][T29753] ? __pfx_ksys_write+0x10/0x10 [ 659.628222][T29753] do_syscall_64+0x14d/0xf80 [ 659.628243][T29753] ? trace_irq_disable+0x3b/0x150 [ 659.628265][T29753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.628283][T29753] ? clear_bhb_loop+0x40/0x90 [ 659.628304][T29753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.628320][T29753] RIP: 0033:0x7fc89279c629 [ 659.628337][T29753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.628350][T29753] RSP: 002b:00007fc893651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.628367][T29753] RAX: ffffffffffffffda RBX: 00007fc892a15fa0 RCX: 00007fc89279c629 [ 659.628379][T29753] RDX: 00000000040400d0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 659.628389][T29753] RBP: 00007fc893651090 R08: 0000000000000000 R09: 0000000000000000 [ 659.628400][T29753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.628411][T29753] R13: 00007fc892a16038 R14: 00007fc892a15fa0 R15: 00007fff04be6c18 [ 659.628441][T29753] [ 660.240356][T29770] __nla_validate_parse: 16 callbacks suppressed [ 660.240376][T29770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6468'. [ 660.348897][ T50] Bluetooth: hci3: command tx timeout [ 660.468229][T29751] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.475693][T29751] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.500004][T29776] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6468'. [ 660.814962][T29751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.858296][T29751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.236747][ T194] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.277097][ T194] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.286024][ T194] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.316810][ T194] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.338600][T29786] xt_TCPMSS: Only works on TCP SYN packets [ 661.391649][T29786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'. [ 661.425207][T29790] netlink: 'syz.3.6473': attribute type 2 has an invalid length. [ 661.438211][T29786] geneve2: entered promiscuous mode [ 661.498321][T29793] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6474'. [ 661.607199][T29795] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6475'. [ 662.013276][T29817] pimreg: entered allmulticast mode [ 662.035382][T29822] netlink: 'syz.1.6481': attribute type 83 has an invalid length. [ 662.123645][T29825] x_tables: duplicate underflow at hook 3 [ 662.148440][T29825] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 662.189319][T29827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6485'. [ 662.221079][T29827] netlink: 'syz.4.6485': attribute type 1 has an invalid length. [ 662.243865][T29827] netlink: 'syz.4.6485': attribute type 2 has an invalid length. [ 662.266679][T29837] Bluetooth: MGMT ver 1.23 [ 662.430153][T29852] netlink: 'syz.3.6490': attribute type 21 has an invalid length. [ 662.453993][T29856] vxlan0: entered promiscuous mode [ 662.460334][T29852] netlink: 'syz.3.6490': attribute type 22 has an invalid length. [ 662.477581][T29856] vxlan0: entered allmulticast mode [ 662.489733][ T7974] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.498945][T29852] netlink: 'syz.3.6490': attribute type 23 has an invalid length. [ 662.506778][T29852] netlink: 'syz.3.6490': attribute type 25 has an invalid length. [ 662.531805][ T7974] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.576341][ T7974] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.586938][T29852] netlink: 'syz.3.6490': attribute type 26 has an invalid length. [ 662.595082][T29852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6490'. [ 662.627217][ T7974] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.805377][T29866] syzkaller0: entered promiscuous mode [ 662.822505][T29866] syzkaller0: entered allmulticast mode [ 662.822712][T29877] netlink: 'syz.3.6497': attribute type 1 has an invalid length. [ 663.039666][T29886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.249707][T29902] FAULT_INJECTION: forcing a failure. [ 663.249707][T29902] name failslab, interval 1, probability 0, space 0, times 0 [ 663.287146][T29902] CPU: 1 UID: 0 PID: 29902 Comm: syz.0.6505 Not tainted syzkaller #0 PREEMPT(full) [ 663.287173][T29902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.287185][T29902] Call Trace: [ 663.287193][T29902] [ 663.287201][T29902] dump_stack_lvl+0xe8/0x150 [ 663.287231][T29902] should_fail_ex+0x412/0x560 [ 663.287258][T29902] should_failslab+0xa8/0x100 [ 663.287281][T29902] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 663.287310][T29902] ? __alloc_skb+0x1d0/0x7d0 [ 663.287331][T29902] ? __local_bh_enable_ip+0xd0/0x130 [ 663.287358][T29902] __alloc_skb+0x1d0/0x7d0 [ 663.287378][T29902] ? netlink_ack_tlv_len+0x6c/0x210 [ 663.287403][T29902] netlink_ack+0x146/0xa50 [ 663.287420][T29902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.287443][T29902] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 663.287460][T29902] ? __pfx_nl80211_post_doit+0x10/0x10 [ 663.287476][T29902] ? __lock_acquire+0x6b5/0x2cf0 [ 663.287503][T29902] netlink_rcv_skb+0x2b6/0x4b0 [ 663.287522][T29902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.287546][T29902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.287582][T29902] ? down_read+0x272/0x2e0 [ 663.287596][T29902] ? genl_rcv+0xd/0x40 [ 663.287619][T29902] genl_rcv+0x28/0x40 [ 663.287640][T29902] netlink_unicast+0x80f/0x9b0 [ 663.287665][T29902] ? __pfx_netlink_unicast+0x10/0x10 [ 663.287684][T29902] ? netlink_sendmsg+0x650/0xb40 [ 663.287702][T29902] ? skb_put+0x11b/0x210 [ 663.287725][T29902] netlink_sendmsg+0x813/0xb40 [ 663.287753][T29902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.287776][T29902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.287797][T29902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.287818][T29902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.287835][T29902] ____sys_sendmsg+0xa68/0xad0 [ 663.287865][T29902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.287896][T29902] ? import_iovec+0x73/0xa0 [ 663.287920][T29902] ___sys_sendmsg+0x2a5/0x360 [ 663.287948][T29902] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.288004][T29902] ? __fget_files+0x2a/0x420 [ 663.288025][T29902] ? __fget_files+0x3a0/0x420 [ 663.288054][T29902] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.288081][T29902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.288113][T29902] ? __pfx_ksys_write+0x10/0x10 [ 663.288150][T29902] do_syscall_64+0x14d/0xf80 [ 663.288173][T29902] ? trace_irq_disable+0x3b/0x150 [ 663.288196][T29902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.288214][T29902] ? clear_bhb_loop+0x40/0x90 [ 663.288233][T29902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.288249][T29902] RIP: 0033:0x7f9c4a99c629 [ 663.288265][T29902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.288278][T29902] RSP: 002b:00007f9c4b8e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.288297][T29902] RAX: ffffffffffffffda RBX: 00007f9c4ac15fa0 RCX: 00007f9c4a99c629 [ 663.288309][T29902] RDX: 00000000040400d0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 663.288319][T29902] RBP: 00007f9c4b8e0090 R08: 0000000000000000 R09: 0000000000000000 [ 663.288329][T29902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.288338][T29902] R13: 00007f9c4ac16038 R14: 00007f9c4ac15fa0 R15: 00007fff3c25a0c8 [ 663.288370][T29902] [ 663.300004][T29904] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6506'. [ 663.742925][T29913] bond2: (slave ip6gretap1): making interface the new active one [ 663.795681][T29913] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.826495][T29913] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.841622][T29913] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 664.122195][T29864] lec:lec_atm_close: lec0: Shut down! [ 665.123611][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6528'. [ 665.290515][T30024] syzkaller0: entered promiscuous mode [ 665.296215][T30024] syzkaller0: entered allmulticast mode [ 665.414673][T30025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.423129][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.448388][T30025] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.455165][T30032] openvswitch: netlink: Flow actions attr not present in new flow. [ 665.505057][T30025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.539573][T30038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.556917][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.579974][T30038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.609832][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.655924][T30038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6531'. [ 665.706762][T30050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6534'. [ 665.845917][T30055] netlink: 75 bytes leftover after parsing attributes in process `syz.3.6537'. [ 665.864576][T30057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6539'. [ 665.866789][T30059] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6538'. [ 665.884483][ T5888] IPVS: starting estimator thread 0... [ 665.977926][T30061] IPVS: using max 30 ests per chain, 72000 per kthread [ 666.195601][T30078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.418126][T30090] syzkaller0: entered promiscuous mode [ 666.423639][T30090] syzkaller0: entered allmulticast mode [ 666.855303][T30116] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.863024][T30116] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.106527][T30116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.129929][T30116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.387740][ T194] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.409232][ T194] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.448929][ T194] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.484560][ T194] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.553797][T30157] bridge_slave_0: left allmulticast mode [ 667.575512][T30157] bridge_slave_0: left promiscuous mode [ 667.584586][T30157] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.626167][T30157] bridge_slave_1: left allmulticast mode [ 667.668695][T30157] bridge_slave_1: left promiscuous mode [ 667.684693][T30157] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.724398][T30157] bond0: (slave bond_slave_0): Releasing backup interface [ 667.739077][T30157] bond0: (slave bond_slave_1): Releasing backup interface [ 667.745696][T30176] netlink: set zone limit has 4 unknown bytes [ 667.773820][T30157] team0: Port device team_slave_0 removed [ 667.783636][T30157] team0: Port device team_slave_1 removed [ 667.791798][T30157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.800847][T30157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.810535][T30157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.818764][T30157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.828947][T30157] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 668.099170][T30194] x_tables: unsorted underflow at hook 4 [ 668.298054][T30211] openvswitch: netlink: IP tunnel dst address not specified [ 668.493932][T30214] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 668.643255][T30235] validate_nla: 4 callbacks suppressed [ 668.643274][T30235] netlink: 'syz.0.6584': attribute type 1 has an invalid length. [ 668.701645][T30237] sctp: [Deprecated]: syz.1.6586 (pid 30237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.701645][T30237] Use struct sctp_sack_info instead [ 668.750787][T30235] bond1: entered promiscuous mode [ 668.784335][T30235] bond1: entered allmulticast mode [ 668.808024][T30235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.840883][T30241] erspan1: entered allmulticast mode [ 668.862346][T30241] bond1: (slave erspan1): making interface the new active one [ 668.870141][T30241] erspan1: entered promiscuous mode [ 668.879480][T30241] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 668.901952][T30245] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 668.965444][T30249] netlink: 'syz.3.6588': attribute type 6 has an invalid length. [ 669.064677][T30252] gtp0: entered promiscuous mode [ 669.097604][T30252] gtp0: entered allmulticast mode [ 669.102994][T30257] netlink: 'syz.4.6589': attribute type 39 has an invalid length. [ 669.602010][T30287] netlink: 'syz.4.6600': attribute type 3 has an invalid length. [ 669.652438][T30289] vlan3: entered allmulticast mode [ 669.657788][T30289] bond0: entered allmulticast mode [ 669.663023][T30289] bond_slave_0: entered allmulticast mode [ 669.670730][T30289] bond_slave_1: entered allmulticast mode [ 669.726260][T30289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.772530][T30289] bond_slave_0: left allmulticast mode [ 669.792025][T30298] ipt_REJECT: TCP_RESET invalid for non-tcp [ 669.803213][T30289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.821035][T30289] bond_slave_1: left allmulticast mode [ 669.831500][T30289] bond0 (unregistering): Released all slaves [ 669.877089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 669.885126][ C0] lec:lec_tx_timeout: lec0 [ 670.314058][T30333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.357328][T30334] syzkaller0: entered promiscuous mode [ 670.363656][T30334] syzkaller0: entered allmulticast mode [ 670.696664][ T194] bond4 (unregistering): (slave vti0): Releasing backup interface [ 670.718402][ T194] vti0 (unregistering): left promiscuous mode [ 670.793394][ T194] dvmrp6 (unregistering): left allmulticast mode [ 670.913287][ T194] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 670.924696][ T194] bridge1 (unregistering): left promiscuous mode [ 671.156826][T30376] __nla_validate_parse: 24 callbacks suppressed [ 671.156841][T30376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6624'. [ 671.403881][ T194] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 671.414593][ T194] bond0 (unregistering): Released all slaves [ 671.429456][ T194] bond1 (unregistering): (slave lo): Releasing backup interface [ 671.439907][ T194] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 671.451406][ T194] bond1 (unregistering): Released all slaves [ 671.464299][ T194] bond2 (unregistering): Released all slaves [ 671.477591][ T194] bond3 (unregistering): Released all slaves [ 671.491747][ T194] bond4 (unregistering): Released all slaves [ 671.513768][ T194] bond5 (unregistering): (slave batadv1): Releasing active interface [ 671.523096][ T194] batadv1: left promiscuous mode [ 671.531104][ T194] batadv1: left allmulticast mode [ 671.538541][ T194] bond5 (unregistering): Released all slaves [ 671.552754][ T194] bond6 (unregistering): Released all slaves [ 671.565565][ T194] bond7 (unregistering): Released all slaves [ 671.580435][ T194] bond8 (unregistering): Released all slaves [ 671.833776][T30381] netlink: 'syz.4.6625': attribute type 1 has an invalid length. [ 671.844249][ T194] tipc: Disabling bearer [ 671.858889][ T194] tipc: Left network mode [ 672.891589][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6644'. [ 673.014737][T30448] bond3: entered allmulticast mode [ 673.080462][T30447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.173928][T30453] bridge1: entered promiscuous mode [ 673.198810][T30453] bridge1: entered allmulticast mode [ 673.210156][T30453] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 673.256022][T30456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6648'. [ 673.481231][T30476] ip6gre1: entered allmulticast mode [ 673.590121][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6658'. [ 673.707274][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 673.866798][T30492] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.885894][ T194] hsr_slave_0: left promiscuous mode [ 673.907684][ T194] hsr_slave_1: left promiscuous mode [ 673.930239][ T194] veth0_macvtap: left allmulticast mode [ 673.941721][ T194] veth0_macvtap: left promiscuous mode [ 673.957773][ T194] veth1_vlan: left allmulticast mode [ 673.966865][ T194] veth1_vlan: left promiscuous mode [ 673.980699][ T194] veth1_macvtap: left promiscuous mode [ 674.029166][T30502] netlink: 'syz.3.6661': attribute type 2 has an invalid length. [ 674.273574][ T25] block nbd0: Possible stuck request ffff8880267f8c00: control (read@0,1024B). Runtime 30 seconds [ 674.286560][ T25] block nbd0: Possible stuck request ffff8880267f8e00: control (read@1024,1024B). Runtime 30 seconds [ 674.297752][ T25] block nbd0: Possible stuck request ffff8880267f9000: control (read@2048,1024B). Runtime 30 seconds [ 674.308823][ T25] block nbd0: Possible stuck request ffff8880267f9200: control (read@3072,1024B). Runtime 30 seconds [ 674.330676][ T194] team0 (unregistering): Port device batadv2 removed [ 674.867766][T30524] netlink: 'syz.0.6663': attribute type 21 has an invalid length. [ 674.904705][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6663'. [ 674.922389][T30528] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6665'. [ 675.002365][T30532] syzkaller0: entered promiscuous mode [ 675.016366][T30532] syzkaller0: entered allmulticast mode [ 675.243629][T30535] netlink: 'syz.3.6667': attribute type 1 has an invalid length. [ 675.330110][T30553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6670'. [ 675.575591][T30563] openvswitch: netlink: IP tunnel dst address not specified [ 675.630407][ T194] IPVS: stop unused estimator thread 0... [ 675.701775][T30568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6675'. [ 676.083976][T30589] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6679'. [ 676.196918][T30591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6680'. [ 676.218718][T30591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6680'. [ 676.503169][T30610] netlink: 'syz.4.6685': attribute type 13 has an invalid length. [ 676.535698][T30607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 676.669216][T30629] netlink: 'syz.3.6687': attribute type 39 has an invalid length. [ 676.941886][T30642] GUP no longer grows the stack in syz.4.6693 (30642): 200000003000-20000000a000 (200000001000) [ 676.958537][T30642] CPU: 1 UID: 0 PID: 30642 Comm: syz.4.6693 Not tainted syzkaller #0 PREEMPT(full) [ 676.958566][T30642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.958580][T30642] Call Trace: [ 676.958589][T30642] [ 676.958599][T30642] dump_stack_lvl+0xe8/0x150 [ 676.958635][T30642] __get_user_pages+0x2453/0x29d0 [ 676.958664][T30642] ? __lock_acquire+0x6b5/0x2cf0 [ 676.958707][T30642] ? __gup_longterm_locked+0xc4e/0x1630 [ 676.958736][T30642] ? down_read_killable+0x1bb/0x340 [ 676.958765][T30642] __gup_longterm_locked+0xdcf/0x1630 [ 676.958816][T30642] gup_fast_fallback+0x1d82/0x22e0 [ 676.958876][T30642] ? __pfx_gup_fast_fallback+0x10/0x10 [ 676.958901][T30642] ? futex_unqueue+0x22/0x240 [ 676.958922][T30642] ? futex_unqueue+0x22/0x240 [ 676.958941][T30642] ? is_valid_gup_args+0x11f/0x200 [ 676.958967][T30642] ? get_user_pages_fast+0x4d/0xb0 [ 676.958994][T30642] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 676.959029][T30642] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 676.959072][T30642] iov_iter_get_pages2+0x5e/0xa0 [ 676.959102][T30642] __se_sys_vmsplice+0x7b3/0x1490 [ 676.959145][T30642] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 676.959173][T30642] ? __pfx_futex_wait+0x10/0x10 [ 676.959209][T30642] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.959292][T30642] do_syscall_64+0x14d/0xf80 [ 676.959321][T30642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.959341][T30642] ? clear_bhb_loop+0x40/0x90 [ 676.959365][T30642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.959384][T30642] RIP: 0033:0x7f55f2f9c629 [ 676.959405][T30642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.959422][T30642] RSP: 002b:00007f55f3dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 676.959444][T30642] RAX: ffffffffffffffda RBX: 00007f55f3215fa0 RCX: 00007f55f2f9c629 [ 676.959457][T30642] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 676.959470][T30642] RBP: 00007f55f3032b39 R08: 0000000000000000 R09: 0000000000000000 [ 676.959482][T30642] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 676.959494][T30642] R13: 00007f55f3216038 R14: 00007f55f3215fa0 R15: 00007ffc47dbba48 [ 676.959524][T30642] [ 677.358520][T30657] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 677.425740][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'. [ 677.453767][T30657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6697'. [ 677.474812][T30657] gretap1: entered promiscuous mode [ 677.530893][T30666] dvmrp0: entered allmulticast mode [ 677.593373][T30665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6700'. [ 677.680016][T30665] team_slave_1: entered promiscuous mode [ 677.831213][T30665] team_slave_1: left promiscuous mode [ 677.847936][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6702'. [ 678.176535][T30705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 678.196300][T30698] netlink: 'syz.3.6704': attribute type 1 has an invalid length. [ 678.211174][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6706'. [ 678.273441][T30698] bond5: (slave bridge2): making interface the new active one [ 678.292126][T30701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6704'. [ 678.322192][T30698] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 678.325229][T30712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6708'. [ 678.347443][T30712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6708'. [ 678.522393][T30723] openvswitch: netlink: IP tunnel dst address not specified [ 678.592064][T30727] tipc: Enabling of bearer rejected, failed to enable media [ 678.636087][T30730] nbd: must specify at least one socket [ 678.662139][T30731] nbd: must specify at least one socket [ 678.892409][T30749] netlink: 'syz.3.6716': attribute type 1 has an invalid length. [ 679.055200][T30749] bond6: entered promiscuous mode [ 679.065752][T30749] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.107874][T30758] veth5: entered allmulticast mode [ 679.154607][T30759] bond6: (slave bridge3): making interface the new active one [ 679.190132][T30759] bridge3: entered promiscuous mode [ 679.196256][T30759] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 679.365836][T30766] syzkaller1: entered promiscuous mode [ 679.383008][T30766] syzkaller1: entered allmulticast mode [ 679.468955][T30770] syzkaller0: entered promiscuous mode [ 679.495272][T30770] syzkaller0: entered allmulticast mode [ 679.666533][T30800] netlink: 'syz.3.6727': attribute type 1 has an invalid length. [ 680.593843][T30822] xt_hashlimit: size too large, truncated to 1048576 [ 681.698411][T30800] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 681.715302][T30830] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 682.064724][T30854] __nla_validate_parse: 7 callbacks suppressed [ 682.064741][T30854] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6739'. [ 682.421680][T30889] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.598870][T30900] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6750'. [ 682.735020][T30905] netlink: 'syz.0.6752': attribute type 13 has an invalid length. [ 682.923587][T30927] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 683.726417][T30985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6769'. [ 683.803341][T30995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6770'. [ 683.849000][T30990] bond2: option lp_interval: invalid value (0) [ 683.872241][T30990] bond2: option lp_interval: allowed values 1 - 2147483647 [ 683.895399][T30990] bond2 (unregistering): Released all slaves [ 684.317861][T31027] ip6tnl0: Caught tx_queue_len zero misconfig [ 684.386364][T31033] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6780'. [ 684.444592][T31040] netlink: 'syz.4.6781': attribute type 25 has an invalid length. [ 684.636094][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 684.887766][T31068] tipc: Started in network mode [ 684.924077][T31068] tipc: Node identity ac14140f, cluster identity 4711 [ 684.977626][T31068] tipc: New replicast peer: 255.255.255.255 [ 684.984179][T31068] tipc: Enabled bearer , priority 10 [ 685.081593][T31087] syzkaller0: entered promiscuous mode [ 685.087507][T31087] syzkaller0: entered allmulticast mode [ 685.251783][T31106] netlink: 'syz.3.6795': attribute type 21 has an invalid length. [ 685.280362][T31099] netlink: 'syz.1.6798': attribute type 1 has an invalid length. [ 685.310469][T31106] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6795'. [ 685.400728][T31106] netlink: 'syz.3.6795': attribute type 5 has an invalid length. [ 685.415654][T31106] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6795'. [ 685.432432][T31113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6799'. [ 685.476441][T31119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6801'. [ 685.807582][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 685.859254][T31139] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 685.918237][T31139] bond2: (slave lo): Enslaving as an active interface with an up link [ 685.934450][ T29] audit: type=1800 audit(1771958839.601:8): pid=31147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6807" name="memory.events" dev="tmpfs" ino=430 res=0 errno=0 [ 685.962611][T31139] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 685.985408][T31138] veth0: entered promiscuous mode [ 685.994265][ T29] audit: type=1800 audit(1771958839.661:9): pid=31147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6807" name="memory.events" dev="tmpfs" ino=430 res=0 errno=0 [ 686.033922][T31146] veth0: left promiscuous mode [ 686.099399][T16241] tipc: Node number set to 2886997007 [ 686.201037][T31160] vlan2: entered allmulticast mode [ 686.206211][T31160] geneve1: entered allmulticast mode [ 686.840800][T31214] erspan0: entered allmulticast mode [ 687.005182][ T5835] block nbd1: Receive control failed (result -32) [ 687.074445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 687.304708][T31244] __nla_validate_parse: 2 callbacks suppressed [ 687.304729][T31244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6828'. [ 687.528882][T31262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6832'. [ 687.568505][T31263] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6833'. [ 687.590543][T31263] openvswitch: netlink: Missing key (keys=40, expected=100) [ 688.104919][T31302] IPVS: Unknown mcast interface: netpci0 [ 688.245195][T31302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6842'. [ 688.260241][T31302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6842'. [ 689.124955][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 689.132203][T31349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6853'. [ 689.264533][T31349] team0: Port device team_slave_0 removed [ 689.336380][T31343] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6850'. [ 689.754775][T31394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6863'. [ 689.809828][T31389] bridge0: port 3(gretap0) entered blocking state [ 689.842446][T31389] bridge0: port 3(gretap0) entered disabled state [ 689.874364][T31389] gretap0: entered allmulticast mode [ 689.902934][T31389] gretap0: entered promiscuous mode [ 689.926057][T31407] openvswitch: netlink: Actions may not be safe on all matching packets [ 689.929922][T31389] bridge0: port 3(gretap0) entered blocking state [ 689.941017][T31389] bridge0: port 3(gretap0) entered forwarding state [ 689.995884][T31411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6867'. [ 690.592599][T31454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 690.806652][T31472] netlink: 'syz.3.6885': attribute type 12 has an invalid length. [ 690.816861][T31472] netlink: 'syz.3.6885': attribute type 29 has an invalid length. [ 690.833579][T31474] geneve2: entered promiscuous mode [ 690.907747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 690.915836][ C0] lec:lec_tx_timeout: lec0 [ 693.147836][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 693.154170][T31470] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 693.161167][T31470] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 693.752135][T31470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 693.762507][T31470] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 693.816318][T31470] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 693.822603][T31470] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 693.858794][T31470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.868210][T31470] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 693.878294][T31470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 693.886625][T31470] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 694.136898][T31626] x_tables: ip6_tables: HL target: only valid in mangle table, not V [ 694.146012][T31629] dvmrp0: left allmulticast mode [ 694.215203][T31634] __nla_validate_parse: 2 callbacks suppressed [ 694.215223][T31634] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6893'. [ 694.451375][T31654] Bluetooth: MGMT ver 1.23 [ 694.611680][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.619712][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.627674][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.635599][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.643565][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.651509][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.659575][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.667544][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.675492][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.683470][T31648] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 694.756644][T31668] syzkaller0: entered promiscuous mode [ 694.777846][T31668] syzkaller0: entered allmulticast mode [ 694.817388][T31658] netlink: 'syz.2.6900': attribute type 39 has an invalid length. [ 694.920525][T31673] vlan2: entered allmulticast mode [ 694.937946][T31673] hsr0: entered allmulticast mode [ 694.943036][T31673] hsr_slave_0: entered allmulticast mode [ 694.967668][T31673] hsr_slave_1: entered allmulticast mode [ 695.241841][T31679] syzkaller0: entered promiscuous mode [ 695.257194][T31679] syzkaller0: entered allmulticast mode [ 695.263106][T31700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6908'. [ 695.275242][T31700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6908'. [ 695.321006][T31700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6908'. [ 695.480454][T31716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6909'. [ 695.848448][T31730] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001 [ 695.870693][T31730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6915'. [ 696.182678][T31759] netlink: 'syz.2.6921': attribute type 1 has an invalid length. [ 696.273594][T31759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6921'. [ 696.383672][T31759] NCSI netlink: No device for ifindex 0 [ 696.824465][T31797] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 696.943263][T31805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6928'. [ 697.304195][T31814] sctp: [Deprecated]: syz.4.6930 (pid 31814) Use of int in maxseg socket option. [ 697.304195][T31814] Use struct sctp_assoc_value instead [ 697.380858][T31814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6930'. [ 697.383366][T31841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6936'. [ 697.605973][T31853] netlink: 'syz.4.6938': attribute type 21 has an invalid length. [ 697.808462][T31866] tipc: Started in network mode [ 697.826324][T31866] tipc: Node identity c2632856e695, cluster identity 8 [ 697.833938][T31866] tipc: Enabled bearer , priority 0 [ 697.848496][T31872] netlink: 'syz.1.6947': attribute type 21 has an invalid length. [ 697.884517][T31866] syzkaller0: entered promiscuous mode [ 697.890455][T31866] syzkaller0: entered allmulticast mode [ 697.898522][T31866] tipc: Resetting bearer [ 697.906461][T31868] pim6reg1: entered promiscuous mode [ 697.913269][T31868] pim6reg1: entered allmulticast mode [ 697.919930][T31863] tipc: Resetting bearer [ 699.530471][T31863] tipc: Disabling bearer [ 699.539006][T31872] netlink: 'syz.1.6947': attribute type 1 has an invalid length. [ 701.430335][ T5888] tipc: Node number set to 620111958 [ 701.533128][T31908] __nla_validate_parse: 1 callbacks suppressed [ 701.533146][T31908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 701.558382][T31908] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 701.581213][T31908] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6952'. [ 701.654468][T31916] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 701.765288][T31922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6958'. [ 701.813598][ T7493] lec:lec_start_xmit: lec0:No lecd attached [ 701.996765][T31940] netlink: 'syz.2.6963': attribute type 1 has an invalid length. [ 702.110274][T31961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6967'. [ 702.399824][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6970'. [ 702.409812][T31978] nbd: must specify a size in bytes for the device [ 702.441519][T31975] delete_channel: no stack [ 702.610396][T31991] netlink: 'syz.0.6974': attribute type 2 has an invalid length. [ 702.619266][T31991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6974'. [ 702.630569][T31991] netlink: 'syz.0.6974': attribute type 2 has an invalid length. [ 702.650166][T31991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6974'. [ 702.674709][T31997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 702.745279][T32003] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6978'. [ 702.935871][T32018] Bluetooth: MGMT ver 1.23 [ 703.070590][T32025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6986'. [ 704.296406][T32123] netlink: 'syz.1.7010': attribute type 5 has an invalid length. [ 704.349235][ T25] block nbd0: Possible stuck request ffff8880267f8c00: control (read@0,1024B). Runtime 60 seconds [ 704.360536][ T25] block nbd0: Possible stuck request ffff8880267f8e00: control (read@1024,1024B). Runtime 60 seconds [ 704.372174][ T25] block nbd0: Possible stuck request ffff8880267f9000: control (read@2048,1024B). Runtime 60 seconds [ 704.383428][ T25] block nbd0: Possible stuck request ffff8880267f9200: control (read@3072,1024B). Runtime 60 seconds [ 704.405276][ T7974] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.415158][ T7974] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.439853][ T7974] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.454351][ T7974] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.838667][T32159] tipc: Enabled bearer , priority 10 [ 705.373960][T32202] netlink: 'syz.4.7030': attribute type 8 has an invalid length. [ 705.553064][ T7974] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.605421][ T7974] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.634753][ T7974] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.658963][ T7974] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.873793][T32227] macvlan0: entered promiscuous mode [ 706.140530][T32247] syzkaller1: entered promiscuous mode [ 706.161470][T32247] syzkaller1: entered allmulticast mode [ 706.196734][T32249] vlan2: entered promiscuous mode [ 706.204119][T32249] bridge0: entered promiscuous mode [ 706.254972][T32244] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.442632][T32265] ipt_REJECT: TCP_RESET invalid for non-tcp [ 706.667925][T32277] netlink: 'syz.4.7059': attribute type 1 has an invalid length. [ 706.695199][T32277] netlink: 'syz.4.7059': attribute type 33 has an invalid length. [ 706.720988][T32277] __nla_validate_parse: 12 callbacks suppressed [ 706.721008][T32277] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7059'. [ 706.752906][T32277] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7059'. [ 706.794413][T32281] syzkaller1: entered promiscuous mode [ 706.813965][T32281] syzkaller1: entered allmulticast mode [ 706.843710][T32281] net_ratelimit: 45 callbacks suppressed [ 706.843732][T32281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.907606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 706.915661][ C0] lec:lec_tx_timeout: lec0 [ 707.178202][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7068'. [ 707.240885][T32310] bridge_slave_0: left allmulticast mode [ 707.246704][T32310] bridge_slave_0: left promiscuous mode [ 707.253459][T32310] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.272760][T32315] netlink: 'syz.3.7070': attribute type 1 has an invalid length. [ 707.290274][T32310] bridge_slave_1: left allmulticast mode [ 707.295939][T32310] bridge_slave_1: left promiscuous mode [ 707.302119][T32310] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.316564][T32310] bond0: (slave bond_slave_0): Releasing backup interface [ 707.332841][T32310] bond0: (slave bond_slave_1): Releasing backup interface [ 707.351311][T32310] team0: Port device team_slave_1 removed [ 707.358361][T32310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.365808][T32310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.375164][T32310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.382808][T32310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.392389][T32310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.393587][T32319] xt_cgroup: xt_cgroup: no path or classid specified [ 707.571286][T32328] ipt_ECN: cannot use operation on non-tcp rule [ 707.596926][T32326] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 707.618713][T32326] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 707.654239][T32332] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7075'. [ 707.697862][T32335] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7076'. [ 707.842945][T32343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7078'. [ 708.147383][T32358] tipc: Failed to remove unknown binding: 66,0,0/0:126662864/126662865 [ 708.346100][T27319] udevd[27319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 708.428896][T32375] netlink: 'syz.4.7085': attribute type 4 has an invalid length. [ 708.565580][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7091'. [ 708.616552][T32388] syzkaller0: entered promiscuous mode [ 708.622495][T32388] syzkaller0: entered allmulticast mode [ 708.918161][T32408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7096'. [ 708.971345][T32413] sctp: [Deprecated]: syz.2.7098 (pid 32413) Use of int in maxseg socket option. [ 708.971345][T32413] Use struct sctp_assoc_value instead [ 709.198822][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7102'. [ 709.362274][T32442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7100'. [ 709.403518][T32444] : entered promiscuous mode [ 709.576587][T32452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 709.680327][T32450] erspan0: entered promiscuous mode [ 711.415029][ T5192] udevd[5192]: worker [27393] /devices/virtual/block/nbd0 is taking a long time [ 712.019194][T32478] team0: Device gtp0 is up. Set it down before adding it as a team port [ 712.225749][T32499] __nla_validate_parse: 4 callbacks suppressed [ 712.225771][T32499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7120'. [ 712.270284][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7121'. [ 712.302184][T32487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7118'. [ 712.448267][T32487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 712.585925][T32517] bond0: entered promiscuous mode [ 712.853623][T32533] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20000 [ 712.976653][T32540] syzkaller0: entered promiscuous mode [ 712.983126][T32540] syzkaller0: entered allmulticast mode [ 713.178428][T32551] wireguard0: entered promiscuous mode [ 713.190352][T32556] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7137'. [ 713.200694][T32551] wireguard0: entered allmulticast mode [ 713.248973][T32551] team0: Port device wireguard0 added [ 713.410540][T32565] erspan0: left promiscuous mode [ 713.415543][T32565] erspan0: entered allmulticast mode [ 713.461732][T25147] IPVS: starting estimator thread 0... [ 713.578092][T32570] IPVS: using max 32 ests per chain, 76800 per kthread [ 713.589079][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7144'. [ 713.618228][T32577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7144'. [ 713.746555][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7148'. [ 713.799252][T32592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7148'. [ 713.835004][T32594] SET target dimension over the limit! [ 713.846047][T32594] SET target dimension over the limit! [ 713.935724][T32569] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 714.007399][T32601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7150'. [ 714.406255][T32614] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7155'. [ 714.443317][T32614] bridge0: port 3(gretap0) entered disabled state [ 714.490240][T32614] bridge0: port 3(gretap0) entered blocking state [ 714.496845][T32614] bridge0: port 3(gretap0) entered forwarding state [ 714.533981][T32614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.682526][T32627] netlink: 'syz.1.7160': attribute type 1 has an invalid length. [ 714.751696][T32627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.818754][T19902] [ 714.821125][T19902] ============================================ [ 714.827275][T19902] WARNING: possible recursive locking detected [ 714.833447][T19902] syzkaller #0 Not tainted [ 714.837863][T19902] -------------------------------------------- [ 714.844009][T19902] kworker/u8:37/19902 is trying to acquire lock: [ 714.850339][T19902] ffff888054eead58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 714.860188][T19902] [ 714.860188][T19902] but task is already holding lock: [ 714.867540][T19902] ffff888025bf7958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 714.877393][T19902] [ 714.877393][T19902] other info that might help us debug this: [ 714.885451][T19902] Possible unsafe locking scenario: [ 714.885451][T19902] [ 714.892889][T19902] CPU0 [ 714.896153][T19902] ---- [ 714.899414][T19902] lock(&qdisc_xmit_lock_key#4); [ 714.904429][T19902] lock(&qdisc_xmit_lock_key#4); [ 714.909439][T19902] [ 714.909439][T19902] *** DEADLOCK *** [ 714.909439][T19902] [ 714.917579][T19902] May be due to missing lock nesting notation [ 714.917579][T19902] [ 714.925876][T19902] 11 locks held by kworker/u8:37/19902: [ 714.931406][T19902] #0: ffff8880488d0948 ((wq_completion)bond1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 714.942454][T19902] #1: ffffc9000c2efc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 714.955308][T19902] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 714.964953][T19902] #3: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0 [ 714.974871][T19902] #4: ffff88807bcae228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0 [ 714.987502][T19902] #5: ffff888025bf7958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 714.997771][T19902] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 715.006720][T19902] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 715.016453][T19902] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 715.025234][T19902] #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x38a0 [ 715.035150][T19902] #10: ffff888029eaa228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x38a0 [ 715.047869][T19902] [ 715.047869][T19902] stack backtrace: [ 715.053762][T19902] CPU: 1 UID: 0 PID: 19902 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 715.053783][T19902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.053794][T19902] Workqueue: bond1 bond_alb_monitor [ 715.053819][T19902] Call Trace: [ 715.053827][T19902] [ 715.053836][T19902] dump_stack_lvl+0xe8/0x150 [ 715.053856][T19902] print_deadlock_bug+0x279/0x290 [ 715.053876][T19902] __lock_acquire+0x253f/0x2cf0 [ 715.053892][T19902] ? skb_network_protocol+0x23d/0x3f0 [ 715.053913][T19902] ? netif_skb_features+0x9bc/0xe40 [ 715.053930][T19902] ? ret_from_fork_asm+0x1a/0x30 [ 715.053949][T19902] ? validate_xmit_skb+0xc5f/0x14a0 [ 715.053968][T19902] lock_acquire+0xf0/0x2e0 [ 715.053983][T19902] ? sch_direct_xmit+0x15f/0x4c0 [ 715.054000][T19902] _raw_spin_lock+0x2e/0x40 [ 715.054017][T19902] ? sch_direct_xmit+0x15f/0x4c0 [ 715.054029][T19902] sch_direct_xmit+0x15f/0x4c0 [ 715.054044][T19902] ? __pfx_sch_direct_xmit+0x10/0x10 [ 715.054058][T19902] ? arp_create+0x170/0xa00 [ 715.054074][T19902] ? arp_send_dst+0xa7/0x2a0 [ 715.054092][T19902] __dev_queue_xmit+0x1538/0x38a0 [ 715.054115][T19902] ? __dev_queue_xmit+0x274/0x38a0 [ 715.054134][T19902] ? arpt_do_table+0x261/0x1ec0 [ 715.054150][T19902] ? __pfx___dev_queue_xmit+0x10/0x10 [ 715.054171][T19902] ? __pfx_arpt_do_table+0x10/0x10 [ 715.054185][T19902] ? trace_kmem_cache_alloc+0x29/0xf0 [ 715.054210][T19902] ? NF_HOOK+0xa2/0x3c0 [ 715.054228][T19902] NF_HOOK+0x33a/0x3c0 [ 715.054245][T19902] ? __pfx_arp_xmit_finish+0x10/0x10 [ 715.054262][T19902] ? NF_HOOK+0xa2/0x3c0 [ 715.054279][T19902] ? __pfx_NF_HOOK+0x10/0x10 [ 715.054296][T19902] ? __pfx_arp_xmit_finish+0x10/0x10 [ 715.054317][T19902] arp_xmit+0x16c/0x270 [ 715.054332][T19902] ? arp_xmit+0x23/0x270 [ 715.054349][T19902] arp_solicit+0xbe0/0xe40 [ 715.054368][T19902] ? arp_solicit+0x119/0xe40 [ 715.054386][T19902] ? __pfx_arp_solicit+0x10/0x10 [ 715.054405][T19902] ? __neigh_event_send+0xe9d/0x1530 [ 715.054420][T19902] ? __pfx_arp_solicit+0x10/0x10 [ 715.054437][T19902] __neigh_event_send+0xf05/0x1530 [ 715.054455][T19902] neigh_resolve_output+0x198/0x750 [ 715.054472][T19902] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 715.054492][T19902] ? ip_finish_output2+0x3c2/0x1070 [ 715.054509][T19902] ip_finish_output2+0xca9/0x1070 [ 715.054533][T19902] ? ip_skb_dst_mtu+0x109/0xa50 [ 715.054549][T19902] ? ip_finish_output+0x33a/0x3f0 [ 715.054566][T19902] ip_output+0x29f/0x450 [ 715.054581][T19902] ? ip_output+0x5b/0x450 [ 715.054596][T19902] iptunnel_xmit+0x59f/0xa00 [ 715.054614][T19902] ip_tunnel_xmit+0x193a/0x1f20 [ 715.054638][T19902] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 715.054656][T19902] ? __pfx_gre_build_header+0x10/0x10 [ 715.054673][T19902] ? kmem_cache_free+0x187/0x630 [ 715.054686][T19902] ? pskb_expand_head+0x4bb/0x1320 [ 715.054706][T19902] __gre_xmit+0x19e/0x240 [ 715.054722][T19902] ? __pfx___gre_xmit+0x10/0x10 [ 715.054740][T19902] erspan_xmit+0xa81/0x1670 [ 715.054760][T19902] ? __pfx_erspan_xmit+0x10/0x10 [ 715.054779][T19902] dev_hard_start_xmit+0x2d8/0x870 [ 715.054801][T19902] sch_direct_xmit+0x251/0x4c0 [ 715.054816][T19902] ? __pfx_sch_direct_xmit+0x10/0x10 [ 715.054829][T19902] ? kthread+0x370/0x470 [ 715.054841][T19902] ? ret_from_fork+0x51e/0xb90 [ 715.054859][T19902] __dev_queue_xmit+0x1538/0x38a0 [ 715.054881][T19902] ? __dev_queue_xmit+0x274/0x38a0 [ 715.054902][T19902] ? __pfx___dev_queue_xmit+0x10/0x10 [ 715.054920][T19902] ? rcu_is_watching+0x15/0xb0 [ 715.054938][T19902] ? trace_kmem_cache_alloc+0x29/0xf0 [ 715.054956][T19902] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 715.054980][T19902] ? alb_send_lp_vid+0x14e/0x550 [ 715.055000][T19902] alb_send_lp_vid+0x348/0x550 [ 715.055020][T19902] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 715.055037][T19902] ? __lock_acquire+0x6b5/0x2cf0 [ 715.055057][T19902] alb_send_learning_packets+0x12c/0x300 [ 715.055075][T19902] ? register_lock_class+0x31/0x2e0 [ 715.055090][T19902] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 715.055111][T19902] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 715.055129][T19902] bond_alb_monitor+0x3d5/0x17e0 [ 715.055148][T19902] ? bond_alb_monitor+0xf8/0x17e0 [ 715.055166][T19902] ? __pfx_bond_alb_monitor+0x10/0x10 [ 715.055184][T19902] ? process_scheduled_works+0xa25/0x1830 [ 715.055201][T19902] ? process_scheduled_works+0xa25/0x1830 [ 715.055217][T19902] process_scheduled_works+0xb02/0x1830 [ 715.055241][T19902] ? __pfx_process_scheduled_works+0x10/0x10 [ 715.055258][T19902] ? assign_work+0x3d5/0x5e0 [ 715.055276][T19902] worker_thread+0xa50/0xfc0 [ 715.055300][T19902] kthread+0x388/0x470 [ 715.055311][T19902] ? __pfx_worker_thread+0x10/0x10 [ 715.055326][T19902] ? __pfx_kthread+0x10/0x10 [ 715.055339][T19902] ret_from_fork+0x51e/0xb90 [ 715.055355][T19902] ? __pfx_ret_from_fork+0x10/0x10 [ 715.055371][T19902] ? __switch_to+0xc7d/0x1450 [ 715.055386][T19902] ? __pfx_kthread+0x10/0x10 [ 715.055398][T19902] ret_from_fork_asm+0x1a/0x30 [ 715.055420][T19902] [ 715.928112][T32646] netlink: 'syz.1.7164': attribute type 13 has an invalid length.