last executing test programs: 3.031062686s ago: executing program 0 (id=4169): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e0, 0xd8, 0x360, 0x360, 0xd8, 0x1c8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010102, 0xff000000, 0x0, 'pim6reg1\x00', 'gretap0\x00', {}, {0xff}, 0x11}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x1, 0x4, 0x7, 0x1, 0x6], 0x5, 0x4}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'ip6gretap0\x00', 'veth1_to_bond\x00', {}, {}, 0xc, 0x3, 0x10}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x3, 0x7, 0x2, 0x4, 0x1, 0x1], 0x6, 0x1}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x0, @ipv4=@broadcast, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf8}}}, {{@ip={@broadcast, @remote, 0x8ac05ef5d178916c, 0x0, 'team0\x00', 'netpci0\x00', {0xff}, {}, 0xe8baf499fe66e1bd, 0x0, 0x40}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x3, {0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'veth1_virt_wifi\x00', '\x00', {0xff}, {0xff}, 0x89, 0x0, 0x10}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x1da) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x8, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x3, 0x2, 0x6, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x9, 0xce, &(0x7f0000000240)=""/206, 0x41000, 0x4, '\x00', r5, @fallback=0x27, r6, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x8, 0x9, 0xe08a}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000480)=[r1, r1, r1, r7, r1, r1], 0x0, 0x10, 0x80}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r8, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x1) sendto$inet(r8, &(0x7f0000000140)="a3be", 0x2, 0x24008883, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r0) 2.6775907s ago: executing program 0 (id=4179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b']) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x1, 0x7, 0x8, 0x5, 0x7b88]}, &(0x7f00000001c0)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x1, 0x7, 0x8, 0x5, 0x7b88]}, &(0x7f00000001c0)=0x54) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001440)=[{&(0x7f0000000080)="90d1a07ed121aae31dd2295a0ad54176e3d772dee6432633290618335b7c3d3d46594c52c7de96dfd70379bea56e8ce07f5824fc12d9f63140d051f069a9c9f010740b1bdce361599aff646138bf54521aecb24a8d5e30d767cd3408218e8c1e308ea720704cb5c2a2d35e6343c2f2903da088da28efe64a6e2a88380ad334437536aa891a1133dd5a84fcfe7f569defb349", 0x92}, {&(0x7f0000000180)="00ed6cc0e650653e448c21f4df503ab2ebc9743713ecb58b0b63ba39eda53fa644f0abac9d85e334b1ac5d99624a52b61f14628909d058abf54524ba1a30af1440e6c891a9b0e6140add27b8712bb6cfb1457c41de99dbd30159def9f4b295d508524aa18ef86b41af49c43d4afcf3ef4000", 0x72}, {&(0x7f0000000200)="1a85f7fc3588979f99c374a6745cf171d53bd6d8ae5db892090dd031", 0x1c}, {&(0x7f0000000240)="665cf2d354901953183dccef3cc498cac63b826c10dcdb323f2c8a740168eef4494dbd7eb8c2101aa535ada4a6e03ae92b131c584ea3821fbdba25c8e4488bde3804e2f28ad66a949b940c771a027a108dd6a55821f3ea3087c8e1ea84fc02f8972a088e1c6151b8bd4b677fb8a26580af0791bc18fc86eeebba1ade020b7fee1044e3834f816e4869e2", 0x8a}, {&(0x7f0000000300)="340b0e6c6d4a891bee6a0749fb498e6e42872140b8e76a7137ab1c058771805fb9988c86bc11633aed50fc8d696a0465710fd8515f4474c1648fe70380e6fc40b2b86633785cb2e5eca6abfe186840179495515779c39a3046ab1924408f05e7f413578ce73a593f91058fc01c627a133a28228ad09b08f2e66ff342e37e3e2ce7665c8d33a4a68182fde12edc6448df75ad27941c6c753e14f1947fa561b3b27c537924244cedcb31a93154de334d01ab35e1d5be2bad06c5e1af4b63686c22b3ce1f4e511d130f7567d0d781aec48b9422c1b300dd1df2698625b895347d9a29951fe974bcf82246660b04aa797abe", 0xf0}, {&(0x7f0000000400)="f0c3a1af9f1f23c103ce82cd84749d0beb", 0x11}, {&(0x7f0000000440)="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", 0x1000}], 0x7) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x4, &(0x7f0000000200)=0x2, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r12 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000001c0)={r12, r11}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000001c0)={r12, r11}) close(r10) 2.347990485s ago: executing program 2 (id=4187): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000007004000400000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x58f140, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000540), 0xffff800016adffff}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) 2.186806813s ago: executing program 2 (id=4189): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.178005259s ago: executing program 4 (id=4191): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={r5, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffff, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x20400) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="2400000004080101000000000000000000000000050003008400000006000240000000000000048000000140000100010080014000000006000001400000000800fd014000000006000001400000000500000140000000020000014000000800"], 0x24}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x13c8, 0xffffffff, 0x1220, 0x1130, 0x0, 0xfeffffff, 0xffffffff, 0x1328, 0x1328, 0x1328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1428) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r11, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="05000000", @ANYRES16=r11, @ANYBLOB="000025bd7000fedbdf251f0000000c0006000200000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 1.869716716s ago: executing program 2 (id=4192): unshare(0x20040600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendfile(r0, r0, &(0x7f0000000240)=0x6, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='08\x00', @ANYRES16=0x0, @ANYBLOB="06004cbd70000000000001009d0008000100030000000c00048005000300020000000800020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='08\x00', @ANYRES16=0x0, @ANYBLOB="06004cbd70000000000001009d0008000100030000000c00048005000300020000000800020003000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0xfffffffffffffd14) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x8, 0x16}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @timestamp, @window={0x3, 0x8, 0x16}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r3, &(0x7f0000000380)="25d7196cdf3006d1ed5b6155b965d6ba9f00bbf73b65068bbc96fd4bd3effd800352a4fb844f446fad4ff83f3bbbe4f128bea82c2fedeee0c74a9774ebc24451942d0018aab74e8d4eef78f7c737d6f1cc97", 0xffffffffffffffd2, 0x50, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write$cgroup_freezer_state(r0, &(0x7f0000000140)='FREEZING\x00', 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000565e456f9194bd72ffffffff0e0090787fff01fffffffff30000000c00008000"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000565e456f9194bd72ffffffff0e0090787fff01fffffffff30000000c00008000"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'macvtap0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x1094) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) 1.706370244s ago: executing program 1 (id=4194): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 1.690169276s ago: executing program 0 (id=4195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800020100000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.633645016s ago: executing program 2 (id=4197): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000000000000800000000000000", @ANYRES32, @ANYBLOB="00008000100000007f31e1ce4f017b55ad100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000000000000800000000000000", @ANYRES32, @ANYBLOB="00008000100000007f31e1ce4f017b55ad100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x20000000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.542145866s ago: executing program 1 (id=4198): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x40}}, 0x4000) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)={0x28, 0x12, 0x1, 0x0, 0x8000, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x35, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x8001}, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 1.537926755s ago: executing program 3 (id=4199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc9, &(0x7f0000000400)=""/201}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000060000002c0004802800018008000100666962001c00028008000240000000020800034000000001080003400000002f0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x4000010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x13) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xc0, 0x30, 0x800, 0x70bd27, 0x0, {}, [{0xac, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1891}}]}, {0x4}, {0xc, 0x3}, {0x68}}}]}]}, 0xc0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9300000022bb1830b2abd0ffd2f229534a2e4e2d8cc0000000009b3c58e3e7cc5e2287dccd38eb566b62ce1518110b8d74d00ad693a73a9312daadb853f9880dcbda2264992897e2394d7569880829a15cde", @ANYRES16=r3, @ANYBLOB="010027bd7000000000000c000000200001801400020076657468315f746f5f626174616476000800030002000000180003801400038010000180080001000200000004000300"], 0x4c}}, 0x804) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000005c0)={0x1, [0x0]}, &(0x7f0000000640)=0x8) 1.41887981s ago: executing program 0 (id=4200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) 1.343126023s ago: executing program 0 (id=4201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.341974289s ago: executing program 1 (id=4202): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.20244002s ago: executing program 4 (id=4203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001900)=ANY=[@ANYRESHEX=r0], 0x2c}}, 0x0) 1.143681191s ago: executing program 4 (id=4204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000040)={r0, r0, 0x200, 0x1000, &(0x7f0000000c00)="671cbec649e88b5f6004143f9b9a3bbc511fa56628f722a2bff83e74c1be1b99e1a20bec057df23cd3507234d312a361aa860048a37e43e213388da8b4ae0d15e146d9c63a818900af760cf8a802e4e847bdd4530b01449ec85ab61f2d828a253a542c418045a60f1f6ff8ac992ac4e5baa8eb68c24e7e7aff990677c67bd5296e4995ff13b1993eae0829cb7058dac72653e76f7c2ddbe8ef2ed1efe1feec640024828bd2a44670cb411774ff6a3ff4e8e5fa08298f5f0b51acdbaab9be3189c76ae6b151b436aef644e3837527d40310f5c9d3bd9e25f96163c1e6837da50b82afbf0979cd5c035e2ccfe478571811a938b0acf34c9d8ccecf7bfa4ca4f8479cc7b069836fce65eb452f1221f96ad43be878619a2334eb33ca002fa65338e9ac88fd9242eafbb70927a6e3a2e6e951ab5619c86ec4f6680dcd300d43d11dbc67d64630c7c3e50239d8296a5f831e574b2645942057db8fb58752501a662287f47501b4fcb53b9a8389b648571d95282cf62e04540532a9210bf7f419ecc777ee6b0267c8e2dc2931d9213950082424243176cb530648e20882b7f63648b2b85681cc77617703ceee7ee2dad5d4f59f088a9e5503d22d47ab936b5a5a489b12bff4fa175d0c8286c8ab6491badf45f3b1a9dd3bd303255f3af7053834407ac74cacc3a929675c9df4ad00ce6d287d09df9de4885c0aeb614a2415be6ddff4819f4cd1c3c47c3cbfeb1fc7dc639529c3524e5c3a02c6e0476a6e4397024ffd3b98234af7a02667266f42a963bfc29c7bed7a994b5387e7edbe51c0bdfeeafbb7edeac1ffec1189c918617920854d3097af3c95610535f9d4827212cda7dd9786730aed8e7dacb73c93c9c6eeea552273a799dc2aac1f57fb93c2fe770672b777ca37e33381464106fa9340cb06bc4d71feeeb4a5e50bc5f062be81d5e85d1e066afdf8b14ddc06f859147b5ff81b31f9752bd4d878a516cc28a49d105d5ff92ff434cb1f9baae24db7a43f04851f2d55bbab5cbd66dc86821fcf222b0c8f09b43c46a9f0ed6d41d46863c375900f07a01b341b3fd704504bccc59de1cd5a8c7d2d6229b72ca37ab7a361981429add3dd669a55fa5224878d6cc7c9809a951ff02e3800adef3875d78b4ef2b9bfd6520e3061f70796c520c98a31282ce164cd1e2bad831218b08b46198d35381516fba4ef9e96b54b899d5799945cc6c57e94cd5e60a618d0d39ae51ab28533c612b2d26eeb6c87b2b198eb0694f96c41233fcffba52c1f14a8d6612239a5a05ef0c362cde40051f878af4ed32aa1839c2478b548451f7c69ca0efec88c29e05906b46a2caf921809286cbc7fab6495c61aa3256f77dfd18eb4409a56deecf52df287262622391f24cd530359af9859f14c971bc1bd12259f4206b75b4108733430b32de6b312fdf736504956205afabe43c85d21e8ab7db7dbd23ec9aea072b6c2f99507ccb72d895aeb264a0ebcf35cc4bf93d161b1b206d5aa5038d158835fe088d09a0b74d3b01598afcf908627f9399e9ebaf40b206ff26315778a0096545e6eadbc0f35df1d0412d56a2f4ca31709989bf1c0625b31874989766070c05cee42e71bbb9ba8dfb11b05545d4a8882c44d4af5b9e30cae1ad8072daff8b82edd9f2d4995f080a7fc9594b2e2f7a48b59a8b14c8fe4ec638141c8b04d4b26d0ccbb28f1dea624b1639e9071da59d0bef08c28741a3e0fc4c164ff8645994febe98e4bbf4ca18bf1e6afd35c5456f367e469525e0956ba6666d34e96997a9f153ebe950a7563f73164336876dd17f1d052361e2bde655fd9fe2ea95dd2805315ef3d3d88f6c12423cda7fbe367bffdd1b0f1eec9d3eb52d76ba8a2ca8a13411289197a3e2e1e178e8d57ca1f5bfc64136995c51643fc6140f1e901139306163600dabad3d634e325bf3d30da146ccdf0e1dc9c0fe6c6628398bbb53703437551ebe7fe3546bbb480b915b55040e00a567bdf70201c698be05588a7534616095ed4d27eabedc079d2cfe3623956dcd91dfcfccadacda809303242ae22e81b0cba86fe974fe3452f7601d9da5c0d1310a565991a8997f777f84c48b943f70d20e370c2fa14e0a2f0c15cac6b937fb2db722bb98af0ec6bb633c847d20d01f5b4e42b4737375e5b4f3216b5a678371d16c38ef307db29f1cdc13f63fbf59fbe70f785bc63cebdf66e8845baad54c267466eb915acb468c84fd86367fddacf5cecf059d6171002f310202b6f015263e3048ea9a5db385154be599544b30c28ce3095c7977b782941f397903b40216d8dc45afe5efca27e53ebbef8fe07df7a86228fea77e468c71350bd6ebe06c3f3f6a03a107eb960e6f9c28a2b0a4e86a9c340ebdf4c797b94ef19a179055838da6d0f43fd738c72b70e306b36e45bed39ed31388caab9d910adc50d4207addd6f8c33165321ef58b13f77b7bf8a503accce70ffe74cb5d52540d72813529d168d7f90e430bab8b3f7ed500a9964da1b8c38e1b81158031fe06c12b2c95cfab504a6800e8cdc93c71b4bbed174de65f3c35eede37fb7e5e5814ea33060d0d5d64e707c6183ad317e0ccdba2fed4540f2ee125330fc04d5f855f4b9358837c35230c3c3d159ac342166bd5976f379069bcc03f8434c3fb0509c4985238dfdbb9124199e83cce5c25add891af2c53a9812a2c0a3b4973ce7f263a276b966f3e16e9e7858d280d841b7541aebbc65118990d635092a548bbde87efd884fe2f62aa9830dd7aa80a463bd77f6300b8a7a18eb3ef1a30f1db74662a69a33f0a966bf6f5a06dd131528ba9fa073305dc9f73fb021e4dd1efe5157361466bf31cc74db901bd724ecdf576dd13eb1212cb1baa6e32d97de64b6ae66a67471c020eefc9d31f86556deb5dc33d0c7e99d44f4787fe3d01160070c242c770c4bc1bfaa4e3a7207d403527c9a417dddf947ef791a13cce46e53ed247ec21220fc8e17dc59d9c0a5c9857ee986f4c1640c27817d5a44c548e5a7ee1891e4937cb6f06f2b9af23eb8e3c78736531ad941690bc58788f25b4f951124402fb380504c1160ad738f5b7ae92e5cca44f14fbbb37bda2064cdb1ca8a68b2a998e843ab643a162b6763ed73dac3b3cf2fc40f3c3d571d9495025278b4a39e41fc1c8cfe6b8ec146cb9c8678034ba26e1959c4b692582beeb0453af57c95c78af99081b3f0309f1ccfba33a7c21fee9db7b13d2fd6f1eb3b1bfb84545cc3033859d301c158529a3109f280503ddadbd743211db4a5dcf60449ead61e299de2886eb5447d8df6df4ca156ee6f0328b329fc7cddb78302804afa89074177d3eb9f326f67bdb4215a421631a04b745384a8dc32baff7007287bb67465f9868297d7eca6d52e77bef0de770f496bc8f434cbac5800de3b87644e918db69ca5c6473f1c399c28e59a6c965c5f41ccccf695d271aec04e0b7bffa5ed657e6ecd192b619f3d474375e80312e4b6fe758e5cc25edeb94f0104db2e90310230f16c1e0ff37f7f6058c261e41a4f27266c17376f840356fa15195e54fbdfdd3f471cb8e2de550cbd672d4bbf1fd01ee3b24e4f15a0cbb1e49c9eac96b0a65f9168b1ec737a5ba0303bb825d3e165c47f922b0644a79c164bf8f164dc154af43171f44df8921da5c8b8e895865dc4b844dcfb3cb20a420d55b7aeebbfd78c5277d34d2226058033914477b4cff5258ba5df6563b3420c03ae18dee0d315e8fa5e3729d80a330e83a72bbf90f62518e76cca4f6437730bbd6ebecbbbb2695d5ae05acccf0058f724644ba0fa32b38904958aa0f843e1819a16966fd41486a92943b020b91a139483cebddc2258587eae0a48f34c03b25560a1536bf7665e56aafee41d7d745343713606f27407c88270ba13b8f455630e59c1c96387e86d0daa76bb7d3b789f3884a74627790bc78b3b582876788227d0a4c871e3076c23ed82e96e1b00f8ae880f5c49d7b4d7fd1393d36c2b64bba33e6adc6e92d5ba69e3b83d3335ca4740c42815b687b3aba8b2d06d34bc96bb12ece25b5a10148436a2feaec171c3c7ac9bc4c046e84d078f92bffa39f23bc0deb7be62673662f0eaf1a9df01a3689c0c150ec5076a7911dc08684a9c1205b04d542c374c08b6953f10ee06966832eca6294f3afbb5ab0854bf4ccae48380f9fdd5d5dbe84d20452d3c90450c5e8c977551e857cab7ca172bb74a75b803a461f7464f833ec4059e0ecce3a791ca8b23ef582b8f18115cd6dd6e9f15c7d8514821ab4350728d57c29956380c60d9ff33719daa81a664cf1d45cd4f7742b2120de94df8d2b2c2261ff92d09a92541a1da226417e83d5ae71a51d9ecf778cadd5fd668d81161240645090043843f8a3b573b239ec39fcf77f009900a24556ba54f4b97bf3e2f15dbaf8b86f11789ec9f75101faa4a89a6cf33555586b1fc108763935e80615ff27ffeaeee2327ac2566b51c7ee8f91a8d094356af703c0b07e71038236107b76b478f5cd139d93ee90b98cef21de41fe28e1359f855cb01d31b3c2eb37f07e9e7758394a7361f1707aa8679306619529d1c166ab8e170aa7011cea379ff0036ab8adfff2516829f910ed7707aee7b43cfbb2bb6f639aef7f502fe2facc6e95ad4c4c534384ffae297d9a93f45108ef06dbf0a4c9debc3ad581ce1b40bb440f17b7855c76f10ff97fccc26a26d1bb6afd51a7f9ea738519c7144533083056a5335c04570fbd8d014f53f31a2489fde03d62ccec779bb573d33df9f6695e5682627b8e5feb407c6a290e34587cf3e0566a920a33ac6de1a8e026fc645b5e71b2d9013f220d73ff5ccfc0936eca2bbc93813ca7c1242c2905210e109f4875b568cf04772270eeca471d54e27d56139178e6a16ef412c3f6e96d5a41d85b04e77f53466c5b658a7163cc59ac8d8f374c5f037ef041553a1701253c8893d3793ce4fb48e06071497e313130c1de4b23e066bb0bd67e76770b294a4415b2c9cb23a84f964fa3ba5fccf162ae1a8287fe7c29f05dd18848002337e6290d77f1420f8dc11b2ed47dde3f72139f091329c637ef8bb92a30d11e4c9033b5dc46df2f05a7bb473284c814fc91b289534ab5b121e7baf0b9eb41011a0a9663d60dce598116c5a99c52400861b313c67513c10168bccf645feb24d2b4978b49ecd9280a1f0c88dc819d1436f035c2fdd912b5d9d257514aa65cc0dcfb7bfa95bdf9ec5b41cee3e58d37d56c6011a8e681d2c934afa2603e051033233411017249abe949f682d6a19a1753344c95b354bb53c2ffad71ec567bb1a3c09a327c4282d265854d3b76f359df3397b4d967809e4082631ae5b59f8e4b57850a2eafa24444145b9f572b23f19392041af9ba03c0f4d4981d21d130cbef39070fea23267105ca786d0a9148971bfbb9f1a3b29e80a07e52e7396f9281ca5294d8e683308940b329d9a2a839a92c92393835a1113cd3f5b6d332a36df2a1f853047bf1e26c4e172456cf240743fd6030bf33783107ca5ed74897e2c65e56310c334744d1e1c5cf0510807454b0c6dc34dc34545db413aae3650c6e20c67c109950c75a1830d1430c7f05a355a1b60a5dde4acfedafe273da3b7f31a0d204d38ad0435f92dcfb211fb7121dfe9de060af8d5d2f45cac69fd9a06124d0e5467544dd2cccafc916a234b286832b888935a31d5a030fa15d0e1218de781ec47dfb5c9ce5e7882fd6c637cbd9ea3cc20f2a21dc2783922f9a57a5d475f88a28045788fd88440bdc2bf9cc1760683d8c2169aa7adc33dfa3f04d06c760898199ec5612bb26e03b226429bb4", 0x81, 0x44, 0xfffd, 0x401, 0x8, 0x3, 0x400, 'syz0\x00'}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc850}, 0x440c0) 864.122995ms ago: executing program 1 (id=4205): syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 738.412912ms ago: executing program 0 (id=4206): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b030000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)=""/81, 0x51}, {0x0}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x600100a2, 0x0) 730.454769ms ago: executing program 4 (id=4207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"/616], 0x268}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817d4800000024001280110001006272696467655f736c617665000000000c0005800800250000000000140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) 726.663435ms ago: executing program 3 (id=4208): r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt(r0, 0x4, 0x1, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000240)={{r0}, "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"}) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001240)={r4}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001300)={'batadv0\x00', &(0x7f0000001280)=@ethtool_sfeatures={0x3b, 0x8, [{0x9, 0x9}, {0x400, 0x9}, {0xfff, 0x9}, {0xc6, 0x7}, {0xffff, 0xff}, {0x3, 0x2e67}, {0x4, 0x6}, {0x74, 0xfffffff8}]}}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = accept(r1, &(0x7f0000001340)=@ieee802154, &(0x7f00000013c0)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r6) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r8, 0x200, 0x70bd27, 0x717e, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PBSS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x34000000) socket(0x2b, 0x2, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={0xffffffffffffffff, 0x0, 0x1000, 0xd7, &(0x7f0000001540)="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", &(0x7f0000002540)=""/215, 0xbe, 0x0, 0xb0, 0xe1, &(0x7f0000002640)="9efd77c8e5328642d9aeca2ce3704107692b6e6ab1997a97a31f4edc58ff22ed4cb4daf530071e1847e27d04e04ac6454ad264d79f817ad1845a4ccda3ea461a19718a9089dd1e2415b2f5945dd889154679c607b76c32a38ff3bfac0e917e1213b751849836b2185c808695a333ffebbf182ee4293e3f17873d7e16b25b19ea01008c13aa13c2f00b55f3cc4b9c58bbff37ecdca0090316d7184e790fe6eb09181b9de8f8de5089c88e2a543a80d9a3", &(0x7f0000002700)="4653d817279afa457d69bf0d0f5d82fc6d3dd00a56bfcca2ff19076f0d01fe6113dbf1120f606bca9511466666353f3494b1b4a6813ee3c62a71fd1b051d58efd9abba90b8aa97c6326429a96ccdf4d2a7807c39e30058bcdf09adc0b1ba94e59bdfdbcc9919815ad34fdc5d6cdf7d2262f8879e3d8004bd4a6f6b53618f76e40ef0a493c375514587c0df946f0216afa547ff0f9b99a8394824e14d08d1ab61ca46c2ec60f5bd1647837c8daad32a268f800a3b24462bd568231cff3d88a7f5cc2167c891fa49b34ee5f71b255369cfdee4348c28af1cd1d49acbb23479349ed5", 0x4, 0x0, 0x40}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002940)={'sit0\x00', &(0x7f0000002880)={'gretap0\x00', r3, 0x700, 0x7800, 0xd, 0x4, {{0x1d, 0x4, 0x0, 0x3d, 0x74, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010101, @remote, {[@generic={0x88, 0x9, "56b8d75c690f9c"}, @rr={0x7, 0xb, 0xf3, [@remote, @loopback]}, @rr={0x7, 0x7, 0x61, [@remote]}, @noop, @end, @end, @generic={0x83, 0x2}, @timestamp_addr={0x44, 0x4, 0xb3, 0x1, 0x7}, @rr={0x7, 0x2b, 0x94, [@private=0xa010102, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @local, @multicast2, @empty, @multicast1, @rand_addr=0x64010102]}, @generic={0x86, 0xe, "a2df4494082e6845094cf163"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002ac0)={'syztnl2\x00', &(0x7f0000002980)={'gretap0\x00', r3, 0x20, 0x7, 0x20, 0x8, {{0x48, 0x4, 0x0, 0x8, 0x120, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x13, 0x4, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x8, 0x1, 0x8, [{@rand_addr=0x64010100, 0x7f}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x101}]}, @noop, @generic={0xc7, 0x9, "ecdb89e91d5668"}, @noop, @timestamp_addr={0x44, 0x54, 0x91, 0x1, 0xc, [{@local, 0x6a40}, {@broadcast, 0x3}, {@local, 0x140}, {@loopback, 0x5}, {@local, 0x9ff6}, {@loopback, 0x4}, {@remote, 0x101}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0xc71}]}, @timestamp_addr={0x44, 0x4c, 0xed, 0x1, 0x0, [{@local, 0x101}, {@empty, 0x1}, {@multicast2, 0x5}, {@empty, 0x2}, {@local, 0x62b5}, {@remote, 0x80000000}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010100, 0x10000}]}, @lsrr={0x83, 0x1b, 0xa4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @local, @multicast1, @rand_addr=0x64010101]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) connect$bt_rfcomm(r7, &(0x7f0000002b00)={0x1f, @none, 0xe}, 0xa) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002b40)={{{@in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000002c40)=0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000002c80), r7) socket$l2tp6(0xa, 0x2, 0x73) recvmsg$kcm(r7, &(0x7f0000003240)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002cc0)=""/172, 0xac}, {&(0x7f0000002d80)=""/183, 0xb7}, {&(0x7f0000002e40)=""/184, 0xb8}, {&(0x7f0000002f00)=""/182, 0xb6}, {&(0x7f0000002fc0)=""/10, 0xa}, {&(0x7f0000003000)=""/141, 0x8d}], 0x6, &(0x7f0000003140)=""/204, 0xcc}, 0x1) ioctl$int_out(r1, 0x5460, &(0x7f0000003280)) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)={0xcc, 0x464, 0x4, 0x70bd26, 0x25dfdbff, "19bc1d0de5b6000089492ce45910ec4564f3a896d98849bad2feddb548162631a59c27b88dccd373955a15fbdcc064bbb3ba8ad04726faa18c9b2d235e4c5c16b5daff5a9d7ed4228e09d32ab66b23b66f0bd0b5f7c1a15bb748e233d5258a740ac2231b3f21e64888c0e216874503f6a576367489d340f4891f3be3e9c20cb5677916104f78daa09615eed7ec7e9fb095f0caa06f967df8d7292d8a71d2a12797e893af42c047c606152244880cc504d8682dd601982342ae56", ["", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000003500)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x328, 0x328, 0xffffffff, 0x208, 0x328, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, &(0x7f0000003480), {[{{@ipv6={@private0, @mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0xaa7175650cd61412, 0xff000000, 0xffffff00], 'wg2\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x67, 0x5, 0x1, 0x60}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, @ipv6=@private1, @port=0x4e24, @gre_key=0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0x0, 0xff000000, 0xffff00], [0xffffffff, 0x0, 0xff000000, 0xffffffff], 'macvtap0\x00', 'veth0_to_batadv\x00', {}, {}, 0x4, 0x8b, 0x3, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"e54e"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x13, @ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', @icmp_id=0x68, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, "ff22", 0x1}}, @common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x9, 0x5}}}, {{@ipv6={@empty, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff], 'veth1\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3a, 0xff, 0x0, 0x52}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private1, @gre_key=0x1, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 667.026515ms ago: executing program 1 (id=4209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x120, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x10c, 0x1, [@m_skbedit={0x108, 0x19, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x0, 0x6, 0xd572, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf108}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x75da}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}]}, {0x83, 0x6, "77d50aa56304ef9a8109a41c1c18977a319634ca56ce3d8c52b67ea2431aa6a7d9ac3260f57f46e88f539b5a9565d7f1effc8b5776f902fee427a70cd5ae9f96c810f0eb6ff14db12a990d52b14e08000000f541ebb1ced614a2c656035eaaef3871c88241afbe79fb31cf22a9d87cbe66009269bb29e2e450e0bf00000000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x120}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x120, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x10c, 0x1, [@m_skbedit={0x108, 0x19, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0x0, 0x6, 0xd572, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xf108}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x75da}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x10}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffff}]}, {0x83, 0x6, "77d50aa56304ef9a8109a41c1c18977a319634ca56ce3d8c52b67ea2431aa6a7d9ac3260f57f46e88f539b5a9565d7f1effc8b5776f902fee427a70cd5ae9f96c810f0eb6ff14db12a990d52b14e08000000f541ebb1ced614a2c656035eaaef3871c88241afbe79fb31cf22a9d87cbe66009269bb29e2e450e0bf00000000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x120}}, 0x80) (async) 657.970035ms ago: executing program 2 (id=4210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 534.383129ms ago: executing program 3 (id=4211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 496.550556ms ago: executing program 2 (id=4212): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044054}, 0x240c4144) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49000000, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@can={{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "f7767e344ebba44a"}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x4000080) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x9) writev(r6, &(0x7f00000033c0)=[{&(0x7f0000000140)='M', 0x1}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0xd9, 0x6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000340)={0x7, 'veth1\x00', {0x2}, 0x7b}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r11) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0xff85, 0x8000}, [@jmp={0x5, 0x0, 0x0, 0x9, 0x2, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 459.555219ms ago: executing program 4 (id=4213): syz_emit_ethernet(0x69, &(0x7f0000000240)={@empty, @random="1704b45adbde", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x5b, 0x67, 0x0, 0x0, 0x2, 0x0, @multicast2, @local}, {0x1f, 0x2, 0x0, @local, "871b42e3d5b290873de936473937922a09a298d14e040000ac79cd347ff7524cb32fe9b7e463467e8c1afcc7e5f56686c3c51a8f8d7e7a136896ba93ae8f22"}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140e, 0x800, 0x69, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x20000046) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$can_raw(r4, 0x0, 0x4010) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendto$packet(r1, &(0x7f0000000080)="69953b8fd4e99ee6273a762eac84ec2cbf4a945c22d67975a707256997317b2e0d7ee3e3a932977e90d89c2af6ae82015d0846eb0e4a265f34d113d26208c5a191a348b79adb256293388fb429b6aa0fa969f570ded0", 0x56, 0x1, &(0x7f0000000100)={0x11, 0xb, r5, 0x1, 0x6}, 0x14) 386.076431ms ago: executing program 1 (id=4214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x52}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) close(r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40140) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x1], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbc}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x48040) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r12, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 348.15539ms ago: executing program 3 (id=4215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x20004004) 300.539563ms ago: executing program 4 (id=4216): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r0 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0xd0, 0x150, 0x150, 0xd0, 0x90a, 0x1a8, 0x238, 0x238, 0x1a8, 0x238, 0xf, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'batadv_slave_0\x00', 'pim6reg0\x00'}, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@dev, @private1, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x2d8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="030000dea6a3420002000000040000000a000000", @ANYRES32, @ANYBLOB='Z\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000800"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x0, 0xe, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0xb, 0x1, 0x0, 0xffffffffffffffe0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0xfff, 0xaa, &(0x7f0000000300)=""/170, 0x40f00, 0x1d, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xc, 0x6, 0xfffff000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000480)=[r10, r1, r5], &(0x7f0000000500)=[{0x0, 0x3, 0x5, 0x7}, {0x2, 0x3, 0x9, 0xb}, {0x3, 0x2, 0x3, 0x8}, {0x5, 0x3, 0x0, 0x4}, {0x5, 0x5, 0x2, 0x1}, {0x2, 0x1, 0xe}, {0x2, 0x1, 0xd, 0x9}, {0x3, 0x2, 0x8, 0x1}, {0xa, 0x4, 0x8, 0x5}, {0x4, 0x1, 0x7, 0x7}], 0x10, 0x9}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000000206010800000000000000000000fffc0c00078005001500080000000508010006000000050005000a00000005000400000000000900022073797a30000000000900020073797a320000000066d96965b299754241404223796638d36ac5373234900f43c21b995b9be6640d2aca56e50283b327e52f76dc0ec0b1aef6a9b9de1b92b32d75630b2b64fa3ee5576e28d522cd99e22121747d5daf23f2d3"], 0x50}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 37.982719ms ago: executing program 3 (id=4217): r0 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000940)="48f3a6d09ef7d0010d3c33092b0c51188147167bb8642b28a7aeb6bb9b0580d67933c0e8a8452b5de90708da802756a9b74addd720afbf9f682ac44cb12b39633827f6f0a550084bce60c63641ade717f8f2f70738ee0c6ed3054123eee95fcfdf94b6810527be24c314d266756a01cc228713e52d324107a93178f10bdfd06cee628b406509994276a1bc695632aafb42f70dc29f6a0770e3bc310f2105", 0x9e}, {&(0x7f0000000700)="b558adee7f6146bc37c8a7712e286dc559ff1afcfa1b9c8ee36a059a361f93db", 0x20}], 0x2) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x32ff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000300000005000200020000001c000480050003000200000005000300020000000500030002000000"], 0x40}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[], 0x20}, 0x0) 0s ago: executing program 3 (id=4218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): uous mode [ 362.939203][T15180] vlan3: entered allmulticast mode [ 362.944372][T15180] bond11: entered allmulticast mode [ 363.179755][T15180] bond11: (slave gretap3): making interface the new active one [ 363.189983][T15180] gretap3: entered promiscuous mode [ 363.200258][T15180] gretap3: entered allmulticast mode [ 363.208456][T15180] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 363.660885][T15219] 8021q: VLANs not supported on rose0 [ 363.817559][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 364.025388][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 364.065494][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.101394][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 364.117815][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 364.149336][T15225] sctp: [Deprecated]: syz.2.2684 (pid 15225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.149336][T15225] Use struct sctp_sack_info instead [ 364.242607][T15240] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 364.286935][T15244] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 364.357160][T15247] netlink: zone id is out of range [ 364.391257][T15240] 8021q: adding VLAN 0 to HW filter on device bond11 [ 364.688766][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'. [ 364.720114][T15266] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2697'. [ 364.761194][T15262] netlink: 'syz.3.2696': attribute type 16 has an invalid length. [ 364.763684][T15270] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 364.781954][T15270] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2699'. [ 364.792168][T15262] netlink: 'syz.3.2696': attribute type 3 has an invalid length. [ 364.825321][T15262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2696'. [ 364.959355][T15277] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2702'. [ 365.046775][T15280] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 365.090467][T15280] 8021q: adding VLAN 0 to HW filter on device bond12 [ 365.160491][T15283] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2705'. [ 365.186377][T10507] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 365.197954][T15290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.218318][T15280] vlan7: entered promiscuous mode [ 365.223401][T15280] bond12: entered promiscuous mode [ 365.233543][T15280] vlan7: entered allmulticast mode [ 365.245444][T15283] netlink: zone id is out of range [ 365.250719][T15280] bond12: entered allmulticast mode [ 365.256087][T15283] netlink: zone id is out of range [ 365.261354][T15283] netlink: zone id is out of range [ 365.268145][T15283] netlink: zone id is out of range [ 365.273294][T15283] netlink: zone id is out of range [ 365.289099][T15283] netlink: zone id is out of range [ 365.318279][T15289] bond12: (slave gretap2): making interface the new active one [ 365.320483][T15283] netlink: zone id is out of range [ 365.325946][T15289] gretap2: entered promiscuous mode [ 365.326102][T15289] gretap2: entered allmulticast mode [ 365.344261][T15289] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 365.385337][T15283] netlink: zone id is out of range [ 365.399593][T15283] netlink: get zone limit has 8 unknown bytes [ 365.731334][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 365.818248][T15319] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 366.073856][T15321] team0 (unregistering): left allmulticast mode [ 366.082429][T15321] team_slave_0: left allmulticast mode [ 366.094698][T15321] team_slave_1: left allmulticast mode [ 366.103799][T15321] geneve0: left allmulticast mode [ 366.111132][T15321] bridge0: port 3(team0) entered disabled state [ 366.129879][T15321] team0 (unregistering): Port device team_slave_0 removed [ 366.139393][T15321] team0 (unregistering): Port device team_slave_1 removed [ 366.149249][T15321] team0 (unregistering): Port device geneve0 removed [ 366.157701][T15331] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 366.225032][T15328] bond14 (unregistering): Released all slaves [ 366.314285][T15329] bond14 (unregistering): Released all slaves [ 366.497934][T15351] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 366.517791][T15351] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 366.603330][T15357] bond13: (slave gretap3): making interface the new active one [ 366.619300][T15357] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 366.634672][ T94] block nbd0: Possible stuck request ffff88802556e000: control (read@0,1024B). Runtime 270 seconds [ 366.649928][ T94] block nbd0: Possible stuck request ffff88802556e1c0: control (read@1024,1024B). Runtime 270 seconds [ 366.662323][ T94] block nbd0: Possible stuck request ffff88802556e380: control (read@2048,1024B). Runtime 270 seconds [ 366.673671][ T94] block nbd0: Possible stuck request ffff88802556e540: control (read@3072,1024B). Runtime 270 seconds [ 367.171421][T15392] FAULT_INJECTION: forcing a failure. [ 367.171421][T15392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.196806][T15392] CPU: 0 UID: 0 PID: 15392 Comm: syz.2.2737 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 367.196836][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.196848][T15392] Call Trace: [ 367.196856][T15392] [ 367.196865][T15392] dump_stack_lvl+0x189/0x250 [ 367.196894][T15392] ? __pfx____ratelimit+0x10/0x10 [ 367.196916][T15392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.196939][T15392] ? __pfx__printk+0x10/0x10 [ 367.196966][T15392] ? __might_fault+0xb0/0x130 [ 367.197006][T15392] should_fail_ex+0x414/0x560 [ 367.197033][T15392] _copy_from_user+0x2d/0xb0 [ 367.197061][T15392] ___sys_sendmsg+0x158/0x2a0 [ 367.197095][T15392] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.197168][T15392] ? __fget_files+0x2a/0x420 [ 367.197185][T15392] ? __fget_files+0x3a0/0x420 [ 367.197216][T15392] __x64_sys_sendmsg+0x19b/0x260 [ 367.197260][T15392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.197301][T15392] ? __pfx_ksys_write+0x10/0x10 [ 367.197325][T15392] ? rcu_is_watching+0x15/0xb0 [ 367.197356][T15392] ? do_syscall_64+0xbe/0x3b0 [ 367.197383][T15392] do_syscall_64+0xfa/0x3b0 [ 367.197403][T15392] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.197424][T15392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.197444][T15392] ? clear_bhb_loop+0x60/0xb0 [ 367.197469][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.197488][T15392] RIP: 0033:0x7fb30a18e9a9 [ 367.197506][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.197522][T15392] RSP: 002b:00007fb30af55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.197544][T15392] RAX: ffffffffffffffda RBX: 00007fb30a3b5fa0 RCX: 00007fb30a18e9a9 [ 367.197559][T15392] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 367.197572][T15392] RBP: 00007fb30af55090 R08: 0000000000000000 R09: 0000000000000000 [ 367.197584][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.197596][T15392] R13: 0000000000000000 R14: 00007fb30a3b5fa0 R15: 00007ffe273e3dd8 [ 367.197628][T15392] [ 367.677440][T15408] FAULT_INJECTION: forcing a failure. [ 367.677440][T15408] name failslab, interval 1, probability 0, space 0, times 0 [ 367.724540][T15408] CPU: 1 UID: 0 PID: 15408 Comm: syz.2.2743 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 367.724577][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.724589][T15408] Call Trace: [ 367.724598][T15408] [ 367.724607][T15408] dump_stack_lvl+0x189/0x250 [ 367.724637][T15408] ? __pfx____ratelimit+0x10/0x10 [ 367.724659][T15408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.724683][T15408] ? __pfx__printk+0x10/0x10 [ 367.724718][T15408] ? __pfx___might_resched+0x10/0x10 [ 367.724746][T15408] should_fail_ex+0x414/0x560 [ 367.724775][T15408] should_failslab+0xa8/0x100 [ 367.724807][T15408] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 367.724835][T15408] ? __alloc_skb+0x112/0x2d0 [ 367.724867][T15408] __alloc_skb+0x112/0x2d0 [ 367.724899][T15408] netlink_sendmsg+0x5c6/0xb30 [ 367.724939][T15408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.724978][T15408] ? aa_sock_msg_perm+0x94/0x160 [ 367.725001][T15408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.725022][T15408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.725050][T15408] __sock_sendmsg+0x21c/0x270 [ 367.725078][T15408] ____sys_sendmsg+0x52d/0x830 [ 367.725115][T15408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.725156][T15408] ? import_iovec+0x74/0xa0 [ 367.725187][T15408] ___sys_sendmsg+0x21f/0x2a0 [ 367.725218][T15408] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.725309][T15408] ? __might_fault+0xb0/0x130 [ 367.725341][T15408] __sys_sendmmsg+0x227/0x430 [ 367.725378][T15408] ? __pfx___sys_sendmmsg+0x10/0x10 [ 367.725405][T15408] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 367.725459][T15408] ? ksys_write+0x22a/0x250 [ 367.725489][T15408] ? __pfx_ksys_write+0x10/0x10 [ 367.725512][T15408] ? rcu_is_watching+0x15/0xb0 [ 367.725543][T15408] __x64_sys_sendmmsg+0xa0/0xc0 [ 367.725574][T15408] do_syscall_64+0xfa/0x3b0 [ 367.725596][T15408] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.725616][T15408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.725636][T15408] ? clear_bhb_loop+0x60/0xb0 [ 367.725660][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.725679][T15408] RIP: 0033:0x7fb30a18e9a9 [ 367.725698][T15408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.725715][T15408] RSP: 002b:00007fb30af55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.725738][T15408] RAX: ffffffffffffffda RBX: 00007fb30a3b5fa0 RCX: 00007fb30a18e9a9 [ 367.725753][T15408] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 367.725768][T15408] RBP: 00007fb30af55090 R08: 0000000000000000 R09: 0000000000000000 [ 367.725780][T15408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.725793][T15408] R13: 0000000000000000 R14: 00007fb30a3b5fa0 R15: 00007ffe273e3dd8 [ 367.725827][T15408] [ 368.045717][T15413] lo: left promiscuous mode [ 368.057785][T15413] tunl0: left promiscuous mode [ 368.074168][T15413] gre0: left promiscuous mode [ 368.087880][T15413] gretap0: left promiscuous mode [ 368.100239][T15413] erspan0: left promiscuous mode [ 368.108307][T15413] erspan0: left allmulticast mode [ 368.116939][T15413] ip_vti0: left promiscuous mode [ 368.123998][T15413] ip6_vti0: left promiscuous mode [ 368.133241][T15413] sit0: left promiscuous mode [ 368.146461][T15413] ip6tnl0: left promiscuous mode [ 368.153946][T15413] ip6gre0: left promiscuous mode [ 368.161911][T15413] ip6gretap0: left promiscuous mode [ 368.170448][T15413] bridge0: left promiscuous mode [ 368.177707][T15413] nlmon0: left promiscuous mode [ 368.216284][T15413] caif0: left promiscuous mode [ 368.252537][T15411] team0: Port device team_slave_0 removed [ 368.283552][T15411] team0: Port device team_slave_1 removed [ 368.289979][T15411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.299801][T15411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.317574][T15411] bond12: (slave gretap2): Releasing active interface [ 368.326265][T15411] gretap2: left promiscuous mode [ 368.331718][T15411] gretap2: left allmulticast mode [ 368.352730][T15411] bond13: (slave gretap3): Releasing active interface [ 368.366514][T15419] team0: Mode changed to "activebackup" [ 368.490932][T15426] vlan0: entered promiscuous mode [ 368.840730][T15458] ieee802154 phy0 wpan0: encryption failed: -126 [ 368.899521][T15458] ieee802154 phy0 wpan0: encryption failed: -126 [ 369.086248][T15470] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 369.162899][T15470] 8021q: adding VLAN 0 to HW filter on device bond12 [ 369.258842][T15474] vlan4: entered promiscuous mode [ 369.271190][T15474] bond12: entered promiscuous mode [ 369.281574][T15474] vlan4: entered allmulticast mode [ 369.320240][T15474] bond12: entered allmulticast mode [ 370.114420][T15521] 8021q: VLANs not supported on wg2 [ 370.165850][T15537] net_ratelimit: 4 callbacks suppressed [ 370.165869][T15537] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.268503][T15543] __nla_validate_parse: 8 callbacks suppressed [ 370.268522][T15543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2781'. [ 370.368493][T15548] netlink: 'syz.0.2783': attribute type 16 has an invalid length. [ 370.402061][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2783'. [ 370.660454][T15568] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 370.713175][T15568] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.727042][T15571] bridge_slave_0: left allmulticast mode [ 370.732959][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.744080][T15571] bond2: (slave bridge3): Releasing active interface [ 370.761745][T15571] bond4: (slave gretap2): Releasing active interface [ 370.777182][T15574] netlink: 'syz.2.2791': attribute type 11 has an invalid length. [ 370.789066][T15574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2791'. [ 370.799670][T15571] bond0: (slave bond7): Releasing backup interface [ 370.806753][T15571] bond7: left allmulticast mode [ 370.820841][T15571] bond11: (slave gretap3): Releasing active interface [ 370.829063][T15571] gretap3: left promiscuous mode [ 370.834425][T15571] gretap3: left allmulticast mode [ 370.913096][T15568] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.938645][T15568] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 370.954066][T15568] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 370.984824][T15576] gretap1: entered promiscuous mode [ 370.994858][T15576] bond12: (slave gretap1): making interface the new active one [ 371.004920][T15576] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 371.225413][T15591] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2795'. [ 371.248945][T15594] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2795'. [ 371.263537][T15595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'. [ 371.273333][T15595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'. [ 371.287955][T15597] FAULT_INJECTION: forcing a failure. [ 371.287955][T15597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.312958][T15597] CPU: 0 UID: 0 PID: 15597 Comm: syz.3.2797 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 371.312987][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.312999][T15597] Call Trace: [ 371.313008][T15597] [ 371.313016][T15597] dump_stack_lvl+0x189/0x250 [ 371.313046][T15597] ? __pfx____ratelimit+0x10/0x10 [ 371.313069][T15597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.313093][T15597] ? __pfx__printk+0x10/0x10 [ 371.313120][T15597] ? __might_fault+0xb0/0x130 [ 371.313162][T15597] should_fail_ex+0x414/0x560 [ 371.313190][T15597] _copy_from_user+0x2d/0xb0 [ 371.313219][T15597] ___sys_sendmsg+0x158/0x2a0 [ 371.313252][T15597] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.313336][T15597] ? __might_fault+0xb0/0x130 [ 371.313368][T15597] __sys_sendmmsg+0x227/0x430 [ 371.313405][T15597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 371.313431][T15597] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 371.313487][T15597] ? ksys_write+0x22a/0x250 [ 371.313518][T15597] ? __pfx_ksys_write+0x10/0x10 [ 371.313541][T15597] ? rcu_is_watching+0x15/0xb0 [ 371.313573][T15597] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.313606][T15597] do_syscall_64+0xfa/0x3b0 [ 371.313627][T15597] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.313647][T15597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.313667][T15597] ? clear_bhb_loop+0x60/0xb0 [ 371.313693][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.313712][T15597] RIP: 0033:0x7f4a3a18e9a9 [ 371.313731][T15597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.313748][T15597] RSP: 002b:00007f4a3b0cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.313771][T15597] RAX: ffffffffffffffda RBX: 00007f4a3a3b5fa0 RCX: 00007f4a3a18e9a9 [ 371.313786][T15597] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 371.313800][T15597] RBP: 00007f4a3b0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 371.313812][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.313823][T15597] R13: 0000000000000000 R14: 00007f4a3a3b5fa0 R15: 00007fff6a4080f8 [ 371.313858][T15597] [ 371.831000][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2802'. [ 372.090008][T15630] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 372.127787][T15630] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2806'. [ 372.281945][T15632] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 372.454359][T15647] No such timeout policy "syz0" [ 372.823993][T15668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2815'. [ 373.134113][T15682] unknown channel width for channel at 909000KHz? [ 373.160215][T15686] netlink: 'syz.0.2819': attribute type 1 has an invalid length. [ 373.444575][T15700] FAULT_INJECTION: forcing a failure. [ 373.444575][T15700] name failslab, interval 1, probability 0, space 0, times 0 [ 373.465100][T15700] CPU: 0 UID: 0 PID: 15700 Comm: syz.2.2822 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 373.465129][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.465141][T15700] Call Trace: [ 373.465150][T15700] [ 373.465159][T15700] dump_stack_lvl+0x189/0x250 [ 373.465194][T15700] ? __pfx____ratelimit+0x10/0x10 [ 373.465217][T15700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.465242][T15700] ? __pfx__printk+0x10/0x10 [ 373.465276][T15700] ? __pfx___might_resched+0x10/0x10 [ 373.465299][T15700] ? fs_reclaim_acquire+0x7d/0x100 [ 373.465325][T15700] should_fail_ex+0x414/0x560 [ 373.465353][T15700] should_failslab+0xa8/0x100 [ 373.465385][T15700] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 373.465414][T15700] ? __alloc_skb+0x112/0x2d0 [ 373.465444][T15700] __alloc_skb+0x112/0x2d0 [ 373.465475][T15700] netlink_ack+0x146/0xa50 [ 373.465498][T15700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.465522][T15700] ? ref_tracker_free+0x63a/0x7d0 [ 373.465541][T15700] ? __copy_skb_header+0xa7/0x550 [ 373.465573][T15700] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.465608][T15700] netlink_rcv_skb+0x28c/0x470 [ 373.465636][T15700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.465664][T15700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.465706][T15700] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.465733][T15700] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.465767][T15700] netlink_unicast+0x75c/0x8e0 [ 373.465805][T15700] netlink_sendmsg+0x805/0xb30 [ 373.465845][T15700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.465878][T15700] ? aa_sock_msg_perm+0x94/0x160 [ 373.465902][T15700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.465923][T15700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.465960][T15700] __sock_sendmsg+0x21c/0x270 [ 373.465988][T15700] ____sys_sendmsg+0x505/0x830 [ 373.466025][T15700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.466066][T15700] ? import_iovec+0x74/0xa0 [ 373.466098][T15700] ___sys_sendmsg+0x21f/0x2a0 [ 373.466131][T15700] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.466205][T15700] ? __fget_files+0x2a/0x420 [ 373.466223][T15700] ? __fget_files+0x3a0/0x420 [ 373.466254][T15700] __x64_sys_sendmsg+0x19b/0x260 [ 373.466287][T15700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.466333][T15700] ? rcu_is_watching+0x15/0xb0 [ 373.466358][T15700] ? trace_sys_enter+0x25/0x120 [ 373.466386][T15700] do_syscall_64+0xfa/0x3b0 [ 373.466407][T15700] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.466428][T15700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.466448][T15700] ? clear_bhb_loop+0x60/0xb0 [ 373.466473][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.466493][T15700] RIP: 0033:0x7fb30a18e9a9 [ 373.466511][T15700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.466529][T15700] RSP: 002b:00007fb30af34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.466552][T15700] RAX: ffffffffffffffda RBX: 00007fb30a3b6080 RCX: 00007fb30a18e9a9 [ 373.466568][T15700] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 373.466581][T15700] RBP: 00007fb30af34090 R08: 0000000000000000 R09: 0000000000000000 [ 373.466593][T15700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.466605][T15700] R13: 0000000000000000 R14: 00007fb30a3b6080 R15: 00007ffe273e3dd8 [ 373.466639][T15700] [ 373.972143][T15715] netlink: 'syz.2.2826': attribute type 18 has an invalid length. [ 374.164880][T15723] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.173951][T15723] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.183019][T15723] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.192646][T15723] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 374.204776][T15723] geneve0: entered promiscuous mode [ 374.212207][T15723] geneve0: entered allmulticast mode [ 374.585438][T15744] tipc: Enabling of bearer rejected, failed to enable media [ 374.820559][T15761] netlink: 'syz.0.2841': attribute type 1 has an invalid length. [ 374.868078][T15761] netlink: 'syz.0.2841': attribute type 10 has an invalid length. [ 374.877321][T15761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.907794][T15761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.928122][T15761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.949626][T15761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.971302][T15761] team0: Port device geneve0 added [ 374.977159][T15771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.987079][T15772] netlink: 'syz.2.2844': attribute type 2 has an invalid length. [ 375.269411][T15785] netlink: 'syz.4.2847': attribute type 21 has an invalid length. [ 375.316051][T15785] netlink: 'syz.4.2847': attribute type 6 has an invalid length. [ 375.323839][T15785] __nla_validate_parse: 6 callbacks suppressed [ 375.323855][T15785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2847'. [ 375.525008][T15801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'. [ 375.567080][T15802] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2852'. [ 375.589434][T15802] netlink: 'syz.2.2852': attribute type 9 has an invalid length. [ 375.661274][T15809] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2855'. [ 375.716782][T15809] tipc: Enabling of bearer rejected, failed to enable media [ 375.962509][T15831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2861'. [ 376.070238][T15838] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2864'. [ 376.295724][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 376.315320][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2869'. [ 376.344269][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2871'. [ 376.345516][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 376.355639][T15857] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 376.389096][T15860] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 376.427113][T15860] 8021q: adding VLAN 0 to HW filter on device bond13 [ 376.443503][T15860] vlan2: entered promiscuous mode [ 376.455634][T15860] bond13: entered promiscuous mode [ 376.461095][T15860] vlan2: entered allmulticast mode [ 376.466944][T15860] bond13: entered allmulticast mode [ 376.540561][T15867] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20003 [ 376.733853][T15877] netlink: 'syz.2.2878': attribute type 7 has an invalid length. [ 376.853051][T15881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.863905][T15881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.875091][T15881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 376.954443][T15881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.966027][T15881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 376.976966][T15881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.067987][T15881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.080586][T15881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.093712][T15881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.121019][T15889] netlink: 'syz.1.2884': attribute type 1 has an invalid length. [ 377.197344][T15889] 8021q: adding VLAN 0 to HW filter on device bond13 [ 377.221113][T15881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.232723][T15881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 377.244663][T15881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.273617][T15892] vlan5: entered promiscuous mode [ 377.279213][T15892] bond13: entered promiscuous mode [ 377.284510][T15892] vlan5: entered allmulticast mode [ 377.290028][T15892] bond13: entered allmulticast mode [ 377.300770][T15898] sctp: [Deprecated]: syz.0.2885 (pid 15898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.300770][T15898] Use struct sctp_sack_info instead [ 377.331481][T15897] bond0: entered promiscuous mode [ 377.346418][T15897] bond0: left promiscuous mode [ 377.387277][T15899] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 377.418394][T15899] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 377.424012][T15881] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.446270][T15881] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.458991][T15881] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 377.504946][T15881] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.516353][T15881] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.539179][T15881] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 377.603847][T15881] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.643371][T15881] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.667680][T15881] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 377.718770][T15881] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.739739][T15881] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.750329][T15881] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 377.769897][T15921] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.789900][T15921] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.808848][T15921] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.818966][T15921] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.920376][T15921] team0: Port device geneve0 removed [ 377.962030][T15925] team0: Unable to change to the same mode the team is in [ 377.981037][T15921] tipc: Enabled bearer , priority 0 [ 378.252631][T15940] netlink: 'syz.3.2897': attribute type 1 has an invalid length. [ 378.327567][T15940] 8021q: adding VLAN 0 to HW filter on device bond14 [ 378.351985][T15942] vlan8: entered promiscuous mode [ 378.362121][T15942] bond14: entered promiscuous mode [ 378.368326][T15942] vlan8: entered allmulticast mode [ 378.373558][T15942] bond14: entered allmulticast mode [ 378.790982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.798156][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.131127][T15985] 8021q: adding VLAN 0 to HW filter on device bond14 [ 379.193589][T15998] vlan4: entered promiscuous mode [ 379.213354][T15998] bond14: entered promiscuous mode [ 379.220580][T15998] vlan4: entered allmulticast mode [ 379.230509][T15998] bond14: entered allmulticast mode [ 379.403853][T16012] veth1_macvtap: left promiscuous mode [ 379.417547][T16012] team0: Device veth1_macvtap failed to register rx_handler [ 379.813191][T16020] Cannot find del_set index 4 as target [ 380.147542][T16033] xt_bpf: check failed: parse error [ 380.186693][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.214937][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.223222][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.234892][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.246910][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.502792][T16052] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 380.521214][T16053] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 380.749572][T16063] FAULT_INJECTION: forcing a failure. [ 380.749572][T16063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.766612][T16058] netlink: 'syz.1.2934': attribute type 11 has an invalid length. [ 380.774891][T16058] __nla_validate_parse: 44 callbacks suppressed [ 380.774909][T16058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2934'. [ 380.791673][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.4.2935 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 380.791701][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.791713][T16063] Call Trace: [ 380.791720][T16063] [ 380.791729][T16063] dump_stack_lvl+0x189/0x250 [ 380.791759][T16063] ? __pfx____ratelimit+0x10/0x10 [ 380.791782][T16063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.791806][T16063] ? __pfx__printk+0x10/0x10 [ 380.791849][T16063] should_fail_ex+0x414/0x560 [ 380.791887][T16063] _copy_to_user+0x31/0xb0 [ 380.791917][T16063] simple_read_from_buffer+0xe1/0x170 [ 380.791952][T16063] proc_fail_nth_read+0x1df/0x250 [ 380.791977][T16063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.792002][T16063] ? rw_verify_area+0x258/0x650 [ 380.792028][T16063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.792050][T16063] vfs_read+0x200/0x980 [ 380.792083][T16063] ? __pfx___mutex_lock+0x10/0x10 [ 380.792107][T16063] ? __pfx_vfs_read+0x10/0x10 [ 380.792134][T16063] ? __fget_files+0x2a/0x420 [ 380.792159][T16063] ? __fget_files+0x3a0/0x420 [ 380.792175][T16063] ? __fget_files+0x2a/0x420 [ 380.792205][T16063] ksys_read+0x145/0x250 [ 380.792234][T16063] ? __pfx_ksys_read+0x10/0x10 [ 380.792256][T16063] ? rcu_is_watching+0x15/0xb0 [ 380.792293][T16063] ? do_syscall_64+0xbe/0x3b0 [ 380.792320][T16063] do_syscall_64+0xfa/0x3b0 [ 380.792340][T16063] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.792361][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.792381][T16063] ? clear_bhb_loop+0x60/0xb0 [ 380.792406][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.792425][T16063] RIP: 0033:0x7f2db0f8d3bc [ 380.792444][T16063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.792462][T16063] RSP: 002b:00007f2db1d44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.792484][T16063] RAX: ffffffffffffffda RBX: 00007f2db11b5fa0 RCX: 00007f2db0f8d3bc [ 380.792499][T16063] RDX: 000000000000000f RSI: 00007f2db1d440a0 RDI: 0000000000000005 [ 380.792512][T16063] RBP: 00007f2db1d44090 R08: 0000000000000000 R09: 0000000000000000 [ 380.792524][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.792536][T16063] R13: 0000000000000000 R14: 00007f2db11b5fa0 R15: 00007ffe5a417888 [ 380.792570][T16063] [ 381.188196][T16070] x_tables: duplicate underflow at hook 2 [ 381.259375][T16034] chnl_net:caif_netlink_parms(): no params data found [ 381.353278][T16081] x_tables: unsorted entry at hook 3 [ 381.429649][T16079] veth5: entered promiscuous mode [ 381.434826][T16079] veth5: entered allmulticast mode [ 381.586143][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 381.677368][T16101] validate_nla: 6 callbacks suppressed [ 381.677388][T16101] netlink: 'syz.3.2946': attribute type 15 has an invalid length. [ 381.853774][T16114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'. [ 381.880775][T16034] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.895484][T16034] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.910897][T16034] bridge_slave_0: entered allmulticast mode [ 381.920221][T16034] bridge_slave_0: entered promiscuous mode [ 381.950488][T16034] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.969330][T16034] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.981459][T16034] bridge_slave_1: entered allmulticast mode [ 382.005721][T16034] bridge_slave_1: entered promiscuous mode [ 382.111234][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2953'. [ 382.121398][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2953'. [ 382.145137][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2955'. [ 382.149970][T16034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.181497][T16034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.300663][T16141] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 382.315032][ T5170] Bluetooth: hci1: command tx timeout [ 382.320926][T16034] team0: Port device team_slave_0 added [ 382.329387][T16034] team0: Port device team_slave_1 added [ 382.400510][T16141] 8021q: adding VLAN 0 to HW filter on device bond15 [ 382.447972][T16034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.455096][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.463757][T16146] xt_policy: too many policy elements [ 382.494647][T16034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.515866][T16034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.522989][T16034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.557762][T16034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.662659][T16034] hsr_slave_0: entered promiscuous mode [ 382.672721][T16034] hsr_slave_1: entered promiscuous mode [ 382.679419][T16034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.704891][T16034] Cannot create hsr debugfs directory [ 382.951585][T16164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2962'. [ 383.206397][T16179] netlink: 'syz.0.2966': attribute type 21 has an invalid length. [ 383.214274][T16179] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2966'. [ 383.430369][T16034] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.458702][T16034] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.618084][T16034] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.649710][T16034] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.803779][T16034] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.830321][T16034] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.917726][T16208] netlink: 'syz.3.2975': attribute type 13 has an invalid length. [ 384.076982][T16208] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.122040][T16208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.152048][T16034] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.167753][T16034] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.274065][T16219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2978'. [ 384.394298][ T5170] Bluetooth: hci1: command tx timeout [ 384.796617][T16034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.912771][T16034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.934246][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2982'. [ 384.959849][T16034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.998491][T16034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.182312][T16261] : entered promiscuous mode [ 385.213138][T16263] netlink: 'syz.0.2988': attribute type 30 has an invalid length. [ 385.254750][T16263] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.264044][T16263] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.272115][T16265] netlink: 'syz.0.2988': attribute type 30 has an invalid length. [ 385.272817][T16263] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.288378][T16263] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.327508][T16263] netlink: 'syz.0.2988': attribute type 30 has an invalid length. [ 385.485598][T16271] sit0: Master is either lo or non-ether device [ 385.500336][T16034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.526060][T16034] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.549275][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.556496][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.604992][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.612228][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.156354][T16034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.255057][T16034] veth0_vlan: entered promiscuous mode [ 386.279621][T16034] veth1_vlan: entered promiscuous mode [ 386.336907][T16034] veth0_macvtap: entered promiscuous mode [ 386.354552][T16034] veth1_macvtap: entered promiscuous mode [ 386.398912][T16034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.465699][ T5170] Bluetooth: hci1: command tx timeout [ 386.504990][T16034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.521249][T16034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.538824][T16034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.548290][T16034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.557541][T16034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.868173][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.910214][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.000885][T16308] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 387.031397][T16308] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 387.053523][ T9154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.081593][T16309] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 387.108552][T16309] netlink: 'syz.4.3000': attribute type 1 has an invalid length. [ 387.111073][ T9154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.521396][T16326] __nla_validate_parse: 9 callbacks suppressed [ 387.521418][T16326] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2918'. [ 387.718565][T16326] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2918'. [ 388.349129][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 388.555581][ T5170] Bluetooth: hci1: command tx timeout [ 388.659748][ T5850] syz_tun (unregistering): left promiscuous mode [ 388.685134][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.700128][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.711125][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.723992][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.732669][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.057559][T16389] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 389.094451][T16389] team0: Port device bridge1 added [ 389.234713][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'. [ 389.304189][T16375] chnl_net:caif_netlink_parms(): no params data found [ 389.409199][T16405] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 389.441305][T16405] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 389.471972][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.485498][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.498853][T16375] bridge_slave_0: entered allmulticast mode [ 389.526128][T16375] bridge_slave_0: entered promiscuous mode [ 389.536275][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.543461][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.554879][T16375] bridge_slave_1: entered allmulticast mode [ 389.570089][T16375] bridge_slave_1: entered promiscuous mode [ 389.703046][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.734389][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.862929][T16375] team0: Port device team_slave_0 added [ 389.880404][T16375] team0: Port device team_slave_1 added [ 389.978351][T16431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.002560][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.010959][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.043114][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.058110][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.066999][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.093819][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.170595][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 390.204952][T16375] hsr_slave_0: entered promiscuous mode [ 390.227174][T16375] hsr_slave_1: entered promiscuous mode [ 390.240695][T16375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.255604][T16375] Cannot create hsr debugfs directory [ 390.318860][T16440] netlink: 'syz.0.3033': attribute type 4 has an invalid length. [ 390.474249][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 390.583611][T16375] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.611133][T16375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.621077][T16375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.643790][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 390.737993][T16375] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.749442][T16375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.764155][T16375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.785824][ T5170] Bluetooth: hci2: command tx timeout [ 390.842601][T16375] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.872351][T16375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.906126][T16375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 391.016453][T16375] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.038684][T16375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.070419][T16375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 391.119715][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 391.136247][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 391.485005][T16479] bond14: entered promiscuous mode [ 391.491213][T16479] bond14: entered allmulticast mode [ 391.497461][T16479] 8021q: adding VLAN 0 to HW filter on device bond14 [ 391.560955][T16487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 391.583175][T16480] bond15: entered promiscuous mode [ 391.593841][T16480] bond15: entered allmulticast mode [ 391.602409][T16480] 8021q: adding VLAN 0 to HW filter on device bond15 [ 391.610005][T16375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.652480][T16375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 391.684162][T16375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 391.717465][T16375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 391.849275][T16491] netlink: 'syz.1.3050': attribute type 5 has an invalid length. [ 392.031997][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.088602][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.129788][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.137878][ T9154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.186598][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.193851][ T9154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.394722][T16524] netlink: 'syz.0.3058': attribute type 18 has an invalid length. [ 392.520972][T16532] gretap2: entered promiscuous mode [ 392.529154][T16532] gretap2: entered allmulticast mode [ 392.540597][T16532] __nla_validate_parse: 6 callbacks suppressed [ 392.540614][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.571584][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.581907][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.591522][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.594637][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.611633][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.625080][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.635793][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.644770][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.669280][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.679215][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3059'. [ 392.868932][ T5170] Bluetooth: hci2: command tx timeout [ 393.167028][T16375] veth0_vlan: entered promiscuous mode [ 393.179829][T16552] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 393.180540][T16550] netlink: 'syz.2.3062': attribute type 1 has an invalid length. [ 393.200487][T16375] veth1_vlan: entered promiscuous mode [ 393.297903][T16525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 393.323151][T16558] xt_hashlimit: overflow, try lower: 0/0 [ 393.363484][T16560] xt_cluster: node mask cannot exceed total number of nodes [ 393.384341][T16375] veth0_macvtap: entered promiscuous mode [ 393.404792][T16375] veth1_macvtap: entered promiscuous mode [ 393.474348][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.514119][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.533989][T16375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.546282][T16375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.555045][T16375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.572400][T16375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.839362][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.859161][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.921287][T10502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.929654][T10502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.597947][T16600] tipc: Started in network mode [ 394.607688][T16600] tipc: Node identity 0a6a56d50c25, cluster identity 4711 [ 394.615028][T16600] tipc: Enabled bearer , priority 0 [ 394.667217][T16606] syzkaller0: entered promiscuous mode [ 394.729569][T16606] syzkaller0: entered allmulticast mode [ 394.786184][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.866375][T16599] tipc: Resetting bearer [ 394.945588][ T5170] Bluetooth: hci2: command tx timeout [ 395.019165][T16599] tipc: Disabling bearer [ 395.077218][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.086614][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.100821][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.110135][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.119267][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.271346][ T5858] syz_tun (unregistering): left allmulticast mode [ 395.620753][ T9154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.751641][ T9154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.858922][T16638] xt_CT: No such helper "syz0" [ 395.868666][ T9154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.027151][ T9154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.273177][T16621] chnl_net:caif_netlink_parms(): no params data found [ 396.328456][T16668] netdevsim0: left promiscuous mode [ 396.358641][T16668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.367890][T16668] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.375044][T16668] tipc: Resetting bearer [ 396.381818][T16668] tipc: Resetting bearer [ 396.392494][T16668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.431777][T16668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.442962][T16668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.469031][T16668] veth1_vlan: left promiscuous mode [ 396.495141][T16668] vlan0: left promiscuous mode [ 396.507525][T16668] veth1_vlan: entered promiscuous mode [ 396.521986][T16668] veth1_macvtap: entered promiscuous mode [ 396.529566][T16668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.538397][T16668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.547647][T16668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.556944][T16668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.579467][T16668] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 396.713238][ T94] block nbd0: Possible stuck request ffff88802556e000: control (read@0,1024B). Runtime 300 seconds [ 396.724322][ T94] block nbd0: Possible stuck request ffff88802556e1c0: control (read@1024,1024B). Runtime 300 seconds [ 396.741252][ T94] block nbd0: Possible stuck request ffff88802556e380: control (read@2048,1024B). Runtime 300 seconds [ 396.745942][ T9463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.752277][ T94] block nbd0: Possible stuck request ffff88802556e540: control (read@3072,1024B). Runtime 300 seconds [ 397.025487][ T5866] Bluetooth: hci2: command tx timeout [ 397.187780][ T5866] Bluetooth: hci5: command tx timeout [ 397.404990][ T9154] ip6gretap0 (unregistering): left promiscuous mode [ 397.513989][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.777327][T16719] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.866986][ T9154] dvmrp0 (unregistering): left allmulticast mode [ 398.210322][ T9154] bond0 (unregistering): Released all slaves [ 398.227321][ T9154] bond1 (unregistering): Released all slaves [ 398.346301][ T9154] bond2 (unregistering): Released all slaves [ 398.361351][ T9154] bond3 (unregistering): Released all slaves [ 398.471913][ T9154] bond4 (unregistering): Released all slaves [ 398.486279][ T9154] bond5 (unregistering): Released all slaves [ 398.608865][ T9154] bond6 (unregistering): Released all slaves [ 398.729028][ T9154] bond7 (unregistering): Released all slaves [ 398.831782][ T9154] bond8 (unregistering): Released all slaves [ 398.847684][ T9154] bond9 (unregistering): Released all slaves [ 398.957529][ T9154] bond10 (unregistering): Released all slaves [ 399.061306][ T9154] bond11 (unregistering): Released all slaves [ 399.174612][ T9154] bond12 (unregistering): Released all slaves [ 399.191164][ T9154] bond13 (unregistering): Released all slaves [ 399.279692][ T5866] Bluetooth: hci5: command tx timeout [ 399.324471][ T9154] bond14 (unregistering): Released all slaves [ 399.431416][ T9154] bond15 (unregistering): Released all slaves [ 399.444985][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.452826][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.460133][T16621] bridge_slave_0: entered allmulticast mode [ 399.468806][T16621] bridge_slave_0: entered promiscuous mode [ 399.511080][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.555399][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.585723][T16621] bridge_slave_1: entered allmulticast mode [ 399.594560][T16621] bridge_slave_1: entered promiscuous mode [ 399.737722][T16727] __nla_validate_parse: 64 callbacks suppressed [ 399.737743][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'. [ 399.812658][T16621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.856528][ T9154] tipc: Left network mode [ 399.856933][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.890031][T16621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.936544][ T9154] IPVS: stopping backup sync thread 10707 ... [ 399.952694][T16738] netlink: 'syz.2.3114': attribute type 21 has an invalid length. [ 400.010387][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.130852][T16621] team0: Port device team_slave_0 added [ 400.299943][T16621] team0: Port device team_slave_1 added [ 400.423034][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'. [ 400.439476][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 400.456763][T16621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.463857][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3117'. [ 400.489422][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.553443][T16621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.632929][T16621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.641697][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.682767][T16621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.850546][ T9154] hsr_slave_0: left promiscuous mode [ 400.871072][ T9154] hsr_slave_1: left promiscuous mode [ 400.920052][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'. [ 401.356639][ T5866] Bluetooth: hci5: command tx timeout [ 401.681435][T16781] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.3125'. [ 401.766877][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.795754][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.960890][T16621] hsr_slave_0: entered promiscuous mode [ 401.974487][T16621] hsr_slave_1: entered promiscuous mode [ 401.987033][T16621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.005283][T16621] Cannot create hsr debugfs directory [ 402.337351][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.767681][T16824] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3137'. [ 402.854927][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 402.968674][T16834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3141'. [ 403.064129][T16841] netlink: 'syz.1.3142': attribute type 6 has an invalid length. [ 403.280859][T16850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3145'. [ 403.425911][ T5866] Bluetooth: hci5: command tx timeout [ 403.468869][T16853] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 403.835561][T16621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.880117][T16621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.970200][T16621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.023535][T16621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.145617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.603432][T16621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.707659][T16621] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.741169][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.748425][T10872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.796682][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.803922][T10872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.842746][T16928] netlink: 'syz.4.3167': attribute type 29 has an invalid length. [ 405.531987][T16960] __nla_validate_parse: 8 callbacks suppressed [ 405.532008][T16960] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3176'. [ 405.557111][T16621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.593270][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 405.621764][T16621] veth0_vlan: entered promiscuous mode [ 405.646177][T16621] veth1_vlan: entered promiscuous mode [ 405.717170][T16621] veth0_macvtap: entered promiscuous mode [ 405.796230][T16621] veth1_macvtap: entered promiscuous mode [ 405.825635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.853902][T16621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.889501][T16621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.941343][T16621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.961601][T16621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.973352][T16621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.989491][T16621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.275657][T10502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.283531][T10502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.481710][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 406.494131][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 406.618054][T10507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.644026][T10507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.876043][T16996] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 406.898436][T17002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.968496][T17005] openvswitch: netlink: Message has 4 unknown bytes. [ 407.015092][T16996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.384554][T17019] Cannot find map_set index 0 as target [ 407.427553][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3188'. [ 407.488623][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3188'. [ 407.774267][T17035] veth0: entered promiscuous mode [ 407.805698][T17034] veth0: left promiscuous mode [ 407.916821][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.934866][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.950638][ T5170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.959793][ T5170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.969947][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.327183][T17053] xt_l2tp: unknown flags: 18 [ 408.391722][T17055] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 408.533989][T17037] chnl_net:caif_netlink_parms(): no params data found [ 408.864925][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 408.876226][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 408.891282][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.902618][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.910682][T17037] bridge_slave_0: entered allmulticast mode [ 408.919300][T17037] bridge_slave_0: entered promiscuous mode [ 408.928840][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.937282][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.944556][T17037] bridge_slave_1: entered allmulticast mode [ 408.952857][T17037] bridge_slave_1: entered promiscuous mode [ 409.092200][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.103468][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 409.116016][T17088] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3209'. [ 409.129741][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.272601][T17087] sctp: [Deprecated]: syz.3.3208 (pid 17087) Use of int in maxseg socket option. [ 409.272601][T17087] Use struct sctp_assoc_value instead [ 409.274127][T17096] tipc: Resetting bearer [ 409.462149][T17096] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 409.490950][T17037] team0: Port device team_slave_0 added [ 409.496563][T17112] netlink: ct family unspecified [ 409.515124][T17037] team0: Port device team_slave_1 added [ 409.518636][T17112] openvswitch: netlink: Actions may not be safe on all matching packets [ 409.542603][T17104] tipc: Resetting bearer [ 409.573536][T17104] tipc: Disabling bearer [ 409.676782][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.689632][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.720155][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.763866][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.771037][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.798039][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.881434][T17037] hsr_slave_0: entered promiscuous mode [ 409.896758][T17037] hsr_slave_1: entered promiscuous mode [ 409.902960][T17037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.912442][T17037] Cannot create hsr debugfs directory [ 409.999624][T17116] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 410.023063][T17116] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 410.065773][ T5866] Bluetooth: hci3: command tx timeout [ 410.512681][T17140] netlink: 'syz.0.3220': attribute type 13 has an invalid length. [ 410.580406][T17143] xt_CONNSECMARK: invalid mode: 0 [ 410.710540][T17140] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 410.751041][T17149] __nla_validate_parse: 3 callbacks suppressed [ 410.751061][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3224'. [ 411.090734][T17037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.090800][T17153] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3225'. [ 411.119269][T17037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.142115][T17037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.160658][T17037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.364667][T17168] veth1_macvtap: left promiscuous mode [ 411.447858][T17171] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 411.489961][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a342c00: rx timeout, send abort [ 411.543820][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.557362][T17173] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3230'. [ 411.597650][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.618271][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.625562][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.685932][T17176] delete_channel: no stack [ 411.687852][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.697598][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.998230][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a342c00: abort rx timeout. Force session deactivation [ 412.145936][ T5866] Bluetooth: hci3: command tx timeout [ 412.180248][T17198] veth1_macvtap: entered allmulticast mode [ 412.403007][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.503115][T17037] veth0_vlan: entered promiscuous mode [ 412.518988][T17037] veth1_vlan: entered promiscuous mode [ 412.624107][T17037] veth0_macvtap: entered promiscuous mode [ 412.661899][T17037] veth1_macvtap: entered promiscuous mode [ 412.742541][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.771199][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.811516][T17037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.814973][T17234] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 412.834333][T17037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.873388][T17037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.899609][T17037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.072083][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3245'. [ 413.083874][T17243] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3245'. [ 413.181452][T17248] sock: sock_timestamping_bind_phc: sock not bind to device [ 413.282221][T17253] netlink: 'syz.4.3248': attribute type 21 has an invalid length. [ 413.291671][T17253] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 413.345531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.656496][T10502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.692362][T10502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.815087][T17264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3252'. [ 413.836727][T17264] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3252'. [ 413.846828][T17264] netlink: 'syz.3.3252': attribute type 6 has an invalid length. [ 413.856078][T17264] netlink: 'syz.3.3252': attribute type 5 has an invalid length. [ 413.864460][T17264] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3252'. [ 413.919593][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.943700][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.985475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.093561][T17278] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 414.194521][T17284] veth1_macvtap: left promiscuous mode [ 414.225650][ T5866] Bluetooth: hci3: command tx timeout [ 414.242493][T17284] tipc: Started in network mode [ 414.248087][T17284] tipc: Node identity ca4e6cea17f, cluster identity 4711 [ 414.258647][T17284] tipc: Enabled bearer , priority 0 [ 414.266848][T17284] syzkaller0: entered promiscuous mode [ 414.272434][T17284] syzkaller0: entered allmulticast mode [ 414.303812][T17282] tipc: Resetting bearer [ 414.355646][T17282] tipc: Disabling bearer [ 415.187796][ T5170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.197263][ T5170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.208964][ T5170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.246030][ T5170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.267420][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.392514][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3269'. [ 415.436942][T17318] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.446418][T17318] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.455254][T17318] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.463999][T17318] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.496940][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3269'. [ 415.851444][T17330] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 416.056915][T17309] chnl_net:caif_netlink_parms(): no params data found [ 416.090979][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 416.115467][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 416.305826][ T5855] Bluetooth: hci3: command tx timeout [ 416.403767][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.422314][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.431578][T17309] bridge_slave_0: entered allmulticast mode [ 416.440541][T17309] bridge_slave_0: entered promiscuous mode [ 416.450837][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.458985][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.466832][T17309] bridge_slave_1: entered allmulticast mode [ 416.474953][T17309] bridge_slave_1: entered promiscuous mode [ 416.689109][T17309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.725899][T17309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.833867][T17363] bridge_slave_0: left allmulticast mode [ 416.848647][T17363] bridge_slave_0: left promiscuous mode [ 416.856491][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.896586][T17363] bridge_slave_1: left allmulticast mode [ 416.908905][T17363] bridge_slave_1: left promiscuous mode [ 416.914766][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.941250][T17363] bond0: (slave bond_slave_0): Releasing backup interface [ 416.957719][T17363] bond0: (slave bond_slave_1): Releasing backup interface [ 417.020508][T17363] team0: Port device team_slave_0 removed [ 417.034155][T17363] team0: Port device team_slave_1 removed [ 417.050004][T17363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.057808][T17363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.071407][T17363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.081114][T17363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.109931][T17363] team0: Port device bridge1 removed [ 417.123241][T17309] team0: Port device team_slave_0 added [ 417.134509][T17367] tipc: Started in network mode [ 417.149399][T17367] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 417.158539][T17367] tipc: Enabled bearer , priority 10 [ 417.191124][T17309] team0: Port device team_slave_1 added [ 417.224887][T17372] team0: Mode changed to "loadbalance" [ 417.346662][ T5855] Bluetooth: hci0: command tx timeout [ 417.388247][T17309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.402111][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.430362][T17309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.444690][T17309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.461905][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.488997][T17309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.712006][T17309] hsr_slave_0: entered promiscuous mode [ 417.747509][T17309] hsr_slave_1: entered promiscuous mode [ 417.770522][T17309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.795372][T17309] Cannot create hsr debugfs directory [ 417.931118][T17399] x_tables: duplicate underflow at hook 1 [ 417.946329][T17399] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 418.265965][T17414] xt_ecn: cannot match TCP bits for non-tcp packets [ 418.275991][ T9467] tipc: Node number set to 10463914 [ 418.313313][T17309] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.334558][T17309] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.447379][T17309] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.482239][T17309] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.508568][T17421] tipc: Enabled bearer , priority 0 [ 418.536651][T17309] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.548333][T17309] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.571682][T17421] tipc: Resetting bearer [ 418.588401][T17420] tipc: Disabling bearer [ 418.614684][T17309] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.625124][T17309] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.708588][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'. [ 418.781175][T17432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3304'. [ 418.894946][T17434] tipc: Enabled bearer , priority 0 [ 418.911977][T17434] syzkaller0: entered promiscuous mode [ 418.920642][T17434] syzkaller0: entered allmulticast mode [ 418.933915][T17309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.968144][T17309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.984108][T17309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.038103][T17434] tipc: Resetting bearer [ 419.061102][T17309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.100180][T17433] tipc: Resetting bearer [ 419.134431][T17433] tipc: Disabling bearer [ 419.374599][T17457] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3310'. [ 419.425387][ T5855] Bluetooth: hci0: command tx timeout [ 419.444557][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.526785][T17464] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 419.545726][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3313'. [ 419.621145][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.667013][T17474] netlink: 'syz.1.3316': attribute type 2 has an invalid length. [ 419.681342][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3313'. [ 419.692653][T17475] netlink: 'syz.1.3316': attribute type 2 has an invalid length. [ 419.701508][T17464] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 419.718738][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.725521][T17464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.725936][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.758659][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.765897][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.781493][T17474] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.3316'. [ 419.794701][T17474] netlink: zone id is out of range [ 419.800155][T17474] netlink: zone id is out of range [ 419.806683][T17474] netlink: zone id is out of range [ 419.811886][T17474] netlink: zone id is out of range [ 419.830877][T17474] netlink: zone id is out of range [ 419.841605][T17474] netlink: zone id is out of range [ 419.866377][T17474] netlink: zone id is out of range [ 419.905728][T17474] netlink: zone id is out of range [ 420.085522][T17497] netlink: 'syz.1.3321': attribute type 11 has an invalid length. [ 420.401303][T17507] vlan1: entered allmulticast mode [ 420.406877][ T5987] IPVS: starting estimator thread 0... [ 420.422741][T17507] veth0_vlan: entered allmulticast mode [ 420.454823][T17510] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3325'. [ 420.531194][T17508] IPVS: using max 24 ests per chain, 57600 per kthread [ 420.562984][T17515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 420.704008][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.722199][T17526] netlink: 'syz.3.3328': attribute type 11 has an invalid length. [ 420.886568][T17534] x_tables: duplicate underflow at hook 2 [ 421.048652][T17309] veth0_vlan: entered promiscuous mode [ 421.167416][T17309] veth1_vlan: entered promiscuous mode [ 421.191551][T17543] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 421.236978][T17545] syzkaller0: entered allmulticast mode [ 421.246761][T17545] netlink: 'syz.4.3335': attribute type 11 has an invalid length. [ 421.254589][T17545] __nla_validate_parse: 3 callbacks suppressed [ 421.254599][T17545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3335'. [ 421.408122][T17309] veth0_macvtap: entered promiscuous mode [ 421.423638][T17309] veth1_macvtap: entered promiscuous mode [ 421.470350][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.507531][ T5855] Bluetooth: hci0: command tx timeout [ 421.521642][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.593157][T17309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.625295][T17309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.629318][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 421.640413][T17309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.660665][T17309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.684024][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3342'. [ 421.721094][T17561] netlink: 'syz.2.3342': attribute type 15 has an invalid length. [ 421.808292][T17561] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.818173][T17561] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.827883][T17561] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.837232][T17561] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.854088][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 421.900851][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3342'. [ 421.942615][T17561] netlink: 'syz.2.3342': attribute type 15 has an invalid length. [ 422.035569][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.064182][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.225045][T10502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.241676][T17580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3347'. [ 422.258478][T10502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.515092][T17595] netlink: 'syz.2.3351': attribute type 4 has an invalid length. [ 422.935110][T17626] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 422.962339][T17626] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3359'. [ 423.001165][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3360'. [ 423.588852][ T5855] Bluetooth: hci0: command tx timeout [ 423.780735][T17667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3374'. [ 424.084699][T17680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.307563][T17689] 8021q: VLANs not supported on wg1 [ 425.367593][T17733] netlink: 'syz.3.3398': attribute type 10 has an invalid length. [ 425.414591][T17702] Cannot find map_set index 0 as target [ 425.435051][T17702] nbd: must specify at least one socket [ 425.460109][T17733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 425.603322][T17746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3403'. [ 425.729294][T17751] syzkaller1: entered promiscuous mode [ 425.737710][T17751] syzkaller1: entered allmulticast mode [ 426.640750][T17787] netlink: 'syz.0.3417': attribute type 8 has an invalid length. [ 426.805900][ T94] block nbd0: Possible stuck request ffff88802556e000: control (read@0,1024B). Runtime 330 seconds [ 426.822273][ T94] block nbd0: Possible stuck request ffff88802556e1c0: control (read@1024,1024B). Runtime 330 seconds [ 426.834412][ T94] block nbd0: Possible stuck request ffff88802556e380: control (read@2048,1024B). Runtime 330 seconds [ 426.847427][ T94] block nbd0: Possible stuck request ffff88802556e540: control (read@3072,1024B). Runtime 330 seconds [ 426.948487][T17797] __nla_validate_parse: 2 callbacks suppressed [ 426.948519][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 427.198713][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 427.207310][T17809] vlan3: entered promiscuous mode [ 427.215443][T17809] veth1_to_hsr: entered promiscuous mode [ 427.221310][T17809] vlan3: entered allmulticast mode [ 427.233944][T17809] veth1_to_hsr: entered allmulticast mode [ 427.559593][T17826] netlink: 'syz.0.3430': attribute type 1 has an invalid length. [ 427.580227][T17826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3430'. [ 427.864514][T17838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3434'. [ 427.892207][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3434'. [ 427.917462][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3434'. [ 427.930097][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3434'. [ 428.185130][T17846] : entered promiscuous mode [ 428.604716][T17864] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 428.879830][T17879] Bluetooth: MGMT ver 1.23 [ 428.900465][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 428.907494][T17879] netlink: 'syz.3.3449': attribute type 10 has an invalid length. [ 428.917925][T17879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3449'. [ 428.921651][T17883] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 428.936873][T17883] netlink: 'syz.4.3450': attribute type 2 has an invalid length. [ 428.957426][T17879] dummy0: entered promiscuous mode [ 428.967781][T17879] bridge0: port 3(dummy0) entered blocking state [ 428.975981][T17885] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3449'. [ 428.992899][T17879] bridge0: port 3(dummy0) entered disabled state [ 429.001956][T17879] dummy0: entered allmulticast mode [ 429.013191][T17879] bridge0: port 3(dummy0) entered blocking state [ 429.019866][T17879] bridge0: port 3(dummy0) entered forwarding state [ 429.216212][T17898] netlink: 'syz.3.3456': attribute type 1 has an invalid length. [ 429.550558][T17916] tipc: Started in network mode [ 429.555881][T17916] tipc: Node identity eadd6ff21771, cluster identity 4711 [ 429.582406][T17916] tipc: Enabled bearer , priority 0 [ 429.624179][T17921] syzkaller0: entered promiscuous mode [ 429.644965][T17921] syzkaller0: entered allmulticast mode [ 429.744748][T17928] netlink: 'syz.3.3464': attribute type 8 has an invalid length. [ 429.790416][T17916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.817864][T17916] bond0: (slave bond1): Enslaving as an active interface with an up link [ 429.879656][T17935] net_ratelimit: 230 callbacks suppressed [ 429.879677][T17935] netlink: zone id is out of range [ 429.891433][T17935] netlink: get zone limit has 8 unknown bytes [ 429.918231][T17933] macvtap1: entered promiscuous mode [ 429.923651][T17933] vlan0: entered promiscuous mode [ 429.933959][T17939] netlink: 'syz.3.3469': attribute type 1 has an invalid length. [ 429.935616][T17933] macvtap1: entered allmulticast mode [ 429.973905][T17933] vlan0: entered allmulticast mode [ 429.985855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.988153][T17943] openvswitch: netlink: Key type 6416 is out of range max 32 [ 430.012136][T17933] veth0_vlan: entered allmulticast mode [ 430.032557][T17933] vlan0: left allmulticast mode [ 430.042193][T17933] veth0_vlan: left allmulticast mode [ 430.050443][T17933] vlan0: left promiscuous mode [ 430.136865][T17945] tipc: Resetting bearer [ 430.163547][T17915] tipc: Resetting bearer [ 430.258313][T17915] tipc: Disabling bearer [ 430.681222][T17971] syzkaller0: refused to change device tx_queue_len [ 430.689029][T17975] Bluetooth: MGMT ver 1.23 [ 430.690607][T17971] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.740848][T17971] IPv6: Can't replace route, no match found [ 431.143800][T17997] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 431.265846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.377175][T18011] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:21 [ 431.400116][T18013] netlink: 'syz.2.3491': attribute type 12 has an invalid length. [ 431.682060][T18026] x_tables: duplicate underflow at hook 1 [ 431.712493][T18026] netlink: 'syz.4.3497': attribute type 1 has an invalid length. [ 432.250622][T18056] __nla_validate_parse: 20 callbacks suppressed [ 432.250643][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 432.267908][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3504'. [ 432.489312][T18066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.684750][T18066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.824537][T18066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.960353][T18066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.102481][T18097] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 433.111557][T18066] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.125894][T18097] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 433.148509][T18066] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.194120][T18066] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.257517][T18066] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.265723][T18104] SET target dimension over the limit! [ 433.324778][T18108] netlink: 'syz.1.3519': attribute type 9 has an invalid length. [ 433.498846][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3518'. [ 433.679871][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 433.825872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.942027][T18131] sock: sock_timestamping_bind_phc: sock not bind to device [ 434.262369][T18140] netlink: 'syz.1.3530': attribute type 1 has an invalid length. [ 434.263826][T18146] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 434.270706][T18141] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 434.285781][T18140] netlink: 'syz.1.3530': attribute type 2 has an invalid length. [ 434.630835][T18168] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 434.674603][T18168] openvswitch: netlink: Message has 199 unknown bytes. [ 434.689901][T18168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.858301][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3539'. [ 434.886659][T18179] netlink: 'syz.4.3539': attribute type 19 has an invalid length. [ 435.302160][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3545'. [ 435.522883][T18210] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 435.567863][T18215] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3550'. [ 435.580343][T18213] netlink: 'syz.4.3551': attribute type 21 has an invalid length. [ 436.260652][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3557'. [ 437.473660][T18255] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 437.510781][T18257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3566'. [ 437.531640][T18259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3567'. [ 437.707249][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 437.788374][T18274] sctp: [Deprecated]: syz.2.3573 (pid 18274) Use of int in max_burst socket option. [ 437.788374][T18274] Use struct sctp_assoc_value instead [ 437.864796][T18279] ipt_REJECT: TCP_RESET invalid for non-tcp [ 437.881569][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 437.905040][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'. [ 438.067094][ T1156] wlan1: Trigger new scan to find an IBSS to join [ 438.451598][T18311] sctp: [Deprecated]: syz.2.3582 (pid 18311) Use of int in max_burst socket option. [ 438.451598][T18311] Use struct sctp_assoc_value instead [ 438.469146][T18311] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 438.491186][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3583'. [ 438.694988][T18322] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.3586'. [ 439.015555][ C1] Unknown status report in ack skb [ 439.587063][T18356] wg2: entered promiscuous mode [ 439.591991][T18356] wg2: entered allmulticast mode [ 439.623998][T18355] wg2: left promiscuous mode [ 439.629321][T18355] wg2: left allmulticast mode [ 440.006987][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3604'. [ 440.237081][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243463][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.450379][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3611'. [ 440.617961][T18403] ipvlan0: entered promiscuous mode [ 440.623243][T18403] ipvlan0: entered allmulticast mode [ 440.644076][T18403] veth0_vlan: entered allmulticast mode [ 440.866884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 440.932258][T18424] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 441.003570][T18414] xt_CT: No such helper "snmp" [ 441.095422][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 441.241782][T18432] vlan2: entered promiscuous mode [ 441.251587][T18432] bridge0: entered promiscuous mode [ 441.262192][T18432] vlan2: entered allmulticast mode [ 441.271349][T18432] bridge0: entered allmulticast mode [ 441.291956][T18432] dummy0: left allmulticast mode [ 441.301972][T18432] bridge0: port 3(dummy0) entered disabled state [ 441.313274][T18432] bridge_slave_1: left allmulticast mode [ 441.319673][T18432] bridge_slave_1: left promiscuous mode [ 441.325968][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.335079][T18432] bridge_slave_0: left allmulticast mode [ 441.341288][T18432] bridge_slave_0: left promiscuous mode [ 441.350247][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.093275][T18464] tipc: Enabled bearer , priority 0 [ 442.194447][T18464] tipc: Disabling bearer [ 442.371308][T18480] netlink: 'syz.1.3636': attribute type 16 has an invalid length. [ 442.384965][T18480] netlink: 'syz.1.3636': attribute type 17 has an invalid length. [ 442.424042][T18480] netlink: 'syz.1.3636': attribute type 27 has an invalid length. [ 442.680985][T18495] __nla_validate_parse: 7 callbacks suppressed [ 442.681003][T18495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3644'. [ 442.702491][T18495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3644'. [ 442.773835][T18502] netlink: 'syz.1.3645': attribute type 12 has an invalid length. [ 442.789409][T18502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3645'. [ 442.835569][T18508] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 442.854917][T18508] nftables ruleset with unbound set [ 443.027250][T10507] wlan1: Trigger new scan to find an IBSS to join [ 443.188622][T18525] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 443.332555][T18530] bond1: (slave gretap1): making interface the new active one [ 443.346211][T18530] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 443.506702][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3656'. [ 443.573422][T18538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.709696][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3661'. [ 443.719104][T18552] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 443.726800][T18552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.738143][T18542] vlan4: entered promiscuous mode [ 443.768169][T18542] bond2: entered promiscuous mode [ 443.773551][T18542] vlan4: entered allmulticast mode [ 443.796002][T18542] bond2: entered allmulticast mode [ 443.861982][T18538] gretap1: entered promiscuous mode [ 443.883533][T18538] gretap1: entered allmulticast mode [ 443.907458][T18538] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 443.953980][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 443.986855][T18559] netlink: 'syz.4.3663': attribute type 39 has an invalid length. [ 444.027850][T18568] netlink: 'syz.1.3664': attribute type 33 has an invalid length. [ 444.086395][T18568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3664'. [ 444.130639][T18571] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3666'. [ 444.190729][T10520] wlan1: Creating new IBSS network, BSSID ba:b2:67:c9:c1:79 [ 444.664392][T18594] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 444.833666][T18596] netlink: 'syz.3.3673': attribute type 8 has an invalid length. [ 444.978525][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 444.998900][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 445.485631][T18615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.548786][T18618] vlan2: entered promiscuous mode [ 445.587033][T18618] bond2: entered promiscuous mode [ 445.603491][T18618] vlan2: entered allmulticast mode [ 445.627319][T18618] bond2: entered allmulticast mode [ 445.703476][T18615] gretap2: entered promiscuous mode [ 445.709256][T18615] gretap2: entered allmulticast mode [ 445.725028][T18615] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 446.644665][T18668] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 446.663382][T18668] NCSI netlink: No device for ifindex 813332851 [ 446.857773][T18673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.898314][T18686] Cannot find del_set index 4 as target [ 446.904993][T18676] vlan2: entered promiscuous mode [ 446.910308][T18676] bond3: entered promiscuous mode [ 446.919845][T18676] vlan2: entered allmulticast mode [ 446.933904][T18676] bond3: entered allmulticast mode [ 447.013099][T18681] gretap1: entered promiscuous mode [ 447.038838][T18689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 447.047779][T18681] gretap1: entered allmulticast mode [ 447.070676][T18681] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 447.501910][T18714] validate_nla: 3 callbacks suppressed [ 447.501930][T18714] netlink: 'syz.2.3709': attribute type 2 has an invalid length. [ 447.716723][T18727] netlink: 'syz.4.3713': attribute type 21 has an invalid length. [ 447.749111][T18729] netlink: 'syz.4.3713': attribute type 21 has an invalid length. [ 447.764062][T18727] __nla_validate_parse: 10 callbacks suppressed [ 447.764078][T18727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'. [ 447.792465][T18729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'. [ 447.811247][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 447.855097][T18731] No such timeout policy "syz0" [ 447.984744][T18738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.026824][T18745] vlan2: entered promiscuous mode [ 448.032371][T18745] bond1: entered promiscuous mode [ 448.039206][T18745] vlan2: entered allmulticast mode [ 448.044488][T18745] bond1: entered allmulticast mode [ 448.096274][T18743] syzkaller0: entered promiscuous mode [ 448.103624][T18743] syzkaller0: entered allmulticast mode [ 448.126626][T18738] gretap1: entered promiscuous mode [ 448.132193][T18738] gretap1: entered allmulticast mode [ 448.139316][T18738] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 448.555434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.257129][T18768] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3724'. [ 450.378790][T18785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.558056][T18785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.628819][T18806] sctp: [Deprecated]: syz.0.3734 (pid 18806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.628819][T18806] Use struct sctp_sack_info instead [ 450.664916][T18808] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 450.808793][T18785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.893475][T18812] netlink: 'syz.0.3735': attribute type 8 has an invalid length. [ 450.976390][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'. [ 450.992149][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'. [ 451.037982][T18785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.174098][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3738'. [ 451.323011][T18832] syzkaller0: create flow: hash 4152663011 index 1 [ 451.456220][T18826] syzkaller0: delete flow: hash 4152663011 index 1 [ 451.564770][T18837] x_tables: duplicate underflow at hook 1 [ 454.025845][T18785] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.121692][T18785] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.212149][T18785] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.281848][T18785] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.556163][T18874] veth0: entered promiscuous mode [ 454.879597][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3759'. [ 454.894943][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3759'. [ 454.914677][T18893] bridge0: port 3(syz_tun) entered blocking state [ 454.923790][T18893] bridge0: port 3(syz_tun) entered disabled state [ 454.939344][T18893] syz_tun: entered allmulticast mode [ 454.961035][T18893] syz_tun: entered promiscuous mode [ 454.971480][T18893] bridge0: port 3(syz_tun) entered blocking state [ 454.978388][T18893] bridge0: port 3(syz_tun) entered forwarding state [ 455.264699][T18909] xt_l2tp: v2 tid > 0xffff: 150994944 [ 455.365855][T18871] veth0: left promiscuous mode [ 455.468082][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3765'. [ 455.543969][T18920] netlink: 'syz.2.3769': attribute type 58 has an invalid length. [ 455.583573][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3769'. [ 455.595741][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 455.971907][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3774'. [ 456.000704][T18941] netlink: 'syz.4.3775': attribute type 1 has an invalid length. [ 456.037234][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3775'. [ 456.234011][T18954] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 456.373236][T18960] x_tables: duplicate underflow at hook 3 [ 456.870758][ T94] block nbd0: Possible stuck request ffff88802556e000: control (read@0,1024B). Runtime 360 seconds [ 456.882332][ T94] block nbd0: Possible stuck request ffff88802556e1c0: control (read@1024,1024B). Runtime 360 seconds [ 456.893873][ T94] block nbd0: Possible stuck request ffff88802556e380: control (read@2048,1024B). Runtime 360 seconds [ 456.905056][ T94] block nbd0: Possible stuck request ffff88802556e540: control (read@3072,1024B). Runtime 360 seconds [ 457.032695][T10507] syzkaller0: tun_net_xmit 76 [ 457.038781][T10507] syzkaller0: tun_net_xmit 48 [ 457.055558][ T1210] syzkaller0: tun_net_xmit 76 [ 457.091380][T18994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3794'. [ 458.945683][ T5866] Bluetooth: hci0: command 0x0405 tx timeout [ 458.973725][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 458.995905][T19010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3798'. [ 459.050067][T19010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3798'. [ 460.632900][T19095] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 460.657659][T19096] __nla_validate_parse: 2 callbacks suppressed [ 460.657677][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 460.741628][T19095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.768845][T19100] vlan3: entered promiscuous mode [ 460.773961][T19100] bond4: entered promiscuous mode [ 460.779821][T19100] vlan3: entered allmulticast mode [ 460.784980][T19100] bond4: entered allmulticast mode [ 460.864123][T19103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 461.064377][T19119] netlink: 'syz.2.3838': attribute type 1 has an invalid length. [ 461.224944][T19119] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 461.346028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.209654][T19160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3847'. [ 462.216856][T19159] ipvlan0: entered promiscuous mode [ 462.223872][T19159] ipvlan0: entered allmulticast mode [ 462.624032][T19160] infiniband syz2: set down [ 462.632705][T19160] infiniband syz2: added bond_slave_0 [ 462.690566][T19160] RDS/IB: syz2: added [ 462.695621][T19160] smc: adding ib device syz2 with port count 1 [ 462.702037][T19160] smc: ib device syz2 port 1 has pnetid [ 462.834625][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 463.028293][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3856'. [ 463.085310][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3856'. [ 463.873710][T19215] sit0: entered promiscuous mode [ 463.930689][T19215] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 463.981486][T19219] ieee802154 phy0 wpan0: encryption failed: -126 [ 463.989698][T19215] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3864'. [ 464.053865][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3864'. [ 464.126099][T19220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3864'. [ 464.160610][T19215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.607304][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3869'. [ 464.774736][T19237] netlink: 'syz.4.3871': attribute type 17 has an invalid length. [ 464.793491][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 465.150782][T19244] syzkaller0: create flow: hash 4152663011 index 1 [ 465.563406][T19245] syzkaller0: delete flow: hash 4152663011 index 1 [ 467.404514][T19279] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 467.444502][T19282] __nla_validate_parse: 3 callbacks suppressed [ 467.444520][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 467.467634][T19279] tipc: Can't bind to reserved service type 1 [ 467.724044][T19294] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 467.727815][T19292] : entered promiscuous mode [ 467.746177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.770711][T19295] netlink: 'syz.4.3890': attribute type 2 has an invalid length. [ 467.771126][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 467.798206][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3890'. [ 468.073082][T19308] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 468.234534][T19311] netlink: 'syz.0.3896': attribute type 1 has an invalid length. [ 468.251870][T19311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3896'. [ 468.417768][T19319] SET target dimension over the limit! [ 468.431055][T19317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3897'. [ 468.616750][T19325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.889146][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 469.096292][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3907'. [ 469.123375][T19346] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 469.243283][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 469.271634][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3911'. [ 469.296856][T19352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3911'. [ 469.537385][T19362] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 469.554557][T19362] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 469.761800][T19366] xt_CT: No such helper "syz0" [ 470.436946][T19389] dvmrp0: entered allmulticast mode [ 470.748236][T19403] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3927'. [ 471.426849][T19416] netlink: 'syz.4.3932': attribute type 33 has an invalid length. [ 472.048025][T19437] ip_vti0: entered allmulticast mode [ 472.097795][T19437] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 472.104416][T19437] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.226371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 472.374974][T19447] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 472.548277][T19452] netlink: 'syz.0.3946': attribute type 23 has an invalid length. [ 473.126159][T19477] __nla_validate_parse: 5 callbacks suppressed [ 473.126181][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3953'. [ 473.470192][T19489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3958'. [ 473.489299][T19489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.164039][T19527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3967'. [ 474.497116][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 474.869544][T19546] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 475.229987][T19572] netlink: 'syz.3.3982': attribute type 1 has an invalid length. [ 475.262927][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 475.312655][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3982'. [ 475.366283][T19580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3984'. [ 475.377351][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3984'. [ 475.957816][T19608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3992'. [ 476.039780][T19614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.296342][T19626] netlink: 'syz.1.3998': attribute type 1 has an invalid length. [ 476.314774][T19619] netlink: 'syz.3.3996': attribute type 2 has an invalid length. [ 476.329285][T19628] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3998'. [ 476.973061][T19647] veth3: entered allmulticast mode [ 477.730570][T19688] netlink: 'syz.0.4019': attribute type 4 has an invalid length. [ 477.985558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.712354][T19733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.729331][T19733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.852542][T19735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.864250][T19748] __nla_validate_parse: 4 callbacks suppressed [ 478.864268][T19748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4040'. [ 478.892022][T19738] vlan4: entered allmulticast mode [ 478.897784][T19738] veth1: entered allmulticast mode [ 478.909731][T19738] bond6: (slave vlan4): Enslaving as an active interface with an up link [ 478.964103][T19733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.974866][T19733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.030878][T19741] ip6gre1: entered allmulticast mode [ 479.113552][T19751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4041'. [ 479.160328][T19733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.189784][T19733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.214237][T19752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4041'. [ 479.216788][T19755] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4043'. [ 479.270567][T19755] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4043'. [ 479.354395][T19733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.368289][T19733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.399103][T19765] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 479.408407][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4044'. [ 479.430049][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 479.440560][T19763] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4045'. [ 479.577591][T19771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4048'. [ 479.596959][T19733] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.597700][T19771] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4048'. [ 479.621855][T19771] netlink: 'syz.0.4048': attribute type 5 has an invalid length. [ 479.630799][T19733] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.658940][T19733] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.668703][T19733] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.680906][T19781] netlink: 'syz.4.4049': attribute type 10 has an invalid length. [ 479.684246][T19777] netlink: 'syz.4.4049': attribute type 10 has an invalid length. [ 479.753153][T19777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 479.787591][T19777] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 479.799130][T19733] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.824653][T19733] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.853188][T19783] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 479.949398][T19733] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.963225][T19733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.205064][T19804] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 480.242230][T19800] veth7: entered allmulticast mode [ 480.613886][T19828] netlink: 'syz.3.4065': attribute type 1 has an invalid length. [ 480.712796][T19828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 481.424371][T19871] ieee802154 phy0 wpan0: encryption failed: -126 [ 481.648350][T19883] syzkaller0: entered allmulticast mode [ 481.749131][T19890] netlink: 'syz.1.4088': attribute type 11 has an invalid length. [ 482.103016][T19912] netlink: 'syz.3.4094': attribute type 1 has an invalid length. [ 482.904139][T19943] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 483.135734][T19951] gtp0: entered promiscuous mode [ 483.140763][T19951] gtp0: entered allmulticast mode [ 483.430590][T19964] netlink: 'syz.0.4114': attribute type 2 has an invalid length. [ 483.460181][T19964] netlink: 'syz.0.4114': attribute type 2 has an invalid length. [ 483.657850][T19978] netem: incorrect gi model size [ 483.677664][T19978] netem: change failed [ 483.697694][T19983] 8021q: VLANs not supported on ip6gre0 [ 484.104029][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.146084][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.249042][T10507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.363980][T20017] blkio.reset_stats is deprecated [ 484.384017][T20020] __nla_validate_parse: 21 callbacks suppressed [ 484.384037][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4129'. [ 484.395858][T20017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4128'. [ 484.555711][ T30] audit: type=1800 audit(1752969403.567:3): pid=20014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4126" name="memory.events" dev="tmpfs" ino=1035 res=0 errno=0 [ 484.874360][T20036] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 484.924288][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 484.973945][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 485.240130][T20047] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 485.258803][T20047] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 485.288422][T20050] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 485.377373][T20050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.408513][T20052] bridge_slave_0: entered promiscuous mode [ 485.510218][T20060] vlan3: entered allmulticast mode [ 485.521825][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4140'. [ 485.539319][T20060] veth1: entered allmulticast mode [ 485.560354][T20060] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 485.592400][T20063] ip6_vti0: entered allmulticast mode [ 485.757624][T20068] syzkaller0: entered promiscuous mode [ 485.763157][T20068] syzkaller0: entered allmulticast mode [ 485.879542][T20080] xt_bpf: check failed: parse error [ 485.965841][T20087] netlink: 'syz.2.4146': attribute type 21 has an invalid length. [ 486.004253][T20087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4146'. [ 486.054785][T20090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.544692][T20127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4155'. [ 486.618218][T20129] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 486.730991][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4159'. [ 486.748847][T20139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4160'. [ 486.764947][T20136] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 486.784269][T20140] vlan4: entered promiscuous mode [ 486.790837][T20140] bridge0: entered promiscuous mode [ 486.810407][T20136] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4159'. [ 486.947648][ T94] block nbd0: Possible stuck request ffff88802556e000: control (read@0,1024B). Runtime 390 seconds [ 486.958674][ T94] block nbd0: Possible stuck request ffff88802556e1c0: control (read@1024,1024B). Runtime 390 seconds [ 486.970087][ T94] block nbd0: Possible stuck request ffff88802556e380: control (read@2048,1024B). Runtime 390 seconds [ 486.981342][ T94] block nbd0: Possible stuck request ffff88802556e540: control (read@3072,1024B). Runtime 390 seconds [ 487.622515][T20162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.926950][T20174] netlink: 'syz.4.4171': attribute type 7 has an invalid length. [ 487.935665][T20174] netlink: 'syz.4.4171': attribute type 8 has an invalid length. [ 487.958104][T20174] syzkaller1: entered promiscuous mode [ 487.964187][T20174] syzkaller1: entered allmulticast mode [ 488.044839][T20178] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 488.328634][T20189] netlink: 'syz.1.4177': attribute type 1 has an invalid length. [ 488.479643][T20195] tipc: Enabled bearer , priority 0 [ 488.488689][T20193] syzkaller0: entered promiscuous mode [ 488.494201][T20193] syzkaller0: entered allmulticast mode [ 488.646342][T20205] netlink: 'syz.4.4184': attribute type 1 has an invalid length. [ 488.821500][T20213] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 488.824488][T20211] bridge0: entered promiscuous mode [ 488.840674][T20211] macsec1: entered promiscuous mode [ 488.983505][T20218] vlan3: entered allmulticast mode [ 488.994051][T20218] veth1: entered allmulticast mode [ 489.174577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.277511][T20192] tipc: Resetting bearer [ 489.310267][T20192] tipc: Disabling bearer [ 489.426180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 489.572455][T20239] netlink: 'syz.2.4197': attribute type 75 has an invalid length. [ 489.712014][T20249] __nla_validate_parse: 4 callbacks suppressed [ 489.712044][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 489.752753][T20249] tc_dump_action: action bad kind [ 489.763940][T20245] netlink: 'syz.3.4199': attribute type 10 has an invalid length. [ 489.843523][T20245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.867947][T20245] team0: Port device bond0 added [ 489.880685][T20251] syz_tun: left allmulticast mode [ 489.886809][T20251] syz_tun: left promiscuous mode [ 489.898223][T20251] bridge0: port 3(syz_tun) entered disabled state [ 489.931675][T20251] bridge_slave_0: left allmulticast mode [ 489.937725][T20251] bridge_slave_0: left promiscuous mode [ 489.943702][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.963389][T20251] bridge_slave_1: left allmulticast mode [ 489.969344][T20251] bridge_slave_1: left promiscuous mode [ 489.983795][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.008389][T20251] bond0: (slave bond_slave_0): Releasing backup interface [ 490.022361][T20251] bond0: (slave bond_slave_1): Releasing backup interface [ 490.047620][T20251] team0: Port device team_slave_0 removed [ 490.064889][T20251] team0: Port device team_slave_1 removed [ 490.074426][T20251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.089732][T20251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.100803][T20251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.110983][T20251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.134970][T20251] bond0: (slave bond1): Releasing backup interface [ 490.158102][ T9467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.172476][T20251] bond2: (slave gretap1): Releasing backup interface [ 490.182108][T20251] gretap1: left promiscuous mode [ 490.188793][T20251] gretap1: left allmulticast mode [ 490.239516][T20255] team0: Mode changed to "loadbalance" [ 490.633971][T20277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.773092][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 490.812661][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 490.889577][T20293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4216'. [ 491.055813][T20298] netlink: 'syz.3.4217': attribute type 2 has an invalid length. [ 491.143494][T20300] netlink: 'syz.3.4218': attribute type 21 has an invalid length. [ 491.157607][T20300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4218'. [ 496.623999][ C1] hrtimer: interrupt took 5753213554 ns [ 496.650698][ T9467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.287317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.545652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.636958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.648460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.386589][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 601.675113][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 601.682129][ C0] rcu: 1-...!: (1 GPs behind) idle=df7c/1/0x4000000000000000 softirq=82681/82682 fqs=1 [ 601.692742][ C0] rcu: (detected by 0, t=10506 jiffies, g=76809, q=1090 ncpus=2) [ 601.700574][ C0] Sending NMI from CPU 0 to CPUs 1: [ 601.700604][ C1] NMI backtrace for cpu 1 [ 601.700618][ C1] CPU: 1 UID: 0 PID: 20290 Comm: syz.1.4214 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 601.700637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.700647][ C1] RIP: 0010:kasan_check_range+0x7/0x2c0 [ 601.700674][ C1] Code: e8 0e 3e e4 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 <41> 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 [ 601.700688][ C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00000056 [ 601.700703][ C1] RAX: 00000000ffffff01 RBX: ffff8880b8727ac0 RCX: ffffffff819ee091 [ 601.700715][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08c20 [ 601.700726][ C1] RBP: ffffc90000a08c90 R08: ffff8880b8727ac3 R09: 1ffff110170e4f58 [ 601.700738][ C1] R10: dffffc0000000000 R11: ffffed10170e4f59 R12: ffff8880b8727ad0 [ 601.700749][ C1] R13: ffff8880b8727ac8 R14: 1ffff110170e4f5a R15: 1ffff110170e4f59 [ 601.700761][ C1] FS: 00007f7a6f8c06c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 601.700775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.700786][ C1] CR2: 0000200000001600 CR3: 00000000353d8000 CR4: 00000000003526f0 [ 601.700802][ C1] Call Trace: [ 601.700809][ C1] [ 601.700817][ C1] do_raw_spin_lock+0x121/0x290 [ 601.700841][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 601.700862][ C1] ? advance_sched+0x9f8/0xc90 [ 601.700889][ C1] _raw_spin_lock_irq+0xae/0xf0 [ 601.700913][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 601.700940][ C1] __hrtimer_run_queues+0x602/0xc60 [ 601.700967][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 601.700983][ C1] ? read_tsc+0x9/0x20 [ 601.700998][ C1] ? rcu_is_watching+0x15/0xb0 [ 601.701018][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 601.701048][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 601.701069][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 601.701085][ C1] [ 601.701090][ C1] [ 601.701097][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.701112][ C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 601.701128][ C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 8b 2d 22 f6 e8 c6 00 59 f6 fb bf 01 00 00 00 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 601.701141][ C1] RSP: 0018:ffffc9000dd76f80 EFLAGS: 00000282 [ 601.701155][ C1] RAX: 5bac62c08fe42d00 RBX: 0000000000000000 RCX: 5bac62c08fe42d00 [ 601.701165][ C1] RDX: 0000000000000006 RSI: ffffffff8d996134 RDI: 0000000000000001 [ 601.701176][ C1] RBP: ffffc9000dd77020 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 601.701187][ C1] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: 0000000000000000 [ 601.701197][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001baedf0 [ 601.701219][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 601.701238][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 601.701257][ C1] irqentry_exit+0x6f/0x90 [ 601.701272][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 601.701288][ C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310 [ 601.701304][ C1] Code: 65 48 8b 05 6d 6f 01 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 2d 27 cf 09 e8 58 28 cf 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff [ 601.701317][ C1] RSP: 0018:ffffc9000dd770e8 EFLAGS: 00000246 [ 601.701329][ C1] RAX: 5bac62c08fe42d00 RBX: ffff888042e3c298 RCX: 5bac62c08fe42d00 [ 601.701340][ C1] RDX: ffffffff93638318 RSI: ffffffff8d9a9a55 RDI: ffffffff8be28c00 [ 601.701351][ C1] RBP: ffff888042e3c200 R08: 0000000000000000 R09: ffffffff81ab4a78 [ 601.701362][ C1] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: 0000000000000000 [ 601.701373][ C1] R13: 0000000000001000 R14: 0000000000000000 R15: 0000000000000a03 [ 601.701387][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 601.701416][ C1] __qdisc_destroy+0x166/0x420 [ 601.701438][ C1] taprio_attach+0x25a/0x380 [ 601.701469][ C1] ? __pfx_taprio_attach+0x10/0x10 [ 601.701491][ C1] qdisc_graft+0x1172/0x1590 [ 601.701516][ C1] ? __pfx_qdisc_graft+0x10/0x10 [ 601.701535][ C1] ? qdisc_create+0xa52/0xea0 [ 601.701555][ C1] tc_modify_qdisc+0x189b/0x20e0 [ 601.701581][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 601.701611][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 601.701627][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 601.701648][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 601.701666][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.701684][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 601.701700][ C1] ? __copy_skb_header+0xa7/0x550 [ 601.701723][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 601.701745][ C1] netlink_rcv_skb+0x208/0x470 [ 601.701766][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.701786][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.701812][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.701832][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.701854][ C1] netlink_unicast+0x75c/0x8e0 [ 601.701878][ C1] netlink_sendmsg+0x805/0xb30 [ 601.701903][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.701925][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 601.701942][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.701959][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.701979][ C1] __sock_sendmsg+0x21c/0x270 [ 601.701998][ C1] ____sys_sendmsg+0x505/0x830 [ 601.702023][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.702049][ C1] ? import_iovec+0x74/0xa0 [ 601.702070][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 601.702094][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.702132][ C1] ? __fget_files+0x2a/0x420 [ 601.702146][ C1] ? __fget_files+0x3a0/0x420 [ 601.702165][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 601.702188][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.702216][ C1] ? rcu_is_watching+0x15/0xb0 [ 601.702235][ C1] ? do_syscall_64+0xbe/0x3b0 [ 601.702254][ C1] do_syscall_64+0xfa/0x3b0 [ 601.702270][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.702285][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.702300][ C1] ? clear_bhb_loop+0x60/0xb0 [ 601.702318][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.702333][ C1] RIP: 0033:0x7f7a6e98e9a9 [ 601.702348][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.702360][ C1] RSP: 002b:00007f7a6f8c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.702376][ C1] RAX: ffffffffffffffda RBX: 00007f7a6ebb6080 RCX: 00007f7a6e98e9a9 [ 601.702387][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 601.702397][ C1] RBP: 00007f7a6ea10d69 R08: 0000000000000000 R09: 0000000000000000 [ 601.702407][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.702417][ C1] R13: 0000000000000000 R14: 00007f7a6ebb6080 R15: 00007ffe961e2ae8 [ 601.702436][ C1] [ 601.702599][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g76809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 602.382215][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=40638 [ 602.390122][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g76809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 602.401510][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 602.411495][ C0] rcu: RCU grace-period kthread stack dump: [ 602.417399][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 602.429352][ C0] Call Trace: [ 602.432652][ C0] [ 602.435611][ C0] __schedule+0x16f5/0x4d00 [ 602.440149][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 602.445402][ C0] ? schedule+0x165/0x360 [ 602.449759][ C0] ? __lock_acquire+0xab9/0xd20 [ 602.454637][ C0] ? __pfx___schedule+0x10/0x10 [ 602.459529][ C0] ? schedule+0x91/0x360 [ 602.463799][ C0] schedule+0x165/0x360 [ 602.467985][ C0] schedule_timeout+0x12b/0x270 [ 602.472867][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 602.478266][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 602.484190][ C0] ? __pfx_process_timeout+0x10/0x10 [ 602.489517][ C0] ? prepare_to_swait_event+0x341/0x380 [ 602.495101][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 602.499993][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 602.505916][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 602.511226][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 602.516460][ C0] ? finish_swait+0xcd/0x1f0 [ 602.521082][ C0] rcu_gp_kthread+0x99/0x390 [ 602.525698][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.530925][ C0] ? __kthread_parkme+0x7b/0x200 [ 602.535893][ C0] ? __kthread_parkme+0x1a1/0x200 [ 602.540956][ C0] kthread+0x70e/0x8a0 [ 602.545065][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 602.550289][ C0] ? __pfx_kthread+0x10/0x10 [ 602.554909][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.560139][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.565371][ C0] ? __pfx_kthread+0x10/0x10 [ 602.569994][ C0] ret_from_fork+0x3fc/0x770 [ 602.574616][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 602.579758][ C0] ? __switch_to_asm+0x39/0x70 [ 602.584549][ C0] ? __switch_to_asm+0x33/0x70 [ 602.589342][ C0] ? __pfx_kthread+0x10/0x10 [ 602.593965][ C0] ret_from_fork_asm+0x1a/0x30 [ 602.598779][ C0]