last executing test programs: 2.399430831s ago: executing program 0 (id=10894): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) recvfrom$ax25(r1, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.230723179s ago: executing program 0 (id=10896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xb}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xffff5dea}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.041300062s ago: executing program 3 (id=10900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x2, 0x2, 0x2, 0x4, 0x8, 0x2, 0x22, 0xf], 0x0, [0x0, 0x6, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0xe, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x60001d0}, 0x8840) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000680)={&(0x7f00000005c0)=""/163, 0xa3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.863712133s ago: executing program 1 (id=10901): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x3ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x20040001) close(0x3) recvfrom$unix(r0, &(0x7f0000000640)=""/4096, 0x1000, 0x12102, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.557045652s ago: executing program 4 (id=10905): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) 1.457188676s ago: executing program 4 (id=10906): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4622, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000240)=0x9e, 0xffffffffffffff8e) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14000000140001002dbd70000000000009fa7c930d486d436506000000000000006f3f55779e8f8a4f844471a3ecfb946e915172aedc2ed8162395dfc3f0edb36bc4f937b2a239e32dfc955986e72f42b1b03c190bd6d7c077006e22cdfd1af2b3a5ac8f810844eefb607b72a9dba0d96bc236096d3313281ec3adb2362256a1e64b417ca607eadfd2275d7cada669de7a9d3d07e8e31e52164511ec1d9fcc25b842d4c2eed66cdced0cbc8269c54e82f89b84eca171f3410f993c0629a717c5bf7811012e98a7773f2bb7df72ede889e42c5abad400"/228], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)={r5, 0x101}, 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xf}, {0x2, 0x2}, {0xffff}}, [{0x8}, {0x8, 0xb, 0xfffffffb}]}, 0x34}}, 0x0) socket(0x5, 0xa, 0x6) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) getsockopt$inet6_buf(r6, 0x29, 0x89, &(0x7f0000000280)=""/38, &(0x7f00000002c0)=0x26) 1.41185829s ago: executing program 1 (id=10907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000000)=""/238, &(0x7f0000000380)=0xee) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3200}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa}}, @NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xee, 0x6, "ba13ceff30ae8ab53211a166c73a7edbcf47890681f55d346cf3c8376fe7d0c48e0df31acefa49412f2b03357a6d12de04878d86606bb1980d4eba93323a679f1a00b2a71ac32d647c960ceb154a0557c562b4b95ad95b7b9ece548f131cde9dc8af5d434e50cc77bd3e46bb4ae5c8b8520828d6cba2291002925248763e7c38fcd48540718d3b5cc8f6f6feecedac9d8a1bfc116b731792d2e9c2b32123d241d690c821ed999383bd71a7cc813051f9e3bfb8a2919b91ca18cbdbafd4bf0b7fd5b1fd932fc154157473bb53886461058cf68f2f1656997e69b1634dee91de976459af6afdf5397e2dc7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x1e, 0x6, "ddbd1ad4bf810d035ddcad05cf3017d807ab4dc5a1f223f0902c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x1dc, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x26, 0x0, @void}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000032c00003000000006000000000000000000000d00000000000000020000000d040400007c0000000000000200000000040000000400000f03000000000000006100"], 0x0, 0x4e}, 0x28) r8 = epoll_create(0x1) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.411071711s ago: executing program 3 (id=10908): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0x6, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.289932265s ago: executing program 2 (id=10909): r0 = socket(0x18, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000300)=""/209, 0xd1}], 0x2}, 0x6}], 0x1, 0x40010100, 0x0) accept$inet6(r0, 0x0, 0x0) 1.248910555s ago: executing program 1 (id=10910): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c0000800600010002000000080002"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xfd, "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"}, &(0x7f00000000c0)=0x105) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r4, 0x3, 0xc6a0}, 0x8) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_buf(r7, 0x0, 0x28, &(0x7f00000003c0)="1d1dacfd123f64738b82e9ddbffe98d3a2386d51576e6e9decdd18866745df13c744c199555e54749d654d4e7284aec2276e3d9d9f943a425ddfc89372b7c5816f48a3ab148ef1ea31d2d20a3cbfb5ca76d3c283e3506c5db55a69c68be0f8cedfe5e1a99e5c", 0x66) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x0, 0x48) 1.148062655s ago: executing program 0 (id=10911): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x14, 0x0, &(0x7f00000007c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) 1.097394166s ago: executing program 2 (id=10912): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000080)="b44d071541f2e3", 0x7}], 0x1, 0xd) close(r1) socket(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2e) 1.071041763s ago: executing program 1 (id=10913): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x2, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f0000000300)={0x0, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @multicast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x561dc36462dc8311}]}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r10, @ANYBLOB="0a00060008021100000100000c008100050001"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 957.137785ms ago: executing program 0 (id=10914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) listen(r6, 0x28) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) pipe(&(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000200)}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 955.716143ms ago: executing program 4 (id=10915): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) socket(0x3, 0x5, 0x80000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bbededc08a57dcd0c2af55a8a7a7be7b8296d68fe4cc13787a25256c5d77760f2d51a47dbd170edfe713ae6d3feda74931412cdce3f51b9b1bf5f2ecb93784d30100000000000000b8a500e44d395ed4425543e71c60d3ba9556e22ccfb7615416b17fda3a97bb2afe8ead02", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x7, 0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r7, 0x118, 0x1, 0x0, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c", 0x49}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae8", 0x56}, {&(0x7f0000000140)}], 0x3}}], 0x3, 0x2090) sendto$inet(r6, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) shutdown(r6, 0x1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 955.040989ms ago: executing program 3 (id=10916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket(0x40000000015, 0x5, 0x0) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) getsockname$packet(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$SIOCNRDECOBS(r1, 0x89e2) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x4}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES8, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x40004880) 811.342267ms ago: executing program 1 (id=10917): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0x5}]}}, &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="fd2e", 0x2, 0x88c0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r7, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000006547e6e51a4393061a8630c6ba66830e7c18ad3c39b5cee0ae4c88e1139e019a7b99a56de78d81fb8324ac5187ee5e2568f9d4bc986408f863b112ae2b3f87f98fec7be9e6fb38bb82169c9fb1746653b67c7f196434abd4e4f2f6eb2be1f843d28491907b9af6a0b65bf543cddf991140397f4267765240fda16dbb577b3844f0269ef05805f1ec663309c302f05f99e21ab690a835ef3069364bb830fd705c84feae1ee22c7c46e3fa4265034af5ca59a093d22d7e22e124", @ANYRES16=r5, @ANYBLOB="00042dbd7000ffdbdf250a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x40844) 799.808422ms ago: executing program 2 (id=10918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) close(0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xdbb8, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x6}], 0x10}}], 0x2, 0xc88c4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) 787.584321ms ago: executing program 3 (id=10919): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044001}, 0x4080) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'pimreg\x00', 0x4, 0xfff}) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 719.044427ms ago: executing program 0 (id=10920): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 64) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 708.141559ms ago: executing program 3 (id=10921): socket$nl_netfilter(0x10, 0x3, 0xc) 677.801303ms ago: executing program 1 (id=10922): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_GET(r1, 0x0, 0x4000010) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f000000000020103000000000000000007000002a4000a800800014000000000800002800c000280050001003a0000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb060003400004000014000180080001000000000008000235d61dc2011400018008000100ac1414bb080002007f00000106000340000200000c00028005000100210000000800014000"], 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, r1) (async) sendmsg$DEVLINK_CMD_SB_GET(r1, 0x0, 0x4000010) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f000000000020103000000000000000007000002a4000a800800014000000000800002800c000280050001003a0000002c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb060003400004000014000180080001000000000008000235d61dc2011400018008000100ac1414bb080002007f00000106000340000200000c00028005000100210000000800014000"], 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) socket(0x10, 0x803, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) 598.052343ms ago: executing program 4 (id=10923): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a}, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 532.019825ms ago: executing program 3 (id=10924): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001e40)=@get={0x1, 0x0, 0x7fffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x4000880) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='t\x00\x00 ', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25380000000c009900040000004c0000000c0058007b000000000000000c0058006c000000000000000c00580061000000000000000c00580058000000000000000c00580020000000000000000c00580062000000000000000c0058000a00000000000000"], 0x74}}, 0x400d0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r10], 0x50}}, 0x2) 529.939705ms ago: executing program 2 (id=10925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) socket(0x2d, 0x80000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 379.841945ms ago: executing program 2 (id=10926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="163300000203030000000000f8b06000ffffffff0000106f00004001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000005000500000000000900020073797a3100000000050001000700000011000300686173683a69702c6d61726b000000000500040000000077"], 0x4c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x30, 0x3, 0x3, 0x1902, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x400}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x88}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8ba4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x800) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000080)=0x53, 0x4) 345.776662ms ago: executing program 0 (id=10927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x800, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20000854}, 0x400) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x308, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0xffff}, {0xffff, 0xfff1}, {0x0, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40d0}, 0x1001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) r10 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0x1, 0x5) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) r14 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x30, r15, 0xb97534d5fe9704cf, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@private2, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200025bd7000fddbdf250100000005000500090000003c000180060005004e210000080006001700000008000700", @ANYRES32=r17, @ANYBLOB="06000100020000d189c900000800060008000001080006001a0000000600050023608b9171cf9d65e6a3c87dc1a11ce7d707841719908634e3b5eb2f6db301bcc4b9b21d8a4f1086110a10f1e961781cde6abf1756e0af2b36d78682aaa3b1842eade39965f0716b90cb94b55dd7c8747d336881208cf5dc2297c0962ff8833543e331edfc4b5117b86201e787726a9f28672187d829bcc3edc4950a"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x80000001}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x8}]}}}]}, 0x48}}, 0x0) 119.976717ms ago: executing program 4 (id=10928): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @bcast}, [@remote, @remote, @rose, @rose, @null, @netrom, @default, @rose]}, &(0x7f0000000200)=0x48, 0x80000) bind$netrom(r0, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc00) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r3, 0xffffffffffffffff, 0x2, 0x6, 0x3, "0cfde229066c9368baf5f407b58e6abba933bad85c7bdd428e5cfe1c5aa9d3db6268a68060818ee4bb63c6fe6fe8a8792155c811f30f31cacfc9b1b0e57fdc", 0x35}, 0x60) (async) sendmmsg(r1, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="9f54041f969108657b8e5948c69f47342fb7a3324e909eb416819f902eea9017a20f37243b28da802c3e7c", 0x2b}], 0x1, &(0x7f0000000480)=[{0x1010, 0x10f, 0x9, "cd7d7d308c256b62bdcb5ab1f78d6b9a8bc10427f27c641b0bdd50936d99ee0c24e09787e4ca0e8db54830b2658d9df7cc6816f82db153c8e0f0307138d92d3fe01617fa3b9f146a73a1b4e51546574815cd20aec59919cc17d774303452bcc25e21c18ee3a840600ef6e423d4decb622e0ceec30e0b111fb3f874067ee44cb625be2f241ea5b2b974fdb68a8d878f5009ddec6394e46dc256ca02690af09e82e27aedc2a4e8d7aa34238b18b706f392cccb3ebf55861415e5f547fcaa6bc46b756923cf87c37c28bc81ccd43f2cb4588d459639830a09f7b3299d7b1be92213bbe35a9e14e03f308f03c37cd533c9716c00cebb6f94fed09506df5220d7d7b16f2e33e0e573d575000ecc36ff23daff71847b9e3378c9654fcb129b2a88aa448934f7c3ce5fa4ea56ef6d45c602a3d2a553845808116d025efddd8cad2cad81dab2525b28c8d68e6e3945cadfa21e5b1d260b8036649e472d60ea18af6a03123dc88211fb4e915517fa4632b57ac699c0a1e4e509985847e53c24a18b8755f8c5a389416254325a774f2b172b8be22fdf2c2ac38cd99aa7c02a8c204536bb4a296559caa622406cdfb173d5446d58440243fc7ca6604c9da8a40b3491d85cbca4bfdb708a2450c6c5ca742444079688d2a1460702ffb50b2aeabb53b402dd579ad402c5b7197c9af01276b9b9b10fe546767d024ded888e0ad8e38d8b45e3ba278f5b0a0089aa6ea6b8aa0dc376fff5d2b8e00075a66136df827470e03259f66d0b2c480ef7a468b954eaa92c33ed25d2e27dbe621694d3a2fa21bcd665b7ba5445e4b24399281012952119b588acdabf57f4475ddc9f9d59f7a5e8a4ba69ebd89b5798a5a1c65b128812e2a51b058fd341f0748e5f6a9c32678db4cca486ea7a5729c9b017250e8f15ef892f287f2260dc9bb7f3b61d124aa7c164f059cac246f6266662a0430e49750fa2679c7ed0184a141e63bfef584353e1a827002fb666c4d2df24e7c05a938dc7df125d3b8ac89283ea7c9b4404bf3ad1f20991bdbb4602c565acb4b92a09e07448da4453e634863896a925dcd364f27b80a95733f260333822eb2497bdb196f09b937fd7af86664fb191149e8f63eeb5557987e1745ef68867c4f1ce1eb7ab56b39d958be63c0344af5217ef579257d006924e46a9082c80919ea24623d76677f6f09fd623ba230053464269bd16f1e842f08c391c09f238d9bb33519fac252ea50c7eb9db6f533a8b106e07162625233c6a4f5f8ec4cb05bed43249c18ba0ad54b66f772c3efeb031da1d1a840b6da29cb6dcaa59d5b337c47fc9448c4c8f72a1060eb5e8e851765cca00e8706e348dbf0c6aaebb999b5b0f6cf51507528a869722ee9aef584ba9db787c2fa697b82f53676856002e51d4e63eaef5bb54ea51fd7debc09ce771c5523e465c79549501b97e968f7c4b8d50deb9ea91bb84d8c8c0ed029c36365cafdf8237c14061bdca8274ef3b7c6f61d7dad6e2db645ad713fa5c0f0fb416a5fd8a677afcf90873fe0bb67aec25bb3ec8fcc9cfb2e06a081189b7a2348d1f862fce7f263051fbbaf3023bd35afdb3152d00ddf1b01076c0ffabb9ef820bd4e9f3ad801d69312120960ed7657526e69c9c4882b5d7c16a11ce506f58753270418968d56806ecbbad5c84b96d29cb7123b0f3cb032e2c1a2d86572463b76ab0c9fa95a11f669d83f278165b6ffa8d833fe91cfe915bfaf9801732db11fa82fd8910e96ed791486fe03e523ca8d9154782155af39e8bbfbc86415e7ce68bb7dcca09c79c5bc14063154f425648ad07930ed828f38154a6ee64386856fd66a7c65fabb49ea942d50f6680efc11db903fa083cd4c7429155cd299cdddfaf7a030ef24b53761ae79a9e2cca1c8b19cb56b7dc0aa93f20a405da7dbcd94f096121abf3d47221a5a216d3e588bae1eb9594c058a81af217e3e1e7ec5686821383e06403c7bf157c8013ff2b1678339a64e0015d51b79e4f3b20dc78d433a3624cb1292b4cee60720c69183b18619fb6017d5ff1d3280a1b8cdd5232a34d239091e3ee7277f73534c1441e026f77e45d7fc05de9a3b6c8f3be12c3b2978495144b6ae1bdcafa8b05a782201cbd81823a9fbe4e0348e41cb8981de81d34f4c1b3d41813f8b3ef770e22962c5e23f83b263f606a148e8890e0e80dd0d6b755510c319658096ba328dbf2c2da7c2444d304b8ff43226f18aab3b0955f95fea2de5c0d114ea4e4b451f6e8280dfc7c044536b0a955e2d98a026cd63b85f02947084cb6b3c87d2f48f09c9af99bdb363b6fdf86adaefcd28e5cb36127ee9ba676bc7e21cbf070382a52b457459eb26ecb76bd8ff3413bdd9da1f0e0dbeb12257288424f7b85ffe8b9329b484494db838bad908707eff22715bd1252777129c5d003d34320038ebf524f3b6d88984535df207e8e45f91c7254e8e54537051eae2867666954aa509623d33124e03359c06fea0b3b31067d064daf62c61294ee6d2cd9f76c0f00d86b1d4d23a454ca45a1ee62ea7f463cc4eb7ff3a63a3cc3b3b6475bf290f02a65a92fa8f77e6c0049ed12c54b99b4d54225693484d6eb43f1aeff56cd87b589530bddf03bfc20759ee73b4bb871559363fed852dcb6a4af4f5bf9ead1ed8d735eaa75e6c3ac3951d4328090b55349c1a0a522ca4442895ed3448d38d6864c0d5ab170379f88718d6f8b679475821cd42c45ff6de409256f3b8f4d7bf1c09de68d8e53b8888b7f07b52fb18b5398065790a928d9d6a022c150b4d3950fb133fbc46449bb5f28265dfae4a6bb99670479aca9b269331c5574efccb7f2a45ef248c0db88d069f944621b97e1c3cb466ab1fb0835720e520059088c64d236bc645c536b66bfbccbdf4dac4f0ce3da75cc00d3017639da01f6876e92c57ef4ce6db8b3bb21b3b5ea593f332b9aa5dbb3eddacd1b7123670a411e98cd822710b67b72a03cb16edc07f60800733139f58cd6b8d13828958959e43daa92a9ee20d0844d475376e67473e303d247961f2a3157a102e73b56ced17c0f082a838cc14bac532c43cdfebc071d0582181792f0d6c96e7c735b24e834e8068c126ac3a187d1c0b8e096f6560d1622ec3fd4842b9a1680bf1890bf8ec4116f31fd37fe4206618387d999c474d03cfef88b24b21bbc6030cd52c1fc1c8617c20371a125dd645775b1d6fc66c179bb07e2ba43758197a02d255d7d78b145e456888e1f241246cc699ab43ad0bb52e6dbdd933af55a3dac578469297912333d09127c52e027fb795ac02650b1a6629a3cbc4db3430c39c78a2b08a406f8ecf077ee5b92010e2f5d3e70f1eea247483e9bdf07b78e6341bdf878edeb1335ee9be4762d4d29a6058cae24ef854c3add242ade98f5936e660c4839c6471c21b13696b91aa389b01b5bbc4a328f32d43ad1c6fc1befcf257621ee79967852d4a84a0fb4816ee519a65f1d7a5963972008a986eec75d2235f61b34bf913372acfbbc657de52aa671b80e742b35fe546cc715e6a1b18eec528cc80229a9a3de07fd2e104285c4fb3968c9bae23e8a60848d14874e6b0517a7f93884bab143e070e7e8f696303535361f7e2ebc79160604304d9a85391a73bc199e5c12c28e1171de133690b02949a68e3971bccd2489a2399037edb938ec472c742504729084cefbd78908744057a1fe828865b3d90e003d4f0c0ecf1f5e4879e15947a564fdf448a1472743d9ee4ac89e1064dfada8df143c48338210289e730660af9b295f4d316493bda416ea62dc1fc0045a7afc077af16ac254bf7e3d9df529d8bc55f73c16586a937f43ff85a1e8c22a2a045459cab14b83e5bb6472f05e3155a3efecf10545541997b67df2b94463883577a7e58ffe8fad130454d7c959105c668bcd25e9d71e10253d4f38fedff545f6a760e52502b0285a17b4d102d7462e3e6272946d94a099b82fa69f78baf16550a79aed8709d4366bb461cf4ca03d464d39a4ca169f7e97bd375c791e9d2536ac8702e1addc0cc2b563440606be07c47dc94110b9fb93a98fdf15509fa125fc00d952fd8a03b9444ceac2ef422ca8e6e32c8a53e593d89a2ef331a514e37b0e82761f50da247edb6238332cf71f23798e58c0db1c1d4ec58663382318cdc686004cd0c2e86d21e070e7232429664ac9a96173e9f8f2dfc55455ceae9adc661bc65e9c3f7bb238714b0da641439960af163d3a42f4af2778d00f6269fe9e8320daef2ac9152f24ec0f2b24e4ff027d29d05298591c26b8a9509db4703386a442ec986008f7afd43a00f563c55aec588bbe487b093035b732973f315a3120529f92d6837a3ef38267f6da649dbaad7a8398c35495aaec86b960112619dec1cb7245a1a56be0fd413026a989e84220c6cfd98a8e0010be1e9186b09cacd0c1a1454ede4ecf254049feaea7860f89245cd640e14939e58199ea7a8120e26d70e821fce930bba17f1911b4a1b04b4471f63e9c93e7fd6311b52f04acdfc16568dbf09e17faf96b540b08fd72ab65983dd23917841bcb9972769621c88922a6b1ccfda2b761b0390401afe5b39e4790f4240c7fc453e5e1c2d97b4b39586edf53fe405dbe1d4f7e3ce3aa89f8add5705e4e1e493a3d5b2ea8ecc903f98d0004c007d7a4cd59134b86e90d68cfda52665d5e6098e3d577606143537dff7a04ae1c17839012a246ba7bb89deefbb121b96275f58f7ec788c0920c1a1e74cd1ee11d36b0fa3fa9e494399a9abeb5e9f073ef1d32fe12c68f42fe0e666d75e288c73766bd763a6fb403c1e678a83b829f8316f0dfa8c172bb64c5d9022e5546ffca7b89ac7edacfd042bab7059edb516d82abb6355ba0b4475a1f17d649111bcfe869a7a2c59f7595da6fd46a9248b2e6806c2c59badf28b4f4fffd9be713c34a06be3ad3126981a5cf53b6c380e3b8cb4e4e97af292d0b4744119f30a31658b22a0c03a6829e142e09609d3bb47f654f8e03cc8c981d9a396ccd01690dc11cc6a337e54f6b19fc25c94f895db0271db6664e89b13917b651062b4c3e63377d752fcc7825bf3422502999d38f612441bd9e0ecc2dc1ca5496f5e1f389ac5164b0c03c8350e5b948ddb7e57f1c454259cd205f4707029399c60b4ce2ea3873261c76183109ca5e1abd3e17380e5bd13b3d7420c32405f243a0eabaf37db8da96b3bfd5b682b62b3cb1afe72dd0dc92f301ad44fe2170d36f79bdc9731817c5f52f2f4e1dfcd6010c94449c503d80d3f95defae39812c549f8553f8015b1b2ef483a822b17a3709af4df53efeab426e234d6e62957ab45ca36726693d3144a1c5263c377094985ae8acc65e2353d154629c24204aa03a6a9c7840be8fa1e79341cbb869f36aa49316058d78d5ffdcb826b4047570fcd386e5969740e6ab263a49c468324c2b699ac8f05608da31f1017e0e6953d9f7e9121a031203141ec8ba9221119d4f29ecde19d3d3d98c7c825a26d50f0f5bcd8b22147786a4ae8315d2425d8d2837ebd45ca7e44cf4594bb912c68c7ad578c9eda0d57b1f826bb60ed6d6e95a8ca35436a839fe1ca257e2796afb501634cb45017db3fc44bc014b45aab0d41fe4f4f96119b703b3576432ce00b5691e4c811c0e9d904e935202beb3635bc195566bafbb9c08a2473a71aa969ecd789a9802593baac51312cf402c01896eedc8f80f1354832ce521de6edc0d950e48d1f36dcb344ca243ccde346c64ec234a06ccc30f3fb0ff76e8142921e99a79c137e4c2ae4acc470b058b13bc13a0032d733e488366552cb5e94e03668edf06971200"}, {0x90, 0x115, 0x6, "4849b4a91a6cf95c96fd412364af3fc99e2e0a2024de29e746861786a0d542993e9e20ca0cf45ec6e78848dec610025faa3389a9ac16da70038baead109932bd833787f559f2fa38fe0ff0ff14f211ccda4f9475f826ba641e8b3e2fdf0f2c0333de1bbc8d9a84b0ff495b6be2c4d8468e9e77d13466ebf78cfadfc35095"}, {0x60, 0x0, 0x80, "7a295acf66cc615e8feea1d0e2597a71a2ff3cf25d3bb82a842d528c4e501ab885775b74fa409f1dbff48a1b32c7197fe6c4fce9af95f686a103c53e97efef44cc40e1e7df1c1cb5405e4a"}, {0x80, 0x10c, 0x80, "4450de1e22e4e95ffab8f9193d4a0437562b36ed729008b8fddf09bd531e26804708540542cf82947ad04121a86a254909d2aae6d8ca640c34c6327681e1f351265ddffac28a1849cd7b5d8ca5ff76d41f52655324407cf1324dcd1ee01eadbb299af3f7f2dcf842430bcb7b04b6ea"}, {0xf8, 0x116, 0x1, "4a191303022911da876d70a6124750a643385f12086c8cae5e5ab32acbe86810d314c1e1109147ed19d1fc04f96b52bf5333df2cb7aae1fbae6b809701fa1a43ec50a47a51d1826f3566d8fb5c85adb119dcfd5995b41d3194807d68c119961b363874a031fc8ce5c76fc9aa0026c07a999ec8af4113c8c486576ce48b180bfde15c8f743ae2dacf199b1fe06865ef098c6d827d8ce09306e31e57b8bae6439ba47d0d2c0c8b3038df9923b66aa01c0d800befde318d028ddd179dd7353c4dc9c77285ee879f92aef6f5f5eca58d744ce4c5a95e950b153bc1d7a131a64dc69399c36991"}], 0x1278}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001780)="21134a08a08b09f2be6d9bb8edd87dfaee68136d72ab605e438e7fe28c3c77b341f2af09918e95843b2e972c5bbf", 0x2e}, {&(0x7f00000017c0)="05cb4d7e24bf1e29af4f981cf288f213f1f121a27aa81bd3dc564b01e1efc5ea6764333661d989fb321953dc4fb96c639e5dbfcadbd02217eacc3d580bdd68c2b8510faf3c0b0346ca9565", 0x4b}, {&(0x7f0000001840)="6409421a833f40fd11eb1d4c757961184583af6db9a483ed34e16486273c2cf5409b416abeba6c0139e3d79209c960dfb8440a183435aba509d59ec81200f2086caca8ef2c6ab5557d832003d27df59e742813a490a355", 0x57}, {&(0x7f00000018c0)="801909a859640ba355d20c4108ee2cf37cd82b1a17194805506619e0f9851b05477f8db3", 0x24}, {&(0x7f0000001900)="68695e1eadc724cf1b86df6144cca12eae691c9f0ee25a8c87393eddda9543a244f83abe534b75c46b7754b2580d1e6b04684f8f035319adcd09aaf4b901be76bc6b5831a1a3643c0f5bfc1db6fc1035ae3c8be4189457a05d17e721c60697da910e25667927aa0c73df7d3267e052e37e3d25cb3070ed1772bd2e059c6a1349f57116abc2d907f36b569ea92673b5e9abf75ceb8044", 0x96}, {&(0x7f00000019c0)="ab718055a519c2277f5dd9393b84e74f2550d6cbb67dc6c30b76d196b5c887e794f16e0622f693d5759f98b29e6dbf9ff0d50187a02304f891705ff515b57c3dfeb9a19a2d37b23ced99fbfc87e04cd2226176991d9447e6736e6d2c2170541bfd0845", 0x63}, {&(0x7f0000001a40)="f9db0c33847198b36b5ea0ecfc9adf0c3ec7a049f8416332c4eb2906eb5123fe2e303c47333ce51897d95101b162c81de334f2ef30b340f10239b75c1a5cb6a329803f2a263034f9677460a36d5e4b32d1aaa42badc56806ed3c67e376a0be2b3148f8452b702287160ef9cfd4fa44018643a57b9811d986ed9bf3c1096edf9393d52d46b65ac5f4294609ea89c49c525f4fc1bf95cf82f831a3bbeeba9bae66c8da9c18", 0xa4}], 0x7}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b80)="f67362456b04298cb2933a13c57f1a68792d268523e06420ca40ac67d7df72b3d24979e48bb84c27854fd5bda1b389355666a6df052c471215b09ff326a09a8a733303b273ba61aaa63d7eeabcc2b158499ea28e5d2f88513129d92e5b542bae06d1a68d50e804f441683016a2880a26b3eceea24cb9e7b7ccb4ad97e0b6e4eefb83e1f0982641d5cdea8870ac3c17f35ba90bc7d4c03806ff3038a26ce47f12e3763175fea979e7590a1fb64fffaef3ee566d11e19a3b09c2d8", 0xba}, {&(0x7f0000001c40)="21731cc9274241ecda9b6598540ecaae0f504cd6aa6a3de6457e7e63cfe4879ef164f0a519168d4b98fb25bc490a7373c133f0fea38a83", 0x37}, {&(0x7f0000001c80)="a7f3613834bf088c9fd9a4b6ace3140565813193bdc8bd252cdbbc79fa1ffc124ff32bbbe420385f979ae10d7868a11e8aebfbb19a7e4a9da0b86eb48d2d802963d24828ddb10c0a27df7dda5bc8b024a3fe95f4da5c8a4b0b0bc8d81d759a39bf83e07902d20ce8012f15542055203bff22c8dea2b642e91c1c0df49c20265ea48df3069dd54279e0283b8d11a7444b5816c2c962141eb49e9095b018a2d513dad0c97269bd7e5f7969f4c79f0eba34a7742c51a9f688e28858910ed66fdab5ad6bcaa3d322aea09bf0", 0xca}, {&(0x7f0000001d80)="50a83a8401043ba8ad234b79071b4b416f1d16e298d4392761876051fe387287211b386dae170fd589d8a9c00a02d0bab7ccd7264ced7e03dae722d65d5ceebc55beb3f555b8c93e21fb706f157963e2de2c0d4b91f1531bd4d7b6f501d6007b8063a28ee8050541d2bc2b21a109c1a00c3ece644045c0a5c4c5", 0x7a}], 0x4, &(0x7f0000001e40)=[{0x1010, 0x115, 0x4, "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"}, {0x1010, 0x0, 0x800, "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"}, {0x78, 0x10b, 0x2, "8f873813021f254c8203bdfd5bd2312bfe71bdc9e952aeeee6fbee995f0bec9bca1406716a351b6b145491a192155db28f92d59d111ccb854f9741485b52872d84e06d2f741c9ca34bafdfce47fa3bdd97647896217e5cd41ef12be3c7fd48a6a9f8e9baf622b08d"}, {0x28, 0x112, 0x9, "8d19c19893216b3a6e7e68fe1577c4ba530ca8f4"}], 0x20c0}}], 0x3, 0x10) 118.718525ms ago: executing program 2 (id=10929): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18200b660770e0000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000040000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x21de, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 0s ago: executing program 4 (id=10930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000200)=0xcd3c, 0xb4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x80800) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x1, [{0x2e2e, 0x80000000}]}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) (async) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newnexthop={0x24, 0x68, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x8}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x814) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @fwd={0xd}, @fwd={0x9}, @fwd={0x5}, @fwd={0xb}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/12, 0x63, 0xc, 0x0, 0x26, 0x10000, @value=r1}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @fwd={0xd}, @fwd={0x9}, @fwd={0x5}, @fwd={0xb}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/12, 0x63, 0xc, 0x0, 0x26, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): 6964][ T7111] team0: Port device team_slave_0 added [ 887.105707][ T7111] team0: Port device team_slave_1 added [ 887.119405][ T2407] Bluetooth: hci4: command tx timeout [ 887.243827][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.256591][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.297175][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.309350][ T4898] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.321168][ T4900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.357907][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.386167][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.440037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.454078][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.486166][ T1112] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.495579][ T1112] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.589429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.670060][ T7111] hsr_slave_0: entered promiscuous mode [ 887.677147][ T7111] hsr_slave_1: entered promiscuous mode [ 887.684733][ T7111] debugfs: 'hsr0' already exists in 'hsr' [ 887.692909][ T7111] Cannot create hsr debugfs directory [ 887.912184][ T7232] netlink: 'syz.1.9251': attribute type 29 has an invalid length. [ 887.939437][ T7232] netlink: 'syz.1.9251': attribute type 29 has an invalid length. [ 888.064057][ T7111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.076018][ T7111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.181579][ T7111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.199396][ T7111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.291681][ T7111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.306006][ T7111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.429905][ T7111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.442527][ T7111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.469910][ T7262] team_slave_0: entered promiscuous mode [ 888.475685][ T7262] team_slave_1: entered promiscuous mode [ 888.485712][ T7262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 888.494087][ T7262] team0: Device macvlan2 is already an upper device of the team interface [ 888.504650][ T7262] team_slave_0: left promiscuous mode [ 888.510175][ T7262] team_slave_1: left promiscuous mode [ 888.688500][ T7267] syzkaller1: entered promiscuous mode [ 888.695167][ T7267] syzkaller1: entered allmulticast mode [ 888.721287][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.733228][ T7111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 888.767465][ T7267] lo speed is unknown, defaulting to 1000 [ 888.775655][ T7267] lo speed is unknown, defaulting to 1000 [ 888.785192][ T7111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 888.805097][ T7267] lo speed is unknown, defaulting to 1000 [ 888.819781][ T7111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 888.842741][ T7267] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 888.879190][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 888.887353][ C1] lec:lec_tx_timeout: lec0 [ 888.903240][ T7111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 888.924486][ T7267] lo speed is unknown, defaulting to 1000 [ 888.956015][ T7267] lo speed is unknown, defaulting to 1000 [ 888.996215][ T7284] sctp: [Deprecated]: syz.3.9262 (pid 7284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 888.996215][ T7284] Use struct sctp_sack_info instead [ 889.046823][ T7267] lo speed is unknown, defaulting to 1000 [ 889.078680][ T7267] lo speed is unknown, defaulting to 1000 [ 889.116676][ T7267] lo speed is unknown, defaulting to 1000 [ 889.158958][ T7267] lo speed is unknown, defaulting to 1000 [ 889.182179][ T7267] lo speed is unknown, defaulting to 1000 [ 889.199947][ T2407] Bluetooth: hci4: command tx timeout [ 889.210434][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.230795][ T7267] lo speed is unknown, defaulting to 1000 [ 889.285519][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.373206][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.380481][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.444197][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.451695][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.951007][ T7323] bond18 (unregistering): Released all slaves [ 890.096972][ T7335] syzkaller0: entered promiscuous mode [ 890.102986][ T7335] syzkaller0: entered allmulticast mode [ 890.265675][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.434749][ T7344] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 890.548348][ T7111] veth0_vlan: entered promiscuous mode [ 890.712349][ T7111] veth1_vlan: entered promiscuous mode [ 890.755203][ T7352] xt_connbytes: Forcing CT accounting to be enabled [ 890.826150][ T7111] veth0_macvtap: entered promiscuous mode [ 890.838479][ T7111] veth1_macvtap: entered promiscuous mode [ 890.868688][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.913451][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.949269][ T4900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.992890][ T4900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.032176][ T4900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.073106][ T4900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.132141][ T7359] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 891.214875][ T4883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.245462][ T4883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.286236][ T2407] Bluetooth: hci4: command tx timeout [ 891.295008][ T7371] netlink: 'syz.2.9282': attribute type 3 has an invalid length. [ 891.356195][ T4883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.397389][ T4883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.689062][ T7385] ip6_vti0 speed is unknown, defaulting to 1000 [ 892.061060][ T7399] block nbd0: Unsupported socket: should be TCP or UNIX. [ 892.209247][ T7385] lo speed is unknown, defaulting to 1000 [ 892.346518][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.478608][ T7415] __nla_validate_parse: 10 callbacks suppressed [ 892.478639][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9296'. [ 892.496745][ T7415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9296'. [ 892.545020][ T7417] netlink: 'syz.1.9297': attribute type 2 has an invalid length. [ 892.615401][ T7422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9299'. [ 892.652584][ T7417] 9: entered promiscuous mode [ 892.925792][ T7434] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9302'. [ 893.160547][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.178320][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.185686][ T7427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.230712][ T7436] Bluetooth: MGMT ver 1.23 [ 893.344858][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.356057][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.370796][ T5820] Bluetooth: hci4: command tx timeout [ 893.376706][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.407460][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.421771][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 893.584394][ T7441] ip6_vti0 speed is unknown, defaulting to 1000 [ 893.690973][ T7458] Cannot find add_set index 0 as target [ 893.766732][ T7461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.775974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.862723][T28859] bond6: (slave syz_tun): Releasing backup interface [ 893.907144][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9309'. [ 893.963439][ T7465] syzkaller0: entered promiscuous mode [ 893.969376][ T7465] syzkaller0: entered allmulticast mode [ 893.980777][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9309'. [ 894.087123][ T4900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.182234][ T7441] lo speed is unknown, defaulting to 1000 [ 894.231318][ T4900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.289862][ T7478] sctp: [Deprecated]: syz.2.9313 (pid 7478) Use of int in max_burst socket option deprecated. [ 894.289862][ T7478] Use struct sctp_assoc_value instead [ 894.366684][ T4900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.404592][ T7485] veth0: entered promiscuous mode [ 894.421032][ T7484] veth0: left promiscuous mode [ 894.548737][ T4900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.612518][ T7494] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9318'. [ 894.962285][ T7441] chnl_net:caif_netlink_parms(): no params data found [ 895.302852][ T7532] netlink: 'syz.0.9330': attribute type 39 has an invalid length. [ 895.346005][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.354652][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.364006][ T7441] bridge_slave_0: entered allmulticast mode [ 895.373872][ T7441] bridge_slave_0: entered promiscuous mode [ 895.418149][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.429640][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.438405][ T7441] bridge_slave_1: entered allmulticast mode [ 895.452589][ T7441] bridge_slave_1: entered promiscuous mode [ 895.479263][ T4900] bridge_slave_1: left allmulticast mode [ 895.485266][ T4900] bridge_slave_1: left promiscuous mode [ 895.502445][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.523915][ T2407] Bluetooth: hci1: command tx timeout [ 895.534406][ T4900] bridge_slave_0: left allmulticast mode [ 895.542713][ T4900] bridge_slave_0: left promiscuous mode [ 895.548522][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.602787][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9334'. [ 895.624364][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9334'. [ 895.865821][ T4900] bond5 (unregistering): (slave erspan2): Releasing active interface [ 895.874077][ T4900] erspan2 (unregistering): left promiscuous mode [ 895.907504][ T4900] bond1 (unregistering): (slave gretap1): Releasing active interface [ 896.280860][ T4900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.295525][ T4900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.306624][ T4900] bond0 (unregistering): Released all slaves [ 896.318191][ T4900] bond1 (unregistering): Released all slaves [ 896.334860][ T4900] bond2 (unregistering): Released all slaves [ 896.350255][ T4900] bond3 (unregistering): Released all slaves [ 896.365115][ T4900] bond4 (unregistering): Released all slaves [ 896.393990][ T4900] bond5 (unregistering): Released all slaves [ 896.412761][ T4900] bond6 (unregistering): Released all slaves [ 896.428530][ T4900] bond7 (unregistering): Released all slaves [ 896.443854][ T4900] bond8 (unregistering): Released all slaves [ 896.464842][ T4900] bond9 (unregistering): Released all slaves [ 896.481411][ T4900] bond10 (unregistering): Released all slaves [ 896.497492][ T4900] bond11 (unregistering): Released all slaves [ 896.520156][ T4900] bond12 (unregistering): Released all slaves [ 896.534842][ T4900] bond13 (unregistering): Released all slaves [ 896.554858][ T4900] bond14 (unregistering): Released all slaves [ 896.570779][ T4900] bond15 (unregistering): Released all slaves [ 896.585102][ T4900] bond16 (unregistering): Released all slaves [ 896.601665][ T4900] bond17 (unregistering): Released all slaves [ 896.658456][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9331'. [ 896.698889][ T7546] bridge_slave_1: left allmulticast mode [ 896.706304][ T7546] bridge_slave_1: left promiscuous mode [ 896.717781][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.780710][ T7546] bridge_slave_0: left allmulticast mode [ 896.786538][ T7546] bridge_slave_0: left promiscuous mode [ 896.794883][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.036179][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.053422][ T4900] : left promiscuous mode [ 897.129740][ T7555] batadv_slave_0: mtu less than device minimum [ 897.182884][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.266806][ T4900] tipc: Disabling bearer [ 897.275787][ T4900] tipc: Left network mode [ 897.284450][ T7441] team0: Port device team_slave_0 added [ 897.303381][ T7441] team0: Port device team_slave_1 added [ 897.407990][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.419195][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.469493][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.549432][ T7573] erspan0: entered promiscuous mode [ 897.568003][ T7573] erspan0: entered allmulticast mode [ 897.595498][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.609382][ T2407] Bluetooth: hci1: command tx timeout [ 897.610561][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.669255][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.725358][ T7576] bridge11: entered promiscuous mode [ 897.739378][ T7576] bridge11: entered allmulticast mode [ 897.752491][ T7576] team0: Port device bridge11 added [ 897.784858][ T7582] xt_ecn: cannot match TCP bits for non-tcp packets [ 897.941254][ T7587] __nla_validate_parse: 2 callbacks suppressed [ 897.941276][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9347'. [ 898.098306][ T7441] hsr_slave_0: entered promiscuous mode [ 898.137980][ T7441] hsr_slave_1: entered promiscuous mode [ 898.165359][ T7441] debugfs: 'hsr0' already exists in 'hsr' [ 898.185192][ T7441] Cannot create hsr debugfs directory [ 898.300988][ T7602] netlink: 'syz.4.9350': attribute type 1 has an invalid length. [ 898.325032][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.345616][ T7600] netlink: 'syz.4.9350': attribute type 1 has an invalid length. [ 898.969764][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.223826][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.242341][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.269555][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.297369][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.306529][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.315717][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.327549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.345866][ T7649] –: renamed from vxcan1 (while UP) [ 899.451410][ T7661] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9363'. [ 899.472397][ T7661] Cannot find add_set index 1 as target [ 899.478886][ T7664] netlink: 'syz.2.9360': attribute type 13 has an invalid length. [ 899.489538][ T7664] netlink: 'syz.2.9360': attribute type 58 has an invalid length. [ 899.505998][ T7664] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9360'. [ 899.586899][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9365'. [ 899.665226][ T7307] IPVS: starting estimator thread 0... [ 899.680654][ T2407] Bluetooth: hci1: command tx timeout [ 899.779681][ T7672] IPVS: using max 30 ests per chain, 72000 per kthread [ 900.261201][ T7700] openvswitch: netlink: Multiple metadata blocks provided [ 900.401474][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.500682][ T7711] netlink: 'syz.1.9371': attribute type 1 has an invalid length. [ 900.509275][ T7711] nbd: error processing sock list [ 900.535218][ T7711] block nbd2: shutting down sockets [ 900.666425][ T7717] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 900.693994][ T7717] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 900.752062][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9374'. [ 900.779544][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9374'. [ 900.934532][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9374'. [ 901.046463][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9374'. [ 901.085746][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9377'. [ 901.192291][ T7441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 901.228356][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9374'. [ 901.246320][ T7745] netlink: 'syz.2.9378': attribute type 5 has an invalid length. [ 901.282481][ T7441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 901.351605][ T7441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 901.392664][ T7750] netlink: 'syz.1.9379': attribute type 1 has an invalid length. [ 901.418873][ T4900] hsr_slave_0: left promiscuous mode [ 901.438674][ T7750] netlink: 'syz.1.9379': attribute type 1 has an invalid length. [ 901.448530][ T4900] 0·: left promiscuous mode [ 901.460469][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.478233][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.489533][ T7750] netlink: 'syz.1.9379': attribute type 1 has an invalid length. [ 901.497319][ T7750] netlink: 'syz.1.9379': attribute type 2 has an invalid length. [ 901.541456][ T4900] team_slave_0: left promiscuous mode [ 901.547281][ T4900] team_slave_1: left promiscuous mode [ 901.573772][ T4900] veth0_macvtap: left promiscuous mode [ 901.589680][ T4900] veth1_vlan: left promiscuous mode [ 901.599338][ T4900] veth0_vlan: left promiscuous mode [ 901.760727][ T2407] Bluetooth: hci1: command tx timeout [ 901.804453][ T4900] pim6reg527 (unregistering): left allmulticast mode [ 901.976429][ T4900] team0 (unregistering): Port device team_slave_1 removed [ 901.997637][ T4900] team0 (unregistering): Port device team_slave_0 removed [ 902.113896][ T7441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 904.199583][ T5189] udevd[5189]: worker [1384] /devices/virtual/block/nbd0 timeout; kill it [ 904.208920][ T5189] udevd[5189]: seq 37993 '/devices/virtual/block/nbd0' killed [ 904.791453][ T7441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.806940][ T4900] IPVS: stop unused estimator thread 0... [ 904.832741][ T7828] __nla_validate_parse: 13 callbacks suppressed [ 904.832765][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9394'. [ 904.870197][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.919839][T30861] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.927074][T30861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.982094][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.989372][ T4897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.194420][ T7842] syzkaller0: entered promiscuous mode [ 905.203122][ T7842] syzkaller0: entered allmulticast mode [ 905.712749][ T7441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.742678][ T7864] bridge0: port 4(veth0_to_bridge) entered blocking state [ 905.749921][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9402'. [ 905.760038][ T7864] bridge0: port 4(veth0_to_bridge) entered disabled state [ 905.768867][ T7864] veth0_to_bridge: entered allmulticast mode [ 905.786140][ T7864] veth0_to_bridge: entered promiscuous mode [ 905.943697][ T7441] veth0_vlan: entered promiscuous mode [ 905.981497][ T7864] syzkaller0: entered promiscuous mode [ 905.987092][ T7864] syzkaller0: entered allmulticast mode [ 906.069692][ T7441] veth1_vlan: entered promiscuous mode [ 906.250498][ T7880] sctp: [Deprecated]: syz.0.9408 (pid 7880) Use of int in maxseg socket option. [ 906.250498][ T7880] Use struct sctp_assoc_value instead [ 906.386258][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 906.413973][ T7441] veth0_macvtap: entered promiscuous mode [ 906.451234][ T7880] bridge1: entered promiscuous mode [ 906.456526][ T7880] bridge1: entered allmulticast mode [ 906.515785][ T7441] veth1_macvtap: entered promiscuous mode [ 906.614816][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.644544][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9410'. [ 906.667280][ T7441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.792749][ T7903] hsr_slave_0 (unregistering): left promiscuous mode [ 906.838770][ T4890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.878113][ T4890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.917968][ T4890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.994956][ T4890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.204344][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9416'. [ 907.240036][ T7933] validate_nla: 1 callbacks suppressed [ 907.240057][ T7933] netlink: 'syz.4.9417': attribute type 17 has an invalid length. [ 907.309473][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9417'. [ 907.318423][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9417'. [ 907.340701][ T4883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.368978][ T4883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.464647][ T4890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.480612][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9420'. [ 907.531707][ T4890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.956557][ T7958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.560331][ T7312] net_ratelimit: 3 callbacks suppressed [ 908.560353][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.681590][ T7999] netlink: 'syz.3.9429': attribute type 1 has an invalid length. [ 908.690917][ T7999] netlink: 'syz.3.9429': attribute type 1 has an invalid length. [ 908.739764][ T8001] netlink: 'syz.3.9429': attribute type 1 has an invalid length. [ 908.747738][ T8001] netlink: 'syz.3.9429': attribute type 1 has an invalid length. [ 908.751619][ T8004] netlink: 'syz.4.9431': attribute type 30 has an invalid length. [ 909.103148][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9437'. [ 909.297004][ T8038] dvmrp6: entered allmulticast mode [ 909.337971][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9443'. [ 909.685604][ T8069] sctp: [Deprecated]: syz.1.9450 (pid 8069) Use of int in maxseg socket option. [ 909.685604][ T8069] Use struct sctp_assoc_value instead [ 909.767316][ T8071] netlink: 'syz.2.9451': attribute type 7 has an invalid length. [ 909.917289][ T8079] __nla_validate_parse: 6 callbacks suppressed [ 909.917311][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9453'. [ 909.939721][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9453'. [ 909.983018][ T8079] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9453'. [ 909.995224][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9454'. [ 910.007010][ T8083] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.9454'. [ 910.064021][ T8055] lec:lec_atm_close: lec0: Shut down! [ 910.408695][ T8108] x_tables: duplicate underflow at hook 1 [ 910.576300][ T8110] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9462'. [ 910.597112][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9463'. [ 910.702818][ T8126] netlink: 'syz.3.9467': attribute type 16 has an invalid length. [ 910.729697][ T8126] netlink: 'syz.3.9467': attribute type 17 has an invalid length. [ 910.788470][ T8122] netlink: 'syz.4.9465': attribute type 3 has an invalid length. [ 910.801291][ T1112] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9 [ 911.258779][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9477'. [ 911.280310][ T8161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9477'. [ 911.301954][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9477'. [ 911.890868][ T8199] syzkaller1: entered promiscuous mode [ 911.899611][ T8199] syzkaller1: entered allmulticast mode [ 911.916653][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 911.936726][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 911.947086][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 911.960402][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 911.968318][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 912.101578][ T8202] ip6_vti0 speed is unknown, defaulting to 1000 [ 912.765740][ T8202] lo speed is unknown, defaulting to 1000 [ 912.797029][ T8240] netlink: 'syz.2.9501': attribute type 9 has an invalid length. [ 913.004751][ T8248] netlink: 'syz.2.9504': attribute type 3 has an invalid length. [ 913.238731][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 913.502081][ T8278] macsec0: entered promiscuous mode [ 913.507457][ T8278] macsec0: entered allmulticast mode [ 913.558357][ T8278] block nbd1: NBD_DISCONNECT [ 913.583957][ T8278] block nbd1: Send disconnect failed -32 [ 913.604990][ T8283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.613876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.629585][ T8278] block nbd1: shutting down sockets [ 913.693991][ T8288] tipc: Enabling of bearer rejected, media not registered [ 913.757816][ T8283] syzkaller0: entered promiscuous mode [ 913.771085][ T8283] syzkaller0: entered allmulticast mode [ 913.814300][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.827268][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.850009][ T8202] bridge_slave_0: entered allmulticast mode [ 913.868646][ T8202] bridge_slave_0: entered promiscuous mode [ 913.878932][ T4883] dummy0: left allmulticast mode [ 913.886670][ T4883] bridge0: port 3(dummy0) entered disabled state [ 913.896861][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.912907][ T4883] bridge_slave_0: left promiscuous mode [ 913.919000][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.942742][ T4883] veth3: left allmulticast mode [ 913.947814][ T4883] veth3: left promiscuous mode [ 913.954880][ T4883] bridge4: port 1(veth3) entered disabled state [ 913.976208][ T4883] veth5: left allmulticast mode [ 913.981961][ T4883] veth5: left promiscuous mode [ 913.987261][ T4883] bridge7: port 1(veth5) entered disabled state [ 914.089759][ T5820] Bluetooth: hci3: command tx timeout [ 914.316723][ T8299] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 914.516697][ T4883] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 914.526181][ T4883] bridge5 (unregistering): left promiscuous mode [ 914.643986][ T4883] bond6 (unregistering): (slave bridge8): Releasing active interface [ 914.736101][ T4883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.745303][ T4883] bond_slave_0: left allmulticast mode [ 914.754375][ T4883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.763656][ T4883] bond_slave_1: left allmulticast mode [ 914.772680][ T4883] bond0 (unregistering): Released all slaves [ 914.785323][ T4883] bond1 (unregistering): Released all slaves [ 914.801168][ T4883] bond2 (unregistering): Released all slaves [ 914.816697][ T4883] bond3 (unregistering): Released all slaves [ 914.834964][ T4883] bond4 (unregistering): Released all slaves [ 914.855092][ T4883] bond5 (unregistering): Released all slaves [ 914.870423][ T4883] bond6 (unregistering): Released all slaves [ 914.888364][ T4883] bond7 (unregistering): Released all slaves [ 914.910801][ T4883] bond8 (unregistering): Released all slaves [ 914.977525][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.995886][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.031239][ T8202] bridge_slave_1: entered allmulticast mode [ 915.048506][ T8202] bridge_slave_1: entered promiscuous mode [ 915.069470][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 915.077581][ C1] lec:lec_tx_timeout: lec0 [ 915.211971][ T4883] ‚#{6c: left promiscuous mode [ 915.344252][ T8308] __nla_validate_parse: 16 callbacks suppressed [ 915.344289][ T8308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9517'. [ 915.364850][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.384435][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9519'. [ 915.403513][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.440781][ T8321] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9519'. [ 915.513729][ T4883] tipc: Disabling bearer [ 915.526613][ T4883] tipc: Left network mode [ 915.531370][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9519'. [ 915.693177][ T5837] page_pool_release_retry() stalled pool shutdown: id 200, 1 inflight 60 sec [ 915.765217][ T8324] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 915.866561][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 915.894142][ T8202] team0: Port device team_slave_0 added [ 915.930763][ T8202] team0: Port device team_slave_1 added [ 916.051857][ T8342] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9526'. [ 916.081026][ T8343] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9526'. [ 916.097627][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.109437][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.169693][ T5820] Bluetooth: hci3: command tx timeout [ 916.179342][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.222137][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.229525][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9527'. [ 916.238870][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.386530][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.567523][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9529'. [ 916.579381][ T8355] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9529'. [ 916.611042][ T8202] hsr_slave_0: entered promiscuous mode [ 916.618592][ T8357] netlink: ct family unspecified [ 916.630497][ T8202] hsr_slave_1: entered promiscuous mode [ 916.637128][ T8202] debugfs: 'hsr0' already exists in 'hsr' [ 916.669277][ T8202] Cannot create hsr debugfs directory [ 916.709901][ T8356] netlink: ct family unspecified [ 917.203943][ T8202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.216248][ T8202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.357167][ T8380] netlink: 'syz.1.9537': attribute type 1 has an invalid length. [ 917.382743][ T8202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.395622][ T8202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.609481][ T8388] digital: digital_start_poll: Unknown protocol [ 917.616718][ T8202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.629422][ T8202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.754913][ T8391] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 917.812076][ T8202] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.831107][ T8202] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.047696][ T8407] netlink: 'syz.2.9543': attribute type 1 has an invalid length. [ 918.166585][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.175223][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.239532][ T5820] Bluetooth: hci3: command tx timeout [ 918.329219][ T8404] nbd3: detected capacity change from 0 to 63 [ 918.340395][ T5820] block nbd3: Receive control failed (result -32) [ 918.363683][ T1415] block nbd3: Dead connection, failed to find a fallback [ 918.382252][ T1415] block nbd3: shutting down sockets [ 918.396407][ T1415] blk_print_req_error: 137 callbacks suppressed [ 918.396429][ T1415] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.417697][ T4883] veth1_macvtap: left promiscuous mode [ 918.445001][ T1415] buffer_io_error: 138 callbacks suppressed [ 918.445023][ T1415] Buffer I/O error on dev nbd3, logical block 0, async page read [ 918.452307][ T4883] veth0_macvtap: left promiscuous mode [ 918.474733][ T1415] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.484899][ T1415] Buffer I/O error on dev nbd3, logical block 1, async page read [ 918.495803][ T1415] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.506142][ T1415] Buffer I/O error on dev nbd3, logical block 2, async page read [ 918.516479][ T1415] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.532100][ T1415] Buffer I/O error on dev nbd3, logical block 3, async page read [ 918.540741][ T1415] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.551313][ T1415] Buffer I/O error on dev nbd3, logical block 0, async page read [ 918.594555][ T1415] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.622075][ T1415] Buffer I/O error on dev nbd3, logical block 1, async page read [ 918.646118][ T1415] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.684090][ T1415] Buffer I/O error on dev nbd3, logical block 2, async page read [ 918.711795][ T1415] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.760719][ T1415] Buffer I/O error on dev nbd3, logical block 3, async page read [ 918.788170][ T1415] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.802743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.841128][ T1415] Buffer I/O error on dev nbd3, logical block 0, async page read [ 918.856758][ T1415] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 918.885239][ T1415] Buffer I/O error on dev nbd3, logical block 1, async page read [ 918.921320][ T1415] ldm_validate_partition_table(): Disk read failed. [ 918.938981][ T1415] Dev nbd3: unable to read RDB block 0 [ 918.970201][ T1415] nbd3: unable to read partition table [ 919.005599][ T1415] ldm_validate_partition_table(): Disk read failed. [ 919.020413][ T1415] Dev nbd3: unable to read RDB block 0 [ 919.036883][ T1415] nbd3: unable to read partition table [ 919.210311][ T4883] team0 (unregistering): Port device team_slave_1 removed [ 919.238375][ T4883] team0 (unregistering): Port device team_slave_0 removed [ 919.461412][ T8434] syzkaller0: entered promiscuous mode [ 919.467064][ T8434] syzkaller0: entered allmulticast mode [ 919.499404][ T8202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 919.525878][ T8202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 919.556923][ T8202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 919.675429][ T8450] netlink: 'syz.1.9550': attribute type 1 has an invalid length. [ 919.693479][ T8451] netlink: 'syz.1.9550': attribute type 1 has an invalid length. [ 920.321239][ T5820] Bluetooth: hci3: command tx timeout [ 921.372075][ T8202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 921.379866][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.428521][ T8448] mac80211_hwsim hwsim107 wlan0: entered promiscuous mode [ 921.442183][ T8455] __nla_validate_parse: 12 callbacks suppressed [ 921.442205][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9551'. [ 921.565482][ T4883] IPVS: stop unused estimator thread 0... [ 921.635158][ T8468] netlink: 'syz.3.9554': attribute type 1 has an invalid length. [ 921.787745][ T8468] bond1: (slave gretap1): making interface the new active one [ 921.832652][ T8468] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 921.850869][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.885461][ T8481] ip6tnl2: entered promiscuous mode [ 921.900536][ T8480] ip6tnl3: entered promiscuous mode [ 921.914103][ T8477] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9556'. [ 921.923928][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.941665][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.948955][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.033169][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.040420][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.165427][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 922.181629][ T8485] netlink: 'syz.2.9558': attribute type 21 has an invalid length. [ 922.203652][ T8485] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.367798][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9562'. [ 922.537697][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.851124][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9567'. [ 923.043305][ T8544] vcan1: entered promiscuous mode [ 923.071847][ T8547] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9572'. [ 923.084088][ T8544] vcan1: entered allmulticast mode [ 923.204190][ T8550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.272312][ T8202] veth0_vlan: entered promiscuous mode [ 923.354551][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.385841][ T8554] team0: entered promiscuous mode [ 923.392515][ T8554] team_slave_0: entered promiscuous mode [ 923.410246][ T8554] team_slave_1: entered promiscuous mode [ 923.458554][ T8202] veth1_vlan: entered promiscuous mode [ 923.584533][ T8202] veth0_macvtap: entered promiscuous mode [ 923.614322][ T8202] veth1_macvtap: entered promiscuous mode [ 923.675238][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.732082][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.750001][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.789311][ T4890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.818121][ T4890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.841935][ T4890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.917329][ T8580] netlink: 'syz.1.9582': attribute type 1 has an invalid length. [ 923.971463][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9582'. [ 923.981962][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9582'. [ 924.027947][ T8580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 924.035243][ T8591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.051276][ T8591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.070828][ T8591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.083472][ T8580] netlink: 'syz.1.9582': attribute type 1 has an invalid length. [ 924.091537][ T8580] netlink: 'syz.1.9582': attribute type 2 has an invalid length. [ 924.154126][ T8590] bond2: (slave veth0_to_bond): making interface the new active one [ 924.164429][ T8590] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 924.217762][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.246384][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.329709][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.337713][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.359288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.368695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.515113][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9488'. [ 924.538451][ T8607] bridge_slave_1: left allmulticast mode [ 924.546822][ T8607] bridge_slave_1: left promiscuous mode [ 924.554372][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.590290][ T8607] bridge_slave_0: left allmulticast mode [ 924.596301][ T8607] bridge_slave_0: left promiscuous mode [ 924.609781][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.755626][ T8622] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9594'. [ 924.766541][ T8622] netlink: 'syz.0.9594': attribute type 21 has an invalid length. [ 924.778395][ T8583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.975251][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9597'. [ 924.987300][ T8633] netlink: 'syz.0.9597': attribute type 7 has an invalid length. [ 925.034235][ T4898] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.054008][ T8633] netlink: 'syz.0.9597': attribute type 7 has an invalid length. [ 925.138146][ T4898] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.156930][ T4898] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.267669][ T8645] IPVS: Unknown mcast interface: pimreg1 [ 925.282946][ T4898] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.375021][ T8652] nbd: socks must be embedded in a SOCK_ITEM attr [ 925.405770][ T8652] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 925.473080][ T8661] xt_socket: unknown flags 0x50 [ 925.544080][ T8667] block nbd1: Unsupported socket: should be TCP or UNIX. [ 925.685957][ T8671] syzkaller0: entered promiscuous mode [ 925.695483][ T8671] syzkaller0: entered allmulticast mode [ 925.749785][ T8674] netlink: 'syz.4.9610': attribute type 1 has an invalid length. [ 925.783280][ T8674] nbd: error processing sock list [ 925.790199][ T8680] .: renamed from bridge_slave_1 (while UP) [ 925.793881][ T8674] block nbd1: shutting down sockets [ 925.936667][ T8683] netlink: zone id is out of range [ 925.963225][ T8683] netlink: zone id is out of range [ 925.968493][ T8683] netlink: zone id is out of range [ 925.995332][ T7312] IPVS: starting estimator thread 0... [ 926.103064][ T8693] IPVS: using max 31 ests per chain, 74400 per kthread [ 926.616619][ T8728] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 926.634999][ T8728] bond3 (unregistering): Released all slaves [ 926.688140][ T8734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 926.997767][ T8752] __nla_validate_parse: 5 callbacks suppressed [ 926.997789][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9639'. [ 927.071212][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9639'. [ 927.113050][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9641'. [ 927.323489][ T8771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9644'. [ 927.380954][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.433982][ T8771] bridge_slave_0 (unregistering): left allmulticast mode [ 927.442293][ T8771] bridge_slave_0 (unregistering): left promiscuous mode [ 927.451925][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.517667][ T8784] GUP no longer grows the stack in syz.3.9648 (8784): 200000003000-20000000a000 (200000001000) [ 927.532507][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.3.9648 Not tainted syzkaller #0 PREEMPT(full) [ 927.532539][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 927.532554][ T8784] Call Trace: [ 927.532564][ T8784] [ 927.532575][ T8784] dump_stack_lvl+0xe8/0x150 [ 927.532611][ T8784] __get_user_pages+0x2453/0x29d0 [ 927.532661][ T8784] ? __gup_longterm_locked+0xc4e/0x1630 [ 927.532686][ T8784] ? down_read_killable+0x1bb/0x340 [ 927.532717][ T8784] ? try_get_folio+0xec/0x650 [ 927.532747][ T8784] __gup_longterm_locked+0xdcf/0x1630 [ 927.532800][ T8784] gup_fast_fallback+0x1d82/0x22e0 [ 927.532859][ T8784] ? __pfx_gup_fast_fallback+0x10/0x10 [ 927.532886][ T8784] ? is_valid_gup_args+0x11f/0x200 [ 927.532913][ T8784] ? get_user_pages_fast+0x4d/0xb0 [ 927.532938][ T8784] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 927.532969][ T8784] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 927.532999][ T8784] iov_iter_get_pages2+0x5e/0xa0 [ 927.533025][ T8784] __se_sys_vmsplice+0x7b3/0x1490 [ 927.533070][ T8784] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 927.533094][ T8784] ? __pfx_futex_wait+0x10/0x10 [ 927.533133][ T8784] ? lockdep_hardirqs_on+0x7a/0x110 [ 927.533221][ T8784] do_syscall_64+0x14d/0xf80 [ 927.533250][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.533271][ T8784] ? trace_irq_disable+0x37/0x100 [ 927.533295][ T8784] ? clear_bhb_loop+0x40/0x90 [ 927.533322][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.533343][ T8784] RIP: 0033:0x7fd82dd9bf79 [ 927.533364][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.533384][ T8784] RSP: 002b:00007fd82ece1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 927.533408][ T8784] RAX: ffffffffffffffda RBX: 00007fd82e015fa0 RCX: 00007fd82dd9bf79 [ 927.533434][ T8784] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 927.533448][ T8784] RBP: 00007fd82de327e0 R08: 0000000000000000 R09: 0000000000000000 [ 927.533463][ T8784] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 927.533475][ T8784] R13: 00007fd82e016038 R14: 00007fd82e015fa0 R15: 00007ffe9a7edd68 [ 927.533513][ T8784] [ 927.538316][ T8784] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 927.786641][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880418e2c00: rx timeout, send abort [ 927.887239][ T8794] TCP: TCP_TX_DELAY enabled [ 927.898257][ T8794] netlink: 'syz.1.9650': attribute type 1 has an invalid length. [ 928.052646][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9653'. [ 928.132575][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9656'. [ 928.258147][ T8814] netlink: 'syz.4.9657': attribute type 4 has an invalid length. [ 928.283466][ T8814] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9657'. [ 928.292668][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803096f000: rx timeout, send abort [ 928.301111][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880418e2c00: abort rx timeout. Force session deactivation [ 928.349823][ T8814] `: renamed from bond0 (while UP) [ 928.533801][ T8827] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9661'. [ 928.567191][ T8828] syzkaller0: entered promiscuous mode [ 928.573516][ T8828] syzkaller0: entered allmulticast mode [ 928.582203][ T8830] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9663'. [ 928.792760][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803096f000: abort rx timeout. Force session deactivation [ 928.813114][ T8839] sctp: [Deprecated]: syz.4.9666 (pid 8839) Use of int in maxseg socket option. [ 928.813114][ T8839] Use struct sctp_assoc_value instead [ 928.897991][ T8846] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 928.939912][ T8846] bond2 (unregistering): Released all slaves [ 929.002632][ T8854] netlink: 'syz.0.9671': attribute type 10 has an invalid length. [ 929.032671][ T8851] vlan2: entered allmulticast mode [ 929.038050][ T8851] hsr0: entered allmulticast mode [ 929.046412][ T8851] hsr_slave_0: entered allmulticast mode [ 929.056187][ T8851] hsr_slave_1: entered allmulticast mode [ 929.076412][ T8853] dvmrp0: entered allmulticast mode [ 929.124964][ T8854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 929.347357][ T7312] IPVS: starting estimator thread 0... [ 929.384554][ T8870] net_ratelimit: 58 callbacks suppressed [ 929.384575][ T8870] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 929.474666][ T8872] IPVS: using max 27 ests per chain, 64800 per kthread [ 929.613977][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9681'. [ 929.624136][ T8886] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 929.679933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.690660][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.699666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.307676][ T8914] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.585733][ T8930] netlink: 'syz.2.9692': attribute type 2 has an invalid length. [ 930.643776][ T8914] lo speed is unknown, defaulting to 1000 [ 930.912384][ T8946] netlink: 'syz.3.9697': attribute type 2 has an invalid length. [ 930.931994][ T8946] netlink: 'syz.3.9697': attribute type 10 has an invalid length. [ 930.961012][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.993305][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.002503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.083050][ T8946] netlink: 'syz.3.9697': attribute type 1 has an invalid length. [ 931.129470][ T8946] netlink: 'syz.3.9697': attribute type 2 has an invalid length. [ 931.243277][ T8953] netlink: 'syz.4.9700': attribute type 1 has an invalid length. [ 931.283511][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.293363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.402093][ T8965] team_slave_0: entered promiscuous mode [ 931.407879][ T8965] team_slave_1: entered promiscuous mode [ 931.416335][ T8965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.433184][ T8966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 931.602109][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.774579][ T8981] Cannot find del_set index 1 as target [ 931.945621][ T8996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.967315][ T8996] bond3 (unregistering): Released all slaves [ 932.037014][ T9001] __nla_validate_parse: 13 callbacks suppressed [ 932.037037][ T9001] netlink: 788 bytes leftover after parsing attributes in process `syz.4.9714'. [ 932.191987][ T9007] sctp: [Deprecated]: syz.1.9717 (pid 9007) Use of int in maxseg socket option. [ 932.191987][ T9007] Use struct sctp_assoc_value instead [ 932.398380][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9722'. [ 932.562791][ T9037] syzkaller0: entered promiscuous mode [ 932.572142][ T9037] syzkaller0: entered allmulticast mode [ 932.823358][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9731'. [ 932.925024][ T9061] netlink: 'syz.4.9734': attribute type 83 has an invalid length. [ 932.996252][ T9063] netlink: 'syz.2.9736': attribute type 2 has an invalid length. [ 933.114283][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9735'. [ 933.140307][ T9069] netlink: 'syz.4.9737': attribute type 1 has an invalid length. [ 933.142929][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9735'. [ 933.210415][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9738'. [ 933.217098][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.252066][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9737'. [ 933.276459][ T9069] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9737'. [ 933.305395][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9737'. [ 933.591436][ T9070] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 934.028527][ T9113] pim6reg1: entered promiscuous mode [ 934.038427][ T9113] pim6reg1: entered allmulticast mode [ 934.093861][ T9111] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 934.107961][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9747'. [ 934.110477][ T9111] bond1 (unregistering): Released all slaves [ 934.413216][ T9134] net_ratelimit: 5 callbacks suppressed [ 934.413239][ T9134] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 934.628694][ T9149] tipc: Invalid UDP bearer configuration [ 934.628749][ T9149] tipc: Enabling of bearer rejected, failed to enable media [ 934.959718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.335696][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.344729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.354759][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.365223][T30861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.379260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.388376][ T9176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.397233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.585129][ T9187] validate_nla: 1 callbacks suppressed [ 935.585152][ T9187] netlink: 'syz.0.9767': attribute type 2 has an invalid length. [ 936.639914][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.725230][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 937.507511][ T9143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 937.716871][ T9197] veth0: entered promiscuous mode [ 937.752527][ T9199] __nla_validate_parse: 7 callbacks suppressed [ 937.752548][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9772'. [ 937.776823][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9772'. [ 937.841217][ T9204] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9772'. [ 937.854138][ T9197] netlink: 'syz.0.9770': attribute type 5 has an invalid length. [ 937.867963][ T9204] nbd: must specify at least one socket [ 937.971080][ T9199] syzkaller0: entered promiscuous mode [ 937.979728][ T9199] syzkaller0: entered allmulticast mode [ 937.993871][ T9209] veth0: left promiscuous mode [ 938.008501][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9776'. [ 938.016730][ T9205] ip6_vti0 speed is unknown, defaulting to 1000 [ 938.304352][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9779'. [ 940.304611][ T9205] lo speed is unknown, defaulting to 1000 [ 940.304655][ T9231] veth0: entered promiscuous mode [ 940.316638][ T9233] veth0: left promiscuous mode [ 940.424071][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9782'. [ 941.919233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 941.927329][ C1] lec:lec_tx_timeout: lec0 [ 943.763488][ T7326] net_ratelimit: 6 callbacks suppressed [ 943.763518][ T7326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.778230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.041979][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.050585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.680540][ T9085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.638758][T12094] lec:lec_start_xmit: lec0:No lecd attached [ 948.882919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.162336][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.919341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 951.927848][ C1] lec:lec_tx_timeout: lec0 [ 952.082158][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.090656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.920055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.842590][ T7326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.851021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.480307][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.119855][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.128281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.192914][ T9258] gre1: entered promiscuous mode [ 963.198027][ T9258] gre1: entered allmulticast mode [ 963.300038][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9785'. [ 963.538172][ T9274] syzkaller1: entered promiscuous mode [ 963.549894][ T9274] syzkaller1: entered allmulticast mode [ 963.576501][ T9279] netlink: 'syz.4.9792': attribute type 83 has an invalid length. [ 963.716095][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9795'. [ 963.778332][ T9291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 963.808689][ T9297] netlink: 'syz.2.9796': attribute type 2 has an invalid length. [ 963.933199][ T9292] syzkaller0: entered promiscuous mode [ 963.946588][ T9292] syzkaller0: entered allmulticast mode [ 963.982384][ T9301] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 965.860558][ T9320] ip6gre1: entered promiscuous mode [ 965.865894][ T9320] ip6gre1: entered allmulticast mode [ 965.879494][ T9326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 966.085631][ T9340] syzkaller0: entered promiscuous mode [ 966.091676][ T9340] syzkaller0: entered allmulticast mode [ 966.117958][ T9343] syzkaller0: entered promiscuous mode [ 966.127447][ T9343] syzkaller0: entered allmulticast mode [ 966.165926][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.174526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.193850][ T9343] syzkaller0: left promiscuous mode [ 966.210610][ T9343] syzkaller0: left allmulticast mode [ 966.338083][ T9355] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9816'. [ 966.412384][ T9358] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9817'. [ 966.505307][ T9362] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 966.524217][ T9362] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 966.735999][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9823'. [ 966.888700][ T9387] netlink: 'syz.0.9826': attribute type 17 has an invalid length. [ 966.950320][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9826'. [ 966.999236][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9826'. [ 967.282923][ T9415] netlink: 'syz.3.9833': attribute type 29 has an invalid length. [ 967.311668][ T9415] netlink: 'syz.3.9833': attribute type 29 has an invalid length. [ 967.355570][ T9415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9833'. [ 967.794637][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9839'. [ 967.838252][ T9442] netlink: 'syz.4.9839': attribute type 5 has an invalid length. [ 967.882151][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9839'. [ 967.911994][ T9442] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 967.976853][ T9451] netlink: 'syz.3.9842': attribute type 1 has an invalid length. [ 968.059414][ T9451] bond3: entered promiscuous mode [ 968.082881][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.085302][ T9451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 968.360845][ T9469] netlink: 'syz.0.9848': attribute type 1 has an invalid length. [ 968.497644][ T9469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.615382][ T9486] __nla_validate_parse: 5 callbacks suppressed [ 968.615403][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9854'. [ 968.640730][ T9484] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 968.660133][ T7307] lo speed is unknown, defaulting to 1000 [ 968.724127][ T7307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.877759][ T9507] batadv1: entered allmulticast mode [ 968.961270][ T9516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9858'. [ 969.012870][ T9519] IPVS: length: 131 != 24 [ 969.326119][ T9528] netlink: 'syz.3.9862': attribute type 10 has an invalid length. [ 969.336664][ T9528] team0: Device ipvlan1 failed to register rx_handler [ 971.715335][ T9493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.975829][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9864'. [ 972.241076][ T9560] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9871'. [ 972.254775][ T9560] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004 [ 972.345956][ T9566] delete_channel: no stack [ 972.744193][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.880147][ T9532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 975.030664][ T9571] netlink: 'syz.3.9875': attribute type 1 has an invalid length. [ 975.085885][ T9576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9876'. [ 975.295679][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9883'. [ 975.377086][ T9601] Cannot find del_set index 0 as target [ 975.421251][ T9608] netlink: 'syz.2.9884': attribute type 21 has an invalid length. [ 975.429900][ T9608] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9884'. [ 975.440045][ T9608] netlink: 'syz.2.9884': attribute type 4 has an invalid length. [ 975.451869][ T9608] netlink: 'syz.2.9884': attribute type 5 has an invalid length. [ 975.460296][ T9608] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9884'. [ 975.475147][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9884'. [ 975.734782][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9886'. [ 975.907500][ T9613] bond1 (unregistering): Released all slaves [ 975.936014][ T9624] netlink: 'syz.0.9887': attribute type 1 has an invalid length. [ 975.966774][ T9624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9887'. [ 975.978208][ T9624] NCSI netlink: No device for ifindex 0 [ 975.999638][ T7326] page_pool_release_retry() stalled pool shutdown: id 200, 1 inflight 120 sec [ 976.183406][ T9641] netlink: 'syz.4.9895': attribute type 1 has an invalid length. [ 976.221738][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9894'. [ 976.241174][ T9635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.253690][ T9635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.355323][ T9638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.380834][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9896'. [ 976.403848][ T9638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.430925][ T9638] bond0 (unregistering): Released all slaves [ 976.622375][ T9635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.639635][ T9635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.751968][ T9635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.763236][ T9635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.810296][ T9085] IPVS: starting estimator thread 0... [ 976.899699][ T9671] IPVS: using max 27 ests per chain, 64800 per kthread [ 976.924728][ T9635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.951260][ T9635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.024469][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9905'. [ 977.136569][ T4898] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.151882][ T4898] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.212857][T30861] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.221813][T30861] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.232081][T30861] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.240624][T30861] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.259484][ T4898] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.283108][ T4898] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.306856][ T9689] netlink: 'syz.2.9906': attribute type 1 has an invalid length. [ 977.330116][ T9691] netlink: 'syz.4.9907': attribute type 4 has an invalid length. [ 977.384051][ T9694] netlink: 'syz.4.9907': attribute type 4 has an invalid length. [ 977.708627][ T9708] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 978.141912][ T9743] delete_channel: no stack [ 978.282121][ T9756] netlink: 'syz.2.9926': attribute type 5 has an invalid length. [ 978.364090][ T9761] openvswitch: netlink: Invalid VLAN frame [ 978.804610][ T9782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.862614][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.191837][ T9818] : entered promiscuous mode [ 979.412308][ T9825] syzkaller0: entered promiscuous mode [ 979.436326][ T9825] syzkaller0: entered allmulticast mode [ 981.310316][ T9853] team0: Device gtp0 is up. Set it down before adding it as a team port [ 981.371933][ T9858] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 981.423095][ T9858] sctp: [Deprecated]: syz.1.9954 (pid 9858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.423095][ T9858] Use struct sctp_sack_info instead [ 981.532580][ T9866] __nla_validate_parse: 16 callbacks suppressed [ 981.532602][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9956'. [ 981.930381][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9964'. [ 982.522802][ T9934] syzkaller0: entered promiscuous mode [ 982.528504][ T9934] syzkaller0: entered allmulticast mode [ 982.584378][ T9936] validate_nla: 1 callbacks suppressed [ 982.584401][ T9936] netlink: 'syz.0.9975': attribute type 1 has an invalid length. [ 982.607037][ T9936] netlink: 216 bytes leftover after parsing attributes in process `syz.0.9975'. [ 982.629473][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9975'. [ 982.804649][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 982.895991][ T9953] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.9980'. [ 983.137238][ T9969] syzkaller0: entered promiscuous mode [ 983.147001][ T9969] syzkaller0: entered allmulticast mode [ 983.193311][ T9969] tipc: Started in network mode [ 983.211133][ T9969] tipc: Node identity 4a7459eb0c09, cluster identity 4711 [ 983.218522][ T9969] tipc: Enabled bearer , priority 0 [ 983.288724][ T9969] tipc: Resetting bearer [ 983.313211][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9985'. [ 983.383407][ T9969] xfrm1: entered promiscuous mode [ 983.388910][ T9969] xfrm1: entered allmulticast mode [ 983.414958][ T9964] tipc: Resetting bearer [ 983.468813][ T9964] tipc: Disabling bearer [ 983.672527][ T9998] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9995'. [ 983.845800][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10001'. [ 983.870628][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10001'. [ 983.912469][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10000'. [ 983.998400][T10021] xt_policy: too many policy elements [ 984.095039][T10026] netlink: 'syz.2.10005': attribute type 5 has an invalid length. [ 984.113021][T10024] vlan3: entered promiscuous mode [ 984.137217][T10024] bridge0: entered promiscuous mode [ 984.726348][T10060] netlink: 'syz.1.10014': attribute type 4 has an invalid length. [ 984.741122][T10061] xt_hashlimit: size too large, truncated to 1048576 [ 984.755266][T10062] tipc: Enabling of bearer rejected, failed to enable media [ 984.793589][T10064] –: renamed from vxcan1 (while UP) [ 985.014673][T10076] netlink: 'syz.1.10018': attribute type 5 has an invalid length. [ 985.255201][T10088] netlink: 'syz.2.10022': attribute type 1 has an invalid length. [ 985.456892][T10106] netlink: 'syz.3.10025': attribute type 21 has an invalid length. [ 985.688141][T10122] netlink: 'syz.0.10030': attribute type 5 has an invalid length. [ 985.966504][T10133] xfrm1: entered promiscuous mode [ 985.971976][T10133] xfrm1: entered allmulticast mode [ 986.614334][T10174] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 986.627080][T10174] bond3 (unregistering): Released all slaves [ 986.718344][T10184] __nla_validate_parse: 18 callbacks suppressed [ 986.718367][T10184] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.10049'. [ 986.833821][T10193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.861511][T10197] netlink: 'syz.4.10054': attribute type 1 has an invalid length. [ 986.949412][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10053'. [ 986.982237][T10200] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10055'. [ 987.001398][T10205] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10055'. [ 987.037885][T10199] netlink: 'syz.0.10055': attribute type 1 has an invalid length. [ 987.063497][T10199] netlink: 'syz.0.10055': attribute type 1 has an invalid length. [ 987.097036][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10059'. [ 987.128421][T10211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10059'. [ 987.188440][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10059'. [ 987.340134][T10220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 987.430594][T10224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.467163][T10224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.511549][T10224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.537883][T10224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.555080][T10220] xt_CT: No such helper "pptp" [ 987.811950][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10069'. [ 987.866568][T10260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 987.885534][T10256] xt_l2tp: v2 doesn't support IP mode [ 987.891307][T10256] xt_l2tp: v2 doesn't support IP mode [ 988.004858][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10072'. [ 988.313513][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10078'. [ 988.338097][T10285] gretap0: entered promiscuous mode [ 988.348425][T10285] debugfs: 'hsr1' already exists in 'hsr' [ 988.358658][T10285] Cannot create hsr debugfs directory [ 988.368746][T10285] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 988.438558][T10302] netlink: 'syz.4.10084': attribute type 1 has an invalid length. [ 988.851677][T10323] netlink: 'syz.1.10087': attribute type 7 has an invalid length. [ 989.312556][T10349] syzkaller1: entered promiscuous mode [ 989.318198][T10349] syzkaller1: entered allmulticast mode [ 989.328700][T10349] x_tables: unsorted entry at hook 2 [ 989.885893][T10385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.046803][T10395] netlink: Unknown conntrack attr (0) [ 990.138017][T10390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.189685][T10399] veth0: entered promiscuous mode [ 990.242949][T10399] veth0: left promiscuous mode [ 990.314527][T10390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.413710][T10417] netlink: 'syz.0.10116': attribute type 6 has an invalid length. [ 990.517439][T10390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.547348][T10423] bond0 (unregistering): Released all slaves [ 990.695237][T10390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.813697][T10447] netlink: 'syz.4.10124': attribute type 1 has an invalid length. [ 990.961450][ T4890] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.993984][T10444] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 990.995092][T10441] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 991.042477][ T4883] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.124888][ T1112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.237131][ T1112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.302384][T10480] veth1_macvtap: left promiscuous mode [ 991.888032][T10522] netlink: 'syz.2.10145': attribute type 21 has an invalid length. [ 991.896822][T10522] __nla_validate_parse: 11 callbacks suppressed [ 991.896840][T10522] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10145'. [ 991.917985][T10522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 991.939636][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10143'. [ 991.953848][T10525] netlink: 'syz.0.10146': attribute type 10 has an invalid length. [ 991.972567][T10525] veth0_macvtap: left promiscuous mode [ 991.994891][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10143'. [ 992.027197][T10526] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10146'. [ 992.120128][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10147'. [ 992.209669][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10149'. [ 992.221818][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10149'. [ 992.409957][T10542] syzkaller0: entered promiscuous mode [ 992.427246][T10542] syzkaller0: entered allmulticast mode [ 992.538098][T10554] Cannot find del_set index 49151 as target [ 992.552998][T10554] netlink: 'syz.2.10154': attribute type 1 has an invalid length. [ 992.732552][T10565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 992.793074][T10572] netlink: zone id is out of range [ 992.798269][T10572] netlink: zone id is out of range [ 992.832814][T10572] netlink: zone id is out of range [ 992.838010][T10572] netlink: zone id is out of range [ 992.889141][T10572] netlink: zone id is out of range [ 992.894384][T10572] netlink: zone id is out of range [ 992.927398][T10572] netlink: zone id is out of range [ 992.949708][T10572] netlink: zone id is out of range [ 992.973172][T10572] netlink: zone id is out of range [ 993.387979][T10619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10173'. [ 993.398699][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10173'. [ 993.442024][ T2407] Bluetooth: hci3: command 0x0405 tx timeout [ 993.553762][T10624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 993.726282][T10641] syzkaller0: entered promiscuous mode [ 993.745289][T10641] syzkaller0: entered allmulticast mode [ 993.780671][T10634] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10179'. [ 993.791418][T10644] netlink: 'syz.4.10181': attribute type 10 has an invalid length. [ 994.359632][T10682] netlink: 'syz.4.10190': attribute type 1 has an invalid length. [ 994.872665][T10684] netlink: 'syz.0.10192': attribute type 9 has an invalid length. [ 995.013403][T10696] hsr_slave_1 (unregistering): left promiscuous mode [ 995.120795][ T2407] Bluetooth: hci2: command 0x0406 tx timeout [ 995.180785][T10706] netlink: 'syz.3.10198': attribute type 9 has an invalid length. [ 995.430602][T10715] netlink: 'syz.3.10203': attribute type 39 has an invalid length. [ 995.514883][T10720] IPv6: sit2: Disabled Multicast RS [ 995.520452][ T7443] Bluetooth: hci3: command 0x0405 tx timeout [ 995.781368][T10723] gretap1: entered promiscuous mode [ 995.822099][T10732] syzkaller0: entered promiscuous mode [ 995.827659][T10732] syzkaller0: entered allmulticast mode [ 995.888789][T10739] netlink: 'syz.3.10214': attribute type 2 has an invalid length. [ 995.916488][T10739] : entered promiscuous mode [ 996.136807][T10752] sctp: [Deprecated]: syz.3.10219 (pid 10752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 996.136807][T10752] Use struct sctp_sack_info instead [ 996.403247][T10771] netlink: 'syz.2.10225': attribute type 39 has an invalid length. [ 996.574909][T10785] FAULT_INJECTION: forcing a failure. [ 996.574909][T10785] name failslab, interval 1, probability 0, space 0, times 0 [ 996.614685][T10785] CPU: 1 UID: 0 PID: 10785 Comm: syz.0.10228 Not tainted syzkaller #0 PREEMPT(full) [ 996.614716][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 996.614730][T10785] Call Trace: [ 996.614739][T10785] [ 996.614748][T10785] dump_stack_lvl+0xe8/0x150 [ 996.614785][T10785] should_fail_ex+0x412/0x560 [ 996.614820][T10785] should_failslab+0xa8/0x100 [ 996.614863][T10785] ? skb_clone+0x212/0x3a0 [ 996.614891][T10785] kmem_cache_alloc_noprof+0x87/0x650 [ 996.614916][T10785] ? __netlink_lookup+0xc6/0x8b0 [ 996.614955][T10785] skb_clone+0x212/0x3a0 [ 996.614987][T10785] __netlink_deliver_tap+0x404/0x850 [ 996.615023][T10785] ? netlink_deliver_tap+0x2e/0x1b0 [ 996.615047][T10785] netlink_deliver_tap+0x19c/0x1b0 [ 996.615070][T10785] netlink_unicast+0x7e3/0x9b0 [ 996.615111][T10785] ? __pfx_netlink_unicast+0x10/0x10 [ 996.615145][T10785] ? netlink_sendmsg+0x650/0xb40 [ 996.615165][T10785] ? skb_put+0x11b/0x210 [ 996.615193][T10785] netlink_sendmsg+0x813/0xb40 [ 996.615226][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.615251][T10785] ? aa_sock_msg_perm+0xf1/0x1b0 [ 996.615282][T10785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 996.615314][T10785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.615335][T10785] ____sys_sendmsg+0xa68/0xad0 [ 996.615363][T10785] ? __might_fault+0xaf/0x130 [ 996.615395][T10785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.615433][T10785] ? import_iovec+0x73/0xa0 [ 996.615459][T10785] ___sys_sendmsg+0x2a5/0x360 [ 996.615485][T10785] ? __lock_acquire+0x6b5/0x2cf0 [ 996.615511][T10785] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.615574][T10785] ? __fget_files+0x2a/0x420 [ 996.615594][T10785] ? __fget_files+0x3a0/0x420 [ 996.615625][T10785] __x64_sys_sendmsg+0x1bd/0x2a0 [ 996.615655][T10785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 996.615691][T10785] ? __pfx_ksys_write+0x10/0x10 [ 996.615730][T10785] do_syscall_64+0x14d/0xf80 [ 996.615758][T10785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.615778][T10785] ? trace_irq_disable+0x37/0x100 [ 996.615802][T10785] ? clear_bhb_loop+0x40/0x90 [ 996.615827][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.615848][T10785] RIP: 0033:0x7f5dcbb9bf79 [ 996.615867][T10785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.615885][T10785] RSP: 002b:00007f5dcc98d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.615908][T10785] RAX: ffffffffffffffda RBX: 00007f5dcbe15fa0 RCX: 00007f5dcbb9bf79 [ 996.615923][T10785] RDX: 000000000004c040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 996.615948][T10785] RBP: 00007f5dcc98d090 R08: 0000000000000000 R09: 0000000000000000 [ 996.615960][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.615973][T10785] R13: 00007f5dcbe16038 R14: 00007f5dcbe15fa0 R15: 00007fff6d371d58 [ 996.616007][T10785] [ 997.082028][T10796] __nla_validate_parse: 9 callbacks suppressed [ 997.082055][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10232'. [ 997.115812][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10232'. [ 997.147480][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10232'. [ 997.167644][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10232'. [ 997.317867][T10810] digital: digital_start_poll: Unknown protocol [ 997.347448][T10813] netlink: 'syz.2.10238': attribute type 1 has an invalid length. [ 997.398516][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.447872][T10813] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 997.501713][T10816] syzkaller0: entered promiscuous mode [ 997.507238][T10816] syzkaller0: entered allmulticast mode [ 997.514158][T10819] netlink: 'syz.3.10240': attribute type 2 has an invalid length. [ 997.529337][T10819] netlink: 'syz.3.10240': attribute type 3 has an invalid length. [ 997.538497][T10813] bond0: entered promiscuous mode [ 997.543825][T10813] bond0: entered allmulticast mode [ 998.173083][ T1297] net_ratelimit: 7 callbacks suppressed [ 998.173106][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 998.192298][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 999.463384][T10813] syzkaller1: entered promiscuous mode [ 999.469814][T10813] syzkaller1: entered allmulticast mode [ 1003.919547][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 1003.927639][ C1] lec:lec_tx_timeout: lec0 [ 1010.060340][T12094] lec:lec_start_xmit: lec0:No lecd attached [ 1010.479343][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 1015.069376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1015.077448][ C1] lec:lec_tx_timeout: lec0 [ 1015.601873][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.170785][T10832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10243'. [ 1017.591663][T10846] netlink: 'syz.3.10246': attribute type 9 has an invalid length. [ 1017.647728][T10825] IPVS: set_ctl: invalid protocol: 67 172.20.20.187:20000 [ 1017.824777][T10828] syzkaller0: entered promiscuous mode [ 1017.859418][T10828] syzkaller0: entered allmulticast mode [ 1017.910639][T10828] mpoa:mpoad_close: () going down [ 1018.052891][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10253'. [ 1018.103591][T10870] team1: entered promiscuous mode [ 1018.112257][T10870] team1: entered allmulticast mode [ 1018.289448][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10257'. [ 1018.307364][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10257'. [ 1018.404477][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10257'. [ 1018.753882][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10264'. [ 1019.155140][T10919] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10269'. [ 1019.210135][T10922] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10269'. [ 1019.291292][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1019.339182][T10885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.345177][T10885] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1019.565709][T10885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1019.577598][T10931] syzkaller0: entered promiscuous mode [ 1019.585825][T10885] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1019.604496][T10931] syzkaller0: entered allmulticast mode [ 1019.695070][T10885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.715288][T10885] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1019.776883][T10885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.799169][T10885] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1020.007712][T10949] netlink: 'syz.2.10276': attribute type 1 has an invalid length. [ 1020.756791][T10987] geneve0: entered promiscuous mode [ 1020.803938][ T4890] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 47795 - 0 [ 1020.826977][ T4890] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 47795 - 0 [ 1020.852916][ T4890] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 47795 - 0 [ 1020.875543][ T4890] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 47795 - 0 [ 1021.611973][ T7326] IPVS: starting estimator thread 0... [ 1021.675118][T11051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10301'. [ 1021.740363][T11052] IPVS: using max 27 ests per chain, 64800 per kthread [ 1021.777532][T11060] veth5: entered promiscuous mode [ 1021.889755][T11062] netlink: 'syz.3.10303': attribute type 1 has an invalid length. [ 1022.273524][T11085] __nla_validate_parse: 2 callbacks suppressed [ 1022.273549][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1022.296721][T11085] xfrm1: entered promiscuous mode [ 1022.314859][T11085] xfrm1: entered allmulticast mode [ 1022.790419][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10314'. [ 1022.893635][T11106] netlink: 'syz.0.10314': attribute type 2 has an invalid length. [ 1022.917173][T11106] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10314'. [ 1022.945258][T11117] 8021q: VLANs not supported on sit0 [ 1023.135542][T11127] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 1023.202443][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10319'. [ 1023.255461][T11127] bridge4: entered promiscuous mode [ 1023.264189][T11131] xt_connbytes: Forcing CT accounting to be enabled [ 1023.288884][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.297011][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.305046][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.313165][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.321003][T11127] bridge4: entered allmulticast mode [ 1023.326560][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.334639][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.342720][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.351205][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.359343][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.367332][T11131] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1023.402373][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1023.679547][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10329'. [ 1023.914196][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10333'. [ 1023.933636][T11176] x_tables: duplicate underflow at hook 1 [ 1024.241423][T11201] netlink: 'syz.4.10341': attribute type 1 has an invalid length. [ 1024.307966][T11201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.386754][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10342'. [ 1024.417413][T11205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.435462][T11205] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1024.455046][T11205] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1024.525688][T11201] veth5: entered promiscuous mode [ 1024.536759][T11201] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1024.652976][T11217] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10343'. [ 1024.974647][T11242] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1025.095444][T11250] netlink: 'syz.0.10349': attribute type 1 has an invalid length. [ 1025.110461][T11250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10349'. [ 1025.142125][T11250] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 1025.430695][T11270] netlink: 'syz.4.10353': attribute type 11 has an invalid length. [ 1025.466225][T11270] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1025.647136][T11270] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1025.661607][T11270] gretap2: entered promiscuous mode [ 1025.673107][T11270] gretap2: entered allmulticast mode [ 1025.975538][T11306] lo: entered promiscuous mode [ 1026.008072][T11306] tunl0: entered promiscuous mode [ 1026.033809][T11306] gre0: entered promiscuous mode [ 1026.065044][T11314] netlink: 'syz.0.10363': attribute type 1 has an invalid length. [ 1026.116363][T11317] netlink: 'syz.0.10363': attribute type 33 has an invalid length. [ 1026.116512][T11306] gretap0: entered promiscuous mode [ 1026.285886][T11306] erspan0: entered promiscuous mode [ 1026.322985][T11306] ip_vti0: entered promiscuous mode [ 1026.441371][T11334] netlink: 'syz.3.10366': attribute type 24 has an invalid length. [ 1026.758786][T11348] netlink: 'syz.0.10370': attribute type 1 has an invalid length. [ 1026.887652][T11348] bond3: entered promiscuous mode [ 1026.893689][T11348] bond3: entered allmulticast mode [ 1026.899610][T11348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.915226][T11357] netlink: 'syz.2.10371': attribute type 21 has an invalid length. [ 1026.915226][T11353] netlink: 'syz.2.10371': attribute type 21 has an invalid length. [ 1026.986027][T11356] erspan1: entered allmulticast mode [ 1026.991163][T11359] netlink: 'syz.3.10372': attribute type 8 has an invalid length. [ 1027.007986][T11356] bond3: (slave erspan1): making interface the new active one [ 1027.016175][T11356] erspan1: entered promiscuous mode [ 1027.022959][T11356] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 1027.045662][ T1112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1027.056873][ T1112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1027.150343][ T1112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1027.173193][ T1112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1027.321248][T11376] __nla_validate_parse: 12 callbacks suppressed [ 1027.321273][T11376] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10377'. [ 1027.350706][T11374] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10376'. [ 1027.491655][T11390] xt_bpf: check failed: parse error [ 1027.645446][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10384'. [ 1027.894484][T11419] netlink: 108 bytes leftover after parsing attributes in process `syz.3.10391'. [ 1027.905792][T11420] netlink: 'syz.4.10389': attribute type 1 has an invalid length. [ 1027.921669][T11420] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.10389'. [ 1028.044352][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10393'. [ 1028.091455][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10395'. [ 1028.157038][T11431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1028.191550][T11435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1028.204628][T11435] bond3: (slave vxcan2): The slave device specified does not support setting the MAC address [ 1028.217178][T11435] bond3: (slave vxcan2): Error -95 calling set_mac_address [ 1028.285559][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1028.311880][T11434] bond0: entered promiscuous mode [ 1028.326985][T11434] bond0: left promiscuous mode [ 1028.401031][T11447] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10400'. [ 1028.488259][T11449] tap0: tun_chr_ioctl cmd 1074025678 [ 1028.516376][T11449] tap0: group set to 0 [ 1028.832407][T11474] netlink: 'syz.4.10408': attribute type 21 has an invalid length. [ 1028.847508][T11474] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10408'. [ 1028.859763][T11472] syzkaller0: entered promiscuous mode [ 1028.872432][T11472] syzkaller0: entered allmulticast mode [ 1028.893568][T11472] netlink: 'syz.2.10409': attribute type 11 has an invalid length. [ 1029.071063][T11485] team0: Port device team_slave_0 removed [ 1029.514804][T11509] netlink: 'syz.2.10420': attribute type 1 has an invalid length. [ 1029.517340][T11513] syzkaller1: entered promiscuous mode [ 1029.532271][T11513] syzkaller1: entered allmulticast mode [ 1029.544332][T11509] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1029.690414][T11522] netlink: 'syz.3.10424': attribute type 13 has an invalid length. [ 1032.348568][T11581] net_ratelimit: 45 callbacks suppressed [ 1032.348589][T11581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.398796][T11587] __nla_validate_parse: 8 callbacks suppressed [ 1032.398819][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10444'. [ 1032.452637][T11584] Bluetooth: MGMT ver 1.23 [ 1032.465689][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10441'. [ 1032.544802][T11592] syzkaller0: entered promiscuous mode [ 1032.564016][T11592] syzkaller0: entered allmulticast mode [ 1032.588301][T11593] tipc: Started in network mode [ 1032.613103][T11593] tipc: Node identity 861fa743dae1, cluster identity 4711 [ 1032.651839][T11593] tipc: Enabled bearer , priority 0 [ 1032.671229][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.686753][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.717946][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.737454][T11609] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10451'. [ 1032.761582][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.771564][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.780893][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.812807][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.831308][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.879159][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.893200][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.904910][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.922023][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.932955][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.941896][T11621] openvswitch: netlink: Missing valid actions attribute. [ 1032.949349][T11621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.964043][T11593] tipc: Enabling of bearer rejected, already enabled [ 1032.975393][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.008519][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.046238][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.066331][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.082088][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.103183][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.112969][T11632] ipt_rpfilter: unknown options [ 1033.114873][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.128932][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.154802][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.177651][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.188887][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.202225][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.226206][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.245501][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.257126][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.268528][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.284914][T11593] tipc: Enabling of bearer rejected, already enabled [ 1033.312799][T11639] netlink: 'syz.3.10459': attribute type 23 has an invalid length. [ 1033.355085][T11591] tipc: Resetting bearer [ 1033.414533][T11591] tipc: Disabling bearer [ 1033.493634][T11649] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1033.511032][T11649] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1033.550892][T11649] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1033.624674][T11657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1033.766850][T11666] netlink: 'syz.2.10467': attribute type 6 has an invalid length. [ 1033.798621][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10467'. [ 1033.893984][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.905750][T11679] sctp: [Deprecated]: syz.2.10471 (pid 11679) Use of int in max_burst socket option. [ 1033.905750][T11679] Use struct sctp_assoc_value instead [ 1034.162765][T11695] xt_cluster: node mask cannot exceed total number of nodes [ 1034.260519][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10478'. [ 1034.357247][T11703] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10479'. [ 1034.485352][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10479'. [ 1034.522945][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.736874][T11717] netlink: 'syz.2.10482': attribute type 33 has an invalid length. [ 1034.769791][T11718] netlink: 'syz.2.10482': attribute type 33 has an invalid length. [ 1034.839558][T11726] netlink: 'syz.4.10486': attribute type 3 has an invalid length. [ 1035.120549][T11740] netlink: 'syz.2.10489': attribute type 1 has an invalid length. [ 1035.145132][T11740] netlink: 'syz.2.10489': attribute type 39 has an invalid length. [ 1035.661797][T11752] ip6_vti0 speed is unknown, defaulting to 1000 [ 1035.746292][T11757] netlink: 'syz.1.10495': attribute type 1 has an invalid length. [ 1035.768217][T11757] netlink: 'syz.1.10495': attribute type 1 has an invalid length. [ 1035.795145][T11757] netlink: 'syz.1.10495': attribute type 8 has an invalid length. [ 1036.067583][T11752] lo speed is unknown, defaulting to 1000 [ 1036.194944][T11789] : entered promiscuous mode [ 1036.330243][T11793] syzkaller0: entered promiscuous mode [ 1036.335882][T11793] syzkaller0: entered allmulticast mode [ 1036.401774][ T7325] page_pool_release_retry() stalled pool shutdown: id 200, 1 inflight 181 sec [ 1036.585949][T11804] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1036.727504][T11802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.755833][T11802] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.852720][T11806] dvmrp0: entered allmulticast mode [ 1037.092198][T11802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.158941][T11802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.222152][T11824] syzkaller1: entered promiscuous mode [ 1037.227995][T11824] syzkaller1: entered allmulticast mode [ 1037.463503][T11802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.485331][T11802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.585023][T11802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.620839][T11802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.682275][T11851] syzkaller0: entered promiscuous mode [ 1037.687834][T11851] syzkaller0: entered allmulticast mode [ 1037.953636][T11881] __nla_validate_parse: 15 callbacks suppressed [ 1037.953660][T11881] netlink: 5496 bytes leftover after parsing attributes in process `syz.4.10521'. [ 1037.998215][T11881] tipc: New replicast peer: 255.255.255.255 [ 1038.016600][T11881] tipc: Enabled bearer , priority 10 [ 1038.035982][ T4898] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.059496][ T4898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.106567][T30861] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.127203][T30861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.229737][ T4901] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.237989][ T4901] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.262814][T11899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.272349][T11899] netlink: 192 bytes leftover after parsing attributes in process `syz.3.10522'. [ 1038.317469][T11898] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1038.422462][T30861] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.461653][T30861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.493560][T11907] validate_nla: 2 callbacks suppressed [ 1038.493580][T11907] netlink: 'syz.1.10526': attribute type 7 has an invalid length. [ 1038.531093][T11901] netlink: 3444 bytes leftover after parsing attributes in process `syz.0.10525'. [ 1038.880906][T11924] sctp: [Deprecated]: syz.1.10531 (pid 11924) Use of int in max_burst socket option. [ 1038.880906][T11924] Use struct sctp_assoc_value instead [ 1038.882601][T11925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.916135][T11930] netlink: 'syz.4.10532': attribute type 1 has an invalid length. [ 1038.925681][T11930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10532'. [ 1039.139854][T11615] tipc: Node number set to 1560192835 [ 1039.154222][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1039.164476][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1039.176318][T11952] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1039.274731][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1039.357157][T11967] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10542'. [ 1039.508478][T11978] xt_l2tp: v2 doesn't support IP mode [ 1039.524141][T11982] tipc: Enabling of bearer rejected, failed to enable media [ 1039.550441][T11984] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.10543'. [ 1039.563381][T11972] netlink: 'syz.2.10541': attribute type 10 has an invalid length. [ 1039.767647][T11995] netlink: 'syz.0.10549': attribute type 1 has an invalid length. [ 1039.964390][T12001] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1040.234226][T11969] lec:lec_atm_close: lec0: Shut down! [ 1040.284786][T12023] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10554'. [ 1040.811725][T12048] ip6_vti0 speed is unknown, defaulting to 1000 [ 1041.145688][T12073] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1041.168736][T12075] ip6t_srh: unknown srh match flags 4000 [ 1041.246073][T12073] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1041.432763][T12048] lo speed is unknown, defaulting to 1000 [ 1041.878578][T12118] netlink: 'syz.1.10582': attribute type 22 has an invalid length. [ 1042.027831][T12125] netlink: 'syz.0.10585': attribute type 10 has an invalid length. [ 1042.535329][T12154] tipc: Enabling of bearer rejected, already enabled [ 1042.584477][T12156] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1042.629680][T12159] netlink: 'syz.3.10598': attribute type 33 has an invalid length. [ 1042.763611][T12178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1042.808694][T12178] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1043.060331][T12198] __nla_validate_parse: 8 callbacks suppressed [ 1043.060354][T12198] netlink: 208 bytes leftover after parsing attributes in process `syz.3.10610'. [ 1043.171116][T12206] netlink: 'syz.4.10612': attribute type 33 has an invalid length. [ 1043.182573][T12202] openvswitch: netlink: IP tunnel dst address not specified [ 1043.192567][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10614'. [ 1043.207553][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10614'. [ 1043.246460][T12206] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1043.261641][T12206] bond4 (unregistering): Released all slaves [ 1043.316746][T12215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.348192][T12215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.390510][T12219] erspan0: left allmulticast mode [ 1043.403075][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10615'. [ 1043.528764][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.573430][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.583890][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.602852][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.641387][T12230] pim6reg: entered allmulticast mode [ 1043.649775][T12232] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.660338][T12232] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 47795 - 0 [ 1043.697490][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.725072][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1043.775381][T12232] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.788093][T12232] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 47795 - 0 [ 1043.911521][T12232] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.929262][T12232] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 47795 - 0 [ 1044.050637][T12232] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.089252][T12232] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 47795 - 0 [ 1044.097764][T12262] netlink: 'syz.1.10630': attribute type 4 has an invalid length. [ 1044.145108][T12262] `: renamed from bond0 (while UP) [ 1044.373690][ T4902] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 47795 - 0 [ 1044.382322][ T4902] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1044.411560][ T4900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 47795 - 0 [ 1044.424607][ T4900] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1044.466092][ T4900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 47795 - 0 [ 1044.484694][ T4900] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1044.503737][ T4900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 47795 - 0 [ 1044.523485][ T4900] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1044.574856][T12287] netlink: 'syz.3.10638': attribute type 1 has an invalid length. [ 1044.660675][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.668575][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.677578][T12289] bridge0: entered allmulticast mode [ 1044.705200][T12289] ip6tnl0: Caught tx_queue_len zero misconfig [ 1044.946112][T12304] netlink: 'syz.0.10645': attribute type 1 has an invalid length. [ 1044.958831][T12304] netlink: 'syz.0.10645': attribute type 2 has an invalid length. [ 1044.989369][T12304] netlink: 'syz.0.10645': attribute type 1 has an invalid length. [ 1045.048367][T12309] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 1045.232826][T12313] lo: Caught tx_queue_len zero misconfig [ 1045.613185][T12339] netlink: 'syz.0.10655': attribute type 4 has an invalid length. [ 1045.811700][T12342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.821364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.866148][T12342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.877455][ T4902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.886105][ T4902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.894662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.903129][T12353] bond4: option min_links: invalid value (18446744073709551614) [ 1045.912072][T12353] bond4: option min_links: allowed values 0 - 2147483647 [ 1045.919567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 1045.927740][ C1] lec:lec_tx_timeout: lec0 [ 1045.942502][T12353] bond4 (unregistering): Released all slaves [ 1045.948823][ T4902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.150826][T12361] syzkaller0: entered promiscuous mode [ 1046.157753][T12361] syzkaller0: entered allmulticast mode [ 1046.308641][T12364] bridge_slave_0: left allmulticast mode [ 1046.317370][T12364] bridge_slave_0: left promiscuous mode [ 1046.326224][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.385059][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.420510][T12364] bond2: (slave veth0_to_bond): Releasing active interface [ 1046.433531][T12364] `: (slave bond_slave_0): Releasing backup interface [ 1046.445930][T12364] `: (slave bond_slave_1): Releasing backup interface [ 1046.459602][T12364] team_slave_0: left promiscuous mode [ 1046.472410][T12364] team0: Port device team_slave_0 removed [ 1046.483156][T12397] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1046.504130][T12364] team_slave_1: left promiscuous mode [ 1046.514762][T12364] team0: Port device team_slave_1 removed [ 1046.524398][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.533397][T12364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.545032][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.553630][T12364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.563758][T12399] netlink: 'syz.2.10667': attribute type 7 has an invalid length. [ 1046.574687][T12364] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1046.636831][T12392] bond3 (unregistering): Released all slaves [ 1048.897611][T12407] vlan4: entered promiscuous mode [ 1048.903762][T12407] vlan4: entered allmulticast mode [ 1048.955787][T12420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.493505][T12455] __nla_validate_parse: 39 callbacks suppressed [ 1049.493529][T12455] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10687'. [ 1049.550372][T12455] syzkaller0: entered promiscuous mode [ 1049.566203][T12455] syzkaller0: entered allmulticast mode [ 1049.670161][T12437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.826537][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1049.836406][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1049.854719][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10692'. [ 1049.929332][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10694'. [ 1049.945525][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1049.978713][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1050.007347][T12483] netlink: 'syz.0.10694': attribute type 1 has an invalid length. [ 1050.028904][T12486] tipc: Enabled bearer , priority 0 [ 1050.131246][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1050.144681][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10693'. [ 1050.156326][T12492] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1050.168472][T12494] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10698'. [ 1050.191601][T12486] syzkaller0: entered promiscuous mode [ 1050.197319][T12486] syzkaller0: entered allmulticast mode [ 1050.204232][T12486] tipc: Resetting bearer [ 1050.216801][T12484] tipc: Resetting bearer [ 1052.058748][T12484] tipc: Disabling bearer [ 1052.116628][T12513] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1052.400095][T12531] netlink: 'syz.0.10710': attribute type 5 has an invalid length. [ 1052.632550][T12542] bond0: entered promiscuous mode [ 1052.638330][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.661108][T12542] netlink: 'syz.1.10715': attribute type 4 has an invalid length. [ 1052.764017][T12549] netlink: 'syz.1.10717': attribute type 1 has an invalid length. [ 1053.005118][T12564] netlink: 'syz.2.10721': attribute type 2 has an invalid length. [ 1053.132865][T12575] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 1053.507427][T12599] block nbd3: reconnected socket [ 1053.533881][T12603] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1053.589951][ T7443] block nbd3: Receive control failed (result -32) [ 1053.769942][T12613] syzkaller0: entered promiscuous mode [ 1053.775579][T12613] syzkaller0: entered allmulticast mode [ 1054.691782][T12679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1054.794944][T12685] __nla_validate_parse: 40 callbacks suppressed [ 1054.794969][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10762'. [ 1054.947431][T12688] net_ratelimit: 1 callbacks suppressed [ 1054.947442][T12688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1054.996153][T12686] bond2: (slave dummy0): Releasing backup interface [ 1055.042041][T12686] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1055.066349][T12686] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1055.182278][T12703] netlink: 'syz.1.10766': attribute type 12 has an invalid length. [ 1055.302266][T12703] bond4: option primary_reselect: invalid value (255) [ 1055.312534][T12710] netlink: 'syz.4.10770': attribute type 1 has an invalid length. [ 1055.341125][T12703] bond4 (unregistering): Released all slaves [ 1055.477259][T12721] sit0: entered promiscuous mode [ 1055.497619][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10775'. [ 1055.506793][T12727] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10773'. [ 1055.541514][T12721] netlink: 'syz.0.10773': attribute type 1 has an invalid length. [ 1055.591051][T12721] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10773'. [ 1055.716164][T12735] bond4 (unregistering): Released all slaves [ 1055.915915][T12751] netlink: 'syz.2.10783': attribute type 4 has an invalid length. [ 1056.100353][T12757] netlink: 464 bytes leftover after parsing attributes in process `syz.0.10785'. [ 1056.189435][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10784'. [ 1056.330037][T12769] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10784'. [ 1056.783855][T12782] x_tables: duplicate underflow at hook 3 [ 1057.037201][T12800] netlink: 'syz.4.10798': attribute type 1 has an invalid length. [ 1057.185660][T12807] netlink: 'syz.2.10801': attribute type 1 has an invalid length. [ 1057.202738][T12807] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10801'. [ 1057.222132][T12807] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10801'. [ 1057.247494][T12807] netlink: 'syz.2.10801': attribute type 1 has an invalid length. [ 1057.273797][T12807] netlink: 'syz.2.10801': attribute type 8 has an invalid length. [ 1057.650076][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.667728][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.872792][T30861] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.903365][T30861] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.930211][T30861] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.952782][T30861] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.972883][T30861] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.991398][T30861] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.021700][T30861] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.041502][T30861] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.477220][T12860] syzkaller0: entered promiscuous mode [ 1058.485364][T12860] syzkaller0: entered allmulticast mode [ 1058.886215][T12886] netlink: 'syz.4.10820': attribute type 1 has an invalid length. [ 1058.984707][T12893] netlink: 'syz.1.10819': attribute type 1 has an invalid length. [ 1059.128330][T12899] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1059.420340][T12910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1059.604270][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1059.619575][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1059.830295][T12936] __nla_validate_parse: 16 callbacks suppressed [ 1059.830316][T12936] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10837'. [ 1059.901482][T12940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10839'. [ 1059.932575][T12939] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10838'. [ 1059.995496][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1060.007275][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1060.057721][T12944] ip6_vti0 speed is unknown, defaulting to 1000 [ 1060.125877][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1060.173432][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1060.259992][T12959] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.10844'. [ 1060.273301][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10842'. [ 1060.300261][T12959] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.10844'. [ 1060.372736][T12944] lo speed is unknown, defaulting to 1000 [ 1060.403980][T12962] validate_nla: 2 callbacks suppressed [ 1060.403999][T12962] netlink: 'syz.3.10845': attribute type 24 has an invalid length. [ 1060.585244][T12969] syzkaller0: entered promiscuous mode [ 1060.591282][T12969] syzkaller0: entered allmulticast mode [ 1060.794003][T12974] syzkaller0: entered promiscuous mode [ 1060.814869][T12974] syzkaller0: entered allmulticast mode [ 1061.187693][T12993] syzkaller0: entered promiscuous mode [ 1061.196481][T12993] syzkaller0: entered allmulticast mode [ 1062.792441][T13095] netlink: 'syz.1.10890': attribute type 1 has an invalid length. [ 1062.948643][T13098] hsr_slave_0 (unregistering): left promiscuous mode [ 1062.987883][T13101] syzkaller0: entered promiscuous mode [ 1062.996241][T13101] syzkaller0: entered allmulticast mode [ 1063.018193][T13105] syzkaller0: entered promiscuous mode [ 1063.024386][T13105] syzkaller0: entered allmulticast mode [ 1063.384608][T13123] veth0_to_team: Caught tx_queue_len zero misconfig [ 1063.446660][T13124] netlink: 'syz.3.10900': attribute type 30 has an invalid length. [ 1063.614517][T13124] bond5: option arp_missed_max: invalid value (0) [ 1063.636700][T13124] bond5: option arp_missed_max: allowed values 1 - 255 [ 1063.773458][T13124] bond5 (unregistering): Released all slaves [ 1063.840918][T13126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.100815][T13147] TC_ACT_REPEAT abuse ? [ 1064.237793][T13155] netlink: 'syz.1.10910': attribute type 1 has an invalid length. [ 1064.778870][T13186] netlink: 'syz.0.10920': attribute type 1 has an invalid length. [ 1064.879176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 1064.887291][ C1] lec:lec_tx_timeout: lec0 [ 1064.896184][T13186] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1064.921124][T13202] x_tables: unsorted underflow at hook 3 [ 1065.008909][T13195] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1065.064268][T30861] veth0_to_bridge: left allmulticast mode [ 1065.073252][T30861] veth0_to_bridge: left promiscuous mode [ 1065.079519][T30861] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1065.100923][T30861] team0: left allmulticast mode [ 1065.105830][T30861] team_slave_1: left allmulticast mode [ 1065.114131][T30861] team0: left promiscuous mode [ 1065.120897][T30861] team_slave_1: left promiscuous mode [ 1065.127560][T30861] bridge0: port 3(team0) entered disabled state [ 1065.137107][T30861] bridge_slave_1: left allmulticast mode [ 1065.143291][T30861] bridge_slave_1: left promiscuous mode [ 1065.152100][T30861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.161587][T30861] bridge_slave_0: left allmulticast mode [ 1065.167506][T30861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.505921][ T1112] smc: removing ib device syz2 [ 1066.431529][T30861] team0: Port device bridge11 removed [ 1066.590292][T30861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.631493][T30861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.649489][ T31] INFO: task udevd:1384 blocked for more than 143 seconds. [ 1066.656890][ T31] Not tainted syzkaller #0 [ 1066.662496][ T31] Blocked by coredump. [ 1066.669997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1066.678967][ T31] task:udevd state:D stack:23464 pid:1384 tgid:1384 ppid:5189 task_flags:0x40054c flags:0x00080003 [ 1066.692827][ T31] Call Trace: [ 1066.696181][ T31] [ 1066.699566][ T31] __schedule+0x1568/0x5290 [ 1066.704412][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.710444][ T31] ? __pfx___schedule+0x10/0x10 [ 1066.715581][ T31] ? schedule+0x90/0x360 [ 1066.720899][ T31] schedule+0x164/0x360 [ 1066.725207][ T31] io_schedule+0x7f/0xd0 [ 1066.730105][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1066.735475][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1066.742037][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1066.747658][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1066.754672][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1066.760789][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1066.767225][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 1066.774394][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1066.781979][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1066.788673][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1066.796268][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1066.802741][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1066.808187][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1066.814480][ T31] bdev_release+0x417/0x650 [ 1066.820073][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1066.825343][ T31] blkdev_release+0x15/0x20 [ 1066.830588][ T31] __fput+0x44f/0xa70 [ 1066.834638][ T31] task_work_run+0x1d9/0x270 [ 1066.840603][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1066.845789][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1066.851721][ T31] do_exit+0x69b/0x2310 [ 1066.855950][ T31] ? __up_read+0x291/0x6b0 [ 1066.860844][ T31] ? __pfx_do_exit+0x10/0x10 [ 1066.865694][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1066.872175][ T31] do_group_exit+0x21b/0x2d0 [ 1066.877035][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1066.883371][ T31] get_signal+0x1284/0x1330 [ 1066.888164][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1066.894219][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1066.901494][ T31] ? ksys_read+0x1fc/0x270 [ 1066.905983][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1066.912113][ T31] ? rcu_is_watching+0x15/0xb0 [ 1066.916938][ T31] do_syscall_64+0x32d/0xf80 [ 1066.922353][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.928488][ T31] ? trace_irq_disable+0x37/0x100 [ 1066.935538][ T31] ? clear_bhb_loop+0x40/0x90 [ 1066.940623][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.946762][ T31] RIP: 0033:0x7fb21f8a7407 [ 1066.952020][ T31] RSP: 002b:00007ffe9aa4c8f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1066.962454][ T31] RAX: fffffffffffffffc RBX: 00007fb21ff5c880 RCX: 00007fb21f8a7407 [ 1066.971063][ T31] RDX: 0000000000000200 RSI: 00007fb21ff5b000 RDI: 0000000000000009 [ 1066.980194][ T31] RBP: 000055d589ed6050 R08: 0000000000000000 R09: 0000000000000000 [ 1066.988228][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1066.997832][ T31] R13: 0000000000000000 R14: 000055d589ed81f8 R15: 00007fb22008339c [ 1067.007126][ T31] [ 1067.010897][ T31] [ 1067.010897][ T31] Showing all locks held in the system: [ 1067.018745][ T31] 1 lock held by khungtaskd/31: [ 1067.025211][T30861] bond0 (unregistering): Released all slaves [ 1067.027216][ T31] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1067.043022][ T31] 5 locks held by kworker/u8:5/1112: [ 1067.048366][ T31] #0: ffff88801b7c8148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1067.061581][ T31] #1: ffffc90003adfc40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1067.075507][ T31] #2: ffff88807e298700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1067.087548][ T31] #3: ffff8880b873abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1067.098761][ T31] #4: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 1067.103648][T30861] bond1 (unregistering): Released all slaves [ 1067.110014][ T31] 2 locks held by getty/5578: [ 1067.118770][ T31] #0: ffff8880372080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1067.134821][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1067.149210][ T31] 5 locks held by kworker/u8:21/30861: [ 1067.154792][ T31] #0: ffff88801b6ce948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1067.167369][ T31] #1: ffffc90003dcfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1067.179554][ T31] #2: ffffffff8fbaffb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1067.189718][ T31] #3: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1067.203144][ T31] #4: ffff8880287ee500 (&p->pi_lock){-.-.}-{2:2}, at: kernfs_find_and_get_ns+0x34/0xe0 [ 1067.213681][ T31] 1 lock held by udevd/1384: [ 1067.218320][ T31] #0: ffff888026c20358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1067.228845][ T31] 3 locks held by kworker/u8:23/4883: [ 1067.234589][ T31] #0: ffff88813fe44148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1067.248301][ T31] #1: ffffc9000bbe7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1067.260139][ T31] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1067.271387][ T31] 3 locks held by kworker/1:0/9085: [ 1067.276833][ T31] #0: ffff88813fe03548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1067.292173][ T31] #1: ffffc9000cc07c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1067.303694][ T31] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1067.314858][ T31] 2 locks held by syz.1.10922/13196: [ 1067.320751][ T31] #0: ffff8880418fc6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1067.331637][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1067.342287][ T31] 2 locks held by syz.3.10924/13200: [ 1067.347708][ T31] #0: ffffffff8fb9fbc8 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 1067.360091][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 1067.370223][ T31] 2 locks held by syz.3.10924/13206: [ 1067.375696][ T31] #0: ffffffff901295d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1067.386771][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1067.398321][ T31] 2 locks held by syz.0.10927/13214: [ 1067.404428][ T31] #0: ffffffff90127cd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1067.414603][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1067.424621][ T31] 2 locks held by syz.0.10927/13217: [ 1067.430380][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1067.438833][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1067.448801][ T31] 2 locks held by syz.2.10929/13219: [ 1067.456561][ T31] #0: ffff88807e0be6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1067.470657][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1067.480086][ T31] 1 lock held by syz.4.10930/13226: [ 1067.485638][ T31] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1067.496946][ T31] 1 lock held by syz.4.10930/13227: [ 1067.502869][ T31] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1067.513180][ T31] 1 lock held by syz.4.10930/13228: [ 1067.518496][ T31] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 1067.632654][T30861] bond2 (unregistering): (slave veth5): Releasing active interface [ 1067.640787][ T31] [ 1067.643147][ T31] ============================================= [ 1067.643147][ T31] [ 1067.651911][T30861] batadv1: entered promiscuous mode [ 1067.660829][ T31] NMI backtrace for cpu 1 [ 1067.660851][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1067.660893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1067.660915][ T31] Call Trace: [ 1067.660926][ T31] [ 1067.660941][ T31] dump_stack_lvl+0xe8/0x150 [ 1067.660984][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1067.661006][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1067.661032][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1067.661057][ T31] sys_info+0x135/0x170 [ 1067.661089][ T31] watchdog+0xf90/0xfe0 [ 1067.661121][ T31] ? watchdog+0x209/0xfe0 [ 1067.661154][ T31] kthread+0x388/0x470 [ 1067.661184][ T31] ? __pfx_watchdog+0x10/0x10 [ 1067.661207][ T31] ? __pfx_kthread+0x10/0x10 [ 1067.661238][ T31] ret_from_fork+0x51e/0xb90 [ 1067.661265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.661288][ T31] ? __switch_to+0xc7d/0x1400 [ 1067.661312][ T31] ? __pfx_kthread+0x10/0x10 [ 1067.661343][ T31] ret_from_fork_asm+0x1a/0x30 [ 1067.661389][ T31] [ 1067.661397][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1067.687048][T30861] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1067.688772][ C0] NMI backtrace for cpu 0 [ 1067.688788][ C0] CPU: 0 UID: 0 PID: 30861 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 1067.688809][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1067.688822][ C0] Workqueue: netns cleanup_net [ 1067.688847][ C0] RIP: 0010:__enqueue_entity+0x226/0x7b0 [ 1067.688868][ C0] Code: ff 48 89 e9 48 c1 f9 3f 48 21 c1 48 29 cd 49 63 cf 48 89 e8 48 09 c8 48 c1 e8 20 4c 8b 74 24 18 74 14 48 89 e8 48 99 48 f7 f9 <48> 89 c5 eb 10 4c 8b 74 24 18 eb 09 89 e8 31 d2 41 f7 f7 89 c5 4c [ 1067.688884][ C0] RSP: 0018:ffffc90000007ac0 EFLAGS: 00000802 [ 1067.688898][ C0] RAX: ffffffffffc9725b RBX: fffffffdd0cb1000 RCX: 0000000000000800 [ 1067.688912][ C0] RDX: fffffffffffff801 RSI: ffff88807659bd00 RDI: ffff8880b863ac68 [ 1067.688925][ C0] RBP: fffffffe4b92d001 R08: ffffffff90109077 R09: 1ffffffff202120e [ 1067.688939][ C0] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff88807659bd00 [ 1067.688953][ C0] R13: 0000000000000400 R14: ffff8880b863ac60 R15: 0000000000000800 [ 1067.688966][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1067.688981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.688993][ C0] CR2: 000000110c26bc1e CR3: 000000007591c000 CR4: 00000000003526f0 [ 1067.689011][ C0] Call Trace: [ 1067.689018][ C0] [ 1067.689035][ C0] enqueue_task_fair+0xbb2/0x2b60 [ 1067.689073][ C0] enqueue_task+0x75/0x410 [ 1067.689095][ C0] ttwu_do_activate+0x1cc/0x660 [ 1067.689120][ C0] try_to_wake_up+0x724/0x1390 [ 1067.689147][ C0] hrtimer_wakeup+0x4e/0x60 [ 1067.689166][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1067.689185][ C0] __hrtimer_run_queues+0x529/0xc30 [ 1067.689213][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1067.689230][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1067.689250][ C0] hrtimer_interrupt+0x42b/0x1010 [ 1067.689275][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1067.689298][ C0] __sysvec_apic_timer_interrupt+0x102/0x3d0 [ 1067.689321][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1067.689341][ C0] [ 1067.689346][ C0] [ 1067.689353][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1067.689369][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1067.689389][ C0] Code: 0f 84 44 ff ff ff e8 52 fb 20 00 fb eb 44 e8 4a fb 20 00 e8 05 13 fb 09 4d 85 f6 74 94 e8 3b fb 20 00 fb 48 c7 c7 c0 04 75 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 1b [ 1067.689402][ C0] RSP: 0018:ffffc90003dcf220 EFLAGS: 00000293 [ 1067.689415][ C0] RAX: ffffffff81a33f95 RBX: ffffffff81a33e0f RCX: ffff88802ac40000 [ 1067.689427][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7504c0 [ 1067.689438][ C0] RBP: ffffc90003dcf2d0 R08: ffffffff90109077 R09: 1ffffffff202120e [ 1067.689450][ C0] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 1067.689461][ C0] R13: 0000000000000042 R14: 0000000000000200 R15: 1ffff920007b9e48 [ 1067.689474][ C0] ? vprintk_emit+0x2cf/0x560 [ 1067.689493][ C0] ? vprintk_emit+0x455/0x560 [ 1067.689517][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1067.689536][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1067.689555][ C0] ? lock_acquire+0x106/0x330 [ 1067.689574][ C0] _printk+0xdd/0x130 [ 1067.689600][ C0] ? __pfx__printk+0x10/0x10 [ 1067.689625][ C0] ? __netdev_printk+0x1bf/0x480 [ 1067.689650][ C0] netdev_info+0x11e/0x180 [ 1067.689666][ C0] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1067.689691][ C0] ? __pfx_netdev_info+0x10/0x10 [ 1067.689705][ C0] ? __pfx_bond_update_slave_arr+0x10/0x10 [ 1067.689721][ C0] ? netdev_upper_dev_unlink+0x99/0xe0 [ 1067.689744][ C0] __bond_release_one+0x543/0x1150 [ 1067.689767][ C0] ? __pfx___bond_release_one+0x10/0x10 [ 1067.689790][ C0] ? __pfx_bond_netpoll_cleanup+0x10/0x10 [ 1067.689809][ C0] ? hsr_netdev_notify+0x296/0xce0 [ 1067.689830][ C0] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1067.689852][ C0] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 1067.689877][ C0] bond_uninit+0x129/0x2d0 [ 1067.689895][ C0] ? __pfx_bond_uninit+0x10/0x10 [ 1067.689920][ C0] ? notifier_call_chain+0x37d/0x3a0 [ 1067.689945][ C0] ? __pfx_bond_uninit+0x10/0x10 [ 1067.689963][ C0] unregister_netdevice_many_notify+0x1d16/0x2370 [ 1067.689993][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1067.690017][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1067.690039][ C0] ? net_generic+0x1e/0x240 [ 1067.690058][ C0] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 1067.690075][ C0] ? mutex_is_locked+0x17/0x50 [ 1067.690094][ C0] ? nexthop_net_exit_rtnl+0x232/0x270 [ 1067.690113][ C0] ops_undo_list+0x3d3/0x940 [ 1067.690132][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1067.690150][ C0] ? idr_destroy+0x218/0x290 [ 1067.690166][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1067.690189][ C0] cleanup_net+0x56b/0x800 [ 1067.690206][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1067.690226][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1067.690242][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1067.690259][ C0] process_scheduled_works+0xaec/0x17a0 [ 1067.690288][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1067.690307][ C0] ? assign_work+0x3d5/0x5e0 [ 1067.690326][ C0] worker_thread+0xa50/0xfc0 [ 1067.690355][ C0] kthread+0x388/0x470 [ 1067.690376][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1067.690392][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.690416][ C0] ret_from_fork+0x51e/0xb90 [ 1067.690446][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.690463][ C0] ? __switch_to+0xc7d/0x1400 [ 1067.690479][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.690500][ C0] ret_from_fork_asm+0x1a/0x30 [ 1067.690529][ C0] [ 1067.694041][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1068.328495][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1068.337625][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1068.347728][ T31] Call Trace: [ 1068.351034][ T31] [ 1068.354019][ T31] vpanic+0x1e0/0x670 [ 1068.358039][ T31] panic+0xc5/0xd0 [ 1068.361791][ T31] ? __pfx_panic+0x10/0x10 [ 1068.366230][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1068.371639][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1068.377824][ T31] watchdog+0xfda/0xfe0 [ 1068.382010][ T31] ? watchdog+0x209/0xfe0 [ 1068.386369][ T31] kthread+0x388/0x470 [ 1068.390469][ T31] ? __pfx_watchdog+0x10/0x10 [ 1068.395181][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.399824][ T31] ret_from_fork+0x51e/0xb90 [ 1068.404465][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.409784][ T31] ? __switch_to+0xc7d/0x1400 [ 1068.414490][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.419111][ T31] ret_from_fork_asm+0x1a/0x30 [ 1068.423914][ T31] [ 1068.427569][ T31] Kernel Offset: disabled [ 1068.431916][ T31] Rebooting in 86400 seconds..