last executing test programs: 6.610686804s ago: executing program 0 (id=10843): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="dc42000000000000000000000000000000a6b0736e80d42dece870fcbeaed9e3d1676a3106a26ae19f21a022231946f07cfa8f2872d846", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000080003000000000008000600000100000800090007000000080006000900000008000800ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="481fd0a53d08b18083b6144e2817809c4b2e6deae5c5e7487841ce37200d0de1d424c0d9b475cf3bb6056d77438315f9642b2d1f772228811885a27aba46352174d14919a5ca30f3b1d126e30b147a50a8c43fd9b7fb960c475c1ed8e9580662e21da0e58526ea07eb8fee7e030ba3", 0x6f}, 0x1, 0x0, 0x0, 0x84}, 0x884) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) close(0x3) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="080025bd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673876d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000854}, 0x4040080) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f00000008c0)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x4000040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x181242, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000001c0)=0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x82) close(r6) close(0x4) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)={0x710, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x8000}, 0xb4, 0x7, 0x0, 0xff, 0x11, 'syz0\x00', "2799dd210ea75e241b21346108b6588ee92150da5b0a165d109bfff5bbb30d09", "1b454de14fa9578b6a7f0c973d143731a76649efd6e1514a6a4297e6de55e495", [{0xe, 0x0, {0x2, 0x8}}, {0x2, 0x1, {0x1, 0x5}}, {0x8, 0x101, {0x3, 0xdc}}, {0x0, 0xc6, {0x2, 0x9}}, {0x0, 0x1}, {0x7f, 0xf, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x2}}, {0x7fff, 0x8, {0x2, 0x2}}, {0x1, 0x6d5, {0x0, 0x3}}, {0xbb07, 0x0, {0x1, 0x4}}, {0x7, 0x400, {0x3}}, {0x9, 0x8, {0x0, 0x1}}, {0x6, 0x5, {0x0, 0xeb}}, {0x2, 0x6600, {0x2, 0x70c}}, {0x7fff, 0xfff6, {0x2, 0x1}}, {0x5, 0x7, {0x1, 0x2}}, {0x6, 0x2, {0x1}}, {0x10, 0x4, {0x1, 0x8}}, {0x9, 0x9, {0x0, 0x5}}, {0xf801, 0x7, {0x1}}, {0xc4, 0x5, {0x1, 0x4}}, {0xb227, 0x9, {0x2, 0x6}}, {0x1, 0xc000, {0x2, 0x2000}}, {0x6, 0x9, {0x3, 0x5}}, {0x8e, 0x1, {0x1, 0x2}}, {0xd0fb, 0x1957, {0x1, 0x2}}, {0xd, 0x5, {0x3, 0x4}}, {0x6, 0x5, {0x1, 0x8}}, {0x2, 0x1, {0x3, 0x7}}, {0x0, 0x6, {0x1}}, {0x2, 0xd0cc, {0x2, 0x6}}, {0xf39b, 0xfffd, {0x1, 0x7f}}, {0x6, 0x2b3, {0x1, 0xfffffc01}}, {0x6, 0x8, {0x0, 0x6}}, {0x8, 0x5, {0x1, 0x1}}, {0x6, 0x401, {0x3, 0x10001}}, {0x8724, 0x1000, {0x0, 0x3}}, {0x4, 0xffff, {0x0, 0xf27f}}, {0x9, 0x8, {0x2, 0x4}}, {0x9, 0x0, {0x2, 0xffffff23}}]}}}, {{0x254, 0x1, {{0x27598915a8bc3cab, 0xfffff809}, 0x6, 0xfd, 0x0, 0x5, 0xe, 'syz1\x00', "7916d72dc64c05f295449774eed3efa25b3b51ca08f5d6256ad7b688ae79e188", "10f21df92f2e20de88594c1062dbfdcdf66219267611f755682d9e6d8f1847fe", [{0xff01, 0x10, {0x3, 0x76}}, {0x0, 0x0, {0x1, 0x9}}, {0x7, 0x3ff, {0x2, 0x2}}, {0x3, 0x4, {0x3, 0x200}}, {0x1, 0x5, {0x0, 0x8}}, {0x1aa, 0x7fff, {0x1, 0x81}}, {0x1000, 0x7f, {0x0, 0x1}}, {0x1, 0xf0bf, {0x0, 0x3}}, {0x2, 0xfffa, {0x1, 0x7fffffff}}, {0x9, 0xfff4}, {0x9, 0x80, {0x2, 0x6}}, {0x80, 0xb, {0x3, 0x6}}, {0xf7cd, 0x4, {0x1, 0x1}}, {0x2f9c, 0xe5, {0x2, 0xd0}}, {0x2, 0x8, {0x2, 0x8}}, {0xda00, 0xf754, {0x3, 0x5}}, {0x40, 0x8, {0x3, 0x81}}, {0x400, 0x7, {0x0, 0xffff0fff}}, {0x2, 0xd3, {0x3, 0x9ce}}, {0xc9, 0x8, {0x3, 0x6}}, {0x4, 0xaac, {0x0, 0x7f}}, {0x2, 0x2, {0x2, 0xda6}}, {0xd6, 0x0, {0x2}}, {0x8, 0xb8, {0x3, 0x7}}, {0x2, 0x3ff, {0x1, 0x896}}, {0x6, 0x9, {0x1}}, {0x4, 0x8000, {0x2, 0x1ff}}, {0x6, 0xa, {0x2, 0xffff0001}}, {0x8, 0x4, {0x3, 0x8}}, {0x6, 0x7}, {0x3, 0x2, {0x0, 0xffff}}, {0x9, 0x401}, {0x4, 0xb46, {0x2, 0x9}}, {0x9, 0x6, {0x0, 0x5682}}, {0x5, 0xc, {0x3, 0x3}}, {0x5, 0x6, {0x1, 0x7ff}}, {0x3, 0x5, {0x2, 0xc5}}, {0x8, 0x80, {0x0, 0x5}}, {0x5, 0xa, {0x1, 0x9}}, {0x1, 0x9, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x2}, 0x0, 0x0, 0x100, 0xfc00, 0xc, 'syz0\x00', "abdabac090231b4ad3d1b65558179cc5f619f6fe7e595a12b622c47162fcc6a4", "15eb4490b257e551e0d3a6b33a2fd7618b361d0932e59a0ec3a37fb5c640e93e", [{0x5, 0x6, {0x2, 0x9}}, {0x44e, 0x1026, {0x1, 0x7}}, {0x38f, 0x145, {0x3, 0x7}}, {0x5, 0x9, {0x0, 0x8}}, {0x8, 0xa4, {0x2, 0x81}}, {0x101, 0x6, {0x2, 0x3}}, {0x7ff, 0xfd67, {0x1, 0x401}}, {0x4, 0x6, {0x0, 0x4}}, {0x3, 0x2, {0x3, 0xffffffff}}, {0x7f, 0x265d, {0x71f1c98fc51c46f0, 0xb}}, {0x7, 0x8, {0x2, 0x5}}, {0x0, 0xfff}, {0x1ff, 0x80}, {0x421f, 0x9, {0x0, 0x3d8a}}, {0x2, 0xd95, {0x0, 0x2}}, {0x3, 0x0, {0x1, 0x200}}, {0x6, 0x0, {0x1, 0x3}}, {0x9, 0x1, {0x2, 0xf5}}, {0x1, 0x7, {0x3, 0x7fff}}, {0x9, 0x9, {0x3, 0x6}}, {0x80, 0x0, {0x0, 0x8}}, {0xfd29, 0xff7c, {0x1b262d609544792, 0x5}}, {0x2, 0xe7cd, {0x0, 0xa}}, {0x81, 0x1, {0x2, 0x8}}, {0x80, 0x0, {0x1, 0x7}}, {0x8, 0x81, {0x1, 0xa}}, {0x4ea0, 0x6, {0x1, 0x3}}, {0xa, 0x8c, {0x0, 0xfffffffe}}, {0x0, 0x6, {0x2, 0x8141}}, {0x4, 0x5, {0x1, 0x8d}}, {0x700, 0x2698}, {0x2, 0x101, {0x17ea1db35fadcd91, 0x1000}}, {0xc, 0x1, {0x1, 0x53}}, {0x6, 0x3, {0x2, 0x6}}, {0x0, 0x9, {0x1, 0x6}}, {0x4, 0x9, {0x0, 0x7}}, {0x200, 0x0, {0x2, 0x7}}, {0x7, 0x9, {0x2, 0x8}}, {0x200, 0x6, {0x3, 0x2}}, {0x0, 0x4ec4, {0x0, 0x7}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4028044}, 0x4c002) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="002100ab80000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c015) 6.536251481s ago: executing program 4 (id=10844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES32=r1], 0xe4}}, 0x2404c800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x491, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 6.327283115s ago: executing program 4 (id=10847): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000380)=@bcast) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', 0x0, 0x0, 0x0) 6.058590212s ago: executing program 4 (id=10851): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) unshare(0x6020480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x2}, 0x38) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) 5.360265691s ago: executing program 4 (id=10853): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000680)=0x8, 0x12) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4e94692a88e9be336877a5d1fd4e3e3457fcdce7d952f3f14089167ab4776819c0d16a38446b235f67df52cadcbe1610c63fbb0294fc77fdc811ebc8e5821c46c2eb3e22861b4bf6fc1d84e26a0345cdbde018f4d7b04cc81f99a3312d8afa8aca7b4dbc389b01af79890140733e23759d96e01dc2f42df84bb36535ae898a060e61052131e4f7b", 0xb3}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) close(r3) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) (async) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) listen(0xffffffffffffffff, 0x406) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async) close(r6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) (async) socket$packet(0x11, 0x3, 0x300) 5.146427569s ago: executing program 0 (id=10855): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.300169917s ago: executing program 0 (id=10863): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000240)={@local, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="40486d7f8e2899f7b6f285078ec3da4f62a3fc6a1de04bee43327c950eecbc0a97ceb5d6e6c346f1f3c4dbbe166fb6b9e739a8a8e2f45de077d15a0a8c0c712643e5f37e1fe8e5ff843da1d04de26c4514c1c22a6b8e7cd06c7ee96e26b5e8a15aced80885ef8de94cb8c9c68ee26aee8a201b961a6236a54f3d731859df12e2fbeab6af26e9b65c2d48e5cd2d", 0x8d}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="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", 0x1000}], 0x3, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @remote}}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@cipso={0x86, 0x50, 0xffffffffffffffff, [{0x2, 0x4, "11c6"}, {0x2, 0xb, "d8313a0aeec249f263"}, {0x2, 0x7, "cd71e5fdd6"}, {0x2, 0x6, "67d8b8db"}, {0x5, 0xb, "f3455f515600f0ab9a"}, {0x7, 0xd, "8c777433d00616fd6968e1"}, {0x0, 0x11, "e407064226257447c2149ee469ed77"}, {0x1, 0x5, "b68469"}]}, @rr={0x7, 0xf, 0xf7, [@local, @empty, @empty]}, @generic={0x86, 0x10, "efeed77cb83fba138cc6511f292f"}, @lsrr={0x83, 0x7, 0x1c, [@loopback]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x6, [{@multicast2, 0xac3}, {@rand_addr=0x64010101, 0x1f3}, {@private=0xa010101, 0x8}, {@multicast2}, {@multicast2, 0x81}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x533}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x8, [{@empty, 0x1}, {@private=0xa010100, 0x7}, {@multicast2, 0x100}, {@remote, 0x7}]}, @noop, @lsrr={0x83, 0x17, 0x8e, [@dev={0xac, 0x14, 0x14, 0x28}, @loopback, @empty, @private=0xa010101, @local]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xe8, 0x0, 0x6, [0x5, 0x4, 0xd357, 0x0]}, @lsrr={0x83, 0x27, 0xac, [@local, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, @rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @loopback, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3e}]}, @timestamp={0x44, 0x18, 0xfb, 0x0, 0x6, [0xffff, 0x6, 0x4, 0x3, 0xfffffffe]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x208}}, {{&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000680)="fabb3add99a968", 0x7}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x702}}], 0x98}}, {{&(0x7f00000007c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000800)="89dc34ade9ca9bdcf1ed4c21ee8c490ad6e76a457f9afabb4a8da671e4bbed3fabcf2ab1294d04ea4bd14e370af7f18912243c5f4303d1794b638739d0e4032c3dca94d408fd23161965b35e2cd2ecec30b50fd74b3af65448076040f8f4dc94f09ade9387fa1032893ff640b38f40885478b88606c6970f00a9dd6f4b23829a5ba7321bf8311914ca5c9c54a9c6f20e09189436d7867d9b601da3182be6b7eaa870020543d5f1dca336c9289791370e5dda1a73c47a1046", 0xb8}, {&(0x7f00000008c0)="4f496181e606cadf132ddd7ae0919ea32374b8bbfff021146a7c636e579534bffc094aafde46515bd981f9dcfb7f5fab7ed5c98f95152e7c3133f3c019418013e15f7e76afeb35f3dca4ac24c6e6ee19a1f2ed5b2c950581f6fa41680170d5645e26e05a16231c784066e3f610ace6a7539368c092a3170450b4741b0cd189ee527344b8fd9a641282bcc8280762f94da039ae1e7099d9d055d6fd16de55d11ad02ac35dff855130101dc279", 0xac}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f0000000980)="95c3c36e3ec349562f9e6755b2b859b947a0910cdfc0a50bc1259487b4afee02df386979538068ed92244084306c309266e4c144bc8e120506c2c78b833a3a83ed602ddb7f3685030a0bf1", 0x4b}, {&(0x7f0000000a00)="709983ec3d60b7a6b68420e5fc3d34ed178e21b493ee1710000c29", 0x1b}, {&(0x7f0000000a80)="b1a59b1e05e7f0b5b9e8641413b5a6eca83c3aa8fad4afcf5f6c1885b8b00669c2d23d6563bba2df38681da3ca37be11808f7fe46cde8ace66f8ec9eaf9e8ea6d5ac61cdc93c417905a581fc12ebebb4230407a70450dfe845ea6b5d6057bb58ff1422f9417e5a0b4e254382779d53f86b31c0fcaa1edd53e0d1a3bac34eafdf7bc0c88db17fd716fe3672f0d5609dff51d8346040922ff35fe826fcdf591b3096580a32e99f458c98fd4c99c7434b3bc5c1185065682a01ef1c6d3fcac68ac5e7f7d64252518135185b0e74a7bf", 0xce}, {&(0x7f0000000b80)="1b807b0c36eb905de6a60d0a7f618c650dadfee0e6a56fe09b5685d204353df22251a617b3c3f71346006e4b057b4e068b5dedc9c61ff8d04f5317185ad91ec18591", 0x42}], 0x7, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x54, [@loopback, @broadcast, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x30000000}}], 0x80}}], 0x4, 0x4000000) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)={0x54, r9, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x4, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}]}, 0x54}}, 0x4014080) 3.61499503s ago: executing program 0 (id=10865): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x10, 0x0, 0x1, [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000006b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000000800)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000840)=0x28) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4457618bc81780a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x104, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x60}]}}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x348}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a3100400000180003"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000940)=ANY=[@ANYBLOB="88ff"], 0x20) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004a23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}, {&(0x7f0000000080)="37532a1a808f75b5", 0x8}, {&(0x7f00000000c0)="e9e6f8e756feffccc208d2f8ade8bbbd6c7988fc9766c87b2ff7b4d06e63de5363057f1ab2280b7431d8c6e640be6b392d74b08bb38a6547893c5df2e238f42638dd65065a28339fafbd5984bcb23ca8bc6a898884224d292935f593", 0x5c}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000140)="dfe7bfb628481a7894d04c610964364cd5c913ca3ede078c4e7b3c3123e1e8672dee6c39c8652915901478caaa59d20e979743d8645abc8e36fab92c9054000000008b8205c7bb5ae171833fd4dcf1a3314f80200ec2af1325fa61cb0ecc50896d08c4e8317b7b9dbd97ee5795cd2aae9e91", 0x72}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.210950096s ago: executing program 0 (id=10869): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x7, 0x700, 0xb, 0x9, {{0x30, 0x4, 0x0, 0x9, 0xc0, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x1b}, @local, @local, @loopback, @loopback, @local, @multicast2]}, @generic={0x88, 0x4, "967a"}, @timestamp={0x44, 0x4, 0xfe, 0x0, 0x9}, @timestamp_prespec={0x44, 0x54, 0x24, 0x3, 0x2, [{@local, 0x4}, {@multicast1}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@multicast1, 0x7}, {@empty, 0x5}, {@local, 0x10}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@rand_addr=0x64010101, 0x7ff}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x4, [{@rand_addr=0x64010100, 0x97fe}, {@empty}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x8, [{@multicast1, 0x7fffffff}, {@empty, 0xb}]}]}}}}}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) connect$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x9}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000240)={r14, 0x7eeb}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000002c0)={r14, 0x3}, 0x8) 2.758296121s ago: executing program 0 (id=10874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x700, 0x3, 0x80001000, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0xfffe, 0x0, 0xfb, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r2, 0x0, 0xa0028000}, 0x86) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x3}, 0x44001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x8c}}, 0x20000014) 2.424527115s ago: executing program 1 (id=10877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000080000000b000000000000009f5c17", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @empty}, &(0x7f00000003c0)=0xc) (async, rerun: 32) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x9, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000070000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000483000000bf090000000000005509010000000000950000000000000006780000050000008500000006020000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5a2, 0x48, &(0x7f0000000300)=""/72, 0x40f00, 0x4, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x2, 0x40, 0x5}, 0x10, r6, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x4, 0x5, 0x8, 0x4}], 0x10, 0x7ff}, 0x94) (async) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0xe, 0x0, @val=@tracing={r6, 0x6}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r1, 0x4, r1}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a010200000000000000000100000009000100040000000000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) (rerun: 64) 2.221468156s ago: executing program 1 (id=10880): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000840}, 0x8800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x200, 0x7fffffffffffffff, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x206) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130001002ebd7000fddbdf2500000000", @ANYRES32=r13, @ANYBLOB="024a0000c10400000c002b80080002000000000008002800"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x40880) bind$packet(r11, &(0x7f0000000d00)={0x11, 0xd, r10, 0x1, 0x0, 0x6, @local}, 0x14) getuid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr=0x64010102, @in6=@loopback, 0x4e23, 0x8, 0x4e20, 0x10, 0x2, 0x0, 0x20, 0x32, r10, r6}, {0x7, 0x2, 0x78e, 0x0, 0x74fd1d58, 0x400, 0x6, 0x3}, {0x7, 0x7, 0xffffffff7fffffff, 0x8}, 0x4e, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, 0xa, @in=@multicast2, 0x3505, 0x0, 0x3, 0x2, 0x6, 0xb, 0x730}}, 0xe8) close(0x4) 1.833934604s ago: executing program 1 (id=10885): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @val=@tracing={0x0, 0xfffffffffffffffa}}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="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", 0x1c0}], 0x1, 0x0, 0x0, 0x40054}, 0x4040884) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5e", 0xf2}], 0x1}}], 0x1, 0x4044805) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd09000400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0xa, 0x4e26, 0x1df6b78c, @mcast2, 0x43}, 0x1c, 0x0}}], 0x1, 0xff00) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x17, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.639094813s ago: executing program 1 (id=10888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x22, 0x80005, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002009400000008000340000000d50800044000000001080006400000000208000140000000130900010073"], 0x94}}, 0x8000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c", 0xc}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7c", 0xbf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab095", 0x9a}, {&(0x7f0000000a00)="a7c652df859ed276", 0x8}, {&(0x7f00000021c0)="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", 0x1b1}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000400)=[{0x94}]}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, 0x0, 0x3b, r1}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3c4253b9102040000000ce0f7843884bc6aa470f3691d10000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.407453706s ago: executing program 3 (id=10889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.187970419s ago: executing program 2 (id=10891): socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86", 0x28}, {&(0x7f0000000040)="0b232f21f27500000000593f906ff62289709a092cc72a00fcf64c44b0dc0e203d96ae987c9ae03f5e4328", 0x2b}], 0x3, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b000000010003904000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012800b0001006970366772650000800002800600030080000000080004000300000006000e0002000000"], 0xb0}, 0x1, 0x0, 0x0, 0x240000d2}, 0x0) 1.167828507s ago: executing program 3 (id=10892): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40000081}, 0x4008004) 1.068348285s ago: executing program 2 (id=10893): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x25e}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a40)=""/4054, 0xfd6}, {&(0x7f0000002f00)=""/4131, 0x1023}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/179, 0xb3}], 0x6}, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r3, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xe0b, 0x7c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0xc014) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="8000260b08000200"], 0x34}, 0x1, 0x0, 0x0, 0xc021}, 0x20040010) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@bridge_delvlan={0x88, 0x71, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x80, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7f}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40840) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000006110b5000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 1.007715689s ago: executing program 3 (id=10894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20600) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e10500000086dd00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 860.466901ms ago: executing program 2 (id=10895): r0 = socket(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30d) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r2, 0x0, 0x18, 0x0, &(0x7f00000010c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) getsockopt(r2, 0x1b, 0x800, &(0x7f0000000100)=""/27, &(0x7f0000000180)=0x1b) socket(0x27, 0x80001, 0x0) 779.291145ms ago: executing program 3 (id=10896): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6e9dd8ba317a8228}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d}, 0x8010) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 517.372266ms ago: executing program 3 (id=10897): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', r1, 0x7, 0x700, 0xb, 0x9, {{0x30, 0x4, 0x0, 0x9, 0xc0, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x1b}, @local, @local, @loopback, @loopback, @local, @multicast2]}, @generic={0x88, 0x4, "967a"}, @timestamp={0x44, 0x4, 0xfe, 0x0, 0x9}, @timestamp_prespec={0x44, 0x54, 0x24, 0x3, 0x2, [{@local, 0x4}, {@multicast1}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@multicast1, 0x7}, {@empty, 0x5}, {@local, 0x10}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@rand_addr=0x64010101, 0x7ff}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x4, [{@rand_addr=0x64010100, 0x97fe}, {@empty}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0xc, [{@multicast1, 0x7fffffff}, {@empty, 0xb}]}]}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8100, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000da01c9ae93f872576d9cd27b268c47a1059439c8fd9e5eb6bdf462d75e08d8d30d4dd0bfd2f79c03435b291b0b24e08d41e0f3be5456ed8abe914b2c6ff405545339e698", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1b, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6ab1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x0, 0x3, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f0000000240)={r15, 0x7eeb}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000002c0)={r15, 0x3}, 0x8) 463.131049ms ago: executing program 1 (id=10898): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x61, 0xfa90ab278b7ea51d, 0x0, 0x5f, 0x2e]}}, 0x0, 0x1f, 0x0, 0x0, 0x1000}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 347.074787ms ago: executing program 1 (id=10899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x3, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000240)="ebe3128280", 0x5}], 0x2}], 0x1, 0x40800) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 287.237357ms ago: executing program 2 (id=10900): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001240)={{r0, &(0x7f00000002c0)='\x00', 0x483, &(0x7f0000000340)={@_ha_fsid={[0x1, 0x7]}, {0x401, 0xb, 0x9, 0x1}}, 0x1, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x40}, 0x4, &(0x7f0000001180)=[{0x3, 0x4, &(0x7f0000000440)='^\x00', &(0x7f0000000d00)="a8241c797a35be34f7a20c7e9d15304b84b4ff82180557fb56ff1cf1952350c3bbe64a29efdcb26b8134e25b635edd8a447882bc3af79acf31cb2a03af4dc122977b9f56bc3f5780569bc970d72cb1cfc108af9911fcb6772892a28ef37da395f1b1020b03a708e4d58aad685171d2a3ef5eba8ac8a5b2ebea1d02195355109ad28316509770f3459bb8a81f30dbe3cc156d85ab32d650180e399d19d5260ba0f3fec038d697f789f4c88ea44795cec20745a312e66a9c41698096bd9c78ba4025bd9155798c67e74765851fd7953069e0d741913a", 0xd5, 0x12}, {0x3, 0x4, &(0x7f0000000480)='\x00', &(0x7f0000000e00)="166ba1d74559dba76fbf9efba94a1d0e5bc1329d3c8343415e7823f0b98f256c60091053512c2e066c6938f8351f2c3db2a2afcbd517ad5a8ef6f88618d37fe989331bb04395c3a59b4147afedc4f53f0a01ff528a9dc15623f09c06f61b05f7c18098f9f5b6266f5a77f40b5f3417b02e4878a72589b10b94ecc43e2b5b7e3f3859dc3819afd84486d6a5db9151253cb311055db431aaaa5eb8424be72baf897eb52d894cf9a7cbe42605514066892ebfd03caa15d9d8606b91d7c396cd8ca7905d0ca5e6d34ff99ffbda7038d66941636f08db064d73f96a", 0xd9, 0x30}, {0x2, 0xffff4ffa, &(0x7f0000000f00)='.+[},\x00', &(0x7f0000000f40)="e963afc9738ce0aabbbc32d24272dd4a5d65ccca6bf2e3ea722f477fac410ea3a627da6b59bde0843f585f6a61371a9b83b99a900ef6398ceabae22b943769eb1666c0637e8ffc7e099380c5b89cc14f8c7fd6443394d7c99bfd6ddfa9a6d9934fd1f02972c05330a0349cceb41bd1236da219d29fe98f3528030140954e4379c32cda8933249943c0942b776fd55baa9ff300fa02346289105cc53480a012ee8fa22cb467e55553117cb255b239cc775020c798fe88237d85a8dc30fa06eb820c6b1d89717268", 0xc7, 0x22}, {0x1, 0x5a4, &(0x7f0000001040)=',:*\x05-)(\x00', &(0x7f0000001080)="fc3805d0ef19c3b220aed7729b01cad350f536ff31333225d0c5fb68dd616f024924d734af85c0768908ac0c65ab70dd515c802cdcafdd3c48bac8e3cce56cc0d24a486b87bde58a38cd4b046390dc21481de46b0e32a64f4cc070341c40497f8f15f314a45059dc243d9895e55a7eb4f333d372e51b7c3a6ad977cfd3153188ebe443ea2f5a092ebd2b24759ad01f3f0822886b48303ef237fd0e4fdada34182a1c1f5c94141401a2f10ced35b7a696437b1276d451053f82a065792d6383d857815c492c82aa1633d1c56c06", 0xcd, 0x2}]}) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001300)={0x1, 0x7fffffffffffffff}) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000900)={0x10, 0x1, {0x3, @usage=0x9f90, 0x0, 0x4, 0x1, 0x10001, 0x120, 0x8, 0x2, @usage=0x2, 0x3, 0x80, [0x3, 0x9, 0x8, 0xa, 0x8, 0x2]}, {0x7e8, @struct={0xffffff01, 0x4}, 0x0, 0x6b, 0x7c, 0x7, 0x1631, 0x8, 0x48, @usage=0x8001, 0x5651, 0x200, [0x7ff, 0x1, 0x3ff, 0x85, 0x6, 0x100000001]}, {0x9, @struct={0x2, 0x1}, 0x0, 0x10, 0x7, 0x1a9c, 0x5, 0x42, 0x4c0, @usage=0x10000, 0x839e, 0x8, [0x81, 0x0, 0x0, 0x7, 0x4, 0x60]}, {0xfba3, 0x0, 0x7}}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000000)={{r4}, {@val={r5}, @actul_num={@void, 0x5, 0x70}}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0x1, 0x2000000, 0xdcc3, 0x0, 0x4, 0x4, 0x3, 0x4, 0x3ff, 0xfffffffc, 0x7fffffff, 0x40, 0x9, 0x5, 0x3, 0x3, 0x2, 0x216b, 0x3, 0x8, 0x8, 0x8, 0x0, 0x2, 0x4, 0x6, 0x0, 0x100, 0x0, 0xff, 0x80000000, 0x0, 0xffffffff, 0x1000, 0x0, 0xffffffdd, 0x0, 0x200, 0x9, 0x2, 0x2, 0x5, 0x6, 0x0, 0x9, 0x7, 0xc1ba, 0xc, 0x5, 0x689a, 0x4, 0x100, 0x8, 0x1, 0x5, 0x3, 0x1ff, 0xff, 0x2, 0x6, 0x8, 0x2, 0x4, 0x0, 0x8000, 0xa5, 0x0, 0x1000, 0xd6, 0x8, 0x8652, 0x5, 0x5, 0x401, 0x7f, 0x5, 0x5, 0x17, 0x401, 0x3, 0x101, 0x8000, 0x7ff, 0x400, 0x5, 0x0, 0x2, 0x7, 0xffffffff, 0x5fb3, 0x5, 0x6, 0x8, 0x7000, 0xe, 0x5, 0xffff6842, 0x1ff, 0xfffffc01, 0x9, 0x1000, 0xc0a9, 0x1, 0x4, 0x370b, 0xfffffffd, 0x4, 0x400, 0x8, 0x5, 0x3, 0xfff, 0x9, 0xa, 0xa5, 0x3, 0x8, 0xfffffff5, 0x9, 0x6, 0xfffffffd, 0x5, 0xe, 0x5, 0xf6d, 0x9, 0x7, 0x6, 0x0, 0x9, 0x10, 0xb, 0x2011, 0x550f, 0x9, 0x5, 0x446b, 0xa00, 0x80200, 0x0, 0x3, 0x8, 0x6, 0x2b, 0x9a, 0xf6a, 0x9, 0xcd, 0x9, 0x2a7, 0x1, 0x6, 0x0, 0x7, 0x13d5507c, 0x7a9, 0x8000, 0x9, 0x10, 0x9, 0x37b1, 0x7fffffff, 0x814, 0x0, 0x7, 0x14c, 0x9, 0x6, 0xfc9, 0x7, 0x7f3, 0x7ff, 0x1, 0x10000, 0x7, 0x0, 0x8001, 0x1, 0x4, 0xc, 0x7, 0x6, 0x8, 0xffffffff, 0x4, 0x6, 0x4, 0xd93f, 0xffffffc6, 0x5, 0x7, 0x3, 0x3, 0x3, 0x9, 0x8, 0x9, 0x8, 0x4, 0xb, 0x5, 0x2, 0x101, 0x7ff, 0x5, 0x5, 0x9, 0x4, 0xd27a, 0x6, 0xfffffff9, 0x8, 0x4, 0x1ca9, 0x8, 0x1, 0xe, 0x5, 0xff, 0xf6, 0x400, 0xacc8, 0x9, 0x2, 0x7, 0xa, 0x8, 0x5, 0x7, 0x7, 0x3, 0x80005, 0x7, 0xfff, 0x2, 0xf, 0x33, 0x2ba3, 0xff, 0x7, 0x18, 0x7, 0x0, 0x40, 0xe8d9, 0x7, 0x9, 0x6, 0x7, 0x9, 0xffff, 0x8, 0x9, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) (async) r10 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0xa, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x6c}, 0x2, @in=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 239.15874ms ago: executing program 4 (id=10901): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) unshare(0x28000600) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) 215.614527ms ago: executing program 3 (id=10902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x60, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090c2}, 0x4040005) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500010800000085000000a5000000951b8ded6f867d8134e01d4de8614409f8feb9f79aaa3f1bf5fecd60dea92e486adc9f98f380910d04f5724300346e7198f1627570fbd129bcf4d578bcf351204d652a30c893c1b400e1266b30804b3d16cbd72c36fde782f025c329a208e4cd330f7a57db6f54444084946b9f7bef31fd1b37d294c76158e81096e83ec44bf02686309c4ac95e581db058cb110232239482ae52f0b8ab3e17851703e005f608bd37f210b0902832df7b354680f26a28bd"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) 128.078233ms ago: executing program 2 (id=10903): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x100, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, 0x21111, 0x8811}}, 0x20}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 63.827677ms ago: executing program 4 (id=10904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x27, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xa, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) 0s ago: executing program 2 (id=10905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r2, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r3, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x2}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="8a7c444062d6"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000050) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x10, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xf}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x4, 0x8}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x5c, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendmmsg$inet6(r7, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r9, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'caif0\x00'}) sendto$inet6(r9, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e9", 0xeb, 0xbcff, 0x0, 0x0) kernel console output (not intermixed with test programs): _read+0x10/0x10 [ 934.129715][ T8386] vfs_read+0x20c/0xa70 [ 934.129734][ T8386] ? fdget_pos+0x246/0x320 [ 934.129756][ T8386] ? __pfx___mutex_lock+0x10/0x10 [ 934.129781][ T8386] ? __pfx_vfs_read+0x10/0x10 [ 934.129803][ T8386] ? __fget_files+0x2a/0x420 [ 934.129824][ T8386] ? __fget_files+0x3a0/0x420 [ 934.129840][ T8386] ? __fget_files+0x2a/0x420 [ 934.129865][ T8386] ksys_read+0x150/0x270 [ 934.129888][ T8386] ? __pfx_ksys_read+0x10/0x10 [ 934.129920][ T8386] do_syscall_64+0x14d/0xf80 [ 934.129943][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.129961][ T8386] ? clear_bhb_loop+0x40/0x90 [ 934.129983][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.130000][ T8386] RIP: 0033:0x7ff7f595c84e [ 934.130018][ T8386] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 934.130034][ T8386] RSP: 002b:00007ff7f67e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.130053][ T8386] RAX: ffffffffffffffda RBX: 00007ff7f67e86c0 RCX: 00007ff7f595c84e [ 934.130067][ T8386] RDX: 000000000000000f RSI: 00007ff7f67e80a0 RDI: 0000000000000005 [ 934.130079][ T8386] RBP: 00007ff7f67e8090 R08: 0000000000000000 R09: 0000000000000000 [ 934.130090][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.130101][ T8386] R13: 00007ff7f5c16038 R14: 00007ff7f5c15fa0 R15: 00007ffd44e36ae8 [ 934.130130][ T8386] [ 934.364641][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 934.427759][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.442095][ T8382] team0: Port device bond0 added [ 934.473356][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.480638][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.487863][ T8354] bridge_slave_0: entered allmulticast mode [ 934.495393][ T8354] bridge_slave_0: entered promiscuous mode [ 934.507237][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.514665][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.522048][ T8354] bridge_slave_1: entered allmulticast mode [ 934.529553][ T8354] bridge_slave_1: entered promiscuous mode [ 934.564536][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.577452][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.633189][ T8354] team0: Port device team_slave_0 added [ 934.641621][ T8354] team0: Port device team_slave_1 added [ 934.688876][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.703431][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.733233][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9179'. [ 934.742675][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.755266][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9179'. [ 934.798476][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.815602][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.898246][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.019225][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9181'. [ 935.080263][ T8354] hsr_slave_0: entered promiscuous mode [ 935.092916][ T8354] hsr_slave_1: entered promiscuous mode [ 935.109048][ T8354] debugfs: 'hsr0' already exists in 'hsr' [ 935.119653][ T8354] Cannot create hsr debugfs directory [ 935.258080][ T8426] lo speed is unknown, defaulting to 1000 [ 935.410606][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9188'. [ 935.464096][ T7729] Bluetooth: hci2: command tx timeout [ 935.657130][ T8455] netlink: 'syz.4.9190': attribute type 8 has an invalid length. [ 935.679587][ T8457] netlink: 'syz.1.9191': attribute type 8 has an invalid length. [ 935.710490][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9190'. [ 936.212020][ T8487] syzkaller0: entered promiscuous mode [ 936.217731][ T8487] syzkaller0: entered allmulticast mode [ 936.228679][ T8354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.247582][ T8354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.272340][ T8354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 936.331413][ T8354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 936.589238][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.656609][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.671548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 936.679647][ C1] lec:lec_tx_timeout: lec0 [ 936.684155][ T8520] syzkaller0: entered promiscuous mode [ 936.690474][ T8520] syzkaller0: entered allmulticast mode [ 936.718392][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.725599][ T7510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.957251][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.964458][ T7513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.018980][ T8528] syzkaller0: entered promiscuous mode [ 937.027906][ T8528] syzkaller0: entered allmulticast mode [ 937.135843][ T8542] pimreg3: entered allmulticast mode [ 937.368930][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.482580][ T8354] veth0_vlan: entered promiscuous mode [ 937.520309][ T8354] veth1_vlan: entered promiscuous mode [ 937.542935][ T7729] Bluetooth: hci2: command tx timeout [ 937.666219][ T8354] veth0_macvtap: entered promiscuous mode [ 937.698044][ T8354] veth1_macvtap: entered promiscuous mode [ 937.737123][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.755817][ T8571] netlink: 'syz.1.9223': attribute type 1 has an invalid length. [ 937.765565][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.773296][ T8571] __nla_validate_parse: 6 callbacks suppressed [ 937.773310][ T8571] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9223'. [ 937.789615][ T7513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.805696][ T7513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.815386][ T7513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.829086][ T7513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.845091][T17441] IPVS: starting estimator thread 0... [ 937.855637][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9224'. [ 937.940244][ T7513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.945293][ T8576] IPVS: using max 32 ests per chain, 76800 per kthread [ 937.969031][ T7513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.031930][ T7513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.039788][ T7513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.076176][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9228'. [ 938.116576][ T8584] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9228'. [ 938.133898][ T8588] Cannot find add_set index 0 as target [ 938.172973][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9228'. [ 938.416028][ T8600] netlink: 'syz.0.9233': attribute type 16 has an invalid length. [ 938.426082][ T8600] netlink: 'syz.0.9233': attribute type 17 has an invalid length. [ 938.542965][ T8600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 938.568984][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9165'. [ 938.825963][ T8609] lo speed is unknown, defaulting to 1000 [ 938.878832][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9237'. [ 938.926541][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9238'. [ 938.936073][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.983433][ T8616] bridge_slave_1 (unregistering): left allmulticast mode [ 938.994481][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9238'. [ 938.998417][ T8616] bridge_slave_1 (unregistering): left promiscuous mode [ 939.015644][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.626876][ T7729] Bluetooth: hci2: command tx timeout [ 940.559523][ T8640] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9242'. [ 940.574981][ T8640] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 940.695812][ T8649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.442731][ T8708] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 941.462575][ T8705] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 941.600554][ T8709] lo speed is unknown, defaulting to 1000 [ 941.712408][ T7729] Bluetooth: hci2: command tx timeout [ 941.842793][ T7514] dummy0: left allmulticast mode [ 941.847796][ T7514] dummy0: left promiscuous mode [ 941.872193][ T7514] bridge0: port 3(dummy0) entered disabled state [ 941.933063][ T7514] bridge_slave_0: left promiscuous mode [ 941.938858][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.143595][ T8739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.150909][ T8739] IPv6: NLM_F_CREATE should be set when creating new route [ 942.168823][ T8739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.176132][ T8739] IPv6: NLM_F_CREATE should be set when creating new route [ 942.568241][ T7514] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 942.607481][ T7514] bond7 (unregistering): (slave gretap1): the permanent HWaddr of slave - e6:79:ee:46:c0:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 942.659326][ T7514] gretap1 (unregistering): left promiscuous mode [ 942.689629][ T7514] bond7 (unregistering): (slave bond8): making interface the new active one [ 942.719964][ T7514] bond8 (unregistering): entered promiscuous mode [ 942.812543][ T7514] bond3 (unregistering): (slave geneve4): Releasing active interface [ 942.872456][ T7514] team0: Port device geneve0 removed [ 942.948609][ T8770] __nla_validate_parse: 38 callbacks suppressed [ 942.948628][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9271'. [ 943.126370][ T7514] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 943.327633][ T7514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.336576][ T7514] bond_slave_0: left promiscuous mode [ 943.342243][ T7514] bond_slave_0: left allmulticast mode [ 943.349254][ T7514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.358982][ T7514] bond_slave_1: left promiscuous mode [ 943.364986][ T7514] bond_slave_1: left allmulticast mode [ 943.370830][ T7514] bond0 (unregistering): Released all slaves [ 943.381259][ T7514] bond1 (unregistering): (slave bond2): Releasing backup interface [ 943.390795][ T7514] bond1 (unregistering): Released all slaves [ 943.404331][ T7514] bond2 (unregistering): Released all slaves [ 943.417769][ T7514] bond3 (unregistering): Released all slaves [ 943.430910][ T7514] bond4 (unregistering): Released all slaves [ 943.449790][ T7514] bond5 (unregistering): Released all slaves [ 943.463151][ T7514] bond6 (unregistering): Released all slaves [ 943.478053][ T7514] bond7 (unregistering): (slave bond8): Releasing backup interface [ 943.487470][ T7514] bond8 (unregistering): left promiscuous mode [ 943.499544][ T7514] bond7 (unregistering): Released all slaves [ 943.512824][ T7514] bond8 (unregistering): Released all slaves [ 943.525824][ T7514] bond9 (unregistering): Released all slaves [ 943.538949][ T7514] bond10 (unregistering): Released all slaves [ 943.556230][ T7514] bond11 (unregistering): Released all slaves [ 943.683329][ T8752] macsec1: entered promiscuous mode [ 943.691681][ T8752] macsec1: entered allmulticast mode [ 944.171920][ T8811] netlink: 'syz.4.9281': attribute type 1 has an invalid length. [ 944.335432][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9283'. [ 944.426084][ T8811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.447209][ T8824] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 944.471305][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9283'. [ 944.491853][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9285'. [ 945.065977][ T8862] netlink: 'syz.3.9297': attribute type 13 has an invalid length. [ 945.101626][ T8862] netlink: 'syz.3.9297': attribute type 17 has an invalid length. [ 945.217967][ T8862] ip6gre0: left promiscuous mode [ 945.223963][ T8862] ip6gre0: left allmulticast mode [ 945.293794][ T8862] team0: left promiscuous mode [ 945.322478][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 945.386875][ T7514] !: left promiscuous mode [ 945.493210][ T7514] : left promiscuous mode [ 945.583851][ T8872] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 945.620083][ T8872] bond1 (unregistering): Released all slaves [ 945.667020][ T7514] tipc: Disabling bearer [ 945.675013][ T7514] tipc: Disabling bearer [ 945.685464][ T7514] tipc: Disabling bearer [ 945.695212][ T7514] tipc: Left network mode [ 945.702900][ T8874] tipc: Enabled bearer , priority 0 [ 945.754067][ T7514] IPVS: stopping backup sync thread 7248 ... [ 945.828953][ T8876] syzkaller0: entered promiscuous mode [ 945.846399][ T8876] syzkaller0: entered allmulticast mode [ 945.862449][ T8876] tipc: Resetting bearer [ 945.930714][ T8873] tipc: Resetting bearer [ 946.232718][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9307'. [ 946.249752][ T8897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9307'. [ 946.279199][ T8892] sctp: [Deprecated]: syz.1.9307 (pid 8892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.279199][ T8892] Use struct sctp_sack_info instead [ 946.298474][ T8892] sctp: [Deprecated]: syz.1.9307 (pid 8892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 946.298474][ T8892] Use struct sctp_sack_info instead [ 947.672274][ T8873] tipc: Disabling bearer [ 947.696683][ T8888] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 947.707680][ T8888] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 947.728157][ T8888] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 947.907760][T17439] tipc: Node number set to 1923386864 [ 948.273386][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9319'. [ 948.282618][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9319'. [ 948.456538][ T8958] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9324'. [ 948.493606][ T8948] IPVS: length: 78 != 24 [ 948.538208][ T8955] lo speed is unknown, defaulting to 1000 [ 948.619265][ T7514] hsr_slave_0: left promiscuous mode [ 948.627106][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.635263][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.839395][ T7514] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 948.901426][ T7514] team0 (unregistering): Port device team_slave_1 removed [ 948.919349][ T7514] team0 (unregistering): Port device team_slave_0 removed [ 949.094004][ T8974] tun0: tun_chr_ioctl cmd 1074025675 [ 949.106752][ T8974] tun0: persist enabled [ 949.123348][ T8977] tun0: tun_chr_ioctl cmd 1074025675 [ 949.128677][ T8977] tun0: persist disabled [ 949.173452][ T8982] netlink: 'syz.0.9329': attribute type 1 has an invalid length. [ 949.183209][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9329'. [ 949.197444][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9329'. [ 949.216034][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9329'. [ 949.404888][ T8989] batman_adv: batadv0: Adding interface: macvtap1 [ 949.411371][ T8989] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.451668][ T8989] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 949.523666][ T4107] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 949.534458][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9335'. [ 949.574149][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9335'. [ 949.623946][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9336'. [ 949.771820][ T4107] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 949.856080][ T9020] netlink: zone id is out of range [ 949.861260][ T9020] netlink: zone id is out of range [ 949.876333][ T9014] netlink: 'syz.3.9337': attribute type 10 has an invalid length. [ 949.886833][ T9020] netlink: zone id is out of range [ 949.893458][ T9020] netlink: zone id is out of range [ 949.898917][ T9020] netlink: zone id is out of range [ 949.904384][ T9020] netlink: zone id is out of range [ 949.914954][ T9014] vxcan1: entered allmulticast mode [ 949.923455][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.928871][ T9014] team0: Refused to change device type [ 949.933589][ T9020] netlink: zone id is out of range [ 949.991559][ T9020] netlink: zone id is out of range [ 949.996769][ T9020] netlink: zone id is out of range [ 950.229409][ T9042] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.9345'. [ 950.874166][ T9094] syzkaller0: entered promiscuous mode [ 950.879693][ T9094] syzkaller0: entered allmulticast mode [ 950.908187][ T7514] IPVS: stop unused estimator thread 0... [ 951.913162][ T9142] x_tables: duplicate underflow at hook 1 [ 952.036655][ T9148] netlink: 'syz.0.9367': attribute type 6 has an invalid length. [ 952.167211][ T9148] netlink: 'syz.0.9367': attribute type 6 has an invalid length. [ 952.243336][ T7512] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.252465][ T7512] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.307535][ T7512] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.341974][ T7512] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.580883][ T9166] 8021q: adding VLAN 0 to HW filter on device bond17 [ 953.030383][ T9190] syzkaller0: entered promiscuous mode [ 953.036198][ T9190] syzkaller0: entered allmulticast mode [ 953.075439][ T9190] netlink: 'syz.1.9377': attribute type 2 has an invalid length. [ 953.308915][ T9208] syzkaller0: entered promiscuous mode [ 953.315445][ T9208] syzkaller0: entered allmulticast mode [ 953.386951][ T9212] netlink: 'syz.3.9384': attribute type 32 has an invalid length. [ 953.400663][ T9212] __nla_validate_parse: 11 callbacks suppressed [ 953.400678][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9384'. [ 953.450697][ T9212] bond18: option coupled_control: invalid value (103) [ 953.460404][ T9212] bond18 (unregistering): Released all slaves [ 953.948586][ T9245] netlink: 'syz.1.9393': attribute type 1 has an invalid length. [ 954.073800][ T9245] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 954.164468][ T9245] macvlan2: entered promiscuous mode [ 954.178144][ T9245] macvlan2: entered allmulticast mode [ 954.196645][ T9245] bond1: entered promiscuous mode [ 954.210419][ T9245] gretap1: entered promiscuous mode [ 954.232267][ T9245] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 954.244076][ T9245] bond1: left promiscuous mode [ 954.255628][ T9245] gretap1: left promiscuous mode [ 954.298148][ T9255] tipc: Enabling of bearer rejected, failed to enable media [ 954.918525][ T9295] syzkaller0: entered promiscuous mode [ 954.929349][ T9295] syzkaller0: entered allmulticast mode [ 954.960341][ T9298] netlink: 'syz.3.9402': attribute type 12 has an invalid length. [ 954.981235][ T9298] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9402'. [ 955.233228][ T9300] syzkaller1: entered promiscuous mode [ 955.240985][ T9300] syzkaller1: entered allmulticast mode [ 955.299776][ T9303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9403'. [ 955.567251][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9408'. [ 955.838688][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9411'. [ 955.964662][ T9335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9412'. [ 956.005949][ T9339] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9413'. [ 956.020985][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9413'. [ 956.030551][ T9339] net_ratelimit: 4 callbacks suppressed [ 956.030567][ T9339] openvswitch: netlink: Missing key (keys=40, expected=80) [ 956.409602][ T9351] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 956.445340][ T9346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9415'. [ 956.496345][ T9351] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 956.982916][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 957.091040][ T9356] tap0: tun_chr_ioctl cmd 1074812118 [ 957.174519][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9418'. [ 957.350007][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.669977][ T9385] openvswitch: netlink: Actions may not be safe on all matching packets [ 957.697776][ T9385] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 958.094424][ T9403] netlink: 'syz.1.9429': attribute type 1 has an invalid length. [ 958.125192][ T9403] netlink: 'syz.1.9429': attribute type 1 has an invalid length. [ 958.352257][ T9425] netlink: 'syz.0.9435': attribute type 1 has an invalid length. [ 958.407890][ T9429] __nla_validate_parse: 3 callbacks suppressed [ 958.407908][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 958.430299][ T9425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 958.482357][T18156] lec:lec_start_xmit: lec0:No lecd attached [ 958.523181][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9438'. [ 958.715645][ T9443] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 958.746730][ T9443] syz_tun: entered allmulticast mode [ 958.818454][ T9440] syz_tun: left allmulticast mode [ 959.307252][T17439] IPVS: starting estimator thread 0... [ 959.333132][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9448'. [ 959.442858][ T9474] IPVS: using max 34 ests per chain, 81600 per kthread [ 959.493530][ T9479] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 959.535694][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9448'. [ 959.556521][ T9479] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9450'. [ 959.625029][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.635954][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.654772][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.692672][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.706252][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 959.744792][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.038062][ T9498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.051649][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.073035][ T9498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.080455][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.109297][ T9498] batman_adv: batadv0: Removing interface: macvtap1 [ 960.119726][ T9501] netlink: 'syz.0.9454': attribute type 10 has an invalid length. [ 960.159063][ T9501] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.188896][ T9501] bond0: (slave team0): Enslaving as an active interface with an up link [ 960.361656][ T9516] netlink: 'syz.0.9458': attribute type 1 has an invalid length. [ 960.375967][ T9516] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9458'. [ 960.385377][ T9515] netlink: 'syz.0.9458': attribute type 1 has an invalid length. [ 960.393291][ T9515] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9458'. [ 960.416315][ T9482] chnl_net:caif_netlink_parms(): no params data found [ 960.771710][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.779024][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.787826][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9465'. [ 960.797438][ T9482] bridge_slave_0: entered allmulticast mode [ 960.805811][ T9482] bridge_slave_0: entered promiscuous mode [ 960.816889][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.829402][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.837058][ T9482] bridge_slave_1: entered allmulticast mode [ 960.843254][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9465'. [ 960.854876][ T9482] bridge_slave_1: entered promiscuous mode [ 960.998423][ T9482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.049884][ T9562] Bluetooth: MGMT ver 1.23 [ 961.092736][ T9482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.103643][ T9564] netlink: 'syz.0.9470': attribute type 7 has an invalid length. [ 961.153268][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9472'. [ 961.188662][ T9567] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 961.203498][ T9567] bridge3: entered allmulticast mode [ 961.242932][ T9482] team0: Port device team_slave_0 added [ 961.273776][ T9482] team0: Port device team_slave_1 added [ 961.337992][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.361670][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.447217][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.496286][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.523343][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.579040][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.709873][ T9482] hsr_slave_0: entered promiscuous mode [ 961.721059][ T9482] hsr_slave_1: entered promiscuous mode [ 961.728157][ T9482] debugfs: 'hsr0' already exists in 'hsr' [ 961.757321][ T9482] Cannot create hsr debugfs directory [ 961.781775][ T7729] Bluetooth: hci1: command tx timeout [ 961.975138][ T9593] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 962.386887][ T9482] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.410158][ T9482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.420839][ T9482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46340 - 0 [ 962.457104][ T9609] sctp: [Deprecated]: syz.4.9484 (pid 9609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 962.457104][ T9609] Use struct sctp_sack_info instead [ 962.516453][ T9612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.620345][ T9482] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.675816][ T9482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.690186][ T9482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46340 - 0 [ 962.720441][ T9626] hsr_slave_1 (unregistering): left promiscuous mode [ 962.749037][ T9482] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.768577][ T9482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.778858][ T9482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46340 - 0 [ 962.803791][ T9626] netlink: 'syz.2.9489': attribute type 58 has an invalid length. [ 962.878602][ T9482] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 962.898699][ T9482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.936315][ T9482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46340 - 0 [ 962.950281][ T9641] netlink: 'syz.0.9492': attribute type 21 has an invalid length. [ 963.447967][ T9482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 963.486711][ T9482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 963.530018][ T9482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 963.554528][ T9680] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 963.569948][ T9680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.573438][ T9482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 963.701668][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms [ 963.709720][ C1] lec:lec_tx_timeout: lec0 [ 963.861836][ T7729] Bluetooth: hci1: command tx timeout [ 963.924019][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.964865][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.990857][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.998082][ T7513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.021150][T26217] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.028300][T26217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.039529][ T9713] __nla_validate_parse: 8 callbacks suppressed [ 964.039543][ T9713] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9507'. [ 964.078585][ T9714] sctp: [Deprecated]: syz.2.9507 (pid 9714) Use of int in max_burst socket option deprecated. [ 964.078585][ T9714] Use struct sctp_assoc_value instead [ 964.163383][ T9720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.363106][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.425137][ T9482] veth0_vlan: entered promiscuous mode [ 964.438035][ T9482] veth1_vlan: entered promiscuous mode [ 964.469794][ T9482] veth0_macvtap: entered promiscuous mode [ 964.480756][ T9482] veth1_macvtap: entered promiscuous mode [ 964.504799][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.518536][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.537214][T26217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.546343][T26217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.558461][T26217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.573928][T26217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.949270][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9511'. [ 964.967369][ T9737] netlink: 'syz.0.9511': attribute type 1 has an invalid length. [ 965.098108][ T9743] netlink: 'syz.0.9513': attribute type 12 has an invalid length. [ 965.107361][ T9743] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9513'. [ 965.271885][ T9748] netlink: 'syz.2.9514': attribute type 21 has an invalid length. [ 965.943190][ T7729] Bluetooth: hci1: command tx timeout [ 966.701943][ T9692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.835257][ T7514] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.846177][ T7509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.879211][ T7509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.891583][ T7514] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.931279][ T7514] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.939908][ T9764] "syz.1.9519" (9764) uses obsolete ecb(arc4) skcipher [ 966.955092][ T7514] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.973655][ T9755] netlink: 'syz.0.9518': attribute type 1 has an invalid length. [ 966.988745][ T9766] vlan2: entered promiscuous mode [ 966.994317][ T9766] bridge0: entered promiscuous mode [ 967.091167][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9521'. [ 967.104220][ T7509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.114156][ T7509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.203218][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9522'. [ 967.474393][ T9798] : entered promiscuous mode [ 967.678212][ T9810] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9531'. [ 967.714911][ T9803] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9529'. [ 967.727257][ T9803] netlink: 'syz.2.9529': attribute type 1 has an invalid length. [ 967.755172][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.022007][ T7729] Bluetooth: hci1: command tx timeout [ 968.769287][ T9823] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9535'. [ 968.779852][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9535'. [ 968.868924][ T9843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9539'. [ 969.093537][ T9854] tipc: Started in network mode [ 969.098506][ T9854] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711 [ 969.124547][ T9854] tipc: Enabled bearer , priority 10 [ 969.448224][ T9879] __nla_validate_parse: 1 callbacks suppressed [ 969.448242][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9549'. [ 969.723665][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9552'. [ 969.734671][ T9892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9553'. [ 969.748244][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.755942][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.794971][ T9894] netlink: 'syz.2.9553': attribute type 1 has an invalid length. [ 969.806739][ T9894] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9553'. [ 969.841962][ T9894] netlink: 'syz.2.9553': attribute type 1 has an invalid length. [ 969.875301][ T9894] netlink: 'syz.2.9553': attribute type 8 has an invalid length. [ 969.896687][ T9894] netlink: 606 bytes leftover after parsing attributes in process `syz.2.9553'. [ 970.016462][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.048832][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.295864][ T9900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9555'. [ 970.318392][T26217] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.338527][T26217] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.371820][ T4105] tipc: Node number set to 4269801496 [ 970.377505][T26217] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.406900][T26217] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.482867][ T9903] IPv6: addrconf: prefix option has invalid lifetime [ 970.522549][ T9907] tipc: Enabling of bearer rejected, failed to enable media [ 970.755862][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9561'. [ 970.796183][ T9919] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9562'. [ 970.856102][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9563'. [ 970.972272][ T9926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9565'. [ 972.881620][T17441] IPVS: starting estimator thread 0... [ 972.985367][T10004] IPVS: using max 33 ests per chain, 79200 per kthread [ 973.208350][T10028] netlink: 'syz.2.9598': attribute type 21 has an invalid length. [ 973.216552][T10028] netlink: 'syz.2.9598': attribute type 22 has an invalid length. [ 973.231935][T10028] netlink: 'syz.2.9598': attribute type 23 has an invalid length. [ 973.251316][T10030] geneve1: entered promiscuous mode [ 973.251945][T10028] netlink: 'syz.2.9598': attribute type 25 has an invalid length. [ 973.631151][T10058] vti0: entered promiscuous mode [ 973.739664][T10069] sctp: [Deprecated]: syz.2.9609 (pid 10069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 973.739664][T10069] Use struct sctp_sack_info instead [ 974.161254][T10099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.456558][T10119] __nla_validate_parse: 14 callbacks suppressed [ 974.456576][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9622'. [ 974.479576][T10123] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 974.496349][T10123] netlink: 'syz.2.9624': attribute type 83 has an invalid length. [ 974.588107][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9622'. [ 974.630061][T10131] syzkaller0: entered promiscuous mode [ 974.635833][T10131] syzkaller0: entered allmulticast mode [ 975.178052][T10147] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9632'. [ 975.187851][T10147] netlink: 'syz.3.9632': attribute type 1 has an invalid length. [ 975.198297][T10145] netlink: 'syz.1.9630': attribute type 83 has an invalid length. [ 975.797053][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9643'. [ 975.917063][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9645'. [ 975.974388][T10185] netlink: 'syz.2.9644': attribute type 29 has an invalid length. [ 975.984097][T10185] netlink: 'syz.2.9644': attribute type 29 has an invalid length. [ 976.002377][T10191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9645'. [ 976.027369][T10189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9645'. [ 976.127548][T10199] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 976.167388][T10203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9650'. [ 976.730232][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9660'. [ 976.801682][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9663'. [ 977.039375][T10262] nbd: nbd2 already in use [ 977.045247][T10262] block nbd2: NBD_DISCONNECT [ 977.050344][T10262] block nbd2: Send disconnect failed -32 [ 977.056618][T10262] block nbd2: shutting down sockets [ 977.096876][ T7513] bridge_slave_1: left allmulticast mode [ 977.102752][ T7513] bridge_slave_1: left promiscuous mode [ 977.108607][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.118044][ T7513] bridge_slave_0: left allmulticast mode [ 977.124026][ T7513] bridge_slave_0: left promiscuous mode [ 977.129846][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.327783][ T7513] dvmrp1 (unregistering): left allmulticast mode [ 977.571807][ T7513] bond17 (unregistering): (slave bridge5): Releasing active interface [ 977.627680][T10280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.640837][T10280] xt_hashlimit: overflow, rate too high: 0 [ 977.649480][ T7513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.659948][ T7513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.669962][ T7513] bond0 (unregistering): Released all slaves [ 977.684696][ T7513] bond1 (unregistering): Released all slaves [ 977.701278][ T7513] bond2 (unregistering): Released all slaves [ 977.720235][ T7513] bond3 (unregistering): Released all slaves [ 977.745752][ T7513] bond4 (unregistering): Released all slaves [ 977.774006][ T7513] bond5 (unregistering): Released all slaves [ 977.825923][ T7513] bond6 (unregistering): Released all slaves [ 977.843566][ T7513] bond7 (unregistering): Released all slaves [ 977.868141][ T7513] bond8 (unregistering): (slave vcan1): Releasing backup interface [ 977.878706][ T7513] bond8 (unregistering): Released all slaves [ 977.896462][ T7513] bond9 (unregistering): Released all slaves [ 977.918488][ T7513] bond10 (unregistering): Released all slaves [ 977.940402][ T7513] bond11 (unregistering): Released all slaves [ 977.969512][ T7513] bond12 (unregistering): Released all slaves [ 977.990162][ T7513] bond13 (unregistering): Released all slaves [ 978.012502][ T7513] bond14 (unregistering): Released all slaves [ 978.030686][ T7513] bond15 (unregistering): (slave batadv0): Releasing active interface [ 978.051913][ T7513] bond15 (unregistering): Released all slaves [ 978.066824][ T7513] bond16 (unregistering): Released all slaves [ 978.080125][ T7513] bond17 (unregistering): Released all slaves [ 978.100056][ T7513] bond18 (unregistering): (slave batadv1): Releasing active interface [ 978.111271][ T7513] bond18 (unregistering): Released all slaves [ 978.350777][ T7513] tipc: Disabling bearer [ 978.358191][ T7513] tipc: Left network mode [ 978.845716][T10333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.129099][T10352] lo speed is unknown, defaulting to 1000 [ 979.193772][T10352] lo speed is unknown, defaulting to 1000 [ 979.356704][T10352] lo speed is unknown, defaulting to 1000 [ 979.403713][T10352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 979.551190][T10352] lo speed is unknown, defaulting to 1000 [ 979.638217][T10352] lo speed is unknown, defaulting to 1000 [ 979.756534][T10352] lo speed is unknown, defaulting to 1000 [ 979.793667][T10352] lo speed is unknown, defaulting to 1000 [ 979.867217][T10352] lo speed is unknown, defaulting to 1000 [ 979.883699][T10352] lo speed is unknown, defaulting to 1000 [ 979.907815][T10352] lo speed is unknown, defaulting to 1000 [ 979.951153][T10352] lo speed is unknown, defaulting to 1000 [ 979.979444][T10352] lo speed is unknown, defaulting to 1000 [ 980.015526][T10352] lo speed is unknown, defaulting to 1000 [ 980.074032][T10374] xt_l2tp: wrong L2TP version: 0 [ 980.117392][ T7513] hsr_slave_0: left promiscuous mode [ 980.141661][ T7513] hsr_slave_1: left promiscuous mode [ 980.317781][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.366639][T10396] __nla_validate_parse: 7 callbacks suppressed [ 980.366655][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9701'. [ 980.570725][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9703'. [ 980.621698][T10401] netlink: 'syz.3.9703': attribute type 30 has an invalid length. [ 980.669585][ T7512] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.678748][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9703'. [ 980.699474][ T7512] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.710329][T10401] netlink: 'syz.3.9703': attribute type 30 has an invalid length. [ 980.740904][ T7512] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.775351][T10413] batadv_slave_0: entered promiscuous mode [ 980.800992][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9706'. [ 980.807018][ T7512] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.810439][T10413] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 980.873237][T10412] batadv_slave_0: left promiscuous mode [ 981.004128][T10421] Cannot find del_set index 1 as target [ 981.031263][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9710'. [ 981.070903][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9710'. [ 981.084317][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9710'. [ 981.140119][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9710'. [ 981.319505][T10449] lo speed is unknown, defaulting to 1000 [ 981.326198][ T7513] IPVS: stop unused estimator thread 0... [ 981.534304][T10460] syzkaller0: entered promiscuous mode [ 981.539848][T10460] syzkaller0: entered allmulticast mode [ 981.688497][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9721'. [ 982.114334][T10478] netlink: 'syz.2.9724': attribute type 1 has an invalid length. [ 982.164571][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9724'. [ 982.238842][T10485] bond2: (slave bridge1): making interface the new active one [ 982.247028][T10485] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 982.307265][T10495] syzkaller0: entered promiscuous mode [ 982.313109][T10495] syzkaller0: entered allmulticast mode [ 982.322886][T10492] nbd: must specify at least one socket [ 982.816518][T10529] lo speed is unknown, defaulting to 1000 [ 982.953721][T10537] lo speed is unknown, defaulting to 1000 [ 983.300579][T10559] syzkaller1: entered promiscuous mode [ 983.313781][T10559] syzkaller1: entered allmulticast mode [ 983.525013][T10574] macsec1: entered promiscuous mode [ 983.530747][T10574] macsec1: entered allmulticast mode [ 983.741071][T10588] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 983.754576][T10588] bond2 (unregistering): Released all slaves [ 983.838567][T10600] lo speed is unknown, defaulting to 1000 [ 984.461938][T10630] lo speed is unknown, defaulting to 1000 [ 984.794991][T10656] tipc: Enabling of bearer rejected, failed to enable media [ 984.810067][T10642] lo speed is unknown, defaulting to 1000 [ 984.872725][T10641] lo speed is unknown, defaulting to 1000 [ 985.107408][T10668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 985.503737][T10696] lo speed is unknown, defaulting to 1000 [ 985.552418][T10681] __nla_validate_parse: 8 callbacks suppressed [ 985.552436][T10681] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9779'. [ 985.635189][T10708] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 985.745713][T10708] netlink: 'syz.0.9783': attribute type 16 has an invalid length. [ 985.787269][T10710] lo speed is unknown, defaulting to 1000 [ 985.860434][T10708] syzkaller0: entered promiscuous mode [ 985.866889][T10708] syzkaller0: entered allmulticast mode [ 986.450306][T10753] netlink: 'syz.4.9795': attribute type 1 has an invalid length. [ 986.464341][T10753] netlink: 'syz.4.9795': attribute type 1 has an invalid length. [ 987.578349][T10753] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 987.668451][T10785] netlink: 'syz.0.9803': attribute type 1 has an invalid length. [ 987.694029][T10785] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9803'. [ 987.703014][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 987.712521][T10785] netlink: 'syz.0.9803': attribute type 1 has an invalid length. [ 987.720864][T10785] netlink: 'syz.0.9803': attribute type 8 has an invalid length. [ 987.732003][T10785] netlink: 606 bytes leftover after parsing attributes in process `syz.0.9803'. [ 987.749743][T10737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.777582][T10737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.790340][T10787] netlink: 'syz.4.9804': attribute type 1 has an invalid length. [ 987.945903][T10737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.957313][T10737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.033452][T10796] netlink: 'syz.2.9808': attribute type 1 has an invalid length. [ 988.048169][T10737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.061337][T10737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.136410][T10796] bond3: entered promiscuous mode [ 988.142023][T10796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 988.193976][T10737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.207419][T10737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.367951][ T7510] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.396224][ T7510] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.424487][ T7510] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.444021][ T7510] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.495000][ T7510] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.511379][ T7510] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.530059][ T7510] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.559308][ T7510] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.981654][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 989.059829][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9824'. [ 989.218777][T10864] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 989.256409][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9827'. [ 989.463949][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9829'. [ 989.579659][T10889] vlan2: entered promiscuous mode [ 989.589008][T10889] team0: entered promiscuous mode [ 989.599120][T10889] team_slave_0: entered promiscuous mode [ 989.612300][T10889] team_slave_1: entered promiscuous mode [ 989.699553][T10899] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.9833'. [ 989.747428][T10886] vlan2: entered promiscuous mode [ 989.934901][T10909] bridge0: entered allmulticast mode [ 990.118845][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9837'. [ 990.149399][T10918] netlink: 'syz.2.9837': attribute type 4 has an invalid length. [ 990.737138][T10945] syzkaller0: entered promiscuous mode [ 990.754140][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9841'. [ 990.766915][T10945] syzkaller0: entered allmulticast mode [ 990.909076][T10955] syzkaller1: entered promiscuous mode [ 990.916233][T10955] syzkaller1: entered allmulticast mode [ 991.038121][T10962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 991.343063][T10974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 991.556950][T10987] syzkaller0: entered promiscuous mode [ 991.583617][T10987] syzkaller0: entered allmulticast mode [ 991.759104][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9853'. [ 991.901814][T11013] openvswitch: netlink: IP tunnel dst address not specified [ 991.969559][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9858'. [ 991.983335][T11016] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9858'. [ 992.290502][T11025] sctp: [Deprecated]: syz.0.9861 (pid 11025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 992.290502][T11025] Use struct sctp_sack_info instead [ 992.320713][T11027] sctp: [Deprecated]: syz.4.9862 (pid 11027) Use of int in maxseg socket option. [ 992.320713][T11027] Use struct sctp_assoc_value instead [ 992.400455][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.463502][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.475213][T11038] bond1: option ad_select: invalid value (34) [ 992.483208][T11038] bond1 (unregistering): Released all slaves [ 992.744166][T11049] atomic_op ffff8880801e3198 conn xmit_atomic 0000000000000000 [ 992.830794][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 992.838848][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 992.876413][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9872'. [ 992.925356][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9872'. [ 993.084837][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9874'. [ 993.125334][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9876'. [ 993.137074][T11064] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9874'. [ 993.184857][T11072] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9877'. [ 993.841423][T11105] lo speed is unknown, defaulting to 1000 [ 994.138065][T11125] netlink: 'syz.0.9890': attribute type 5 has an invalid length. [ 994.200371][T11128] sctp: [Deprecated]: syz.0.9890 (pid 11128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.200371][T11128] Use struct sctp_sack_info instead [ 994.558875][T11140] xt_TCPMSS: Only works on TCP SYN packets [ 994.658377][T11149] Bluetooth: MGMT ver 1.23 [ 994.701424][T11151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.739068][ T30] audit: type=1107 audit(1770980750.796:26): pid=11150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 994.844974][T11154] lo speed is unknown, defaulting to 1000 [ 994.962727][T11162] syzkaller0: entered promiscuous mode [ 994.968233][T11162] syzkaller0: entered allmulticast mode [ 995.098855][ T30] audit: type=1804 audit(1770980751.156:27): pid=11176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9900" name="/newroot/137/memory.events" dev="tmpfs" ino=717 res=1 errno=0 [ 995.582873][T11192] netlink: 'syz.0.9909': attribute type 10 has an invalid length. [ 995.649874][T11192] team0: Port device geneve0 added [ 995.805844][T11213] netlink: 'syz.2.9913': attribute type 3 has an invalid length. [ 995.814951][T11213] __nla_validate_parse: 6 callbacks suppressed [ 995.814966][T11213] netlink: 638 bytes leftover after parsing attributes in process `syz.2.9913'. [ 995.927297][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9914'. [ 996.027895][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9911'. [ 996.072883][T11222] lo speed is unknown, defaulting to 1000 [ 996.368560][T11240] openvswitch: netlink: Message has 4 unknown bytes. [ 996.423501][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.654038][T11256] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 996.766433][T11263] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9928'. [ 997.034705][T11268] netlink: 'syz.0.9931': attribute type 1 has an invalid length. [ 997.055973][T11268] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9931'. [ 997.297316][T11282] xt_CT: No such helper "netbios-ns" [ 997.523280][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 997.541550][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9938'. [ 997.736300][T11314] 8021q: VLANs not supported on ipvlan0 [ 997.749700][T11317] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9942'. [ 997.773153][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9942'. [ 997.786778][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9942'. [ 997.806361][T11317] tipc: Started in network mode [ 997.812662][T11317] tipc: Node identity 5203b5b7b6a2, cluster identity 4711 [ 997.820045][T11317] tipc: Enabled bearer , priority 0 [ 997.841520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.849574][ C1] lec:lec_tx_timeout: lec0 [ 997.910253][T11322] bond2: entered promiscuous mode [ 997.919139][T11312] tipc: Disabling bearer [ 998.095508][T11329] lo speed is unknown, defaulting to 1000 [ 998.271672][T11344] pim6reg99999999: entered allmulticast mode [ 998.586743][ T30] audit: type=1107 audit(1770980754.646:28): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 998.801934][T11372] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 998.881881][T11375] netlink: 'syz.2.9962': attribute type 1 has an invalid length. [ 998.972731][T11375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 999.037314][T11384] bond4: (slave veth5): Enslaving as an active interface with a down link [ 999.057466][T11375] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 999.074222][T11375] bond4: (slave batadv1): making interface the new active one [ 999.084393][T11375] batadv1: entered promiscuous mode [ 999.102697][T11375] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 999.364251][T11400] netlink: 'syz.0.9965': attribute type 1 has an invalid length. [ 999.396455][T11400] bond4: entered promiscuous mode [ 999.402033][T11400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 999.419885][T11400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 999.427807][T11400] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 999.438266][T11400] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 999.452773][T11400] bond4: (slave vcan0): making interface the new active one [ 999.460106][T11400] vcan0: entered promiscuous mode [ 999.471285][T11400] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 999.496939][T11406] bond2: entered promiscuous mode [ 999.502434][T11406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 999.570332][T11412] macsec1: entered promiscuous mode [ 999.576510][T11412] macvlan0: entered promiscuous mode [ 1001.761913][T11372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1001.828406][T11423] netlink: 'syz.4.9973': attribute type 10 has an invalid length. [ 1001.869156][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.880827][T11423] bond0: (slave team0): Enslaving as an active interface with an up link [ 1002.015303][T11426] tipc: Started in network mode [ 1002.020293][T11426] tipc: Node identity d24a91d1e8d6, cluster identity 4711 [ 1002.036176][T11426] tipc: Enabled bearer , priority 0 [ 1002.043789][T11436] syzkaller0: entered promiscuous mode [ 1002.062263][T11436] syzkaller0: entered allmulticast mode [ 1002.080532][T11432] lo speed is unknown, defaulting to 1000 [ 1002.104025][T11426] __nla_validate_parse: 2 callbacks suppressed [ 1002.104042][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9974'. [ 1002.151186][T11426] tipc: Resetting bearer [ 1002.168240][T11424] tipc: Resetting bearer [ 1002.216041][T11424] tipc: Disabling bearer [ 1002.262135][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9980'. [ 1002.433127][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9983'. [ 1002.442276][T11454] openvswitch: netlink: IP tunnel dst address not specified [ 1002.624217][T11466] Cannot find set identified by id 65534 to match [ 1002.930828][T11483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1003.186289][T11496] lo speed is unknown, defaulting to 1000 [ 1003.495573][T11531] netlink: 'syz.2.10002': attribute type 58 has an invalid length. [ 1003.515663][T11531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10002'. [ 1003.843308][T11557] netlink: 'syz.0.10007': attribute type 2 has an invalid length. [ 1003.855361][T11551] sctp: [Deprecated]: syz.2.10006 (pid 11551) Use of int in maxseg socket option. [ 1003.855361][T11551] Use struct sctp_assoc_value instead [ 1003.880106][T11553] lo speed is unknown, defaulting to 1000 [ 1003.882990][T11557] netlink: 119 bytes leftover after parsing attributes in process `syz.0.10007'. [ 1003.948838][T11559] syzkaller0: entered promiscuous mode [ 1003.954585][T11559] syzkaller0: entered allmulticast mode [ 1004.298988][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10011'. [ 1004.399297][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10013'. [ 1004.450755][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10013'. [ 1005.651919][ T7729] Bluetooth: hci1: link tx timeout [ 1005.657487][ T7729] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1005.754668][ T5828] Bluetooth: hci1: link tx timeout [ 1005.759824][ T5828] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1005.863455][T11598] netlink: 'syz.1.10018': attribute type 1 has an invalid length. [ 1006.102333][T11614] netlink: 312 bytes leftover after parsing attributes in process `syz.3.10026'. [ 1006.143871][T11619] netlink: 'syz.2.10025': attribute type 3 has an invalid length. [ 1006.173116][T11619] syz_tun: entered allmulticast mode [ 1006.185230][T11616] syz_tun: left allmulticast mode [ 1006.427534][T11634] syzkaller0: entered promiscuous mode [ 1006.438891][T11634] syzkaller0: entered allmulticast mode [ 1006.457746][T11628] lo speed is unknown, defaulting to 1000 [ 1006.476825][T11634] syzkaller0: tun_net_xmit 1280 [ 1007.703096][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1008.246136][T11673] __nla_validate_parse: 5 callbacks suppressed [ 1008.246155][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10041'. [ 1008.300517][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10041'. [ 1008.357248][T11678] xt_hashlimit: max too large, truncated to 1048576 [ 1008.367430][T11678] xt_bpf: check failed: parse error [ 1008.624555][T11689] tipc: Started in network mode [ 1008.650910][T11689] tipc: Node identity 6a45cca5b84f, cluster identity 4711 [ 1008.701713][T11689] tipc: Enabled bearer , priority 0 [ 1008.724985][T11693] syzkaller0: entered promiscuous mode [ 1008.761591][T11693] syzkaller0: entered allmulticast mode [ 1008.794682][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10047'. [ 1008.812185][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10047'. [ 1008.940952][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10048'. [ 1008.994995][T11689] tipc: Resetting bearer [ 1009.024895][T11687] tipc: Resetting bearer [ 1009.088135][T11687] tipc: Disabling bearer [ 1009.120011][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10051'. [ 1009.141275][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10051'. [ 1009.203957][T11719] netlink: 'syz.0.10053': attribute type 1 has an invalid length. [ 1009.232294][T11719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1009.250962][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10053'. [ 1009.283006][T11719] bond5 (unregistering): Released all slaves [ 1009.425238][T11734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10058'. [ 1009.830518][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10066'. [ 1009.851315][T11772] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1009.899422][T11769] lo speed is unknown, defaulting to 1000 [ 1010.151062][T11790] netlink: 'syz.0.10072': attribute type 10 has an invalid length. [ 1010.305388][T11807] FAULT_INJECTION: forcing a failure. [ 1010.305388][T11807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.318808][T11807] CPU: 0 UID: 0 PID: 11807 Comm: syz.4.10076 Not tainted syzkaller #0 PREEMPT(full) [ 1010.318833][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1010.318846][T11807] Call Trace: [ 1010.318854][T11807] [ 1010.318862][T11807] dump_stack_lvl+0xe8/0x150 [ 1010.318895][T11807] should_fail_ex+0x412/0x560 [ 1010.318927][T11807] _copy_from_user+0x2d/0xb0 [ 1010.318948][T11807] ___sys_sendmsg+0x1c6/0x360 [ 1010.318972][T11807] ? __lock_acquire+0x6b5/0x2cf0 [ 1010.318997][T11807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.319055][T11807] ? __fget_files+0x2a/0x420 [ 1010.319074][T11807] ? __fget_files+0x3a0/0x420 [ 1010.319112][T11807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1010.319140][T11807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1010.319173][T11807] ? __pfx_ksys_write+0x10/0x10 [ 1010.319209][T11807] do_syscall_64+0x14d/0xf80 [ 1010.319234][T11807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.319253][T11807] ? trace_irq_disable+0x37/0x100 [ 1010.319275][T11807] ? clear_bhb_loop+0x40/0x90 [ 1010.319298][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.319317][T11807] RIP: 0033:0x7f144059bf79 [ 1010.319334][T11807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.319358][T11807] RSP: 002b:00007f1441395028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.319379][T11807] RAX: ffffffffffffffda RBX: 00007f1440815fa0 RCX: 00007f144059bf79 [ 1010.319394][T11807] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 1010.319406][T11807] RBP: 00007f1441395090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.319418][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.319430][T11807] R13: 00007f1440816038 R14: 00007f1440815fa0 R15: 00007ffc0ae07498 [ 1010.319461][T11807] [ 1010.596728][ T7513] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.605745][ T7513] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.615108][ T7513] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.624157][ T7514] batadv1: left promiscuous mode [ 1010.637066][ T7504] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.043754][ T8861] udevd[8861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1011.257398][T11853] IPVS: persistence engine module ip_vs_pe_ not found [ 1011.562385][T11882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.570260][T11882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.579647][T11882] bridge0: entered allmulticast mode [ 1011.607685][T11882] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1011.644227][T11885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.866015][T11897] syzkaller0: entered promiscuous mode [ 1011.872769][T11897] syzkaller0: entered allmulticast mode [ 1012.147902][T11909] SET target dimension over the limit! [ 1012.287743][T11913] lo speed is unknown, defaulting to 1000 [ 1012.352595][T11916] lo speed is unknown, defaulting to 1000 [ 1012.376050][T11921] sctp: [Deprecated]: syz.3.10109 (pid 11921) Use of int in max_burst socket option deprecated. [ 1012.376050][T11921] Use struct sctp_assoc_value instead [ 1012.394030][T11921] netlink: 'syz.3.10109': attribute type 1 has an invalid length. [ 1012.427861][T11921] bond1: entered promiscuous mode [ 1012.433650][T11921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1012.559171][T11921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1012.574001][T11921] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1012.595943][T11921] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1012.626780][T11921] bond1: (slave vti0): making interface the new active one [ 1012.634649][T11921] vti0: entered promiscuous mode [ 1012.641307][T11921] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1012.868327][T11951] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1012.919410][T11960] netlink: 'syz.4.10120': attribute type 7 has an invalid length. [ 1012.955385][T11960] netlink: 'syz.4.10120': attribute type 8 has an invalid length. [ 1013.292520][T11986] syzkaller0: entered promiscuous mode [ 1013.298023][T11986] syzkaller0: entered allmulticast mode [ 1013.485842][T11998] __nla_validate_parse: 16 callbacks suppressed [ 1013.485868][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10128'. [ 1013.596437][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.629086][T12011] macsec1: entered promiscuous mode [ 1013.672965][T12015] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.682915][T12015] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.718764][T12015] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.729425][T12015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.810305][T12015] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.820344][T12015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.883322][T12015] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.894148][T12015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.930175][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10137'. [ 1013.965622][ T7510] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1013.974259][ T7510] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.998057][ T7504] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.007014][ T7504] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.028158][ T7504] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.036984][ T7504] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.053169][T12028] netlink: 'syz.0.10138': attribute type 32 has an invalid length. [ 1014.063528][ T7504] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.072179][ T7504] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.185668][T12032] lo speed is unknown, defaulting to 1000 [ 1014.498215][T12050] bond3: option packets_per_slave: invalid value (1048582) [ 1014.505570][T12050] bond3: option packets_per_slave: allowed values 0 - 65535 [ 1014.514398][T12050] bond3 (unregistering): Released all slaves [ 1014.521918][T12052] netlink: 'syz.2.10144': attribute type 1 has an invalid length. [ 1014.529932][T12052] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10144'. [ 1014.946431][T12058] bond3 (unregistering): Released all slaves [ 1015.307688][T12083] syzkaller0: entered promiscuous mode [ 1015.313463][T12083] syzkaller0: entered allmulticast mode [ 1015.381981][ T6715] Bluetooth: hci3: command 0x0406 tx timeout [ 1015.446095][T12090] netlink: 'syz.4.10157': attribute type 6 has an invalid length. [ 1015.446761][T12091] netlink: 'syz.4.10157': attribute type 6 has an invalid length. [ 1015.502273][T12093] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1015.520899][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.532779][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1015.554567][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10159'. [ 1015.983280][T12101] lo speed is unknown, defaulting to 1000 [ 1016.533487][T12124] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.10168'. [ 1016.596676][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10168'. [ 1016.643130][T12126] syzkaller1: entered promiscuous mode [ 1016.648770][T12126] syzkaller1: entered allmulticast mode [ 1016.857064][T12138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10172'. [ 1016.902713][T12138] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20002 [ 1016.983327][ T7729] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.161109][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10176'. [ 1017.226495][ T5924] IPVS: starting estimator thread 0... [ 1017.308807][T12150] lo speed is unknown, defaulting to 1000 [ 1017.331575][T12161] IPVS: using max 32 ests per chain, 76800 per kthread [ 1017.690708][T12175] tipc: Enabled bearer , priority 0 [ 1017.777023][T12174] tipc: Disabling bearer [ 1017.967562][T12198] 8021q: VLANs not supported on nlmon0 [ 1017.998338][T12196] lo speed is unknown, defaulting to 1000 [ 1018.167696][T12209] FAULT_INJECTION: forcing a failure. [ 1018.167696][T12209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.192103][T12209] CPU: 1 UID: 0 PID: 12209 Comm: syz.2.10187 Not tainted syzkaller #0 PREEMPT(full) [ 1018.192126][T12209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1018.192138][T12209] Call Trace: [ 1018.192146][T12209] [ 1018.192154][T12209] dump_stack_lvl+0xe8/0x150 [ 1018.192183][T12209] should_fail_ex+0x412/0x560 [ 1018.192213][T12209] _copy_to_user+0x31/0xb0 [ 1018.192235][T12209] simple_read_from_buffer+0xe1/0x170 [ 1018.192268][T12209] proc_fail_nth_read+0x1bb/0x230 [ 1018.192294][T12209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.192320][T12209] ? rw_verify_area+0x2a6/0x4d0 [ 1018.192341][T12209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.192367][T12209] vfs_read+0x20c/0xa70 [ 1018.192387][T12209] ? fdget_pos+0x246/0x320 [ 1018.192409][T12209] ? __pfx___mutex_lock+0x10/0x10 [ 1018.192435][T12209] ? __pfx_vfs_read+0x10/0x10 [ 1018.192458][T12209] ? __fget_files+0x2a/0x420 [ 1018.192479][T12209] ? __fget_files+0x3a0/0x420 [ 1018.192494][T12209] ? __fget_files+0x2a/0x420 [ 1018.192521][T12209] ksys_read+0x150/0x270 [ 1018.192545][T12209] ? __pfx_ksys_read+0x10/0x10 [ 1018.192578][T12209] do_syscall_64+0x14d/0xf80 [ 1018.192600][T12209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.192617][T12209] ? trace_irq_disable+0x37/0x100 [ 1018.192637][T12209] ? clear_bhb_loop+0x40/0x90 [ 1018.192659][T12209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.192676][T12209] RIP: 0033:0x7f269055c84e [ 1018.192692][T12209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.192708][T12209] RSP: 002b:00007f26914cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.192727][T12209] RAX: ffffffffffffffda RBX: 00007f26914ce6c0 RCX: 00007f269055c84e [ 1018.192746][T12209] RDX: 000000000000000f RSI: 00007f26914ce0a0 RDI: 0000000000000004 [ 1018.192757][T12209] RBP: 00007f26914ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.192767][T12209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.192777][T12209] R13: 00007f2690816038 R14: 00007f2690815fa0 R15: 00007ffe7adcb748 [ 1018.192803][T12209] [ 1018.645979][T12219] __nla_validate_parse: 4 callbacks suppressed [ 1018.645995][T12219] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10192'. [ 1018.670975][T12219] syzkaller0: entered promiscuous mode [ 1018.712645][T12219] syzkaller0: entered allmulticast mode [ 1018.764725][T12220] netlink: 'syz.2.10189': attribute type 10 has an invalid length. [ 1018.814317][T12220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1018.933256][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.014561][T12233] pimreg: entered allmulticast mode [ 1019.249762][T12245] lo speed is unknown, defaulting to 1000 [ 1019.287668][ T7513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.301539][ T7513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.502503][T12260] bridge5: entered promiscuous mode [ 1019.609605][T12267] netlink: 496 bytes leftover after parsing attributes in process `syz.4.10207'. [ 1019.626946][T12267] netlink: 'syz.4.10207': attribute type 4 has an invalid length. [ 1019.639851][T12267] xt_TCPMSS: Only works on TCP SYN packets [ 1019.649605][T12265] block nbd0: NBD_DISCONNECT [ 1019.658810][T12265] block nbd0: Send disconnect failed -32 [ 1019.671165][T12265] block nbd0: shutting down sockets [ 1019.695127][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10208'. [ 1019.736672][T26217] team0: left allmulticast mode [ 1019.741767][T26217] team_slave_0: left allmulticast mode [ 1019.748496][T26217] team_slave_1: left allmulticast mode [ 1019.759574][T26217] team0: left promiscuous mode [ 1019.771170][T26217] team_slave_0: left promiscuous mode [ 1019.783862][T26217] team_slave_1: left promiscuous mode [ 1019.789729][T26217] bridge0: port 3(team0) entered disabled state [ 1019.802987][T26217] bridge_slave_1: left allmulticast mode [ 1019.814922][T26217] bridge_slave_1: left promiscuous mode [ 1019.827834][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10209'. [ 1019.827962][T26217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.864686][T26217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.892134][T26217] tipc: Disabling bearer [ 1020.014894][T26217] tipc: Disabling bearer [ 1020.268744][T26217] team0: Port device bridge5 removed [ 1020.327205][T26217] bond3 (unregistering): (slave bond0): Releasing backup interface [ 1020.341043][T26217] bond0 (unregistering): Released all slaves [ 1020.355936][T26217] bond1 (unregistering): Released all slaves [ 1020.371153][T26217] bond2 (unregistering): Released all slaves [ 1020.387155][T26217] bond3 (unregistering): Released all slaves [ 1020.405576][T26217] bond4 (unregistering): Released all slaves [ 1020.419901][T26217] bond5 (unregistering): Released all slaves [ 1020.440297][T26217] bond6 (unregistering): Released all slaves [ 1020.454681][T26217] bond7 (unregistering): Released all slaves [ 1020.468081][T26217] bond8 (unregistering): Released all slaves [ 1020.490956][T26217] bond9 (unregistering): Released all slaves [ 1020.629303][T26217] : left promiscuous mode [ 1020.716134][T26217] tipc: Left network mode [ 1020.720422][T12291] IPVS: length: 115 != 8 [ 1020.760391][T12295] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10214'. [ 1020.769897][T12295] 0ªX¹¦À: renamed from caif0 [ 1020.779234][T12295] 0ªX¹¦À: entered allmulticast mode [ 1020.805120][T12295] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1020.830892][T12298] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.10215'. [ 1020.955124][T12296] pimreg: entered allmulticast mode [ 1021.069406][T12311] netlink: 'syz.0.10217': attribute type 29 has an invalid length. [ 1021.083473][T12311] netlink: 'syz.0.10217': attribute type 29 has an invalid length. [ 1021.326165][T12328] tipc: Enabling of bearer rejected, failed to enable media [ 1022.160554][T26217] hsr_slave_0: left promiscuous mode [ 1022.184927][T26217] hsr_slave_1: left promiscuous mode [ 1022.196216][T26217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.241902][T26217] pimreg (unregistering): left allmulticast mode [ 1022.337546][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10233'. [ 1022.488382][T26217] team0 (unregistering): Port device team_slave_1 removed [ 1022.653379][T18156] lec:lec_start_xmit: lec0:No lecd attached [ 1022.728821][T26217] team0 (unregistering): Port device team_slave_0 removed [ 1022.933531][T26217] lo (unregistering): left allmulticast mode [ 1022.975440][T12398] netlink: 'syz.1.10238': attribute type 1 has an invalid length. [ 1022.993390][T12398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10238'. [ 1023.195922][T12400] bond3: entered promiscuous mode [ 1023.228624][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10241'. [ 1023.248495][T12405] netlink: 'syz.1.10240': attribute type 12 has an invalid length. [ 1023.281624][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10240'. [ 1023.314686][T12405] bond0: option primary_reselect: invalid value (8) [ 1023.331922][T12410] tipc: Enabled bearer , priority 0 [ 1023.372641][T12405] syzkaller0: entered promiscuous mode [ 1023.401216][T12405] syzkaller0: entered allmulticast mode [ 1023.453359][T12405] tipc: Resetting bearer [ 1023.491734][T12404] tipc: Resetting bearer [ 1023.568029][T12404] tipc: Disabling bearer [ 1023.600216][T26217] IPVS: stop unused estimator thread 0... [ 1023.734811][T12427] tipc: Enabled bearer , priority 0 [ 1023.754765][T12427] tipc: Resetting bearer [ 1023.805086][T12428] __nla_validate_parse: 2 callbacks suppressed [ 1023.805102][T12428] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10247'. [ 1023.892853][T12425] tipc: Disabling bearer [ 1024.158688][T12441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1024.439427][T12463] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.10257'. [ 1024.534791][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1024.561958][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1024.653376][T12477] netlink: 'syz.4.10261': attribute type 7 has an invalid length. [ 1024.671661][T12477] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10261'. [ 1025.025728][T12494] tipc: Enabled bearer , priority 0 [ 1025.103930][T12494] syzkaller0: entered promiscuous mode [ 1025.109634][T12494] syzkaller0: entered allmulticast mode [ 1025.256211][T12500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10269'. [ 1025.844170][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1026.252332][T12539] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1027.025175][T12511] tipc: Resetting bearer [ 1027.040314][T12493] tipc: Resetting bearer [ 1027.059711][T12493] tipc: Disabling bearer [ 1027.125429][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1027.248934][T12548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1027.276918][ T7513] bond0: (slave bond_slave_0): interface is now down [ 1027.300546][ T7513] bond0: (slave bond_slave_1): interface is now down [ 1027.701529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 1027.709566][ C1] lec:lec_tx_timeout: lec0 [ 1028.257693][T12615] netlink: 'syz.0.10296': attribute type 3 has an invalid length. [ 1028.270951][T12615] netlink: 'syz.0.10296': attribute type 1 has an invalid length. [ 1028.528459][T12635] openvswitch: netlink: Key type 30 is not supported [ 1028.616421][T12639] lo speed is unknown, defaulting to 1000 [ 1028.791288][T12653] lo speed is unknown, defaulting to 1000 [ 1028.958739][T12653] __nla_validate_parse: 6 callbacks suppressed [ 1028.958756][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1029.040113][T12670] vlan2: entered promiscuous mode [ 1029.059029][T12670] bridge0: entered promiscuous mode [ 1029.186355][T12682] netlink: 'syz.2.10314': attribute type 1 has an invalid length. [ 1029.196812][T12682] netlink: 204 bytes leftover after parsing attributes in process `syz.2.10314'. [ 1029.219404][T12676] tap0: tun_chr_ioctl cmd 2147767507 [ 1029.376601][T12691] tipc: Enabled bearer , priority 0 [ 1029.512676][T12691] syzkaller0: entered promiscuous mode [ 1029.518190][T12691] syzkaller0: entered allmulticast mode [ 1029.594712][T12691] tipc: Resetting bearer [ 1029.653869][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10320'. [ 1029.729876][T12690] tipc: Resetting bearer [ 1029.955812][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1030.743167][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.182513][T12690] tipc: Disabling bearer [ 1031.294558][T12732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1031.439447][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10329'. [ 1031.456252][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10329'. [ 1031.469581][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10329'. [ 1031.490339][T12758] syzkaller0: entered promiscuous mode [ 1031.497565][T12758] syzkaller0: entered allmulticast mode [ 1031.552218][T12746] macsec1: entered promiscuous mode [ 1031.849437][T12775] netlink: 'syz.0.10335': attribute type 2 has an invalid length. [ 1031.908028][T12775] : entered promiscuous mode [ 1031.914934][T12780] netlink: 'syz.0.10335': attribute type 2 has an invalid length. [ 1031.934283][T12780] : left promiscuous mode [ 1032.011843][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10334'. [ 1032.059232][T12788] netlink: 'syz.4.10336': attribute type 1 has an invalid length. [ 1032.071706][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10336'. [ 1032.122761][T12777] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10334'. [ 1032.214954][T12795] netlink: 'syz.4.10340': attribute type 9 has an invalid length. [ 1032.320473][T12794] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 1032.343814][T12794] bond0: (slave sit0): Error -95 calling set_mac_address [ 1032.444500][T12805] netlink: 'syz.4.10344': attribute type 3 has an invalid length. [ 1032.681350][T12809] ip6gretap1: entered allmulticast mode [ 1033.024854][T12829] netlink: 'syz.3.10348': attribute type 11 has an invalid length. [ 1033.041785][T12829] openvswitch: netlink: Missing valid actions attribute. [ 1033.057914][T12829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.421928][T12841] xt_TCPMSS: Only works on TCP SYN packets [ 1033.623334][T12850] syzkaller0: entered promiscuous mode [ 1033.649937][T12850] syzkaller0: entered allmulticast mode [ 1033.712485][T12855] IPVS: Error connecting to the multicast addr [ 1034.237804][T12871] __nla_validate_parse: 9 callbacks suppressed [ 1034.237823][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10360'. [ 1034.281625][T12871] netlink: 'syz.3.10360': attribute type 5 has an invalid length. [ 1034.291863][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10360'. [ 1034.335171][T12845] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1034.356693][T12871] geneve2: entered promiscuous mode [ 1034.388143][T12871] geneve2: entered allmulticast mode [ 1034.409666][ T7510] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1034.431780][ T7510] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1034.471876][ T7510] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1034.479996][ T7510] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1034.527476][T12879] lo speed is unknown, defaulting to 1000 [ 1035.306557][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1040.984139][ T7729] Bluetooth: hci5: command 0x0406 tx timeout [ 1054.267357][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1054.273814][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1056.341806][ T7729] Bluetooth: hci2: command 0x0406 tx timeout [ 1059.382544][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1059.701596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1059.709670][ C1] lec:lec_tx_timeout: lec0 [ 1069.141580][ T5924] page_pool_release_retry() stalled pool shutdown: id 295, 1 inflight 60 sec [ 1085.645443][T12924] lo speed is unknown, defaulting to 1000 [ 1085.836456][T12945] netlink: 608 bytes leftover after parsing attributes in process `syz.3.10374'. [ 1085.881972][T12945] openvswitch: netlink: Flow key attr not present in new flow. [ 1085.900386][T12951] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 1086.059886][T12957] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 1086.170779][T12959] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10378'. [ 1086.290255][T12963] netlink: 'syz.2.10379': attribute type 1 has an invalid length. [ 1086.358057][T12969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10380'. [ 1086.374276][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10380'. [ 1086.394870][T12971] bond5: (slave geneve3): making interface the new active one [ 1086.410901][T12971] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1086.422990][T12968] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10381'. [ 1086.446168][T12968] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1086.488508][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10379'. [ 1086.493950][ T7504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1086.521744][ T7504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1086.548656][ T7504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1086.571306][T12963] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1086.581530][T12955] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 1086.593645][T12963] bond5 (unregistering): Released all slaves [ 1086.617310][ T7504] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1086.649346][ T7504] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1086.659387][ T7504] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1086.674769][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10383'. [ 1086.684558][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10384'. [ 1086.701780][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10384'. [ 1086.725017][T12975] lo speed is unknown, defaulting to 1000 [ 1086.850605][T12988] lo speed is unknown, defaulting to 1000 [ 1087.036899][T18156] lec:lec_start_xmit: lec0:No lecd attached [ 1087.149812][T13002] syzkaller0: entered promiscuous mode [ 1087.155872][T13002] syzkaller0: entered allmulticast mode [ 1087.168570][T13005] lo speed is unknown, defaulting to 1000 [ 1087.228888][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.236503][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.246436][T13014] bridge0: entered allmulticast mode [ 1087.511131][T13037] netlink: 'syz.1.10399': attribute type 6 has an invalid length. [ 1087.540209][T13037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10399'. [ 1087.846495][T13046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.179355][T13040] lo speed is unknown, defaulting to 1000 [ 1089.491797][T13070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1089.513324][T13076] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1089.601638][ T7510] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1089.731545][ T7512] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1091.205857][T13081] bond5: option xmit_hash_policy: invalid value (10) [ 1091.216090][T13081] bond5 (unregistering): Released all slaves [ 1091.236174][T13093] netlink: 'syz.3.10413': attribute type 1 has an invalid length. [ 1091.271699][T13093] __nla_validate_parse: 5 callbacks suppressed [ 1091.271713][T13093] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10413'. [ 1091.301323][T13093] netlink: 658 bytes leftover after parsing attributes in process `syz.3.10413'. [ 1091.314168][T13093] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10413'. [ 1091.355931][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10414'. [ 1091.365929][T13096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10414'. [ 1091.377432][T13087] netlink: 'syz.2.10412': attribute type 1 has an invalid length. [ 1091.433053][T13087] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1091.484029][T13095] bond5: (slave geneve4): making interface the new active one [ 1091.500906][T13095] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1091.531196][ T7512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.545283][ T7512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.564550][ T7512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.573872][ T7512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.671020][T13112] netlink: 'syz.4.10420': attribute type 1 has an invalid length. [ 1091.723809][T13112] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1091.791158][T13112] bond5: (slave syz_tun): making interface the new active one [ 1091.848702][T13112] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 1092.671526][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms [ 1092.679674][ C1] lec:lec_tx_timeout: lec0 [ 1093.590759][T13161] netlink: 300 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1093.768576][T13183] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1093.822846][T13189] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1093.844692][T13191] sock: sock_set_timeout: `syz.2.10434' (pid 13191) tries to set negative timeout [ 1093.857290][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1093.935335][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10437'. [ 1093.956918][T13197] netlink: 'syz.0.10438': attribute type 29 has an invalid length. [ 1094.007741][T13197] netlink: 'syz.0.10438': attribute type 29 has an invalid length. [ 1094.041625][T13197] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10438'. [ 1094.170646][T13208] lo speed is unknown, defaulting to 1000 [ 1094.198357][T13216] nbd: couldn't find device at index 536870912 [ 1094.258940][T13221] netlink: 'syz.3.10442': attribute type 16 has an invalid length. [ 1094.290354][T13221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.512161][T13233] netlink: 'syz.1.10450': attribute type 13 has an invalid length. [ 1094.756177][T13241] tipc: Enabled bearer , priority 0 [ 1094.785240][T13241] syzkaller0: entered promiscuous mode [ 1094.815451][T13241] syzkaller0: entered allmulticast mode [ 1094.865698][T13241] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1094.907752][T13241] tipc: Resetting bearer [ 1094.983507][T13240] tipc: Resetting bearer [ 1095.005364][T13240] tipc: Disabling bearer [ 1095.642974][T13296] netlink: 'syz.2.10469': attribute type 1 has an invalid length. [ 1095.674872][T13296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.682158][T13296] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.689400][T13296] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.715656][T13296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.823176][T13305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.959618][T13313] mac80211_hwsim hwsim121 wlan0: entered promiscuous mode [ 1096.059070][T13319] netlink: 'syz.2.10478': attribute type 2 has an invalid length. [ 1096.087472][T13323] netlink: 'syz.4.10477': attribute type 1 has an invalid length. [ 1096.170201][T13323] bond2: left promiscuous mode [ 1096.178946][T13323] bond3: left promiscuous mode [ 1096.305501][ T7513] bond4: (slave ip6gretap2): link status up again after 0 ms [ 1096.341735][ T7513] bond4: (slave ip6gretap2): link status up again after 0 ms [ 1096.372963][ T7504] bond4: (slave ip6gretap2): link status up again after 0 ms [ 1096.380386][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1096.474055][T13357] __nla_validate_parse: 13 callbacks suppressed [ 1096.474072][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10488'. [ 1096.503907][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1096.609240][T13351] lo speed is unknown, defaulting to 1000 [ 1096.625649][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1096.637052][T13365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10490'. [ 1096.753086][ T5903] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1096.781745][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1096.902678][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1097.039341][T13383] netlink: 760 bytes leftover after parsing attributes in process `syz.2.10496'. [ 1097.549133][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1097.737906][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10499'. [ 1097.777484][T13405] netlink: 'syz.4.10498': attribute type 12 has an invalid length. [ 1097.940570][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10503'. [ 1098.214294][T13425] netlink: 'syz.4.10506': attribute type 1 has an invalid length. [ 1098.270401][T13427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1098.304186][T13432] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10509'. [ 1098.323425][T13427] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1098.393384][T13433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1098.431236][T13433] bond6: (slave geneve3): making interface the new active one [ 1098.465345][T13433] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1098.497035][ T7504] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1098.511628][ T7504] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1098.523556][ T7504] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1098.534714][ T7504] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1098.565893][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1098.656695][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10511'. [ 1098.877279][T13445] lo speed is unknown, defaulting to 1000 [ 1099.021936][ T7504] net_ratelimit: 8 callbacks suppressed [ 1099.021953][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.161562][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.291793][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.348067][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10514'. [ 1099.411547][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.530279][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.650859][ T7512] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.756401][T13480] lo speed is unknown, defaulting to 1000 [ 1099.774389][ T7512] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1099.941615][ T7512] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1100.211628][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1100.259504][T13514] netlink: 'syz.0.10527': attribute type 5 has an invalid length. [ 1100.324157][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1100.357759][ T7504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.380719][ T7504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.415167][T13499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.521316][T13483] xt_bpf: check failed: parse error [ 1101.367828][T13572] lo speed is unknown, defaulting to 1000 [ 1101.763034][T13594] syzkaller1: entered promiscuous mode [ 1101.773128][T13594] syzkaller1: entered allmulticast mode [ 1102.026787][T13619] Unknown options in mask b7f2 [ 1102.418059][T13634] netlink: 'syz.1.10559': attribute type 1 has an invalid length. [ 1102.451170][T13634] __nla_validate_parse: 2 callbacks suppressed [ 1102.451185][T13634] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10559'. [ 1102.493234][T13634] netlink: 658 bytes leftover after parsing attributes in process `syz.1.10559'. [ 1102.506120][T13634] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10559'. [ 1102.562022][T13645] x_tables: duplicate underflow at hook 2 [ 1102.703798][T13653] ip6erspan0: entered allmulticast mode [ 1102.711335][T13650] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1102.740265][T13658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10567'. [ 1102.804901][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10566'. [ 1102.834420][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10568'. [ 1102.887126][T13661] netlink: 'syz.1.10568': attribute type 3 has an invalid length. [ 1102.908405][T13663] team0: Device gtp0 is of different type [ 1102.915329][T13661] netlink: 'syz.1.10568': attribute type 4 has an invalid length. [ 1102.957601][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1102.968905][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1102.986317][T13667] veth10: entered allmulticast mode [ 1103.006380][T13672] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1103.106471][T13680] syzkaller0: entered promiscuous mode [ 1103.125616][T13680] syzkaller0: entered allmulticast mode [ 1103.279625][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10576'. [ 1103.290189][T13694] syzkaller0: entered promiscuous mode [ 1103.296264][T13694] syzkaller0: entered allmulticast mode [ 1103.579956][T13715] netlink: 'syz.4.10585': attribute type 1 has an invalid length. [ 1103.686188][T13718] bond0: (slave wlan1): Releasing backup interface [ 1103.890110][T13729] bridge0: entered promiscuous mode [ 1103.917273][T13729] macvtap1: entered promiscuous mode [ 1103.945064][T13729] macvtap1: entered allmulticast mode [ 1103.970775][T13729] bridge0: entered allmulticast mode [ 1104.111753][T26241] net_ratelimit: 24 callbacks suppressed [ 1104.111770][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1104.341931][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1104.488197][T13765] vlan0: entered promiscuous mode [ 1104.494899][T13765] bridge0: entered promiscuous mode [ 1104.722704][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1104.920079][T13790] netlink: set zone limit has 4 unknown bytes [ 1105.019625][T13774] netlink: 'syz.0.10602': attribute type 2 has an invalid length. [ 1105.071958][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1105.221743][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1105.349604][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1105.531531][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1105.636240][T13825] vlan0: entered allmulticast mode [ 1105.641397][T13825] veth0_to_bond: entered allmulticast mode [ 1105.720486][T13831] syzkaller0: entered promiscuous mode [ 1105.733313][T13831] syzkaller0: entered allmulticast mode [ 1105.743507][T13830] bridge: RTM_NEWNEIGH with invalid ether address [ 1105.813039][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1105.856857][T13842] netlink: 'syz.3.10615': attribute type 12 has an invalid length. [ 1105.903039][T13847] xt_policy: neither incoming nor outgoing policy selected [ 1105.923473][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1106.075070][T13845] netlink: 'syz.0.10621': attribute type 1 has an invalid length. [ 1106.335698][T13869] Can't find ip_set type listH [ 1106.497980][T13880] netlink: 'syz.1.10628': attribute type 1 has an invalid length. [ 1106.520440][T13880] netlink: 'syz.1.10628': attribute type 2 has an invalid length. [ 1106.529073][T13880] netlink: 'syz.1.10628': attribute type 1 has an invalid length. [ 1106.690024][T13891] gretap1: entered promiscuous mode [ 1106.709235][T13891] batman_adv: batadv0: Adding interface: gretap1 [ 1106.729885][T13891] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1106.767334][T13891] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1106.802824][T13892] gretap1: entered promiscuous mode [ 1106.989566][T13906] netlink: 'syz.3.10637': attribute type 1 has an invalid length. [ 1107.036313][T13906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1107.581100][T13958] xt_HMARK: spi-set and port-set can't be combined [ 1107.644847][T13958] batadv_slave_0: entered promiscuous mode [ 1107.672121][T13960] __nla_validate_parse: 13 callbacks suppressed [ 1107.672136][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10655'. [ 1107.730319][T13960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1107.796642][T13949] batadv_slave_0: left promiscuous mode [ 1107.984353][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10661'. [ 1108.016189][T13987] validate_nla: 1 callbacks suppressed [ 1108.016203][T13987] netlink: 'syz.1.10661': attribute type 4 has an invalid length. [ 1108.040403][T13987] netlink: 'syz.1.10661': attribute type 1 has an invalid length. [ 1108.076799][T13987] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10661'. [ 1108.077403][T13981] netlink: 'syz.3.10660': attribute type 13 has an invalid length. [ 1108.225629][T13989] lo speed is unknown, defaulting to 1000 [ 1108.290758][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10663'. [ 1108.585237][T14012] mac80211_hwsim hwsim108 ªªªªª;: renamed from wlan0 [ 1108.598187][T14015] netlink: 248 bytes leftover after parsing attributes in process `syz.4.10666'. [ 1108.604178][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10665'. [ 1108.637750][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10667'. [ 1108.770038][T14024] vcan1: entered promiscuous mode [ 1108.785163][T14024] vcan1: entered allmulticast mode [ 1108.836851][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10670'. [ 1108.864711][T14027] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1109.110429][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10676'. [ 1109.171915][ T7504] net_ratelimit: 22 callbacks suppressed [ 1109.171934][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1109.212822][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10678'. [ 1109.236048][T14058] netlink: 'syz.3.10679': attribute type 61 has an invalid length. [ 1109.249765][T14058] netlink: 'syz.3.10679': attribute type 62 has an invalid length. [ 1109.303229][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1109.414323][T14061] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.426218][T14061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.437194][T14061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1109.479274][ T7512] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1109.528087][T14061] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.551685][T14061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.582781][T14061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1109.891862][T14084] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1109.901559][T14061] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.924011][T14061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.934299][T14061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1109.982056][T14101] netlink: 'syz.0.10686': attribute type 1 has an invalid length. [ 1110.002590][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.051030][T14061] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.062244][T14061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.074065][T14061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1110.132968][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.286782][ T7513] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.301795][ T7513] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1110.320699][ T7513] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1110.363478][ T7511] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.373332][ T7511] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1110.385995][ T7511] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1110.409292][ T7511] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.418144][ T7511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1110.438710][ T7511] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1110.485811][ T7511] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.496655][ T7511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1110.505508][ T7511] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1110.552853][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.672810][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.782087][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.892663][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1110.947768][T14161] sit0: entered promiscuous mode [ 1110.974593][T14161] netlink: 'syz.1.10708': attribute type 1 has an invalid length. [ 1111.012813][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1111.170978][T14168] netlink: 'syz.0.10710': attribute type 2 has an invalid length. [ 1111.194818][T14169] sctp: [Deprecated]: syz.2.10709 (pid 14169) Use of int in max_burst socket option deprecated. [ 1111.194818][T14169] Use struct sctp_assoc_value instead [ 1111.768654][T14205] veth1_to_bond: entered allmulticast mode [ 1112.065893][T14218] netlink: 'syz.2.10724': attribute type 21 has an invalid length. [ 1112.078631][T14202] lo speed is unknown, defaulting to 1000 [ 1112.125383][T14204] veth1_to_bond: left allmulticast mode [ 1112.334367][T14226] lo: Caught tx_queue_len zero misconfig [ 1112.440841][T14236] sctp: [Deprecated]: syz.1.10729 (pid 14236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1112.440841][T14236] Use struct sctp_sack_info instead [ 1112.546535][ T7510] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.557475][ T7510] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.587704][ T30] audit: type=1804 audit(1770980868.636:29): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10731" name="/newroot/236/memory.events" dev="tmpfs" ino=1228 res=1 errno=0 [ 1112.630780][ T7510] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.650822][ T30] audit: type=1800 audit(1770980868.636:30): pid=14246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10731" name="memory.events" dev="tmpfs" ino=1228 res=0 errno=0 [ 1112.762121][ T7510] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.771107][T14249] gre0: entered promiscuous mode [ 1112.777283][T14249] gre0: entered allmulticast mode [ 1112.826888][T14256] lo speed is unknown, defaulting to 1000 [ 1112.901330][T14267] x_tables: duplicate underflow at hook 2 [ 1113.079246][T14276] __nla_validate_parse: 27 callbacks suppressed [ 1113.079262][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10739'. [ 1113.094971][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10739'. [ 1113.169385][T14281] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10741'. [ 1113.241001][T14281] lo speed is unknown, defaulting to 1000 [ 1113.252481][ T5889] IPVS: starting estimator thread 0... [ 1113.303373][T14289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.362775][T14287] IPVS: using max 29 ests per chain, 69600 per kthread [ 1113.437274][T14298] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10743'. [ 1113.458273][T14298] 0ªX¹¦À: renamed from caif0 [ 1113.468593][T14298] 0ªX¹¦À: entered allmulticast mode [ 1113.650567][T14313] netlink: 'syz.3.10748': attribute type 15 has an invalid length. [ 1113.669750][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10747'. [ 1113.980590][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1113.989874][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1114.024862][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1114.060409][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10751'. [ 1114.152030][T14331] bond_slave_0: entered allmulticast mode [ 1114.223396][T14336] xt_hashlimit: size too large, truncated to 1048576 [ 1114.232227][ T7504] net_ratelimit: 21 callbacks suppressed [ 1114.232242][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1114.375099][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1114.417236][T14347] lo: entered allmulticast mode [ 1114.444665][T14347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.479619][T14352] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10758'. [ 1114.508162][T14352] block nbd0: not configured, cannot reconfigure [ 1114.522052][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1114.672319][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1114.792514][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1114.931552][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1115.028734][T14388] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1115.238162][T14383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.291861][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1115.322451][T14404] netlink: 'syz.4.10771': attribute type 1 has an invalid length. [ 1115.369300][T14383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.401930][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1115.450979][T14383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.548401][T14383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.557255][T14419] netlink: 'syz.4.10775': attribute type 7 has an invalid length. [ 1115.583812][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1115.678254][ T7511] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.694192][ T7511] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.709199][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1115.716480][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1115.724571][T26241] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.751626][T26241] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1115.831179][T14388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1116.049702][T14443] syzkaller1: entered promiscuous mode [ 1116.069382][T14443] syzkaller1: entered allmulticast mode [ 1116.388507][T14463] syzkaller0: entered promiscuous mode [ 1116.395378][T14463] syzkaller0: entered allmulticast mode [ 1116.406061][ T5828] Bluetooth: hci1: link tx timeout [ 1116.420697][ T5828] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1116.468784][T14469] bond8: entered promiscuous mode [ 1116.486462][ T7729] Bluetooth: hci1: link tx timeout [ 1116.493378][ T7729] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1116.501704][T14469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1118.305570][T14522] netlink: 'syz.4.10799': attribute type 11 has an invalid length. [ 1118.328864][T14522] netlink: 'syz.4.10799': attribute type 4 has an invalid length. [ 1118.337160][T14522] __nla_validate_parse: 7 callbacks suppressed [ 1118.337175][T14522] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.10799'. [ 1118.478382][T14536] rdma_op ffff888097d781f0 conn xmit_rdma 0000000000000000 [ 1118.505477][ T7729] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.679754][T14531] lo speed is unknown, defaulting to 1000 [ 1118.751903][T14543] ip6tnl0: Caught tx_queue_len zero misconfig [ 1118.845068][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10803'. [ 1118.910184][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10808'. [ 1118.939372][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10808'. [ 1119.127907][T14567] lo speed is unknown, defaulting to 1000 [ 1119.233296][T14576] syzkaller0: entered promiscuous mode [ 1119.251782][T14576] syzkaller0: entered allmulticast mode [ 1119.341743][T26241] net_ratelimit: 10 callbacks suppressed [ 1119.341759][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1119.622316][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1119.645761][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1119.656114][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10817'. [ 1119.734035][T14606] netlink: 'syz.2.10818': attribute type 32 has an invalid length. [ 1119.751557][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1119.789681][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10820'. [ 1119.872787][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1120.061693][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1120.136272][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10824'. [ 1120.721708][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.729779][ C1] lec:lec_tx_timeout: lec0 [ 1121.595993][T14722] siw: device registration error -23 [ 1122.582332][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1122.733769][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1122.741290][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10841'. [ 1122.892901][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1123.036499][T14754] netlink: 'syz.2.10846': attribute type 1 has an invalid length. [ 1123.073127][T14754] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.10846'. [ 1123.133497][ T7511] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1123.343866][T14777] bridge_slave_1: left allmulticast mode [ 1123.358016][T14777] bridge_slave_1: left promiscuous mode [ 1123.390387][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.468222][T14782] __nla_validate_parse: 1 callbacks suppressed [ 1123.468237][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1123.527332][T14782] netlink: 336 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1123.551565][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1123.560578][T14782] netlink: 336 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1123.570155][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10850'. [ 1123.614900][T14777] bridge_slave_0: left allmulticast mode [ 1123.657859][T14777] bridge_slave_0: left promiscuous mode [ 1123.680686][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.054729][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1124.277307][T14814] lo speed is unknown, defaulting to 1000 [ 1124.375422][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10855'. [ 1124.662920][ T7504] net_ratelimit: 1 callbacks suppressed [ 1124.662936][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1124.701653][T14832] lo speed is unknown, defaulting to 1000 [ 1124.829436][T14833] lo speed is unknown, defaulting to 1000 [ 1124.923725][ T7512] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1125.066592][T14865] sctp: [Deprecated]: syz.1.10861 (pid 14865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.066592][T14865] Use struct sctp_sack_info instead [ 1125.197586][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10864'. [ 1125.229458][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10864'. [ 1125.242950][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1125.259623][T14877] netlink: 'syz.0.10863': attribute type 12 has an invalid length. [ 1125.290883][T14877] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.10863'. [ 1125.327040][T14882] netlink: 904 bytes leftover after parsing attributes in process `syz.1.10861'. [ 1125.406769][T14873] batadv0: entered promiscuous mode [ 1125.456238][T14873] team0: entered promiscuous mode [ 1125.482126][T14873] team_slave_0: entered promiscuous mode [ 1125.511980][T14873] team_slave_1: entered promiscuous mode [ 1125.529122][T14873] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1125.634353][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1125.762890][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1125.794349][T14896] netlink: 'syz.0.10865': attribute type 11 has an invalid length. [ 1126.021694][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1126.136208][ T7510] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1126.346331][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1126.471846][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1126.591517][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1126.831292][T14938] syzkaller0: entered promiscuous mode [ 1126.839454][T14938] syzkaller0: entered allmulticast mode [ 1127.215871][T14960] pim6reg1: entered promiscuous mode [ 1127.236328][T14960] pim6reg1: entered allmulticast mode [ 1127.662090][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:2161901093/2161901095 [ 1127.698634][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:2161901093/2161901094 [ 1127.741158][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:2161901093/2161901095 [ 1127.777467][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:2161901093/2161901094 [ 1128.340955][T15016] mac80211_hwsim hwsim133 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1128.560399][T15023] netlink: 'syz.2.10895': attribute type 16 has an invalid length. [ 1128.621685][T15023] netlink: 'syz.2.10895': attribute type 17 has an invalid length. [ 1128.675052][T15029] __nla_validate_parse: 19 callbacks suppressed [ 1128.675067][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1128.852551][T15023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.882472][T15023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.909997][T15034] netlink: 'syz.1.10898': attribute type 12 has an invalid length. [ 1128.924739][T15034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1129.485542][T15049] [ 1129.487925][T15049] ====================================================== [ 1129.494955][T15049] WARNING: possible circular locking dependency detected [ 1129.502010][T15049] syzkaller #0 Not tainted [ 1129.506432][T15049] ------------------------------------------------------ [ 1129.513453][T15049] syz.3.10902/15049 is trying to acquire lock: [ 1129.519613][T15049] ffff888026664858 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1129.529035][T15049] [ 1129.529035][T15049] but task is already holding lock: [ 1129.536406][T15049] ffff888026664318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1129.546618][T15049] [ 1129.546618][T15049] which lock already depends on the new lock. [ 1129.546618][T15049] [ 1129.557035][T15049] [ 1129.557035][T15049] the existing dependency chain (in reverse order) is: [ 1129.566066][T15049] [ 1129.566066][T15049] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1129.574704][T15049] blk_alloc_queue+0x546/0x680 [ 1129.580006][T15049] __blk_mq_alloc_disk+0x197/0x390 [ 1129.585667][T15049] nbd_dev_add+0x499/0xb50 [ 1129.590634][T15049] nbd_init+0x168/0x1f0 [ 1129.595349][T15049] do_one_initcall+0x250/0x840 [ 1129.600680][T15049] do_initcall_level+0x104/0x190 [ 1129.606167][T15049] do_initcalls+0x59/0xa0 [ 1129.611057][T15049] kernel_init_freeable+0x2a6/0x3d0 [ 1129.616810][T15049] kernel_init+0x1d/0x1d0 [ 1129.621696][T15049] ret_from_fork+0x51e/0xb90 [ 1129.626838][T15049] ret_from_fork_asm+0x1a/0x30 [ 1129.632175][T15049] [ 1129.632175][T15049] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1129.639427][T15049] fs_reclaim_acquire+0x71/0x100 [ 1129.644928][T15049] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1129.651297][T15049] __alloc_skb+0x1d0/0x7d0 [ 1129.656269][T15049] __ip6_append_data+0x2a44/0x3c50 [ 1129.661941][T15049] ip6_append_data+0x10f/0x280 [ 1129.667264][T15049] rawv6_sendmsg+0x12d3/0x18e0 [ 1129.672584][T15049] ____sys_sendmsg+0x894/0xad0 [ 1129.677932][T15049] ___sys_sendmsg+0x2a5/0x360 [ 1129.683166][T15049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1129.688662][T15049] do_syscall_64+0x14d/0xf80 [ 1129.693822][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.700264][T15049] [ 1129.700264][T15049] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1129.708034][T15049] lock_sock_nested+0x48/0x100 [ 1129.713350][T15049] inet_shutdown+0x6a/0x390 [ 1129.718414][T15049] nbd_mark_nsock_dead+0x2e9/0x560 [ 1129.724076][T15049] recv_work+0x1bf4/0x1d00 [ 1129.729050][T15049] process_scheduled_works+0xaec/0x17a0 [ 1129.735147][T15049] worker_thread+0xa50/0xfc0 [ 1129.740279][T15049] kthread+0x388/0x470 [ 1129.744892][T15049] ret_from_fork+0x51e/0xb90 [ 1129.750018][T15049] ret_from_fork_asm+0x1a/0x30 [ 1129.755323][T15049] [ 1129.755323][T15049] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1129.762984][T15049] __mutex_lock+0x19f/0x1300 [ 1129.768110][T15049] nbd_queue_rq+0x37b/0x1100 [ 1129.773239][T15049] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1129.779315][T15049] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1129.786198][T15049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1129.792707][T15049] blk_mq_run_hw_queue+0x348/0x4f0 [ 1129.798343][T15049] blk_mq_dispatch_list+0xd16/0xe10 [ 1129.804059][T15049] blk_mq_flush_plug_list+0x48d/0x570 [ 1129.809957][T15049] __blk_flush_plug+0x3ed/0x4d0 [ 1129.815330][T15049] __submit_bio+0x28d/0x580 [ 1129.820364][T15049] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 1129.826536][T15049] block_read_full_folio+0x599/0x830 [ 1129.832355][T15049] filemap_read_folio+0x137/0x3b0 [ 1129.837914][T15049] do_read_cache_folio+0x358/0x590 [ 1129.843555][T15049] read_part_sector+0xb6/0x2b0 [ 1129.848843][T15049] adfspart_check_ICS+0xa5/0xa40 [ 1129.854301][T15049] bdev_disk_changed+0x7ba/0x1550 [ 1129.859849][T15049] blkdev_get_whole+0x380/0x510 [ 1129.865222][T15049] bdev_open+0x31e/0xd30 [ 1129.869990][T15049] blkdev_open+0x470/0x610 [ 1129.874932][T15049] do_dentry_open+0x785/0x14e0 [ 1129.880227][T15049] vfs_open+0x3b/0x340 [ 1129.884817][T15049] path_openat+0x2e08/0x3860 [ 1129.889933][T15049] do_file_open+0x23e/0x4a0 [ 1129.894966][T15049] do_sys_openat2+0x113/0x200 [ 1129.900168][T15049] __x64_sys_openat+0x138/0x170 [ 1129.905538][T15049] do_syscall_64+0x14d/0xf80 [ 1129.910662][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.917095][T15049] [ 1129.917095][T15049] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1129.924329][T15049] __mutex_lock+0x19f/0x1300 [ 1129.929465][T15049] nbd_queue_rq+0xc6/0x1100 [ 1129.934491][T15049] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1129.940568][T15049] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1129.947417][T15049] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1129.953925][T15049] blk_mq_run_hw_queue+0x348/0x4f0 [ 1129.959560][T15049] blk_mq_dispatch_list+0xd16/0xe10 [ 1129.965331][T15049] blk_mq_flush_plug_list+0x48d/0x570 [ 1129.971249][T15049] __blk_flush_plug+0x3ed/0x4d0 [ 1129.976622][T15049] __submit_bio+0x28d/0x580 [ 1129.981648][T15049] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 1129.987821][T15049] block_read_full_folio+0x599/0x830 [ 1129.993636][T15049] filemap_read_folio+0x137/0x3b0 [ 1129.999194][T15049] do_read_cache_folio+0x358/0x590 [ 1130.004831][T15049] read_part_sector+0xb6/0x2b0 [ 1130.010136][T15049] adfspart_check_ICS+0xa5/0xa40 [ 1130.015605][T15049] bdev_disk_changed+0x7ba/0x1550 [ 1130.021158][T15049] blkdev_get_whole+0x380/0x510 [ 1130.026533][T15049] bdev_open+0x31e/0xd30 [ 1130.031304][T15049] blkdev_open+0x470/0x610 [ 1130.036248][T15049] do_dentry_open+0x785/0x14e0 [ 1130.041542][T15049] vfs_open+0x3b/0x340 [ 1130.046153][T15049] path_openat+0x2e08/0x3860 [ 1130.051277][T15049] do_file_open+0x23e/0x4a0 [ 1130.056336][T15049] do_sys_openat2+0x113/0x200 [ 1130.061554][T15049] __x64_sys_openat+0x138/0x170 [ 1130.066991][T15049] do_syscall_64+0x14d/0xf80 [ 1130.072121][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.078535][T15049] [ 1130.078535][T15049] -> #1 (set->srcu){.+.+}-{0:0}: [ 1130.085660][T15049] __synchronize_srcu+0xca/0x3e0 [ 1130.091130][T15049] elevator_switch+0x1e8/0x7a0 [ 1130.096415][T15049] elevator_change+0x2cc/0x450 [ 1130.101700][T15049] elevator_set_default+0x36c/0x430 [ 1130.107432][T15049] blk_register_queue+0x34e/0x3f0 [ 1130.112980][T15049] __add_disk+0x677/0xd50 [ 1130.117841][T15049] add_disk_fwnode+0xfb/0x480 [ 1130.123064][T15049] nbd_dev_add+0x72c/0xb50 [ 1130.128019][T15049] nbd_init+0x168/0x1f0 [ 1130.132706][T15049] do_one_initcall+0x250/0x840 [ 1130.137997][T15049] do_initcall_level+0x104/0x190 [ 1130.143467][T15049] do_initcalls+0x59/0xa0 [ 1130.148316][T15049] kernel_init_freeable+0x2a6/0x3d0 [ 1130.154038][T15049] kernel_init+0x1d/0x1d0 [ 1130.158891][T15049] ret_from_fork+0x51e/0xb90 [ 1130.164008][T15049] ret_from_fork_asm+0x1a/0x30 [ 1130.169302][T15049] [ 1130.169302][T15049] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1130.177124][T15049] __lock_acquire+0x15a5/0x2cf0 [ 1130.182501][T15049] lock_acquire+0x106/0x330 [ 1130.187533][T15049] __mutex_lock+0x19f/0x1300 [ 1130.192651][T15049] elevator_change+0x1b3/0x450 [ 1130.197951][T15049] elevator_set_none+0xb5/0x140 [ 1130.203326][T15049] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1130.209666][T15049] nbd_start_device+0x17f/0xb10 [ 1130.215045][T15049] nbd_genl_connect+0x165b/0x1cf0 [ 1130.220591][T15049] genl_family_rcv_msg_doit+0x22a/0x330 [ 1130.226664][T15049] genl_rcv_msg+0x61c/0x7a0 [ 1130.231694][T15049] netlink_rcv_skb+0x232/0x4b0 [ 1130.236985][T15049] genl_rcv+0x28/0x40 [ 1130.241490][T15049] netlink_unicast+0x80f/0x9b0 [ 1130.246782][T15049] netlink_sendmsg+0x813/0xb40 [ 1130.252071][T15049] ____sys_sendmsg+0xa68/0xad0 [ 1130.257365][T15049] ___sys_sendmsg+0x2a5/0x360 [ 1130.262571][T15049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1130.268062][T15049] do_syscall_64+0x14d/0xf80 [ 1130.273193][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.279607][T15049] [ 1130.279607][T15049] other info that might help us debug this: [ 1130.279607][T15049] [ 1130.289833][T15049] Chain exists of: [ 1130.289833][T15049] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 1130.289833][T15049] [ 1130.303600][T15049] Possible unsafe locking scenario: [ 1130.303600][T15049] [ 1130.311051][T15049] CPU0 CPU1 [ 1130.316420][T15049] ---- ---- [ 1130.321821][T15049] lock(&q->q_usage_counter(io)#49); [ 1130.327200][T15049] lock(fs_reclaim); [ 1130.333705][T15049] lock(&q->q_usage_counter(io)#49); [ 1130.341612][T15049] lock(&q->elevator_lock); [ 1130.346201][T15049] [ 1130.346201][T15049] *** DEADLOCK *** [ 1130.346201][T15049] [ 1130.354350][T15049] 6 locks held by syz.3.10902/15049: [ 1130.359627][T15049] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1130.367815][T15049] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1130.376790][T15049] #2: ffff8880266419d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 1130.388203][T15049] #3: ffff8880266418d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 1130.399266][T15049] #4: ffff888026664318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1130.409911][T15049] #5: ffff888026664350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1130.420792][T15049] [ 1130.420792][T15049] stack backtrace: [ 1130.426682][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.3.10902 Not tainted syzkaller #0 PREEMPT(full) [ 1130.426700][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1130.426709][T15049] Call Trace: [ 1130.426717][T15049] [ 1130.426723][T15049] dump_stack_lvl+0xe8/0x150 [ 1130.426745][T15049] print_circular_bug+0x2e1/0x300 [ 1130.426766][T15049] check_noncircular+0x12e/0x150 [ 1130.426787][T15049] __lock_acquire+0x15a5/0x2cf0 [ 1130.426812][T15049] ? elevator_change+0x1b3/0x450 [ 1130.426826][T15049] lock_acquire+0x106/0x330 [ 1130.426841][T15049] ? elevator_change+0x1b3/0x450 [ 1130.426861][T15049] __mutex_lock+0x19f/0x1300 [ 1130.426881][T15049] ? elevator_change+0x1b3/0x450 [ 1130.426898][T15049] ? rcu_is_watching+0x15/0xb0 [ 1130.426915][T15049] ? elevator_change+0x1b3/0x450 [ 1130.426932][T15049] ? __pfx___mutex_lock+0x10/0x10 [ 1130.426951][T15049] ? enable_work+0x17f/0x230 [ 1130.426970][T15049] ? lockdep_hardirqs_on+0x7a/0x110 [ 1130.426992][T15049] ? __cancel_work_sync+0xf7/0x110 [ 1130.427011][T15049] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1130.427030][T15049] elevator_change+0x1b3/0x450 [ 1130.427048][T15049] elevator_set_none+0xb5/0x140 [ 1130.427068][T15049] ? __pfx_elevator_set_none+0x10/0x10 [ 1130.427086][T15049] ? xa_load+0x1db/0x210 [ 1130.427107][T15049] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 1130.427132][T15049] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1130.427151][T15049] ? kernfs_add_one+0x477/0x5c0 [ 1130.427171][T15049] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1130.427194][T15049] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1130.427214][T15049] nbd_start_device+0x17f/0xb10 [ 1130.427230][T15049] ? device_create_file+0xf4/0x1b0 [ 1130.427246][T15049] nbd_genl_connect+0x165b/0x1cf0 [ 1130.427264][T15049] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1130.427281][T15049] ? rcu_is_watching+0x15/0xb0 [ 1130.427300][T15049] ? __nla_parse+0x40/0x60 [ 1130.427314][T15049] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1130.427337][T15049] genl_family_rcv_msg_doit+0x22a/0x330 [ 1130.427360][T15049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1130.427383][T15049] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.427401][T15049] genl_rcv_msg+0x61c/0x7a0 [ 1130.427421][T15049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.427439][T15049] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1130.427457][T15049] netlink_rcv_skb+0x232/0x4b0 [ 1130.427472][T15049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1130.427491][T15049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1130.427503][T15049] ? genl_rcv+0x19/0x40 [ 1130.427527][T15049] ? down_read+0x272/0x2e0 [ 1130.427546][T15049] ? genl_rcv+0xd/0x40 [ 1130.427564][T15049] genl_rcv+0x28/0x40 [ 1130.427580][T15049] netlink_unicast+0x80f/0x9b0 [ 1130.427606][T15049] ? __pfx_netlink_unicast+0x10/0x10 [ 1130.427628][T15049] ? netlink_sendmsg+0x650/0xb40 [ 1130.427641][T15049] ? skb_put+0x11b/0x210 [ 1130.427659][T15049] netlink_sendmsg+0x813/0xb40 [ 1130.427677][T15049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.427693][T15049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1130.427714][T15049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1130.427734][T15049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1130.427748][T15049] ____sys_sendmsg+0xa68/0xad0 [ 1130.427767][T15049] ? __might_fault+0xaf/0x130 [ 1130.427786][T15049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.427809][T15049] ? import_iovec+0x73/0xa0 [ 1130.427825][T15049] ___sys_sendmsg+0x2a5/0x360 [ 1130.427842][T15049] ? __lock_acquire+0x6b5/0x2cf0 [ 1130.427858][T15049] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.427878][T15049] ? futex_wake+0x4ac/0x580 [ 1130.427905][T15049] ? __fget_files+0x2a/0x420 [ 1130.427919][T15049] ? __fget_files+0x3a0/0x420 [ 1130.427937][T15049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1130.427956][T15049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1130.427978][T15049] ? rcu_is_watching+0x15/0xb0 [ 1130.427999][T15049] do_syscall_64+0x14d/0xf80 [ 1130.428017][T15049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.428031][T15049] ? trace_irq_disable+0x37/0x100 [ 1130.428052][T15049] ? clear_bhb_loop+0x40/0x90 [ 1130.428069][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.428083][T15049] RIP: 0033:0x7fe6c599bf79 [ 1130.428098][T15049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.428111][T15049] RSP: 002b:00007fe6c68cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1130.428126][T15049] RAX: ffffffffffffffda RBX: 00007fe6c5c15fa0 RCX: 00007fe6c599bf79 [ 1130.428137][T15049] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 1130.428147][T15049] RBP: 00007fe6c5a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.428157][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.428166][T15049] R13: 00007fe6c5c16038 R14: 00007fe6c5c15fa0 R15: 00007ffe5b18a718 [ 1130.428183][T15049] [ 1130.945951][T15074] netlink: 'syz.2.10905': attribute type 15 has an invalid length. [ 1130.960745][T15074] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20004 [ 1130.971857][ T7509] net_ratelimit: 22 callbacks suppressed [ 1130.971872][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.061680][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1131.103566][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.236003][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.351549][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.454459][ T5828] block nbd0: Receive control failed (result -32) [ 1131.461036][ T5828] block nbd0: Receive control failed (result -32) [ 1131.467707][ T5828] block nbd0: Receive control failed (result -32) [ 1131.467712][ T7729] block nbd0: Receive control failed (result -32) [ 1131.481617][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.522372][T15070] netlink: 'syz.2.10905': attribute type 1 has an invalid length. [ 1131.530252][T15070] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10905'. [ 1131.595544][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.711586][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.821783][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1131.931541][T26241] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1132.041498][ T7513] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.011806][ T7504] net_ratelimit: 35 callbacks suppressed [ 1136.011826][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.131487][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.241515][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.351663][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.461487][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.571489][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.681642][ T7504] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.791469][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1136.901523][ T7509] bond4: (slave ip6gretap2): failed to get link speed/duplex [ 1137.011695][ T7514] bond4: (slave ip6gretap2): failed to get link speed/duplex