last executing test programs: 1m46.887551785s ago: executing program 3 (id=388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0xc, 0xe, 0x4, 0xbf22, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, 0x0, 0x4000040) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f28bd7000fcdbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="9d02b97695ab21d8ae76cd4a15c0298680d58e04e8ba05161a78eddb81fd40e21b4f30e49683bf2f0af0bccc05623cc741fcd2fd3a05d5a379c7cdce99dcd86dece5e8f8cd662828a7fd264a"], 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) 1m46.479772279s ago: executing program 3 (id=394): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x7a) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x18, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x9, @multicast1}, 0x0, 0x0, 0x2, 0x4}}, 0x2e) 1m46.310224657s ago: executing program 3 (id=396): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x700, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 1m46.19958157s ago: executing program 3 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004000f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000069}], 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 1m45.248981493s ago: executing program 3 (id=414): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x5) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002cbd7000f9dbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000000900020001000000000000000800410072786500140033006970766c616e300000000000000000008b969da831adfd"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) 1m40.138320059s ago: executing program 3 (id=490): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000003c0)="7890362480167ac749edb876dcef18abfb2dcd5e9e4caa573c39aa26338b6faa8fd574559810a2e99ba88422f15c6d3d51017033aa6128b290ea0a1b9e83c0ae71d14d4f65198bc28b3aeee15fda41376eac3c913fd8020be6afe62a1ffadc1e5cd82c7e0107c17c48e0eb87e47847d4b94c164e7cee67578f24fee9102c0e36b20f70dcfd46fc99321840657ef023b389ff5ac5de4d41676063e1236bf11ff09218a24cb3e6593f816e3396de4bd73ff03a771bff3739855efed192b632c20ec6c6fb319e606646871af530daa36fd80e5be9b4a4390c19", 0xd8}, {&(0x7f00000004c0)="6fb788944a633769689205ee3651cf3440c00bcee3c4d0d3859c0b961670815765ec89e7921f18956e20102d6527e182baf7e0db502cbc1a32de593114dc4fd516dc5756679f94e36445e7dad8501d0e7c5aee1867a4402903adee9085adc923c05f8d4083b833ed65006cc16320c403e650ac617862f919ba6162339423e0a22bfbf0629955137b83d84d7046f9b6b2604adbfc944476bc2a14f4eba2b6216de131", 0xa2}], 0x2, 0x4, 0x8) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x8800}}], 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) socket$nl_generic(0x10, 0x3, 0x10) 1m25.125215074s ago: executing program 32 (id=490): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b44d7cc8e2dafffc941", 0x33}], 0x1, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000003c0)="7890362480167ac749edb876dcef18abfb2dcd5e9e4caa573c39aa26338b6faa8fd574559810a2e99ba88422f15c6d3d51017033aa6128b290ea0a1b9e83c0ae71d14d4f65198bc28b3aeee15fda41376eac3c913fd8020be6afe62a1ffadc1e5cd82c7e0107c17c48e0eb87e47847d4b94c164e7cee67578f24fee9102c0e36b20f70dcfd46fc99321840657ef023b389ff5ac5de4d41676063e1236bf11ff09218a24cb3e6593f816e3396de4bd73ff03a771bff3739855efed192b632c20ec6c6fb319e606646871af530daa36fd80e5be9b4a4390c19", 0xd8}, {&(0x7f00000004c0)="6fb788944a633769689205ee3651cf3440c00bcee3c4d0d3859c0b961670815765ec89e7921f18956e20102d6527e182baf7e0db502cbc1a32de593114dc4fd516dc5756679f94e36445e7dad8501d0e7c5aee1867a4402903adee9085adc923c05f8d4083b833ed65006cc16320c403e650ac617862f919ba6162339423e0a22bfbf0629955137b83d84d7046f9b6b2604adbfc944476bc2a14f4eba2b6216de131", 0xa2}], 0x2, 0x4, 0x8) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x8800}}], 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) socket$nl_generic(0x10, 0x3, 0x10) 2.4339521s ago: executing program 0 (id=1883): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0xf65e161631403ba9, 0x7800, 0xaa37, 0x4, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @end, @lsrr={0x83, 0xb, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e40)={0x2bc, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tbf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.{\t[\x00'}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6012}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+@\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "9e614e9b606a6e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f88}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'police\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.{\t[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa7e9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa09d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[:}\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-^\xb8%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.{\t[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*.{\t[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-@\xb3]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xa}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4}, 0x4046000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000d00)={{r5, &(0x7f0000000080)='*.{\t[\x00', 0x4400, &(0x7f00000000c0)={@align=0xffff, {0x8, 0x9, 0x5}}, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0xbc}, {[0x2, 0x0, 0x9, 0x7]}, 0xbb62, 0xc8, &(0x7f0000000c00)=""/200}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.860564275s ago: executing program 0 (id=1890): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001200)={r1, 0x9, 0xfff8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@updsa={0x1f4, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x1, 0x2000000}, {}, {}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_auth_trunc={0x102, 0x14, {{'sha3-384-generic\x00'}, 0x5b0, 0x200, "07d5c685d056a67ec8e5073bf045f6921bcf0bedce811f2eead0b650e5fe10f33ca8b7a9e63c4a2b364914d723b1da76cfa1aca39aa64ef86df345f7705cec6074e26070015269d10b1f59d584c7ab6c3079d8bf7a82c74819c5466b68f9312fc0b8b29ebc2520e984b73a47b9602be034b27d3553a3dd27ce9df9ae0a9e092b0615bfc62dd69039cc63fa18d10734bc00135df7ff087a95d958efcd7bad30c9bd2f413bfbd08f88263951dd49534e3237f98bc6067a"}}]}, 0x1f4}}, 0x0) sendfile(r0, r3, &(0x7f0000000080)=0xdfc, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.741793278s ago: executing program 0 (id=1892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = accept$phonet_pipe(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0x0, 0xa0, 0x2312, 0x2, 0x63a}) 1.71709026s ago: executing program 1 (id=1895): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xec, 0x6, 0x4d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, 0x7, 0x8, 0x7, 0x6}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @random="f39301dff678"}) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000000100"}) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) shutdown(r9, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0x800, 0x30bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {0x0, 0x10}, {0x10, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000a080}, 0x2008c010) 1.281185645s ago: executing program 1 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.137164244s ago: executing program 5 (id=1904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r3, 0x4, r3}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000001ec0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000180)="736856b412d80a0f569324ca010dbe3f451a92c5941ecdaa397e733c8a4e286b340cc4f5b7dfa044826f26d4731465e53c84d17bf1ef7dd867b2a56b466aa4dc11cbd0a17a39ccedbae576008e1b311568bd95edc8abc6fdabbf", 0x5a}, {&(0x7f0000000ec0)="63d3e44b5c463058717897e5fe94e83a7c0826633daad71129f821f91867f102e878815ca4d1195b3a82356d79744ed7642b6d0f48bf54f483ff940f13dfdcb8470bce65a5891c18d2b13a6f9fd04f20734540a0cb02c017945ddad5c23330b62d29569b7c1533180ecd681d6fd572a9cfe176e8ff5f477184f7caed64fc878ebaea22229f9289311562db2390598de0a9204f5210474d525afcf474e8081ff9ae48a2d546ec05ced393eb7c4e0a4ec3f7bcc8ea3f519953cf1036704afaa4959539f96f3932aef41e472c48ad1bad2271959bcc60ad91b3e16abd9fa3101a2596603312fc51f43a32a9a61b9e655aa0e8aa43d758116595fd6131a66fd94e807d74dbc582bc8d972c83be0de2753b541f053ae9e65cbb92887aec7fe72f0a2802a3c4027fd84dbfc67c628f5f1d4913c40083a0f8f02edb983ce60d56deb7e7d912eca4e6b6bba9176521d915f736be56db30549559cc1a70594166406270ca7b8dad0217d866cb5d6a5fae02838ebc7110cdca5df1ef049337f1b1e8ae1db22cd5a0fc079ce27f4a3bffea0b672557968e64a263be81501e0decf4e88806bde3367382e69cb4b41c84e48db610fbd572d6fdf85e3075dcd5b7554640bddd745d5599615497f711802455f63a154ab996b70960fd0b55150b6488d715e8bd87e9e4af70f5ac2bdfdf676e1360408a048c9ca7ea7f67b1a0aa27e822c59c08fab7431eac2d0c233e9f0cb8c4ca3ada5b3fbdbaf5574850ac64d7bd3c801eff8a7d8b3946addc139a32cdfd5ba6bba21e8de8e048d3faca3c3d9fe31534cb64b3b7a1114e709a6a67a886f7cb84576cd218ef7ba93ad37e666f1510e10429659a913a268d9bc6b13d92083e40fb289cecd2a1f1eaaceee990c47e647816f4857634f36d729c774c2987c8a46a25368581de99e5e8bb5c91667edf4a13c9e71f6c6265f30a2b80d75302597c8cc438a87a0323d73e84a7b44911f65aa7c0e6c629ffc9717a0d924883a93ed5c41cb266ac56d33e98c19b087b084a12baf2c1a405a4b8d9a9f2863d6b77e6871930a2c966a83936bfb742fe86dcd4db561c8039384d2f71eed68435843496a4372c145f00b7802d5dfec760f24ed67d02bf6fcf7095392cf328063c6ff4901f6a572e41701f195799f43f90f404f06ca16cc0e0397fc1fadd99c835fde5e3ba817a8f6b4d5efb78695fd62f67c9d92c67a5d2d7e947f3b4fe65c86baaea2e22f357407e849fcb230de956593ab87e88257005519f9096a370c3f9aeb00c270dc3955f074a77b7946663ca52e5656dd6fb48dd1d5f94ca3ecb9e7705a8cca0b9600a00a6754892b98963f89a47ac44c0bdee35022308b026ee17eb7311b470a45d2a4ea23839cd93cf6bfc97dbba9bf0bd7239659282f6d04535a31b53b707341d2118183a93085a3c6873d75c7864da6fa13760ac9d1cbb1d5c6cf61a0bc16191671755ac0f4b28cf1e4b600b3c89dde4f40a89bd5550e282f5f5d8e016a4ccb718092965279f9929ff7d1b47d37c68345315b62a55cf8a4d45201e6f5b7303cde1f6c56cd527ab7a444b69e025ce05801d838a23907ca7a6768314cf74819ef7a1802e17a602e90c46b674d081a86ba31156cafb0fd812d1e9fcf18c08b5da2ee01324de8770df776b8d36eb4ff03c428ffa12bfeb88060400ce32fa6b5d385a52b5b0364e1073799f1dde75bddd82be896f9a37b06e20545015362c4feb84bce58b22d5c5f99bd2dd007b378f18e9bb51b0c5d72ca63f2f46b8261ea35f0515f4f8bb432c67df8ba1c70a9933011bfd0541857b9f871386bc3fc7d9b5f5f09fa84ab264d0745a40c410b60710656821772d40557680c5356267cf0a49124ef9975bb7df9093e9a31efd71e12b295ebf79bc0ecd1e00488cb03ce8932e5b9599d71c7b5f648b8f428f44a6fb4437c9204e1b2f129c461582fe7ad09d76c90532957d8341a3bedaa66dd77563a5f1845d6771f0c350d3f6111283266861a113c3d152c7ea156771071079f1f67c755647eec04ca3a0824d793fa08a1ccf0a71b7d1fb4771ba63f265db2f35fbd497c4de2d2a9ff729030ed9410ac7c9a3e0d0d9ff07f43903d47b09aba94feeabd811f5c2372ab26b68695ecc8bb1885f9ddc7f1a59fa3c8fc00ca2fa999d8b8b7a5a4ef312574f0d6b337e03a770d63aec6225feabb6cd0e5910767e5787741d76b2dfd4ab6eba14f663712b37226a78b5c293701a667a220a503132f94289a539cfc032fcee39d660d91f47395028e95f477fd792f7a2d6793cb100879861f709cb37d138c9197b1fa8ebaf855fb2bca5c83137a3c83e5ec51634ce5f850d2753adfa3c1e3ad9928640cf9b46b88c0772a99c6790d71763e9fcf58f2ecbf9e4c9d566d8887d1cba9fb4b7272fe94c698042383db42d21ca4cfc91c4a980b0ead58b8f3a5b1ed7ed620969e8f0ffaa7c728f655e5b4146f9120f5590b6da49710f83e12fc903041116a565069d3557a48606f108e615b2224be0d4eb037700789bdf6b792d19e5c595c50d702c9309e8c4d5ad04a348a66081e4d29be11c2db3bcabeb9598e3673b2eae608bb583d760a232986af68033b3b0c94072a76fb1826270144335f29220623996ea5817e6e9ab4fc3b9ed3f1ba1b6ec7be651d38329045d4cc15c0d9729e900f9f0c7614e56e8a87382839c998dd65f6dfc658d701725c6405f78f93ebe24fa789c9d6acf1f754c4455f3fecb6d7c295ecc0c27e3b665312259765ef517ac76ad3278c1f9547a62ad8354e8e2a849e144fcce2a2d8333a090536cc7ca68e0cefb0b9546f779ef07200dbe9cc295c70877405e54a49c01d0f6d74e1f9219f02422d8b61e3bea84d25534f7b4186c831db5def793b1ccfbcdf5b2548ab6346fc42075761f470bea53b167c09ed348b8fba03ca62767a0ada202d8a39b72a96e5a26dd63aac00d8395aaf38ad1e73bb7375a0adba32faf7197f4cf95a8ec9c1d0e95cc232fcf4e5ee18b6e3e7282522d05342f87e4a26043fa43d6113d4c87d434ef2257280d708c295bf878291bf13a607e50773c7fc409c77c1ef03db190f0488ba51ecf0626dab9375bc5f21b480e552d72de261009ef367f40442dd42c469b70971c341042fde509b45118346f545d7634cbd9b9021fb234e54c6d6302513591c95c80e7d24c64d7341baa258f7f159d5a91a26d4a26e9443e48982f48d596a4bdf9eb5b16459e3786ae66837c16e5b450a4b00305c0ebaaddb2146eb8213b45e4c844fd320f330aa9e0765502310189c9f5270a1c96798d0c86988b365221e3913c51a4da2f13005e19ea9584b9c4ebdcb8ac1bcf9165c574f78ee3fee01c3ef73f3247b5b5639fdae547cb377cf2fa994424a86a2eca5ab887233817173a7661c390cd6636f1fee61eb79dcd6ca6d0d03f84dbc91b78bff3dcdf654a9f9aec33d44e9c22f7a232739f23f1615931bb3215d0526897eefc6d4d58137d82a53f8589c50fbb59b2ef6d7f60ce8b19c282c26aa05e149f49a666c2e8421e6f4e4d3d961930a1ab9334b782e6fa3a61be32f656cc980c998dc3502e5969498af8b13ac560c2e3976b3f373d1305ab723462b0e4dca1c14767f7ade4a47e2ff2c3172c129d057e686e6efec594bcb79a6537130ff6c830d2a0877770abde35d12c0d1e10eda0f923b6864ca9482d523ec96242e5e0eda6aa26ea4f7eac0385a9db9da2fbf397a0a1e69abc280ffa671b96fb358bf1ff4282aa16f4659b7c3bfc9d6771b88b2f92bedf311a575b6cf013b8771c882b317a0939c9a28290610c289284337bff925f5fc66b49c5c41a1c82f9a5c7d703fe0ebaeb71c71c8bbf0e6feffede62e41fb149225d3adfd0aa4183b6d5c76a2c2553b69c8900aacbe7a2bf08e5d9ea7810ea3efa421e90ddda7c7fed9ec57a15de3a6927b224f53376eb82ed6351c65df272c5d1e8894349a2789eb86a9061d56ab11916ac846512404c46e2cc7fe5f41f9ea7511c49c61913d28c68f8e306cca025309c54bb6b29960eed2b2e9494f6c91494aad5a222953a5d4b6e879ec17e37c7e368f5cee4d89103e9e2865b2e40f63244e2ac98b502281a6b5d2c4152fef9578b4cc34cd196c71ba2617ac47988230e768d53f66aba9ead3c85665d98c2a8c60b4cecb7b2e291be12f749b36e2d06618d0998e38c17151ad1136f3ce096cf23c5243a62d7a9c2fb39c0f1e4fa1eb9b3715ac6570fe7c23b016a8842030a4f4d7ca3dbe45e18e8c27cf917995837925c45b583a7b84899534990d9245ec6422c62fdee1ffdf52779176b2172141738d6dc9b9b5147e695d01c3e1f792119c58a61c23e36e156c7241ede3df4557191c36408832be4339d590fc9a5371f4408bee84db7de3109388220d9a68efc376d4bb96554d6a16663f8cc1f2285602c0263a158fa03fc8cdfc556fda84cff8361cf3223a032e2ea8403384b936a38cf023e9a3b90913c34311add838a3ede587c61c5f94b89e18e4e6280da7489ba41b8f5aefd05c4a148ef70da4aa4774a38bccb7c92989500e035d08774392e945bd3b1877859168f909cbff56eb56a30773671095fe16272d210de9134f57dd6f9613b5e874e2bf38c22bed969db41ce339c0d2daebe3240ca08fb7af416a0c489b29b950e5805381955c1e5cdc45424f025a1f2ce46b4e31812a973bc32f9761225f2c14d63b7dc07f505bf1b1c815d41ca0eacbefd1d068c984adbf3a5a8207bc5475fed092ef7cbd55d62f4a38faf302f46b92b6c47bc0b85b770bf9f21a4db71d7736b89490a1852e6e53070e9e2539fc8348ae13d4c9e047d7dc08d0a2169347ae5dfa705442337cae604ca795e576ea990b78456aa4f06bd83d566910b7f7eadfd19b4b7b3779c3b8daf6e088083564da0849f275adca63bde61e965f58200a03372617d6e92e41eb30dd0676f8b8e189334100f18b7aa081c22af086929cfc1bdcdabb3f93aeeb33f0cf96e05f908d7c9b27eb8e6913a5f443fc6730376f9a85919667115d1881af2c4a884cecbeb40a52df1e51c4d3326d4550aa4ebf314ebc52c311d5da5134c6a65a12c182fc6974c88a5729f9f43f66f485d208cac8f47b287a35b36ee4e1444f28dfddfb2d70afde295c177911e1fed3b180155f15c9243a84a6a3de4859d229232b338ddb14d720ebdd1309fe86f2405a99202a7dd008b72c1c39414c3235cbbb4e27bb32c9983690a8b38e27c46948b3beabd671657f74796b65fe2d22797296463c879ca371252f0561d1670695bb034cf3583e7f8a69a879cb339a2fc3887aee8e9565133c3d4a54468f2951c6a4677083771ca295323c54d434ad2888ba7618e60e58a95bb08578d41479c6e8eb396b3b0beefb7d4ce762001d60114aae8b611acc042763af2af66524ba10f8f2cf23ce0a27c73b8ff448175b90d29958abf3a1c22641e4aa78fa3f06e84a5815fe27726796b241f9bb498ffc25e1c604a892b5329babcf571bae3263eeac9085a935187924e6c1855e7cddacc5203edb1903df27b924f608a5c2e824f8ef95a548ba8c65ecf739bd5c699d925a5a78a418707d3cdb68abf8890c74f2c5f9e170263d45e40fa8c868c9702560e3fdf3a371beb1aedaed082638e52c2e59942e6364a093e3a503da29c9bfa6e6ffd5599cb991723d44b1b8288d8d43bb8b720bdc591d0521ed137126ad9e9679fbd7c2035c0d65fa61a5ae0d87a709d4a07555ef1396c0dde9388ae70bf0a04de832a1efdbc1637060c8f3b74f5d0fca811e076934eac94ac6076e89c701ef8366a", 0x1000}, {&(0x7f0000000200)="9361c76eba0fa7c90e5d3820c1294b44922863ebe322ecf65a88dede22c3b27acee7712e5134d79d549a2a3922a35c27be8da24cd113d65be3cfb5ae59dc8db1de621c73d2f49a0a3a041b0df32759f7567b300767587c92a8bad4969bf85e", 0x5f}, {&(0x7f0000000280)="d88cf61cfc404865391c1c14efe76213b36214691262e4c6b69d41a391a4ff4387354af86e1b4e0e93742e2d1b533871dc777ff278cdcdcc374883bcd419ea83e6f088c24c606ecb9a57de225b435d9bbf00d5d68d444b6de8fedc13db72a80c837fb754a01df511cbe4e551075c1f7e3e75fd12a1768fda536f719f7fc35401e5d716a5db9fc6dd217547deda53ccf2991efeb22ac211a9099fa54968257c3702e5e0", 0xa3}, {&(0x7f0000000400)="e0d8108e52d49b9467cbd392970e336d1652a70ba84cd1acd2f30eee809f2b43839bcf7a4db077482d7ea661e525034ebd55702b4ecc8b13386b4de4c20c0685c2351b57bee80880edbe0499e68af4de8cb0be283688b11831739e9525b1000b359829583c1c574073a71c44b115b7b0d8472898387c5f7913b53d6e1f09dbcc460a04a0674afd25f687d6d6a2", 0x8d}, {&(0x7f0000000340)="e929dbe6781bdfab902bec6fc7e07cd5fb501bc641dd115fc1b0e1b664239812f947f13ffe6864e24a3168768b945f1d0b9a9a489df3153f47064d7e0b3ee137204c200bc31f8922473a6bec45807530c952c0edb158", 0x56}, {&(0x7f00000004c0)="933c3515b942769a354d1fcbe0aa746af0c6e539813a03964d62c0bf630ff9f5cf55d41cf28e23774877ce0b730a5b6bc772eeec78e7aedeb39cae60063e0a18dfd1a1772f0feb4e887a53a56bad345f6584b2f1209af81fbafe810cc460d9bfcd17ae5baba976a3bb6c85acdb479ce2b52dbea88e53033bc4d0805282cc4441955e81b811a75a9414764b1bee962528e5d56e7889b30b4b02804a3b95a31d06b6020e81f564be9cfbb85e7df4fbdc8713faa8cb3c6e885b0437cf0dd1123527c13253c843722490cfe7b7be", 0xcc}, {&(0x7f00000005c0)="039a3dd7d36064e17833630e54ee50c6f6fe937ddf9df643e3c237dbeb2e971583ce3c97767a593046b3c14e38de73c29323b1eadfbe4d43fc019a43a98571c04cb384c4f86119b042348c2c412624080f29f09bbcc7c585707f4b3ed49bd5b806784e0d29bd0f8435432c5c2012cf29d9a93d6f008eef768831230e4ddfc9920cfdb7e84752cfd5c96ffdc13180be7a26f9", 0x92}, {&(0x7f00000006c0)="1be3aca2285aa3cb74e9dc11c2b2f8d2a538894eb449bf5a476faf68b547c4cddcfb6a55e2d079cc242e9f375084df21e3552bf6638fc4fc9237c4a4ce46bb937bd77161bb2ece17c7a8dc89549ac41b877a26f4b75276468575e89b8bace033bf1afa3819", 0x65}, {&(0x7f0000000740)="bfea44a8c5575705c84ea8bdb92723d416e04c3a20deeeed8a113d28a1cc9c8ab367647c336cb286ba6a3c4ee8639f26e9548d9c59a5defbc3d14259229a3969178a04ed809378cb5b93499318c7dc20bae533702e6ae8", 0x57}], 0xa, &(0x7f0000000880)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xc3, [@private=0xa010102, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x0, 0x5, "dfbd05"}, {0x5, 0x7, "06db6edfab"}, {0x0, 0x7, "d1c5825432"}, {0x6, 0x2}, {0x0, 0x5, "307f0a"}, {0x0, 0xd, "fc0f30cea3b370b7342fa9"}, {0x7, 0xb, "9ec84a546f87c256bf"}, {0x2, 0xc, "da07470f69ad22e2bc33"}]}, @timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x7, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffa}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdf11}, {@private=0xa010101, 0x1ff}, {@loopback, 0x3}]}, @noop, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x1, [0xbc2a]}, @timestamp={0x44, 0x10, 0x2a, 0x0, 0x9, [0xf3, 0xfffffff8, 0x401]}, @ssrr={0x89, 0x7, 0x29, [@dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_prespec={0x44, 0x14, 0x34, 0x3, 0x2, [{@remote, 0x3}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x6, [{@empty, 0x9}, {@multicast1, 0x5}]}, @rr={0x7, 0x2b, 0x85, [@empty, @multicast1, @remote, @remote, @multicast2, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101]}, @noop, @rr={0x7, 0x13, 0xad, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x198}, 0x4000000) listen(r7, 0x0) connect$phonet_pipe(r7, &(0x7f00000000c0)={0x23, 0x6, 0x2d, 0xff}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xff0a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 1.069787082s ago: executing program 2 (id=1905): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x300000000000000}}}, 0xb8}}, 0x0) 1.003816397s ago: executing program 1 (id=1907): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 1.003166218s ago: executing program 2 (id=1908): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0xe9, &(0x7f0000000580)={@empty, @local, @void, {@mpls_uc={0x8847, {[], @generic="85578b7d23e300ed49fd100101d28602ebcd742c99f0d5aaeb340509270dc9a90a3280734af85fc533de749cf9fbc0c8a1f8a96bdd98511261f820ea99997eb03deabc00f9702e4eaee69a7a157efe17e3333cd66f950395627c3705753042582488718b01fc4598a7c8e33749ace9da3531541b18188cb6df250e504d1343f4228e1edd26425b576dedd891ab8478c52925b2a81436714f411e8dcdccef898b89bdc9b94307b8d06c2c72bc502c96bef669741d308d5790b96aedb28c00a5dca7d7a1364c041cf54b310000000000000000000000000000e20000"}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x3, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r1, 0x24}, 0x20) 989.324482ms ago: executing program 5 (id=1909): pipe(&(0x7f0000000540)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@ldst={0x3, 0x3, 0x0, 0x3, 0x7, 0x20, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x14) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x3aa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pselect6(0x40, &(0x7f00000002c0)={0xda8, 0x8, 0x8000000000000000, 0x8afa, 0x8, 0x7, 0x9, 0xfffffffffffff2d3}, &(0x7f0000000340)={0x5, 0x7, 0x3, 0x2, 0x8, 0x7, 0x0, 0x3}, &(0x7f0000000400)={0x9, 0x7, 0xd5, 0x3, 0x32f3cb5e, 0xa, 0x8, 0x1ff}, &(0x7f0000000480)={r1, r2+10000000}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0x4, 0x8, 0x4, 0x0, 0x8, 0x6, 0x0, &(0x7f0000000240)=[{0xa, 0x1ff, 0x80}, {0x10, 0x101, 0x8}, {0x4, 0x1ff, 0x5}, {0x1a, 0x101, 0x1}, {0xa, 0x101, 0x3}, {0x14, 0x1ff, 0x1}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) 845.685307ms ago: executing program 0 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) 844.10002ms ago: executing program 2 (id=1911): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r2, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r6, &(0x7f0000000240)={0x1a, 0x320, 0xeb, 0x2, 0x8, 0x39, @broadcast}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x2000c085) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x2, 0x0, 0xc78728437fa3d4b) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffa, 0x20100000, {0x2, 0x18, 0x21, 0xff, r1}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x6f47800fac4e2862) 843.921815ms ago: executing program 5 (id=1912): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) socket$nl_route(0x10, 0x3, 0x0) 828.608133ms ago: executing program 4 (id=1913): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) (async) 700.038369ms ago: executing program 1 (id=1914): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800e6001000010025bd7000ffdbdf25000000001da9144b5448e5c63111027d502aecf328a593444e991dab124e026143120e8c5cff79df8d4a23a45417f83cbba577148a1e421518cff12aff623b6def2e6f5148401f0848e4fdf300ab", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sock_ops}, 0x94) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) 629.818738ms ago: executing program 2 (id=1915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000001880)=ANY=[@ANYBLOB="0800080001000800b6e71400020045b0002800680000030690780a010104e00000014e1e4e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4c4e686bcb5feaa6"], 0x36) 622.824831ms ago: executing program 4 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r7, @ANYBLOB="0600280003000000070006"], 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf252c000000a800a800f0b6f80d71878fd66786f2d6a33a43bc8ce94b9e7697119bfee76a326458bc118426ee164ed2a047e948dd290a64720f2585f865f45a935f1df94abbe0b6d02667032af41552ee7bd93755794bb9f0f760fc60e12a61ccbb4ab11694f4dcb7f02a95cb355e2afd065fb37b5232157acbdbdea81eb05272838345c9c4d14e96bb1c67f926d81445c964aa8b510def775635dd273c25ead655e6ab60c535a798cd5cd3b1f2080001007063690011000200303030303a30303a31302e30000000000800580000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x80800}, 0x0) 576.469327ms ago: executing program 5 (id=1917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) (async) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400088000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 381.16374ms ago: executing program 1 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x38}}, 0x4000000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 380.822997ms ago: executing program 4 (id=1919): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x400000000000000}}}, 0xb8}}, 0x0) 352.517755ms ago: executing program 0 (id=1920): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x960}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e2ea1007acc0b59a20776ed31f6a93be4de580a84f4ada6391de997fa7932123a28ad745421b9eb2c46601b25da7377cd3c37e6e0b3022f1e6791d33ac1b12ce9d2769875088d0e7b63b5c2002e9bcbf40b16022379d9329"], 0x10b8}, 0x200048c0) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x10b8}, 0x20004844) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x20000800) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1c2c, r4, 0x5, 0x8004, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x64, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @random=0xfffc, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x66, 0x2, 0x7fff, 0x3}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x1, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x12bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xcc, 0x3, "6fe520519f5f182b7c82a0a4aba6cf7afd58c3d3e9ea3621a2771763db0270b7346c9281cb33d16ed1a1efb437da97cedf57652249a23d4c700530ef76231778eb110d9bb97b831ad2b859abb979426204a780fa83dc6a1e23311a92078a40bf7b8772dea24cb6a2d26853e854ca5ddeb7a6a47312bdc36d5e2fb1c5a3e8ca98a9c81a75aa66e73a89bc4ef751e571a268fec5f45fce82603db8853314e5b4c0c6356f6a475ae74ec1af411ee8db8ab765fa11ed3585ead508bc731109676de009734bac764e1e42"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc7, 0x2, "03a2b96845433b1ab6c5aa3357a4d9169bd27900dfbba57756af5ba6c6361403613062d9cdc7b2bd8932afe859e2388d41666866828b02872549e0a5f4042541d10f1c478fcae3c381dd60419455df7b3c6b9b1677c32481ebc2765a4e42ac02c220e585ebb15e95af649ed82d9eb5b3064ac3a52bc5b9a654259fb1cca3f93bf0c55d71c9a8fabc42e073ca1f1830baeaf708566072043477a98ea01f409d19244f36f5a1463b0e43b990b2c19c5bf0fb3cef7ffd3698aef3ce346fe63f99ccc2c856"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x26, 0x3, "2f20d1c344e4d98284350840c1545ae73159d2518892a75a961f457d7402d8e9b64f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf0, 0x3, "acf08893f378cc4d5b94665cc1f22d4e89311a0461ae192d5f4b13471f03f03e4c8fe4deed2516b9f36715dc6158d497bd03a23afd9cfd2c48beca2522027c47cf4dcbf605b44ef4bb203d2877f7ea09528e4fd55c0bfe2c7ea3a27d1f81b913fe165998349976e6efd5bd126ff97e4eb0a41a06b24001e5a2b86e71456d20a6bf644a836399601c8fbb092f79132d46fd879b935164d9821c9585d11d4258531c41df116e53a08cbddecb8ef2021af00b9a7f6dc44e07a52edefa32a00bd1eb9220d8e4567d16a51198e717e4e6fd2e47acf4afedadbbc66cba457c82f91450dc9b0f23d23b34a48533c752"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}, @NL80211_ATTR_PROBE_RESP={0x8d2, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PBSS={0x4}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}]]}, 0x1c2c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r6, 0x0, 0x8) 280.469901ms ago: executing program 4 (id=1921): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x8915, 0x0) 197.792963ms ago: executing program 2 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x10, 0x70bd2c, 0x25dfdbfe, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000094) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 197.338769ms ago: executing program 5 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r1, @ANYBLOB="0cc65a"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 158.482282ms ago: executing program 0 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r3 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080)=0x401, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={0x0, 0xb7}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8}, 0x4e) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, r9}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)=r11}, 0x20) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r7) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r7) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r13, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r12, 0xb15}, 0x14}}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) socket$nl_netfilter(0x10, 0x3, 0xc) 157.301746ms ago: executing program 5 (id=1925): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 139.812586ms ago: executing program 4 (id=1926): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x4e23, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) 33.600685ms ago: executing program 2 (id=1927): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x77}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x880) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r0}, r1, 0xe, @inherit={0x50, &(0x7f0000000380)={0x0, 0x1, 0xffffffffffff0000, 0x8, {0x4, 0x1, 0x4, 0x2, 0x3}, [0x8000000000000001]}}, @name="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"}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001400)={0x800000010000, 0x7, 0x1, 0x6, 0x4, 0x0, [{0x0, 0x400}, {0x3, 0x400000000000, 0x1, '\x00', 0x2}, {0xadb, 0x1, 0x100000001, '\x00', 0x2400}, {0x40, 0x8, 0xffffffffffffffff, '\x00', 0x1}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000001500), r0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7e, '\x00', 0x0, r0, 0x2, 0x3, 0x4}, 0x50) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000015c0)={{r0}, "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"}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000025c0)={0x0, 0x736a}, &(0x7f0000002600)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002640)={r3, 0x6}, &(0x7f0000002680)=0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002780)={'syztnl0\x00', &(0x7f0000002700)={'ip6_vti0\x00', 0x0, 0x0, 0x10, 0xc6, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x1, 0x700, 0x0, 0xe}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002800)={'syztnl1\x00', &(0x7f00000027c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x40000000, 0x4, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @local, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002880)={'vxcan1\x00', 0x0}) getsockname$packet(r0, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002900)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002940)={0x0, @broadcast, @empty}, &(0x7f0000002980)=0xc) getpeername$packet(r0, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002ac0)={'ip6_vti0\x00', &(0x7f0000002a40)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x40, 0x0, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x700, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002b80)={'syztnl1\x00', &(0x7f0000002b00)={'syztnl1\x00', 0x0, 0x6, 0xd4, 0x3, 0x8000, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x1, 0x10, 0x4, 0xd}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000002cc0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0xbc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004}, 0x24020080) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000002d00)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002d80)={@private2, 0x0}, &(0x7f0000002dc0)=0x14) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1c0000, '\x00', r13, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ec0), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002f80)={'ip6gre0\x00', &(0x7f0000002f00)={'syztnl2\x00', r6, 0x2f, 0x7, 0x4, 0x3, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x750, 0x8, 0xb6, 0x8}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r15, &(0x7f0000003100)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xdc, r16, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000040) r18 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003140)={0x0, r14}, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r18, 0x80049363, &(0x7f0000003180)) 31.74806ms ago: executing program 4 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042fbd7000fcffff1f00000000", @ANYRES32=r3, @ANYBLOB="46000400000000002400128009000100626f6e14000280050001000400400005001100010000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x53ce387976410110}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) 0s ago: executing program 1 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x848, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x818, 0x2, [@TCA_BASIC_POLICE={0x814, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x800, 0xd3, 0x80000000, 0x40, 0x8, 0x524, 0xb26b, 0x1, 0x7f, 0x7, 0x2, 0x1, 0x9, 0x7, 0xffff7dfc, 0x2, 0xfe, 0xaa, 0xfff, 0x4, 0x7, 0x1, 0x40000000, 0x3, 0x3ff, 0x3ff, 0x5e, 0xffffffff, 0x760, 0x4, 0xfd9f, 0x80000001, 0x3, 0x6, 0xffffee6f, 0x3, 0x4, 0x24a2, 0x16, 0xef5a, 0x10000, 0x9, 0x8, 0x80000000, 0x1, 0x2, 0x10001, 0x2, 0xfc9, 0x3, 0x50211754, 0x9, 0x80000001, 0x6, 0x1, 0x5, 0x800, 0x5, 0x7ff, 0x9, 0xd, 0xf75, 0x78000000, 0x4, 0xff, 0x10000, 0x10000, 0x7fffffff, 0xff, 0x7fff, 0x620, 0x8, 0x73, 0x7, 0x3, 0x9, 0x0, 0xb7fc, 0x1ff, 0xa5e, 0x24b1, 0x2e5, 0x6, 0x1000, 0x7ff, 0xc, 0x6, 0xffff7fff, 0xd, 0x10, 0x7, 0x3, 0xffff, 0x3ff, 0x9, 0x4, 0x1, 0x35, 0x5, 0xc, 0x2, 0x6, 0x9, 0x7, 0x81, 0x5, 0x1, 0x1950, 0x7, 0xfffffffd, 0x0, 0x7, 0x2293b487, 0xb08, 0x4e780000, 0xb, 0xfffffffb, 0x9, 0x4, 0x200, 0x3, 0x2, 0x0, 0x0, 0xf, 0x0, 0xc, 0x9, 0x2, 0x4, 0x1, 0x1, 0xb61, 0x7fff, 0x4, 0x7, 0x3, 0x3, 0x4, 0x4, 0x7fff, 0x80000000, 0xf, 0x8000, 0xfffffffd, 0x9, 0x80, 0xf, 0x0, 0x80, 0x4, 0x7, 0x2a, 0x80000001, 0x4304, 0x2, 0x4, 0x2, 0x5, 0x3, 0x800, 0x7fffffff, 0xfffffff3, 0x6, 0x2, 0x7f, 0x3, 0x5, 0x40, 0x50, 0x7, 0x3, 0x0, 0xf3, 0x4, 0xb, 0x4, 0x2, 0x6, 0x8, 0x2, 0x39, 0x8, 0x45a, 0x1, 0x5e11deed, 0x0, 0x7, 0x7, 0x2, 0x3, 0x7, 0x10000, 0x0, 0x5, 0x6c9, 0xbc, 0x80000001, 0x1, 0x8, 0x6, 0x4, 0x6, 0x1, 0xffff77ec, 0x4, 0x7, 0x0, 0x7ff, 0xa, 0x7, 0x6, 0xfffffffa, 0x10, 0x2, 0x4, 0x3, 0x7, 0x6, 0x800, 0xd, 0x5, 0x4, 0x37ed, 0x800, 0x10000, 0x1, 0x9, 0xd, 0x6, 0x396ad35f, 0x0, 0x5, 0x2, 0x10000, 0x9, 0x10000, 0x6, 0x2, 0x2b, 0xd, 0x400, 0xffffffff, 0x3, 0x5, 0x5, 0x5, 0x3, 0xfffffff9, 0x7, 0x7, 0x9bb9, 0xa9b, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x30}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0xddd, 0x5626, 0x3, 0x2, 0x1, 0xb, 0x8, 0xffff, 0x5, 0x9f, 0x3, 0x1, 0x6, 0x552, 0x80000004, 0x6, 0x7, 0x0, 0x7, 0x771, 0x9, 0x80f, 0x0, 0x8, 0x101, 0x120, 0x8, 0x5, 0x2, 0x6, 0x0, 0x7c, 0x3ff, 0xff, 0x4, 0xc, 0x8, 0x9, 0x6, 0x40, 0x1800000, 0x61f7, 0xc, 0x3, 0x4, 0x6, 0xd7, 0x4, 0x8, 0x5, 0x5, 0x1, 0x8, 0x332, 0x0, 0x2, 0x400, 0xd1, 0x6cb3, 0x7, 0x89, 0x9, 0x1, 0x5, 0x80000001, 0x575b, 0xc434, 0xc, 0x6, 0xa, 0xffffff72, 0x2, 0x2, 0x5395, 0xc, 0x8, 0x7, 0xb81, 0x5, 0x4, 0xd, 0x0, 0xd8f, 0xff, 0xffff0000, 0x1, 0x7, 0x7fff, 0x4, 0x9, 0x8000, 0x8, 0x7, 0x2, 0x800, 0xf0ac, 0xfffffffe, 0x69f, 0x4, 0xafd, 0xc, 0x69, 0x40, 0xe, 0x3f, 0x7, 0x3ff, 0x0, 0x7944, 0x7, 0x4, 0x5fb, 0x3, 0xffffffff, 0xffffff37, 0x17e08c1, 0x8, 0x0, 0x540, 0xfba4, 0x7ff, 0x6, 0x6, 0x7, 0x0, 0x980, 0xff9, 0x2, 0x1000, 0xbb, 0x102133, 0x1, 0x0, 0x6, 0xaac, 0xffff, 0x0, 0xfff, 0xb, 0xffffff00, 0x7, 0xa, 0x0, 0x2, 0xfffffff8, 0x3, 0x108, 0xc, 0x6b, 0x1, 0x6, 0x81, 0x6, 0x0, 0xffff8001, 0xfffffffb, 0x8, 0x5, 0x4, 0x7, 0x7d, 0x80000000, 0x4, 0x1, 0xa6, 0x0, 0x7, 0x2, 0x5, 0x0, 0x6, 0xb9, 0x4, 0x8001, 0x1, 0xffffffff, 0x7, 0xf32d, 0x8b, 0xff, 0xfffffff8, 0x8, 0x8, 0x3, 0xf0, 0x80000001, 0x5, 0x8, 0x6, 0xd9, 0x0, 0x40, 0x7, 0x7, 0x4, 0x1, 0x200, 0x9, 0x2, 0x6, 0x5, 0x5, 0x1, 0x9, 0xffff0c2c, 0x3, 0x4, 0x1, 0x4, 0x5, 0x7ff, 0x0, 0xffff, 0xffffffff, 0x85, 0x7, 0x1ff, 0x2, 0x10001, 0x4d98, 0x1ff, 0x960000, 0xea35, 0x8, 0x9, 0x2, 0x4, 0x7, 0x50, 0x3364, 0x8, 0x8, 0x8, 0xe, 0x7fffffff, 0x2, 0x9, 0x2, 0x0, 0x7ff, 0x4, 0x453a, 0xffffff88, 0x6, 0x273, 0x80000000, 0x8, 0x8fd, 0xffff1aec, 0x8, 0x5, 0x7, 0xf, 0xfffffffd, 0xdb]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r11, 0x1c}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)="03", 0x1}, {&(0x7f0000000340)="dd41dc0a1a1e55cc094c6bad", 0xc}], 0x2}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x7101}) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): tive [ 72.669401][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.676493][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.702803][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.726874][ T5815] hsr_slave_0: entered promiscuous mode [ 72.733464][ T5815] hsr_slave_1: entered promiscuous mode [ 72.739675][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 72.745695][ T5815] Cannot create hsr debugfs directory [ 72.757393][ T5820] hsr_slave_0: entered promiscuous mode [ 72.763686][ T5820] hsr_slave_1: entered promiscuous mode [ 72.769751][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.775607][ T5820] Cannot create hsr debugfs directory [ 72.827624][ T5818] hsr_slave_0: entered promiscuous mode [ 72.834055][ T5818] hsr_slave_1: entered promiscuous mode [ 72.840051][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 72.846168][ T5818] Cannot create hsr debugfs directory [ 72.865075][ T5817] hsr_slave_0: entered promiscuous mode [ 72.871387][ T5817] hsr_slave_1: entered promiscuous mode [ 72.878211][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 72.884140][ T5817] Cannot create hsr debugfs directory [ 73.390318][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.403572][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.423616][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.434769][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.491103][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.507589][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.519513][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.533230][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.612962][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.633777][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.666047][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.677342][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.731224][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.756124][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.766666][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.778043][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.847324][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.903367][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.915711][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.934436][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.946210][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.963759][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.971015][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.988545][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.995713][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.014005][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.029672][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.108208][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.148748][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.156036][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.190115][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.215807][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.223001][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.285299][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.303171][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.327270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.334453][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.357485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.364721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.398480][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.406079][ T5821] Bluetooth: hci1: command tx timeout [ 74.415805][ T5821] Bluetooth: hci4: command tx timeout [ 74.431618][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.443356][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.459378][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.466608][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.483381][ T5821] Bluetooth: hci2: command tx timeout [ 74.483440][ T5824] Bluetooth: hci3: command tx timeout [ 74.501492][ T5836] Bluetooth: hci0: command tx timeout [ 74.534350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.541697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.584932][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.636874][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.721605][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.766098][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.811509][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.818718][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.871068][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.878275][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.906239][ T5816] veth0_vlan: entered promiscuous mode [ 74.917886][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.998145][ T5816] veth1_vlan: entered promiscuous mode [ 75.018477][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.056614][ T5818] veth0_vlan: entered promiscuous mode [ 75.089184][ T5818] veth1_vlan: entered promiscuous mode [ 75.167604][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.185194][ T5816] veth0_macvtap: entered promiscuous mode [ 75.225865][ T5816] veth1_macvtap: entered promiscuous mode [ 75.258248][ T5818] veth0_macvtap: entered promiscuous mode [ 75.299069][ T5818] veth1_macvtap: entered promiscuous mode [ 75.320681][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.344201][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.405362][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.433324][ T5820] veth0_vlan: entered promiscuous mode [ 75.444291][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.474528][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490180][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.512905][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.537484][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.548821][ T5820] veth1_vlan: entered promiscuous mode [ 75.574385][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.583754][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622436][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.651382][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669208][ T1101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.714243][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.727745][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.778153][ T5820] veth0_macvtap: entered promiscuous mode [ 75.799493][ T5817] veth0_vlan: entered promiscuous mode [ 75.807891][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.815877][ T5817] veth1_vlan: entered promiscuous mode [ 75.824853][ T5820] veth1_macvtap: entered promiscuous mode [ 75.833089][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.861180][ T5815] veth0_vlan: entered promiscuous mode [ 75.928798][ T5815] veth1_vlan: entered promiscuous mode [ 75.941678][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.971416][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.047646][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.063477][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.071342][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.095369][ T5933] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 76.105991][ T5817] veth0_macvtap: entered promiscuous mode [ 76.126486][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172755][ T5817] veth1_macvtap: entered promiscuous mode [ 76.184968][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.191425][ T5815] veth0_macvtap: entered promiscuous mode [ 76.199489][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.202626][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.217185][ T1101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.241386][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 76.248944][ T5815] veth1_macvtap: entered promiscuous mode [ 76.267147][ T1101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.301057][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.332751][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.356108][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.403368][ T1101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.413835][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.423605][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.473727][ T1101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.483139][ T5836] Bluetooth: hci4: command tx timeout [ 76.483173][ T5836] Bluetooth: hci1: command tx timeout [ 76.507925][ T5942] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 76.520331][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.537650][ T5942] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 76.543446][ T1101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.565165][ T5824] Bluetooth: hci2: command tx timeout [ 76.565182][ T5836] Bluetooth: hci0: command tx timeout [ 76.565206][ T5836] Bluetooth: hci3: command tx timeout [ 76.593338][ T5942] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 76.605661][ T1101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617047][ T1101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.632996][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.645093][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.656741][ T1101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736273][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.751046][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855584][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.893813][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.929777][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.936137][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.946970][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.005271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.030139][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.063066][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.081385][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.426869][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.438990][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.477464][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'. [ 77.487612][ T5968] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 77.523467][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 77.553073][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.681068][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.681914][ T5974] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13'. [ 77.744572][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.759505][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.811133][ T5963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.201668][ T6001] Zero length message leads to an empty skb [ 78.564866][ T5836] Bluetooth: hci1: command tx timeout [ 78.566286][ T5821] Bluetooth: hci4: command tx timeout [ 78.644969][ T5821] Bluetooth: hci3: command tx timeout [ 78.645006][ T5836] Bluetooth: hci2: command tx timeout [ 78.650707][ T5821] Bluetooth: hci0: command tx timeout [ 78.720372][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 78.957273][ T6045] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 78.982991][ T6045] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 79.014138][ T6038] delete_channel: no stack [ 79.308173][ T6063] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 79.788918][ T6047] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 79.806429][ T6047] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 79.840489][ T6094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.005106][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 80.280658][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.406611][ T6124] veth0: entered promiscuous mode [ 80.523238][ T6135] netlink: 'syz.3.64': attribute type 25 has an invalid length. [ 80.588621][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.588758][ T6135] netlink: 'syz.3.64': attribute type 25 has an invalid length. [ 80.614334][ T6138] sctp: [Deprecated]: syz.0.65 (pid 6138) Use of int in maxseg socket option. [ 80.614334][ T6138] Use struct sctp_assoc_value instead [ 80.628823][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.662303][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.681205][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.001610][ T6161] unsupported nlmsg_type 40 [ 81.065095][ T6163] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 81.426997][ T6177] __nla_validate_parse: 9 callbacks suppressed [ 81.427014][ T6177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.77'. [ 81.455268][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.77'. [ 81.516419][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'. [ 81.648724][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 81.880409][ T6198] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 82.282325][ T6212] warning: `syz.3.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.325421][ T6213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.369602][ T6217] syz.4.91 uses old SIOCAX25GETINFO [ 82.405226][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.90'. [ 82.765453][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 82.808835][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.819861][ T6238] netlink: 'syz.3.97': attribute type 2 has an invalid length. [ 82.831859][ T6238] netlink: 119 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.940888][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 82.964931][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 83.302606][ T6261] 8021q: VLANs not supported on lo [ 83.731108][ T6283] syzkaller0: entered promiscuous mode [ 83.754567][ T6283] syzkaller0: entered allmulticast mode [ 84.124981][ T6305] xt_hashlimit: size too large, truncated to 1048576 [ 84.752115][ T5482] veth1_macvtap: left promiscuous mode [ 85.279075][ T5902] IPVS: starting estimator thread 0... [ 85.383619][ T6362] IPVS: using max 30 ests per chain, 72000 per kthread [ 85.519393][ T6385] netlink: 'syz.4.134': attribute type 8 has an invalid length. [ 85.890086][ T6400] netlink: 'syz.0.137': attribute type 2 has an invalid length. [ 85.973681][ T6400] 9: entered promiscuous mode [ 86.386474][ T6388] raw_sendmsg: syz.3.135 forgot to set AF_INET. Fix it! [ 86.699164][ T6444] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.819996][ T794] cfg80211: failed to load regulatory.db [ 86.863049][ T6458] __nla_validate_parse: 9 callbacks suppressed [ 86.863065][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 86.944004][ T6454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.962638][ T6462] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 86.970288][ T6462] netlink: 476 bytes leftover after parsing attributes in process `syz.4.156'. [ 86.996342][ T6462] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.156'. [ 87.051665][ T6470] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.250391][ T6482] netlink: 'syz.2.161': attribute type 12 has an invalid length. [ 87.299546][ T6489] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.160'. [ 87.320462][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 87.340486][ T6490] netlink: 'syz.2.163': attribute type 11 has an invalid length. [ 87.374990][ T6490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.163'. [ 87.455880][ T6499] netlink: 'syz.4.166': attribute type 5 has an invalid length. [ 87.465692][ T6499] netlink: 'syz.4.166': attribute type 39 has an invalid length. [ 87.613669][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 88.096511][ T6536] bond1 (unregistering): Released all slaves [ 88.170772][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 89.312634][ T6586] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 89.338626][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.223822][ T6590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 90.277841][ T6594] syzkaller0: entered promiscuous mode [ 90.285711][ T6594] syzkaller0: entered allmulticast mode [ 90.507299][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 90.610674][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 90.952458][ T6534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.076427][ T6616] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 91.146529][ T6624] x_tables: duplicate entry at hook 1 [ 91.365986][ T6635] netlink: 'syz.1.200': attribute type 11 has an invalid length. [ 91.456774][ T6639] team0: Device gtp0 is up. Set it down before adding it as a team port [ 91.760416][ T6661] tipc: Started in network mode [ 91.779095][ T6661] tipc: Node identity aaddc28e2463, cluster identity 4711 [ 91.805392][ T6661] tipc: Enabled bearer , priority 0 [ 91.895267][ T6662] syzkaller0: entered promiscuous mode [ 91.898418][ T6671] __nla_validate_parse: 7 callbacks suppressed [ 91.898435][ T6671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.209'. [ 91.900785][ T6662] syzkaller0: entered allmulticast mode [ 91.901411][ T6662] tipc: Resetting bearer [ 91.935514][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.943655][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.961363][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 91.993148][ T6662] tipc: Resetting bearer [ 92.595875][ T6701] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 92.603767][ T6701] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 92.705155][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 93.235234][ T6662] tipc: Disabling bearer [ 93.289477][ T10] tipc: Node number set to 2394866318 [ 93.421500][ T6712] block nbd0: not configured, cannot reconfigure [ 93.514310][ T6712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'. [ 93.752893][ T6730] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 93.787245][ T6730] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 93.800095][ T6732] netlink: 'syz.4.227': attribute type 16 has an invalid length. [ 93.833654][ T6732] netlink: 'syz.4.227': attribute type 17 has an invalid length. [ 93.852025][ T945] IPVS: starting estimator thread 0... [ 93.927990][ T6730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.939290][ T6741] IPVS: sh: FWM 3 0x00000003 - no destination available [ 93.952830][ T6738] IPVS: using max 35 ests per chain, 84000 per kthread [ 94.023172][ T6732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.091706][ T6740] bond2: (slave geneve2): making interface the new active one [ 94.113464][ T6740] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 94.205260][ T6514] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 94.235121][ T4872] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 94.305424][ T6765] delete_channel: no stack [ 94.340157][ T6514] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 94.383290][ T6761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.232'. [ 94.393373][ T6761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.232'. [ 94.416292][ T6514] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 94.950564][ T6790] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 95.574728][ T6778] team0: Device macvlan2 is already an upper device of the team interface [ 95.617532][ T6792] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.241'. [ 95.653555][ T6792] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 95.746038][ T6794] syzkaller0: entered promiscuous mode [ 95.753920][ T6794] syzkaller0: entered allmulticast mode [ 95.793853][ T6794] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 95.958833][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'. [ 95.963857][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 95.977236][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'. [ 96.256565][ T6825] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 96.406677][ T6825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.458892][ T6832] bond1: (slave veth0_to_bond): making interface the new active one [ 96.468427][ T6832] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 96.532230][ T6841] sch_fq: defrate 0 ignored. [ 96.678670][ T6825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.725933][ T6825] bond1: (slave bond2): Enslaving as an active interface with a down link [ 96.768717][ T6853] sctp: [Deprecated]: syz.0.258 (pid 6853) Use of int in max_burst socket option deprecated. [ 96.768717][ T6853] Use struct sctp_assoc_value instead [ 96.932663][ T6855] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.974047][ T6855] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 97.003302][ T6855] gretap1: entered promiscuous mode [ 97.008561][ T6855] gretap1: entered allmulticast mode [ 97.180372][ T6874] team0: Device gtp0 is up. Set it down before adding it as a team port [ 97.240564][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.356524][ T6884] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 97.404602][ T6881] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 97.664227][ T6903] __nla_validate_parse: 4 callbacks suppressed [ 97.664244][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 98.028230][ T6918] netlink: 'syz.2.276': attribute type 3 has an invalid length. [ 98.070708][ T6918] netlink: 766 bytes leftover after parsing attributes in process `syz.2.276'. [ 98.226955][ T6929] IPVS: length: 173 != 8 [ 98.383992][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 98.402108][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.280'. [ 98.433112][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 98.455019][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 98.471642][ T6929] bridge0: entered promiscuous mode [ 98.480504][ T6941] netlink: 188 bytes leftover after parsing attributes in process `syz.0.284'. [ 98.491234][ T6929] bridge0: entered allmulticast mode [ 98.688247][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 98.858332][ T6964] only policy match revision 0 supported [ 98.858351][ T6964] unable to load match [ 99.006383][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 99.035573][ T6969] netlink: 96 bytes leftover after parsing attributes in process `syz.1.289'. [ 99.076633][ T6969] 8021q: VLANs not supported on ip_vti0 [ 99.129274][ T6974] Bluetooth: MGMT ver 1.23 [ 99.133334][ T4872] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.313835][ T6980] netlink: 'syz.3.291': attribute type 21 has an invalid length. [ 99.527455][ T6986] syzkaller1: entered promiscuous mode [ 99.534069][ T6986] syzkaller1: entered allmulticast mode [ 99.895445][ T7003] can: request_module (can-proto-0) failed. [ 99.973548][ T7019] netlink: 'syz.2.302': attribute type 11 has an invalid length. [ 100.077046][ T7024] FAULT_INJECTION: forcing a failure. [ 100.077046][ T7024] name failslab, interval 1, probability 0, space 0, times 1 [ 100.093607][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(full) [ 100.093643][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.093660][ T7024] Call Trace: [ 100.093666][ T7024] [ 100.093673][ T7024] dump_stack_lvl+0xe8/0x150 [ 100.093697][ T7024] should_fail_ex+0x412/0x560 [ 100.093721][ T7024] should_failslab+0xa8/0x100 [ 100.093741][ T7024] ? skb_clone+0x212/0x3a0 [ 100.093761][ T7024] kmem_cache_alloc_noprof+0x87/0x650 [ 100.093779][ T7024] ? __netlink_lookup+0xc6/0x8b0 [ 100.093804][ T7024] skb_clone+0x212/0x3a0 [ 100.093826][ T7024] __netlink_deliver_tap+0x404/0x850 [ 100.093853][ T7024] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.093870][ T7024] netlink_deliver_tap+0x19c/0x1b0 [ 100.093886][ T7024] netlink_unicast+0x7e3/0x9b0 [ 100.093914][ T7024] ? __pfx_netlink_unicast+0x10/0x10 [ 100.093936][ T7024] ? netlink_sendmsg+0x650/0xb40 [ 100.093950][ T7024] ? skb_put+0x11b/0x210 [ 100.093971][ T7024] netlink_sendmsg+0x813/0xb40 [ 100.093993][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.094012][ T7024] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.094033][ T7024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.094055][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.094070][ T7024] ____sys_sendmsg+0xa68/0xad0 [ 100.094090][ T7024] ? __might_fault+0xaf/0x130 [ 100.094114][ T7024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.094142][ T7024] ? import_iovec+0x73/0xa0 [ 100.094162][ T7024] ___sys_sendmsg+0x2a5/0x360 [ 100.094181][ T7024] ? __lock_acquire+0x6b5/0x2cf0 [ 100.094202][ T7024] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.094251][ T7024] ? __fget_files+0x2a/0x420 [ 100.094266][ T7024] ? __fget_files+0x3a0/0x420 [ 100.094291][ T7024] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.094312][ T7024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.094340][ T7024] ? __pfx_ksys_write+0x10/0x10 [ 100.094371][ T7024] do_syscall_64+0x14d/0xf80 [ 100.094391][ T7024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.094407][ T7024] ? trace_irq_disable+0x37/0x100 [ 100.094424][ T7024] ? clear_bhb_loop+0x40/0x90 [ 100.094446][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.094462][ T7024] RIP: 0033:0x7f47b8d9bf79 [ 100.094483][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.094496][ T7024] RSP: 002b:00007f47b9c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.094515][ T7024] RAX: ffffffffffffffda RBX: 00007f47b9015fa0 RCX: 00007f47b8d9bf79 [ 100.094527][ T7024] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 100.094537][ T7024] RBP: 00007f47b9c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 100.094546][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.094556][ T7024] R13: 00007f47b9016038 R14: 00007f47b9015fa0 R15: 00007ffc1db94a78 [ 100.094581][ T7024] [ 100.493153][ T7033] netlink: 'syz.0.305': attribute type 16 has an invalid length. [ 100.502164][ T7033] netlink: 'syz.0.305': attribute type 17 has an invalid length. [ 100.555453][ T7036] netlink: 'syz.2.306': attribute type 83 has an invalid length. [ 100.569508][ T7040] openvswitch: netlink: Key 25 has unexpected len 0 expected 16 [ 100.587496][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.594797][ T7033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.603367][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.610574][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.709639][ T7033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.836355][ T7053] Illegal XDP return value 65535 on prog (id 47) dev N/A, expect packet loss! [ 101.348260][ T7079] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 101.480082][ T7079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.532056][ T7088] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 102.099275][ T7108] syzkaller0: entered promiscuous mode [ 102.113088][ T7108] syzkaller0: entered allmulticast mode [ 102.230630][ T7126] bond3: (slave sit0): Device is not bonding slave [ 102.237418][ T7126] bond3: option active_slave: invalid value (sit0) [ 102.264709][ T7126] bond3 (unregistering): Released all slaves [ 103.790611][ T7136] __nla_validate_parse: 3 callbacks suppressed [ 103.790629][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 103.807329][ T7136] bridge: RTM_NEWNEIGH with invalid ether address [ 103.826520][ T7160] veth0: entered promiscuous mode [ 104.022961][ T7160] veth0: left promiscuous mode [ 104.132631][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 104.159078][ T7207] nbd: must specify a device to reconfigure [ 105.049122][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 105.312494][ T7234] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 105.322495][ T7234] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 105.518025][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 105.660857][ T7269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.784804][ T7314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.354'. [ 105.798972][ T7318] netlink: 168 bytes leftover after parsing attributes in process `syz.1.355'. [ 105.992009][ T7328] netlink: 'syz.3.359': attribute type 2 has an invalid length. [ 106.016147][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 106.063516][ T7328] : entered promiscuous mode [ 106.147927][ T7332] syzkaller0: entered promiscuous mode [ 106.172319][ T7332] syzkaller0: entered allmulticast mode [ 106.217535][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.361'. [ 106.708634][ T7362] netlink: 164 bytes leftover after parsing attributes in process `syz.1.368'. [ 106.723553][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 106.854147][ T7367] pimreg: entered allmulticast mode [ 106.913150][ T7372] tipc: Enabling of bearer rejected, failed to enable media [ 107.200915][ T7391] netlink: 'syz.0.380': attribute type 11 has an invalid length. [ 107.221489][ T7393] sock: sock_timestamping_bind_phc: sock not bind to device [ 107.407044][ T7398] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.422698][ T7402] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 107.454134][ T7398] gretap1: entered promiscuous mode [ 107.459395][ T7398] gretap1: entered allmulticast mode [ 107.758386][ T7419] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 107.799023][ T7419] bond0: (slave wlan1): Opening slave failed [ 107.990239][ T7438] syzkaller0: entered promiscuous mode [ 108.005902][ T7438] syzkaller0: entered allmulticast mode [ 108.763738][ T7469] netlink: ct family unspecified [ 108.797460][ T7467] syzkaller0: entered promiscuous mode [ 108.817417][ T7467] syzkaller0: entered allmulticast mode [ 108.904629][ T7478] __nla_validate_parse: 8 callbacks suppressed [ 108.904648][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 108.927984][ T7478] netlink: 'syz.0.404': attribute type 1 has an invalid length. [ 108.939584][ T7478] netlink: 280 bytes leftover after parsing attributes in process `syz.0.404'. [ 109.378067][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 109.458829][ T7508] vlan2: entered allmulticast mode [ 109.507285][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 109.785791][ T7522] erspan0: entered promiscuous mode [ 109.897744][ T7530] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 110.079482][ T7535] bond1: (slave gretap2): making interface the new active one [ 110.127914][ T7535] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 110.216781][ T7534] x_tables: unsorted entry at hook 2 [ 110.237706][ T7554] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 110.304108][ T7512] infiniband : set down [ 110.318959][ T7512] infiniband : added ipvlan0 [ 110.410805][ T7512] RDS/IB: : added [ 110.448532][ T7512] smc: adding ib device  with port count 1 [ 110.483184][ T7512] smc: ib device  port 1 has no pnetid [ 110.491661][ T7566] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 110.590834][ T7566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.620984][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 110.633010][ T7572] bond3: (slave geneve3): making interface the new active one [ 110.643457][ T7572] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 110.726999][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 110.989557][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 110.993477][ T7598] openvswitch: netlink: IP tunnel dst address not specified [ 111.022856][ T7596] syzkaller0: entered promiscuous mode [ 111.028373][ T7596] syzkaller0: entered allmulticast mode [ 111.035928][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 111.309479][ T7605] gre0: entered promiscuous mode [ 111.317246][ T7605] gre0: entered allmulticast mode [ 111.521625][ T7612] netlink: 'syz.0.448': attribute type 5 has an invalid length. [ 111.762860][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 111.826724][ T7625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.829377][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 111.872577][ T7631] veth0_to_bond: entered allmulticast mode [ 111.897223][ T1101] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 111.919022][ T1101] bond1: now running without any active interface! [ 112.603036][ T7670] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 112.634439][ T7670] ieee802154 phy1 wpan1: encryption failed: -22 [ 112.743141][ T7675] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 112.778081][ T7677] syzkaller0: entered promiscuous mode [ 112.799900][ T7677] syzkaller0: entered allmulticast mode [ 112.838306][ T7679] vlan2: entered promiscuous mode [ 112.858374][ T7679] bridge0: entered promiscuous mode [ 112.945145][ T7683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.975434][ T7683] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 113.020438][ T7689] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 113.133557][ T7693] gretap1: entered promiscuous mode [ 113.162703][ T7693] bond4: (slave gretap1): making interface the new active one [ 113.193780][ T7693] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 113.304950][ T7689] macvlan2: entered promiscuous mode [ 113.330009][ T7689] macvlan2: entered allmulticast mode [ 113.341751][ T7689] bond4: entered promiscuous mode [ 113.370065][ T7689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.388414][ T7689] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 113.411330][ T7689] bond4: left promiscuous mode [ 113.610391][ T7715] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.665025][ T7715] SET target dimension over the limit! [ 113.840319][ T7725] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 113.852319][ T7725] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 113.913122][ T7729] syzkaller1: entered promiscuous mode [ 113.918658][ T7729] syzkaller1: entered allmulticast mode [ 114.276283][ T7739] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 114.332124][ T7743] __nla_validate_parse: 5 callbacks suppressed [ 114.332143][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 114.354114][ T7739] veth0_vlan: left promiscuous mode [ 114.389613][ T7739] veth0_vlan: entered promiscuous mode [ 114.427808][ T7743] netlink: 176 bytes leftover after parsing attributes in process `syz.2.486'. [ 114.440802][ T7739] team0: Device veth0_vlan failed to register rx_handler [ 114.440847][ T7743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.486'. [ 114.462442][ T7753] netlink: 788 bytes leftover after parsing attributes in process `syz.0.488'. [ 114.544457][ T7760] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 114.554236][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.562915][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.622907][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.630240][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.638626][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.645864][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.714317][ T7760] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.001539][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.500'. [ 115.361705][ T7806] tap0: tun_chr_ioctl cmd 2148553947 [ 115.406993][ T7807] netlink: 'syz.2.506': attribute type 21 has an invalid length. [ 115.415779][ T7807] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 115.610988][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.513'. [ 115.665129][ T7826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.513'. [ 116.111249][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.157713][ T7862] syzkaller0: entered promiscuous mode [ 116.171960][ T7862] syzkaller0: entered allmulticast mode [ 116.627459][ T7895] netlink: 104 bytes leftover after parsing attributes in process `syz.2.535'. [ 116.801138][ T7907] trusted_key: syz.1.537 sent an empty control message without MSG_MORE. [ 117.106173][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 117.500499][ T7949] netlink: 'syz.0.542': attribute type 6 has an invalid length. [ 117.508334][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 117.550938][ T7940] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.559303][ T7949] netlink: 'syz.0.542': attribute type 6 has an invalid length. [ 117.568458][ T7940] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.583651][ T7940] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.603420][ T7940] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.978788][ T7960] vlan1: entered allmulticast mode [ 117.984338][ T7960] veth0_vlan: entered allmulticast mode [ 118.008950][ T7963] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 118.150459][ T7969] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 118.190773][ T7965] veth3: entered promiscuous mode [ 118.313540][ T7977] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 118.572816][ T7994] netlink: 'syz.0.553': attribute type 3 has an invalid length. [ 118.711603][ T8007] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 118.721628][ T8006] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 119.047731][ T8025] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 119.086855][ T8030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.139002][ T8025] syzkaller0: entered promiscuous mode [ 119.144715][ T8025] syzkaller0: entered allmulticast mode [ 121.120063][ T8094] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 121.143331][ T8097] team0: Port device team_slave_0 removed [ 121.390940][ T8109] netlink: 'syz.0.588': attribute type 30 has an invalid length. [ 121.426299][ T8110] __nla_validate_parse: 10 callbacks suppressed [ 121.426316][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.444312][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 121.576911][ T8120] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 121.664101][ T8120] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.210755][ T8154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.444621][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 122.458400][ T8170] xt_ipcomp: unknown flags 1D [ 122.465074][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.479666][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 122.491476][ T8172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.524496][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.546387][ T8167] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 122.547833][ T8172] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 122.606109][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.629813][ T8172] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 122.643103][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.816375][ T8188] netlink: 'syz.0.608': attribute type 29 has an invalid length. [ 122.838489][ T8188] netlink: 'syz.0.608': attribute type 29 has an invalid length. [ 122.852823][ T8188] netlink: 500 bytes leftover after parsing attributes in process `syz.0.608'. [ 123.008874][ T8200] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 123.144195][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 124.076145][ T8232] syzkaller1: entered promiscuous mode [ 124.076711][ T8234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.081653][ T8232] syzkaller1: entered allmulticast mode [ 124.098957][ T8232] syzkaller0: entered promiscuous mode [ 124.104835][ T8232] syzkaller0: entered allmulticast mode [ 124.179700][ T8239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.367395][ T8245] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 124.385038][ T8253] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 124.640019][ T8270] openvswitch: netlink: Unknown key attributes 2 [ 124.670619][ T8266] netlink: 'syz.0.633': attribute type 5 has an invalid length. [ 124.701258][ T8273] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 124.866583][ T8284] vxlan0: entered promiscuous mode [ 124.871758][ T8284] vxlan0: entered allmulticast mode [ 124.927924][ T4872] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.952966][ T4872] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.989258][ T8281] syzkaller1: entered promiscuous mode [ 125.001944][ T8281] syzkaller1: entered allmulticast mode [ 125.033681][ T4872] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.043185][ T4872] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.093228][ T8303] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 125.128379][ T8301] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 125.148443][ T8304] gretap3: entered promiscuous mode [ 125.207448][ T8310] ip6gre1: entered promiscuous mode [ 125.670860][ T8335] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 125.684990][ T8335] bond4 (unregistering): Released all slaves [ 125.985895][ T8353] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 126.192016][ T8363] syzkaller0: entered promiscuous mode [ 126.197549][ T8363] syzkaller0: entered allmulticast mode [ 126.360372][ T8380] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 126.383860][ T8382] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 126.417752][ T8380] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 126.513293][ T8391] netlink: 'syz.1.672': attribute type 7 has an invalid length. [ 126.514093][ T8392] x_tables: duplicate entry at hook 1 [ 126.534455][ T8391] netlink: 'syz.1.672': attribute type 7 has an invalid length. [ 126.636989][ T8399] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 126.664564][ T8399] syzkaller0: entered promiscuous mode [ 126.670069][ T8399] syzkaller0: entered allmulticast mode [ 126.789197][ T8404] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 126.811207][ T8404] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 127.232805][ T8440] __nla_validate_parse: 9 callbacks suppressed [ 127.232821][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 127.394347][ T8452] bond2: Unable to set up delay as MII monitoring is disabled [ 127.403569][ T8452] bond2 (unregistering): Released all slaves [ 127.706302][ T8463] xt_policy: output policy not valid in PREROUTING and INPUT [ 127.810931][ T8472] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 127.821614][ T8472] netlink: 'syz.4.698': attribute type 11 has an invalid length. [ 127.830965][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.4.698'. [ 127.853629][ T8472] netlink: 163184 bytes leftover after parsing attributes in process `syz.4.698'. [ 127.910399][ T8474] team0: Port device dummy0 added [ 127.950682][ T8477] batadv_slave_0: entered promiscuous mode [ 127.979710][ T8475] batadv_slave_0: left promiscuous mode [ 128.192967][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.705'. [ 128.221187][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.228868][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.256152][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 128.291351][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 128.338570][ T8508] syzkaller1: entered promiscuous mode [ 128.372196][ T8508] syzkaller1: entered allmulticast mode [ 128.518143][ T8515] atomic_op ffff888054780198 conn xmit_atomic 0000000000000000 [ 128.601477][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'. [ 128.665422][ T8523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.715'. [ 128.909949][ T8538] IPVS: Error joining to the multicast group [ 128.966830][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 129.150447][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 129.162525][ T8560] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 129.213379][ T8562] team0: Device ip6gre1 is of different type [ 129.384386][ T8574] bond2: entered promiscuous mode [ 129.389885][ T8574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.420508][ T8574] bond2: (slave bridge3): making interface the new active one [ 129.428331][ T8574] bridge3: entered promiscuous mode [ 129.437645][ T8574] bridge3: left promiscuous mode [ 129.527226][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.537126][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.546441][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.560130][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.574050][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.737713][ T8586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.110208][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.259529][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 130.638677][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.652455][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.671078][ T8577] bridge_slave_0: entered allmulticast mode [ 130.692953][ T8577] bridge_slave_0: entered promiscuous mode [ 130.706355][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.731348][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.740755][ T8577] bridge_slave_1: entered allmulticast mode [ 130.749620][ T8577] bridge_slave_1: entered promiscuous mode [ 130.818176][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.831606][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.877185][ T8577] team0: Port device team_slave_0 added [ 130.886190][ T8577] team0: Port device team_slave_1 added [ 130.979833][ T8661] vcan0: entered promiscuous mode [ 130.988442][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.996665][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.023290][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.036817][ T8659] tipc: Started in network mode [ 131.045813][ T8659] tipc: Node identity dee87942fb84, cluster identity 4711 [ 131.056312][ T8659] tipc: Enabled bearer , priority 0 [ 131.064596][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.071672][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.099195][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.173039][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.231485][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.243309][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.308955][ T8670] syzkaller0: entered promiscuous mode [ 131.317801][ T8670] syzkaller0: entered allmulticast mode [ 131.330966][ T8669] geneve2: entered promiscuous mode [ 131.336363][ T8669] geneve2: entered allmulticast mode [ 131.360119][ T8672] tipc: Resetting bearer [ 131.408830][ T7307] IPVS: starting estimator thread 0... [ 131.457952][ T8658] tipc: Resetting bearer [ 131.502053][ T8683] IPVS: using max 38 ests per chain, 91200 per kthread [ 131.510689][ T8658] tipc: Disabling bearer [ 131.603968][ T5824] Bluetooth: hci5: command tx timeout [ 131.625147][ T8577] hsr_slave_0: entered promiscuous mode [ 131.632651][ T8577] hsr_slave_1: entered promiscuous mode [ 131.639612][ T8577] debugfs: 'hsr0' already exists in 'hsr' [ 131.646591][ T8577] Cannot create hsr debugfs directory [ 131.742262][ T8696] validate_nla: 6 callbacks suppressed [ 131.742280][ T8696] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 131.864619][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.090504][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.100734][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.125758][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.133958][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.170119][ T8726] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 132.307511][ T8733] x_tables: duplicate underflow at hook 3 [ 132.328676][ T8733] x_tables: duplicate underflow at hook 1 [ 132.379205][ T8577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.411415][ T8577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.437419][ T8577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.457104][ T8577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.716804][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.800173][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.868419][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.875619][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.886950][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916265][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.923820][ T7940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.036866][ T8781] netlink: 'syz.0.782': attribute type 12 has an invalid length. [ 133.381078][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.414075][ T8808] IPv6: addrconf: prefix option has invalid lifetime [ 133.546243][ T8816] netlink: 'syz.0.793': attribute type 12 has an invalid length. [ 133.575205][ T8814] __nla_validate_parse: 15 callbacks suppressed [ 133.575226][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.792'. [ 133.629097][ T8816] bond7: option primary_reselect: invalid value (255) [ 133.656539][ T8816] bond7 (unregistering): Released all slaves [ 133.687656][ T5824] Bluetooth: hci5: command tx timeout [ 133.990871][ T8577] veth0_vlan: entered promiscuous mode [ 134.047114][ T8841] xt_limit: Overflow, try lower: 271964/0 [ 134.049483][ T8577] veth1_vlan: entered promiscuous mode [ 134.138825][ T8577] veth0_macvtap: entered promiscuous mode [ 134.167698][ T8844] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 134.188212][ T8577] veth1_macvtap: entered promiscuous mode [ 134.345883][ T8849] bond4: (slave gretap1): making interface the new active one [ 134.374453][ T8849] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 134.436147][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.524370][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.605919][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.632183][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 134.650097][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.692363][ T8868] hsr_slave_0 (unregistering): left promiscuous mode [ 134.717175][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.727098][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.874401][ T8882] netlink: 'syz.4.813': attribute type 3 has an invalid length. [ 134.894914][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 134.931566][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'. [ 134.988539][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.007874][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.120363][ T6514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.138070][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 135.143923][ T6514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.149659][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.169946][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.280691][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.821'. [ 135.493614][ T8914] xt_hashlimit: size too large, truncated to 1048576 [ 135.528653][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 135.550626][ T8913] syzkaller0: entered promiscuous mode [ 135.577130][ T8913] syzkaller0: entered allmulticast mode [ 135.741980][ T8928] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 135.767815][ T5824] Bluetooth: hci5: command tx timeout [ 136.028430][ T8937] dummy0: entered allmulticast mode [ 136.053023][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 136.103407][ T8939] netlink: 'syz.0.831': attribute type 9 has an invalid length. [ 136.163269][ T8937] veth0_to_hsr: entered promiscuous mode [ 136.179915][ T8937] veth0_to_hsr: entered allmulticast mode [ 136.257241][ T8950] netlink: 56 bytes leftover after parsing attributes in process `syz.0.837'. [ 136.267072][ T8950] netlink: 56 bytes leftover after parsing attributes in process `syz.0.837'. [ 136.298352][ T8950] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 136.326407][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.361690][ T8950] bridge_slave_1: left allmulticast mode [ 136.387298][ T8950] bridge_slave_1: left promiscuous mode [ 136.398059][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.398533][ T8961] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 136.418870][ T8950] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.591511][ T8961] bond3: entered promiscuous mode [ 136.615135][ T8961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.695457][ T8965] bond3: (slave bridge3): making interface the new active one [ 136.713310][ T8965] bridge3: entered promiscuous mode [ 136.728779][ T8965] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 137.344167][ T9019] validate_nla: 2 callbacks suppressed [ 137.344181][ T9019] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 137.344851][ T9008] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.353269][ T9019] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 137.441099][ T9008] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.463125][ T9024] x_tables: duplicate underflow at hook 2 [ 137.509484][ T9008] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.592811][ T9008] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.607771][ T9035] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 137.815168][ T6514] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.842977][ T5824] Bluetooth: hci5: command tx timeout [ 137.862430][ T6514] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.874681][ T9043] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 137.898278][ T48] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.926123][ T48] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.976073][ T9052] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 138.031043][ T9052] bond5: entered promiscuous mode [ 138.051180][ T9052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.143966][ T9052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.184286][ T9052] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 138.211220][ T9052] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 138.224437][ T9052] bond5: (slave vti0): making interface the new active one [ 138.262812][ T9052] vti0: entered promiscuous mode [ 138.295630][ T9052] bond5: (slave vti0): Enslaving as an active interface with an up link [ 138.752363][ T9090] __nla_validate_parse: 4 callbacks suppressed [ 138.752382][ T9090] netlink: 52 bytes leftover after parsing attributes in process `syz.0.877'. [ 138.771839][ T9088] netlink: 104 bytes leftover after parsing attributes in process `syz.5.876'. [ 139.087320][ T9110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.207583][ T9110] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.254616][ T6514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.292564][ T6514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.409882][ T6514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.437556][ T6514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.582867][ T6514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.644812][ T6514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.803011][ T9156] xt_l2tp: missing protocol rule (udp|l2tpip) [ 139.812669][ T6514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.825501][ T6514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.854357][ T9159] syzkaller0: entered promiscuous mode [ 139.859895][ T9159] syzkaller0: entered allmulticast mode [ 139.923585][ T5821] Bluetooth: hci5: command tx timeout [ 139.925191][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 139.988234][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.024770][ T9146] team0: Port device batadv1 added [ 140.116739][ T9174] netlink: 120 bytes leftover after parsing attributes in process `syz.0.894'. [ 140.133001][ T9174] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 140.154440][ T9174] netlink: 64 bytes leftover after parsing attributes in process `syz.0.894'. [ 140.235047][ T9176] C: renamed from lo [ 140.251298][ T9176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 140.294974][ T6514] bridge_slave_1: left allmulticast mode [ 140.309631][ T6514] bridge_slave_1: left promiscuous mode [ 140.333404][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.405674][ T6514] bridge_slave_0: left allmulticast mode [ 140.423440][ T6514] bridge_slave_0: left promiscuous mode [ 140.429788][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.898'. [ 140.451131][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.846966][ T6514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.858282][ T6514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.868530][ T6514] bond0 (unregistering): Released all slaves [ 140.915147][ T9195] dvmrp0: entered allmulticast mode [ 140.950223][ T6514] : left promiscuous mode [ 141.107854][ T9221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.165215][ T9222] tipc: Started in network mode [ 141.192832][ T9222] tipc: Node identity a6a98d68b0d3, cluster identity 4711 [ 141.200135][ T9222] tipc: Enabled bearer , priority 0 [ 141.228200][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 141.385846][ T9229] bond1: option xmit_hash_policy: invalid value (64) [ 141.395921][ T9229] bond1 (unregistering): Released all slaves [ 141.435952][ T9222] tipc: Disabling bearer [ 141.599020][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 141.662618][ T9251] macsec1: entered promiscuous mode [ 141.668652][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.913'. [ 141.682838][ T9251] bridge0: entered promiscuous mode [ 141.699037][ T9251] macsec1: entered allmulticast mode [ 141.711266][ T9251] bridge0: entered allmulticast mode [ 141.726284][ T9251] bridge0: port 3(macsec1) entered blocking state [ 141.739314][ T9251] bridge0: port 3(macsec1) entered disabled state [ 141.756523][ T9251] bridge0: left allmulticast mode [ 141.778440][ T9251] bridge0: left promiscuous mode [ 142.268767][ T9289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.920'. [ 142.526094][ T6514] hsr_slave_0: left promiscuous mode [ 142.536009][ T6514] hsr_slave_1: left promiscuous mode [ 142.551019][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.559873][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.575434][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.584147][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.622467][ T6514] veth0_macvtap: left promiscuous mode [ 142.629993][ T6514] veth1_vlan: left promiscuous mode [ 142.643066][ T6514] veth0_vlan: left promiscuous mode [ 142.859529][ T7938] smc: removing ib device  [ 142.957503][ T6514] team0 (unregistering): Port device team_slave_1 removed [ 142.980900][ T6514] team0 (unregistering): Port device team_slave_0 removed [ 144.413300][ T9376] __nla_validate_parse: 7 callbacks suppressed [ 144.413318][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 144.449025][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 145.136491][ T9399] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 145.295220][ T9405] batadv1: entered allmulticast mode [ 145.438308][ T9407] ip6gre1: entered allmulticast mode [ 145.504503][ T9417] Bluetooth: MGMT ver 1.23 [ 145.509090][ T9417] Bluetooth: hci1: too big key_count value 32778 [ 145.599240][ T9417] Bluetooth: hci1: too big key_count value 32778 [ 145.607038][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 145.653058][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a16d400: rx timeout, send abort [ 145.663152][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a16d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.670934][ T9422] IPVS: set_ctl: invalid protocol: 94 172.30.1.5:20004 [ 145.689623][ T9431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.394724][ T6514] IPVS: stop unused estimator thread 0... [ 146.620896][ T9465] syzkaller0: entered promiscuous mode [ 146.626561][ T9465] syzkaller0: entered allmulticast mode [ 148.210185][ T9477] syzkaller0: entered promiscuous mode [ 148.215954][ T9477] syzkaller0: entered allmulticast mode [ 148.261310][ T9488] tipc: Started in network mode [ 148.303905][ T9488] tipc: Node identity 8aaa9b1cbae8, cluster identity 4711 [ 148.311405][ T9488] tipc: Enabled bearer , priority 0 [ 148.337646][ T9476] tipc: Resetting bearer [ 148.369165][ T9476] tipc: Disabling bearer [ 148.384503][ T9499] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 148.492674][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 148.502092][ T9503] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 148.520922][ T9503] netlink: 'syz.1.965': attribute type 2 has an invalid length. [ 148.567063][ T9511] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.967'. [ 148.577372][ T9511] netlink: Conntrack attr has 3 unknown bytes [ 148.601117][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.969'. [ 148.753683][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 148.867122][ T9535] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 148.900458][ T9535] bridge_slave_1: left allmulticast mode [ 148.927252][ T9535] bridge_slave_1: left promiscuous mode [ 148.961079][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.098344][ T9535] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 149.146094][ T9552] ip6t_srh: unknown srh match flags 4000 [ 149.306156][ T9559] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 149.420889][ T9569] netlink: 'syz.5.980': attribute type 1 has an invalid length. [ 149.438903][ T9570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.480344][ T9546] syzkaller0: entered promiscuous mode [ 149.502026][ T9546] syzkaller0: entered allmulticast mode [ 149.700131][ T9579] xt_CT: No such helper "syz1" [ 151.339863][ T9609] netlink: 'syz.1.988': attribute type 12 has an invalid length. [ 151.443945][ T9638] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.990'. [ 151.459087][ T9639] bond0: entered allmulticast mode [ 151.477586][ T9639] bond_slave_0: entered allmulticast mode [ 151.486540][ T9639] bond_slave_1: entered allmulticast mode [ 151.619987][ T9646] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 151.702180][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 151.741430][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 151.801251][ T9658] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.994'. [ 151.827243][ T9648] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.994'. [ 151.981455][ T9677] syzkaller0: entered promiscuous mode [ 152.019211][ T9677] syzkaller0: entered allmulticast mode [ 152.042155][ T9682] TC_ACT_REPEAT abuse ? [ 152.258770][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 152.325211][ T9691] netlink: 'syz.0.1003': attribute type 7 has an invalid length. [ 152.361910][ T9691] netlink: 'syz.0.1003': attribute type 8 has an invalid length. [ 152.393359][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 152.799357][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 152.834277][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 152.856493][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1010'. [ 152.942041][ T9732] netlink: 'syz.5.1010': attribute type 17 has an invalid length. [ 153.058540][ T9738] syzkaller0: entered promiscuous mode [ 153.065936][ T9738] syzkaller0: entered allmulticast mode [ 153.356326][ T9757] GUP no longer grows the stack in syz.1.1016 (9757): 200000003000-20000000a000 (200000001000) [ 153.396447][ T9757] CPU: 0 UID: 0 PID: 9757 Comm: syz.1.1016 Not tainted syzkaller #0 PREEMPT(full) [ 153.396474][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.396486][ T9757] Call Trace: [ 153.396494][ T9757] [ 153.396502][ T9757] dump_stack_lvl+0xe8/0x150 [ 153.396543][ T9757] __get_user_pages+0x2453/0x29d0 [ 153.396586][ T9757] ? __gup_longterm_locked+0xc4e/0x1630 [ 153.396606][ T9757] ? down_read_killable+0x1bb/0x340 [ 153.396635][ T9757] ? try_get_folio+0xec/0x650 [ 153.396661][ T9757] __gup_longterm_locked+0xdcf/0x1630 [ 153.396707][ T9757] gup_fast_fallback+0x1d82/0x22e0 [ 153.396759][ T9757] ? __pfx_gup_fast_fallback+0x10/0x10 [ 153.396781][ T9757] ? is_valid_gup_args+0x11f/0x200 [ 153.396803][ T9757] ? get_user_pages_fast+0x4d/0xb0 [ 153.396826][ T9757] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 153.396850][ T9757] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 153.396875][ T9757] iov_iter_get_pages2+0x5e/0xa0 [ 153.396897][ T9757] __se_sys_vmsplice+0x7b3/0x1490 [ 153.396930][ T9757] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 153.396950][ T9757] ? __pfx_futex_wake+0x10/0x10 [ 153.396979][ T9757] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.397069][ T9757] do_syscall_64+0x14d/0xf80 [ 153.397093][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.397118][ T9757] ? trace_irq_disable+0x37/0x100 [ 153.397140][ T9757] ? clear_bhb_loop+0x40/0x90 [ 153.397165][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.397184][ T9757] RIP: 0033:0x7fd1add9bf79 [ 153.397211][ T9757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.397227][ T9757] RSP: 002b:00007fd1aec62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 153.397254][ T9757] RAX: ffffffffffffffda RBX: 00007fd1ae015fa0 RCX: 00007fd1add9bf79 [ 153.397268][ T9757] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 153.397281][ T9757] RBP: 00007fd1ade327e0 R08: 0000000000000000 R09: 0000000000000000 [ 153.397293][ T9757] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 153.397304][ T9757] R13: 00007fd1ae016038 R14: 00007fd1ae015fa0 R15: 00007ffe9754e048 [ 153.397336][ T9757] [ 153.683322][ T9771] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 153.697970][ T9771] bond2 (unregistering): Released all slaves [ 154.027984][ T9788] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 154.048180][ T9785] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 154.175147][ T9788] bond7: entered promiscuous mode [ 154.195053][ T9788] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.218612][ T9797] vlan3: entered allmulticast mode [ 154.226695][ T9797] geneve1: entered allmulticast mode [ 154.302971][ T9800] syzkaller0: entered promiscuous mode [ 154.308527][ T9800] syzkaller0: entered allmulticast mode [ 154.810531][ T9841] netlink: Unknown conntrack attr (type=2304, max=9) [ 154.838305][ T9812] delete_channel: no stack [ 154.935704][ T9846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.164450][ T9867] netlink: 'syz.4.1040': attribute type 5 has an invalid length. [ 155.239975][ T9872] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 155.273378][ T9872] syzkaller0: entered promiscuous mode [ 155.288672][ T9872] syzkaller0: entered allmulticast mode [ 155.490412][ T9891] : entered promiscuous mode [ 155.527549][ T9892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.640908][ T9902] netlink: 'syz.5.1051': attribute type 1 has an invalid length. [ 155.802466][ T9911] xt_CT: No such helper "snmp_trap" [ 155.854737][ T9915] x_tables: duplicate underflow at hook 3 [ 156.051153][ T9923] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 156.063424][ T9923] syzkaller0: entered promiscuous mode [ 156.068937][ T9923] syzkaller0: entered allmulticast mode [ 156.316511][ T9939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.324124][ T9939] IPv6: NLM_F_CREATE should be set when creating new route [ 156.461133][ T9942] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 156.502608][ T9950] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 156.618943][ T9958] __nla_validate_parse: 13 callbacks suppressed [ 156.618963][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 156.709584][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 156.784832][ T9967] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 156.821263][ T9969] batadv_slave_1: entered promiscuous mode [ 156.879562][ T9968] batadv_slave_1: left promiscuous mode [ 156.916367][ T9973] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 157.347432][T10006] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 157.385356][T10006] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 157.612928][T10020] netlink: 'syz.0.1088': attribute type 4 has an invalid length. [ 157.711013][T10025] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 157.798246][T10030] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1094'. [ 157.819687][T10033] netlink: 'syz.1.1093': attribute type 9 has an invalid length. [ 157.828521][T10033] netlink: 'syz.1.1093': attribute type 11 has an invalid length. [ 157.836634][T10033] netlink: 'syz.1.1093': attribute type 12 has an invalid length. [ 157.848177][T10033] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1093'. [ 158.045419][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 158.057059][T10046] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1098'. [ 158.148575][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1099'. [ 158.193760][T10060] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 158.210487][T10060] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 158.285286][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 158.314745][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'. [ 158.346120][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'. [ 158.411474][T10065] team_slave_1: entered promiscuous mode [ 158.417475][T10065] team_slave_1: entered allmulticast mode [ 158.615554][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.724525][T10086] syzkaller0: entered allmulticast mode [ 158.739302][T10083] netlink: 'syz.4.1111': attribute type 4 has an invalid length. [ 158.766239][T10078] syzkaller0 (unregistering): left allmulticast mode [ 159.594531][T10138] syzkaller0: entered promiscuous mode [ 159.600020][T10138] syzkaller0: entered allmulticast mode [ 160.838837][T10159] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 160.924249][T10165] netlink: 'syz.5.1131': attribute type 1 has an invalid length. [ 161.886613][T10227] syzkaller0: entered promiscuous mode [ 161.894667][T10227] syzkaller0: entered allmulticast mode [ 162.389297][T10262] __nla_validate_parse: 5 callbacks suppressed [ 162.389315][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1148'. [ 162.391464][T10266] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 162.501900][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1151'. [ 162.516836][T10271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1152'. [ 162.527205][T10271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1152'. [ 162.557088][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1151'. [ 162.816355][T10286] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1159'. [ 163.035799][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 163.096873][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 163.170035][T10313] delete_channel: no stack [ 163.178810][T10317] pim6reg1: entered promiscuous mode [ 163.186005][T10317] pim6reg1: entered allmulticast mode [ 163.199890][T10313] delete_channel: no stack [ 163.291499][T10325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 163.394451][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.430016][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 163.465811][T10320] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.518795][T10343] netlink: 'syz.5.1174': attribute type 1 has an invalid length. [ 163.541725][T10325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1170'. [ 163.623650][T10343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.847340][T10353] bond8: invalid ARP target 0.0.0.0 specified for addition [ 163.855485][T10353] bond8: option arp_ip_target: invalid value (0) [ 163.874520][T10353] bond8 (unregistering): Released all slaves [ 163.990777][T10361] syzkaller0: entered promiscuous mode [ 164.008023][T10361] syzkaller0: entered allmulticast mode [ 164.677138][T10394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.678129][T10394] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 165.429045][T10393] geneve2: entered promiscuous mode [ 165.445802][T10393] geneve2: entered allmulticast mode [ 165.774807][T10416] netlink: 'syz.1.1196': attribute type 3 has an invalid length. [ 165.897030][T10433] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 166.027284][T10436] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 166.067074][T10436] syzkaller0: entered promiscuous mode [ 166.074316][T10436] syzkaller0: entered allmulticast mode [ 166.098142][T10440] netlink: 'syz.0.1201': attribute type 11 has an invalid length. [ 166.107507][T10440] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 166.115442][T10440] netlink: 'syz.0.1201': attribute type 5 has an invalid length. [ 166.124263][T10440] netlink: 'syz.0.1201': attribute type 6 has an invalid length. [ 166.328082][T10456] netlink: 'syz.2.1207': attribute type 3 has an invalid length. [ 166.492434][T10468] FAULT_INJECTION: forcing a failure. [ 166.492434][T10468] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.607269][T10468] CPU: 1 UID: 0 PID: 10468 Comm: syz.0.1209 Not tainted syzkaller #0 PREEMPT(full) [ 166.607294][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.607304][T10468] Call Trace: [ 166.607311][T10468] [ 166.607318][T10468] dump_stack_lvl+0xe8/0x150 [ 166.607346][T10468] should_fail_ex+0x412/0x560 [ 166.607380][T10468] _copy_from_user+0x2d/0xb0 [ 166.607398][T10468] __sys_bpf+0x229/0x950 [ 166.607421][T10468] ? __pfx___sys_bpf+0x10/0x10 [ 166.607455][T10468] ? ksys_write+0x242/0x270 [ 166.607477][T10468] ? __pfx_ksys_write+0x10/0x10 [ 166.607504][T10468] __x64_sys_bpf+0x7c/0x90 [ 166.607522][T10468] do_syscall_64+0x14d/0xf80 [ 166.607543][T10468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.607558][T10468] ? trace_irq_disable+0x37/0x100 [ 166.607576][T10468] ? clear_bhb_loop+0x40/0x90 [ 166.607596][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.607612][T10468] RIP: 0033:0x7f47b8d9bf79 [ 166.607626][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.607639][T10468] RSP: 002b:00007f47b9c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.607657][T10468] RAX: ffffffffffffffda RBX: 00007f47b9015fa0 RCX: 00007f47b8d9bf79 [ 166.607670][T10468] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 166.607680][T10468] RBP: 00007f47b9c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 166.607691][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.607701][T10468] R13: 00007f47b9016038 R14: 00007f47b9015fa0 R15: 00007ffc1db94a78 [ 166.607729][T10468] [ 167.106578][T10497] netlink: 'syz.0.1213': attribute type 12 has an invalid length. [ 167.126091][T10497] block nbd0: Unsupported socket: should be TCP or UNIX. [ 167.326489][T10510] netlink: 'syz.1.1215': attribute type 11 has an invalid length. [ 167.326489][T10509] netlink: 'syz.1.1215': attribute type 11 has an invalid length. [ 167.517183][T10518] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 167.574786][T10518] syzkaller0: entered promiscuous mode [ 167.580323][T10518] syzkaller0: entered allmulticast mode [ 167.754756][T10528] IPVS: length: 153 != 24 [ 167.781010][T10528] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 167.890237][T10541] FAULT_INJECTION: forcing a failure. [ 167.890237][T10541] name failslab, interval 1, probability 0, space 0, times 0 [ 167.903458][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.5.1224 Not tainted syzkaller #0 PREEMPT(full) [ 167.903482][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.903491][T10541] Call Trace: [ 167.903498][T10541] [ 167.903505][T10541] dump_stack_lvl+0xe8/0x150 [ 167.903531][T10541] should_fail_ex+0x412/0x560 [ 167.903558][T10541] should_failslab+0xa8/0x100 [ 167.903581][T10541] __kmalloc_noprof+0xe8/0x760 [ 167.903602][T10541] ? bpf_test_init+0x9f/0x150 [ 167.903622][T10541] bpf_test_init+0x9f/0x150 [ 167.903640][T10541] bpf_prog_test_run_skb+0x36f/0x1c90 [ 167.903668][T10541] ? __fget_files+0x2a/0x420 [ 167.903684][T10541] ? __fget_files+0x3a0/0x420 [ 167.903698][T10541] ? __fget_files+0x2a/0x420 [ 167.903719][T10541] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 167.903736][T10541] bpf_prog_test_run+0x2c7/0x340 [ 167.903760][T10541] __sys_bpf+0x643/0x950 [ 167.903781][T10541] ? __pfx___sys_bpf+0x10/0x10 [ 167.903822][T10541] ? ksys_write+0x242/0x270 [ 167.903843][T10541] ? __pfx_ksys_write+0x10/0x10 [ 167.903869][T10541] __x64_sys_bpf+0x7c/0x90 [ 167.903887][T10541] do_syscall_64+0x14d/0xf80 [ 167.903906][T10541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.903920][T10541] ? trace_irq_disable+0x37/0x100 [ 167.903937][T10541] ? clear_bhb_loop+0x40/0x90 [ 167.903954][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.903967][T10541] RIP: 0033:0x7f176a79bf79 [ 167.903982][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.903995][T10541] RSP: 002b:00007f176b68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.904012][T10541] RAX: ffffffffffffffda RBX: 00007f176aa15fa0 RCX: 00007f176a79bf79 [ 167.904024][T10541] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 167.904034][T10541] RBP: 00007f176b68b090 R08: 0000000000000000 R09: 0000000000000000 [ 167.904044][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.904052][T10541] R13: 00007f176aa16038 R14: 00007f176aa15fa0 R15: 00007ffe6b7c2588 [ 167.904079][T10541] [ 168.493738][T10561] __nla_validate_parse: 11 callbacks suppressed [ 168.493756][T10561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1229'. [ 168.569205][T10571] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 168.586597][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 168.703679][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 168.752322][ T794] IPVS: starting estimator thread 0... [ 168.777358][T10585] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 168.862608][T10582] IPVS: using max 35 ests per chain, 84000 per kthread [ 168.989344][T10585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.058738][T10598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.069887][T10598] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.082012][T10598] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 169.191529][T10585] veth5: entered promiscuous mode [ 172.005776][T10603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.283778][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 172.393415][T10669] netlink: zone id is out of range [ 172.489332][T10669] netlink: zone id is out of range [ 172.494634][T10669] netlink: zone id is out of range [ 172.499833][T10669] netlink: zone id is out of range [ 172.505823][T10669] netlink: zone id is out of range [ 172.512424][T10669] netlink: zone id is out of range [ 172.517564][T10669] netlink: zone id is out of range [ 172.523104][T10669] netlink: zone id is out of range [ 172.528226][T10669] netlink: zone id is out of range [ 172.533691][T10669] netlink: zone id is out of range [ 172.637707][T10679] netlink: 'syz.5.1259': attribute type 2 has an invalid length. [ 172.780303][T10689] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 172.855788][T10695] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1265'. [ 172.901222][T10694] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1265'. [ 172.986852][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 173.026691][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 173.118012][T10712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.426225][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1277'. [ 173.734548][T10748] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1281'. [ 173.850612][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 174.111602][T10767] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 174.213855][T10767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 174.759134][T10810] netlink: 'syz.4.1300': attribute type 23 has an invalid length. [ 174.857462][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1299'. [ 174.913127][T10818] 8021q: VLANs not supported on caif0 [ 174.970461][T10794] SET target dimension over the limit! [ 175.101692][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 175.111236][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1305'. [ 175.314602][T10850] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 175.323462][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 175.678326][T10868] netlink: 'syz.5.1317': attribute type 11 has an invalid length. [ 175.777040][T10871] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 175.810837][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1320'. [ 175.983946][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1322'. [ 175.997572][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.044730][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.149508][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 176.219171][T10891] sit0: entered promiscuous mode [ 176.251241][T10891] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 176.271353][T10891] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1325'. [ 176.453577][T10913] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 176.501515][T10921] sctp: [Deprecated]: syz.0.1334 (pid 10921) Use of int in max_burst socket option deprecated. [ 176.501515][T10921] Use struct sctp_assoc_value instead [ 176.551656][T10913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.586546][T10914] bond3: (slave veth3): Enslaving as an active interface with a down link [ 176.669756][T10922] syzkaller0: entered promiscuous mode [ 176.675904][T10922] syzkaller0: entered allmulticast mode [ 178.201183][T10953] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 178.226181][T10955] netlink: 'syz.2.1344': attribute type 15 has an invalid length. [ 179.128691][T11014] __nla_validate_parse: 11 callbacks suppressed [ 179.128710][T11014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1358'. [ 179.179051][T11014] net_ratelimit: 40 callbacks suppressed [ 179.179067][T11014] openvswitch: netlink: Key type 31 is not supported [ 179.318131][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1362'. [ 179.489193][T11034] netlink: 4852 bytes leftover after parsing attributes in process `syz.4.1364'. [ 179.552736][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1365'. [ 179.586574][T11037] hsr_slave_0: left promiscuous mode [ 179.600923][T11037] hsr_slave_1: left promiscuous mode [ 179.667624][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1365'. [ 179.890384][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 180.177144][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1373'. [ 180.230955][T11079] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1373'. [ 180.241332][T11079] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1373'. [ 180.251187][T11079] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 180.312759][T11057] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 180.322754][T11057] veth0_vlan: left promiscuous mode [ 180.331152][T11057] veth0_vlan: entered promiscuous mode [ 180.346263][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 180.358624][T11057] team0: Device veth0_vlan failed to register rx_handler [ 180.483925][T11096] netlink: 'syz.5.1379': attribute type 13 has an invalid length. [ 180.492769][T11096] veth0_macvtap: left promiscuous mode [ 180.528982][T11096] macvtap0: entered allmulticast mode [ 180.563540][T11096] macvtap0: refused to change device tx_queue_len [ 180.599256][T11102] netlink: 'syz.0.1381': attribute type 10 has an invalid length. [ 180.630900][T11102] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.694014][T11102] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.813939][T11114] !: renamed from dummy0 [ 181.105731][T11137] netlink: 'syz.5.1392': attribute type 2 has an invalid length. [ 181.590096][T11174] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 181.646888][T11176] nbd: device at index 2 is going down [ 181.789767][T11182] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 181.829213][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 181.914403][T11187] syzkaller0: entered promiscuous mode [ 181.934522][T11187] syzkaller0: entered allmulticast mode [ 182.040799][T11200] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.052918][T11200] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.061146][T11200] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.084227][T11200] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.100336][T11208] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.844290][T11198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.056398][T11247] syzkaller0: entered promiscuous mode [ 183.071936][T11247] syzkaller0: entered allmulticast mode [ 183.273746][T11260] batadv_slave_0: entered promiscuous mode [ 183.463434][T11275] netlink: 'syz.2.1427': attribute type 3 has an invalid length. [ 183.600195][T11259] batadv_slave_0: left promiscuous mode [ 183.727672][T11289] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 183.735936][T11288] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 183.865485][T11291] syzkaller0: entered promiscuous mode [ 183.881921][T11291] syzkaller0: entered allmulticast mode [ 183.922669][T11291] tipc: Started in network mode [ 183.943768][T11291] tipc: Node identity f27c0ad637c, cluster identity 2 [ 183.989846][T11291] tipc: Enabled bearer , priority 0 [ 184.119911][T11290] tipc: Resetting bearer [ 184.145936][T11290] tipc: Disabling bearer [ 184.166593][T11323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.179045][T11325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.380333][T11335] __nla_validate_parse: 16 callbacks suppressed [ 184.380352][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 184.671781][T11359] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 184.680936][T11359] veth1_macvtap: left promiscuous mode [ 184.689066][T11359] team0: Device veth1_macvtap failed to register rx_handler [ 185.093940][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1457'. [ 185.112640][T11379] bridge_slave_1: left allmulticast mode [ 185.118351][T11379] bridge_slave_1: left promiscuous mode [ 185.135580][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.170414][T11379] bridge_slave_0: left promiscuous mode [ 185.182849][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.640559][T11411] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1465'. [ 185.718299][T11411] bridge_slave_0: left allmulticast mode [ 185.765186][T11411] bridge_slave_0: left promiscuous mode [ 185.787007][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.826636][T11411] bond0: (slave bridge_slave_1): Releasing backup interface [ 185.856539][T11411] bond0: (slave bond_slave_0): Releasing backup interface [ 185.885696][T11411] bond0: (slave bond_slave_1): Releasing backup interface [ 185.918868][T11411] team0: Port device team_slave_0 removed [ 185.939841][T11411] team0: Port device team_slave_1 removed [ 185.952883][T11411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.968580][T11411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.997640][T11411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.002595][ T7311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.013761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.022096][T11411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.030793][ T7315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.039435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.055941][T11411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.357417][T11439] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 186.379487][T11439] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 186.396402][T11442] sit1: entered promiscuous mode [ 186.401404][T11442] sit1: entered allmulticast mode [ 186.434705][T11442] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1474'. [ 186.444199][T11442] netlink: 'syz.5.1474': attribute type 2 has an invalid length. [ 186.517653][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 186.541110][T11446] netlink: 'syz.0.1473': attribute type 12 has an invalid length. [ 186.859897][ T794] IPVS: starting estimator thread 0... [ 186.993904][T11479] IPVS: using max 37 ests per chain, 88800 per kthread [ 187.041077][T11487] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 187.072371][T11487] netlink: 'syz.1.1486': attribute type 3 has an invalid length. [ 187.073116][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 187.080137][T11487] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1486'. [ 187.141860][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 187.179788][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1488'. [ 187.355678][T11514] veth0_virt_wifi: default FDB implementation only supports local addresses [ 187.395850][T11514] veth0_virt_wifi: default FDB implementation only supports local addresses [ 187.538870][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.547598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.748255][T11550] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 187.766305][T11550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1498'. [ 188.291284][T11588] ipvlan3: entered promiscuous mode [ 188.417358][T11589] geneve2: left promiscuous mode [ 188.467064][T11589] bond5: left promiscuous mode [ 188.486649][T11589] vti0: left promiscuous mode [ 188.556351][T11589] ipvlan3: left promiscuous mode [ 188.566647][T11199] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.665542][T11199] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.770487][T11199] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.822447][T11199] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.994148][T11625] tipc: Enabled bearer , priority 0 [ 189.086926][T11623] tipc: Disabling bearer [ 189.286107][T11650] netlink: 'syz.5.1518': attribute type 1 has an invalid length. [ 189.475971][T11663] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 189.497285][T11663] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 189.510298][T11667] __nla_validate_parse: 6 callbacks suppressed [ 189.510314][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 189.608270][T11667] bond5: option xmit_hash_policy: invalid value (64) [ 189.640790][T11667] bond5 (unregistering): Released all slaves [ 189.834310][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 190.343232][T11698] !: renamed from dummy0 [ 190.383846][T11702] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 190.395142][T11702] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 190.413170][T11702] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 190.450629][T11705] bond9 (unregistering): Released all slaves [ 190.500065][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1538'. [ 191.069487][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 191.085884][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'. [ 191.113252][T11742] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1546'. [ 191.126587][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 191.177441][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 191.345288][T11764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.348798][T11757] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 191.352743][T11764] IPv6: NLM_F_CREATE should be set when creating new route [ 191.352801][T11764] IPv6: NLM_F_CREATE should be set when creating new route [ 191.365042][T11764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.384418][T11757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1550'. [ 191.406085][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 191.624136][T11784] validate_nla: 1 callbacks suppressed [ 191.624155][T11784] netlink: 'syz.4.1562': attribute type 10 has an invalid length. [ 191.762961][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.771821][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.812612][T11796] syzkaller0: entered promiscuous mode [ 191.842606][T11796] syzkaller0: entered allmulticast mode [ 191.888178][T11802] netlink: 'syz.5.1565': attribute type 62 has an invalid length. [ 192.127326][T11808] syzkaller1: entered promiscuous mode [ 192.144887][T11808] syzkaller1: entered allmulticast mode [ 192.334713][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 192.383498][T11832] sctp: [Deprecated]: syz.0.1574 (pid 11832) Use of int in max_burst socket option. [ 192.383498][T11832] Use struct sctp_assoc_value instead [ 192.440219][T11838] netlink: 'syz.5.1577': attribute type 2 has an invalid length. [ 193.043860][ T7310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.052311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.316533][T11906] x_tables: duplicate entry at hook 3 [ 193.356445][T11902] IPv6: sit1: Disabled Multicast RS [ 193.914753][ T7938] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6c [ 194.304804][T11962] netlink: 'syz.2.1609': attribute type 29 has an invalid length. [ 194.353168][T11962] netlink: 'syz.2.1609': attribute type 29 has an invalid length. [ 194.668541][T11984] __nla_validate_parse: 9 callbacks suppressed [ 194.668559][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 195.008779][T12012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1624'. [ 195.044372][T12012] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 195.187328][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 195.211507][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 195.302382][T12034] syzkaller1: entered promiscuous mode [ 195.322506][T12034] syzkaller1: entered allmulticast mode [ 195.357484][T12034] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1628'. [ 195.729768][T12065] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 195.754245][T12065] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.808673][T12071] pimreg: left allmulticast mode [ 195.836432][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 195.855053][T12073] tc_dump_action: action bad kind [ 195.892491][T12073] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 196.407304][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 196.414349][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 196.421488][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 197.010088][T12152] xt_hashlimit: size too large, truncated to 1048576 [ 197.087744][T12159] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 197.154118][T12153] syzkaller0: entered promiscuous mode [ 197.179463][T12153] syzkaller0: entered allmulticast mode [ 197.228687][T12172] netlink: 'syz.0.1660': attribute type 2 has an invalid length. [ 197.237028][T12172] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1660'. [ 197.336343][T12174] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 197.357626][T12176] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 197.358674][T12174] syzkaller0: entered promiscuous mode [ 197.375957][T12176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1663'. [ 197.381409][T12174] syzkaller0: entered allmulticast mode [ 197.462154][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 197.668279][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 197.790361][T12205] netlink: 'syz.5.1671': attribute type 1 has an invalid length. [ 197.825786][T12205] netlink: 'syz.5.1671': attribute type 1 has an invalid length. [ 197.844303][T12207] sch_tbf: burst 0 is lower than device lo mtu (1031) ! [ 197.962808][T12213] veth1_macvtap: left promiscuous mode [ 197.970184][T12213] macsec0: entered promiscuous mode [ 197.976374][T12213] macsec0: entered allmulticast mode [ 197.986130][T12213] veth1_macvtap: entered promiscuous mode [ 197.994394][T12213] veth1_macvtap: entered allmulticast mode [ 198.001406][T12213] macsec0: left promiscuous mode [ 198.012274][T12213] macsec0: left allmulticast mode [ 198.017900][T12213] veth1_macvtap: left allmulticast mode [ 198.042069][T12219] Unsupported ieee802154 address type: 0 [ 198.085964][T12219] Unsupported ieee802154 address type: 0 [ 198.855532][T12256] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 199.323343][T12281] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.330278][T12281] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.469597][T12295] bridge_slave_0: left allmulticast mode [ 199.523517][T12295] bridge_slave_0: left promiscuous mode [ 199.529334][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.598036][T12295] bridge_slave_1: left allmulticast mode [ 199.609032][T12295] bridge_slave_1: left promiscuous mode [ 199.616905][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.630722][T12295] bond1: (slave veth0_to_bond): Releasing active interface [ 199.639939][T12295] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 199.661392][T12295] bond0: (slave bond_slave_0): Releasing backup interface [ 199.674350][T12295] bond0: (slave bond_slave_1): Releasing backup interface [ 199.685352][T12295] team0: Port device team_slave_0 removed [ 199.692943][T12295] team0: Port device team_slave_1 removed [ 199.698989][T12295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.707620][T12295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.716532][T12295] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 199.776590][T12316] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 199.786201][T12313] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.801884][T12316] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 199.834787][T12317] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 199.859764][T12313] bond3: (slave lo): Enslaving as an active interface with an up link [ 199.868578][T12313] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 199.876624][T12316] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 199.927164][T12316] __nla_validate_parse: 14 callbacks suppressed [ 199.927182][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1701'. [ 199.964322][T12321] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1703'. [ 200.062018][T12323] netlink: 'syz.5.1704': attribute type 1 has an invalid length. [ 200.091514][T12332] sctp: [Deprecated]: syz.4.1708 (pid 12332) Use of int in maxseg socket option. [ 200.091514][T12332] Use struct sctp_assoc_value instead [ 200.105986][T12323] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1704'. [ 200.141646][T12334] netlink: 'syz.1.1706': attribute type 12 has an invalid length. [ 200.278355][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1711'. [ 200.400811][T12359] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 200.416485][T12359] bond5 (unregistering): Released all slaves [ 200.548338][T12359] team0: Device dummy0 failed to register rx_handler [ 200.586349][T12376] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1719'. [ 200.592089][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1718'. [ 200.823152][T12393] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1727'. [ 200.832818][T12393] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1727'. [ 200.833666][T12396] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 200.849952][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'. [ 200.880007][T12398] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1725'. [ 201.107018][T12404] syzkaller0: entered promiscuous mode [ 201.112624][T12404] syzkaller0: entered allmulticast mode [ 202.996906][T12456] validate_nla: 2 callbacks suppressed [ 202.996923][T12456] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 203.048713][T12456] bond5: entered promiscuous mode [ 203.053954][T12456] bond5: entered allmulticast mode [ 203.059515][T12456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.070977][T12456] netlink: 'syz.1.1744': attribute type 6 has an invalid length. [ 203.111245][T12456] bridge6: entered promiscuous mode [ 203.117047][T12456] bridge6: entered allmulticast mode [ 203.123411][T12456] bond5: (slave bridge6): Enslaving as a backup interface with an up link [ 203.153592][ T1101] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.289072][T11188] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 203.341612][T12478] netlink: 'syz.5.1751': attribute type 11 has an invalid length. [ 203.554182][T12494] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 203.583091][T12494] syzkaller0: entered promiscuous mode [ 203.589023][T12494] syzkaller0: entered allmulticast mode [ 203.959836][T12526] netlink: 'syz.4.1768': attribute type 4 has an invalid length. [ 204.003692][T12531] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 204.658865][T12567] netlink: 'syz.1.1779': attribute type 11 has an invalid length. [ 204.702199][T12567] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 205.009342][T12582] __nla_validate_parse: 17 callbacks suppressed [ 205.009361][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 205.051127][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 205.083466][T12588] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 205.093705][T12591] netlink: 'syz.4.1787': attribute type 83 has an invalid length. [ 205.105497][T12588] syzkaller0: entered promiscuous mode [ 205.112573][T12588] syzkaller0: entered allmulticast mode [ 205.138791][T12592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1788'. [ 205.492365][T12609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.508490][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.528988][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 205.539122][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 205.706203][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 205.719694][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 205.921541][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 205.930944][T12616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 206.066150][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 206.072584][T12653] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 206.128944][T12653] syzkaller0: entered promiscuous mode [ 206.157129][T12653] syzkaller0: entered allmulticast mode [ 206.277524][T12665] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 206.299467][T12665] bond10 (unregistering): Released all slaves [ 206.594207][T12678] geneve2: entered promiscuous mode [ 206.599720][T12678] geneve2: entered allmulticast mode [ 206.613508][T11200] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.634841][T11200] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.671843][T11200] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.680690][T11200] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.733564][T12688] netlink: 'syz.0.1814': attribute type 17 has an invalid length. [ 207.589158][T12733] xt_l2tp: v2 sid > 0xffff: 1114112 [ 207.669463][T12735] tipc: Enabled bearer , priority 0 [ 207.706928][T12742] netlink: 'syz.1.1837': attribute type 1 has an invalid length. [ 207.757378][T12727] syzkaller0: entered promiscuous mode [ 207.764162][T12727] syzkaller0: entered allmulticast mode [ 207.770621][T12727] tipc: Resetting bearer [ 207.824711][T12726] tipc: Resetting bearer [ 208.539654][T12762] xt_l2tp: v2 doesn't support IP mode [ 209.147478][T12726] tipc: Disabling bearer [ 209.163158][T12747] bond6: (slave ip6gretap2): making interface the new active one [ 209.171424][T12747] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 209.256949][T12755] syzkaller0: entered promiscuous mode [ 209.281925][T12755] syzkaller0: entered allmulticast mode [ 210.573835][ T794] tipc: Node number set to 3317435094 [ 210.727066][T12796] __nla_validate_parse: 20 callbacks suppressed [ 210.727082][T12796] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1849'. [ 210.740653][T12798] xt_socket: unknown flags 0xe4 [ 210.777862][T12800] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1849'. [ 210.787193][T12796] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1849'. [ 210.900613][T12806] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 210.928616][T12806] team0: Device ipvlan1 failed to register rx_handler [ 211.181156][T12816] netlink: 'syz.5.1858': attribute type 11 has an invalid length. [ 211.224481][T12829] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 211.322768][T12837] syzkaller0: entered promiscuous mode [ 211.328341][T12837] syzkaller0: entered allmulticast mode [ 211.450662][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1865'. [ 211.508618][T12850] IPv6: sit1: Disabled Multicast RS [ 211.519973][T12850] sit1: entered allmulticast mode [ 211.640171][T12857] netlink: 'syz.4.1873': attribute type 26 has an invalid length. [ 211.649568][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 211.668000][T12857] netlink: 'syz.4.1873': attribute type 26 has an invalid length. [ 211.676668][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 211.708434][T12859] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 211.731261][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1872'. [ 211.759212][T12865] @0: renamed from bond_slave_1 (while UP) [ 212.033757][T12886] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 212.249506][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1886'. [ 212.262618][T12894] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 212.284134][T12891] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 212.310440][T12891] syzkaller0: entered promiscuous mode [ 212.325472][T12891] syzkaller0: entered allmulticast mode [ 212.360502][T12894] syzkaller0: entered promiscuous mode [ 212.367150][T12894] syzkaller0: entered allmulticast mode [ 212.377001][T12894] FAULT_INJECTION: forcing a failure. [ 212.377001][T12894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.395081][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.4.1885 Not tainted syzkaller #0 PREEMPT(full) [ 212.395123][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.395132][T12894] Call Trace: [ 212.395139][T12894] [ 212.395146][T12894] dump_stack_lvl+0xe8/0x150 [ 212.395174][T12894] should_fail_ex+0x412/0x560 [ 212.395199][T12894] _copy_from_user+0x2d/0xb0 [ 212.395218][T12894] __copy_msghdr+0x3c5/0x5b0 [ 212.395240][T12894] ___sys_sendmsg+0x213/0x360 [ 212.395258][T12894] ? __lock_acquire+0x6b5/0x2cf0 [ 212.395277][T12894] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.395329][T12894] ? __fget_files+0x2a/0x420 [ 212.395344][T12894] ? __fget_files+0x3a0/0x420 [ 212.395369][T12894] __x64_sys_sendmsg+0x1bd/0x2a0 [ 212.395390][T12894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.395414][T12894] ? __pfx_ksys_write+0x10/0x10 [ 212.395441][T12894] do_syscall_64+0x14d/0xf80 [ 212.395462][T12894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.395476][T12894] ? trace_irq_disable+0x37/0x100 [ 212.395493][T12894] ? clear_bhb_loop+0x40/0x90 [ 212.395513][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.395530][T12894] RIP: 0033:0x7fb9f359bf79 [ 212.395545][T12894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.395560][T12894] RSP: 002b:00007fb9f4522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.395578][T12894] RAX: ffffffffffffffda RBX: 00007fb9f3815fa0 RCX: 00007fb9f359bf79 [ 212.395590][T12894] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 212.395601][T12894] RBP: 00007fb9f4522090 R08: 0000000000000000 R09: 0000000000000000 [ 212.395612][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.395622][T12894] R13: 00007fb9f3816038 R14: 00007fb9f3815fa0 R15: 00007ffc44b1ea08 [ 212.395650][T12894] [ 212.888606][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'. [ 213.000595][T12929] bond10: option xmit_hash_policy: invalid value (64) [ 213.001095][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1897'. [ 213.018668][T12929] bond10 (unregistering): Released all slaves [ 213.061105][T12937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.115532][T12937] bond4 (unregistering): Released all slaves [ 213.257555][T12949] netlink: 'syz.5.1901': attribute type 1 has an invalid length. [ 213.309361][T12949] bond4: entered promiscuous mode [ 213.314931][T12949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.324878][T12947] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 213.343061][T12949] bond4: entered allmulticast mode [ 213.365505][T12947] syzkaller0: entered promiscuous mode [ 213.373398][T12947] syzkaller0: entered allmulticast mode [ 213.441149][T12958] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 213.697951][T12971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.725616][T12974] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 213.744675][T12976] ipt_rpfilter: unknown options [ 213.753645][T12977] netlink: 'syz.5.1912': attribute type 1 has an invalid length. [ 213.794215][T12976] tipc: Enabling of bearer rejected, failed to enable media [ 213.876049][T12983] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.912685][T12983] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 213.928982][T12983] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 213.997382][T12974] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 214.026862][T12974] bond10: (slave vcan0): making interface the new active one [ 214.035520][T12974] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 214.221324][T13007] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 214.238958][T13007] syzkaller0: entered promiscuous mode [ 214.245869][T13007] syzkaller0: entered allmulticast mode [ 214.340902][T13021] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 214.429463][T13025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.540729][T11196] [ 214.543102][T11196] ============================================ [ 214.549252][T11196] WARNING: possible recursive locking detected [ 214.555414][T11196] syzkaller #0 Not tainted [ 214.559823][T11196] -------------------------------------------- [ 214.565949][T11196] kworker/u8:19/11196 is trying to acquire lock: [ 214.572257][T11196] ffff888032002a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 214.581554][T11196] [ 214.581554][T11196] but task is already holding lock: [ 214.588894][T11196] ffff888032002a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 214.598443][T11196] [ 214.598443][T11196] other info that might help us debug this: [ 214.606615][T11196] Possible unsafe locking scenario: [ 214.606615][T11196] [ 214.614061][T11196] CPU0 [ 214.617325][T11196] ---- [ 214.620583][T11196] lock(k-sk_lock-AF_INET6); [ 214.625253][T11196] lock(k-sk_lock-AF_INET6); [ 214.629922][T11196] [ 214.629922][T11196] *** DEADLOCK *** [ 214.629922][T11196] [ 214.638046][T11196] May be due to missing lock nesting notation [ 214.638046][T11196] [ 214.646616][T11196] 4 locks held by kworker/u8:19/11196: [ 214.652057][T11196] #0: ffff88802276a948 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 214.663700][T11196] #1: ffffc90010b37c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 214.676467][T11196] #2: ffff888032002a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 214.686548][T11196] #3: ffff888032002bc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 214.696534][T11196] [ 214.696534][T11196] stack backtrace: [ 214.702407][T11196] CPU: 1 UID: 0 PID: 11196 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 214.702423][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.702433][T11196] Workqueue: krds_cp_wq#9/0 rds_send_worker [ 214.702452][T11196] Call Trace: [ 214.702459][T11196] [ 214.702465][T11196] dump_stack_lvl+0xe8/0x150 [ 214.702483][T11196] print_deadlock_bug+0x279/0x290 [ 214.702499][T11196] __lock_acquire+0x253f/0x2cf0 [ 214.702513][T11196] ? unwind_next_frame+0xa5/0x23c0 [ 214.702529][T11196] ? lock_acquire+0x106/0x330 [ 214.702543][T11196] ? unwind_next_frame+0xa5/0x23c0 [ 214.702557][T11196] ? lock_acquire+0x106/0x330 [ 214.702570][T11196] ? unwind_next_frame+0xa5/0x23c0 [ 214.702585][T11196] ? inet6_getname+0x15d/0x650 [ 214.702602][T11196] lock_acquire+0x106/0x330 [ 214.702613][T11196] ? inet6_getname+0x15d/0x650 [ 214.702631][T11196] ? unwind_next_frame+0xa5/0x23c0 [ 214.702645][T11196] ? unwind_next_frame+0x1aaf/0x23c0 [ 214.702662][T11196] lock_sock_nested+0x48/0x100 [ 214.702674][T11196] ? inet6_getname+0x15d/0x650 [ 214.702691][T11196] inet6_getname+0x15d/0x650 [ 214.702708][T11196] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.702726][T11196] rds_tcp_conn_slots_available+0x288/0x470 [ 214.702746][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 214.702769][T11196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.702784][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 214.702802][T11196] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 214.702815][T11196] ? rds_send_worker+0x7d/0x2e0 [ 214.702828][T11196] ? process_scheduled_works+0xaec/0x17a0 [ 214.702840][T11196] ? worker_thread+0xa50/0xfc0 [ 214.702856][T11196] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 214.702873][T11196] rds_recv_incoming+0x9f6/0x12d0 [ 214.702889][T11196] ? __pfx_rds_recv_incoming+0x10/0x10 [ 214.702901][T11196] ? skb_copy_bits+0x7e5/0x8f0 [ 214.702918][T11196] rds_tcp_data_recv+0x7f1/0xa40 [ 214.702936][T11196] __tcp_read_sock+0x196/0x970 [ 214.702956][T11196] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 214.702968][T11196] rds_tcp_data_ready+0x369/0x950 [ 214.702980][T11196] ? __pfx_sock_def_readable+0x10/0x10 [ 214.703003][T11196] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 214.703019][T11196] tcp_data_queue+0x1e2e/0x5e50 [ 214.703042][T11196] ? tcp_urg+0x106/0x410 [ 214.703056][T11196] ? __pfx_tcp_data_queue+0x10/0x10 [ 214.703072][T11196] ? __pfx_tcp_urg+0x10/0x10 [ 214.703086][T11196] ? ktime_get+0x45/0x200 [ 214.703101][T11196] ? seqcount_lockdep_reader_access+0x60/0x100 [ 214.703117][T11196] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 214.703135][T11196] tcp_rcv_established+0x1270/0x2670 [ 214.703155][T11196] ? __pfx_tcp_rcv_established+0x10/0x10 [ 214.703170][T11196] ? ip6_dst_check+0x70/0x7e0 [ 214.703183][T11196] ? ip6_dst_check+0xe2/0x7e0 [ 214.703194][T11196] ? ip6_dst_check+0x5e3/0x7e0 [ 214.703206][T11196] ? __pfx_ip6_dst_check+0x10/0x10 [ 214.703219][T11196] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 214.703239][T11196] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 214.703254][T11196] __release_sock+0x1b8/0x3a0 [ 214.703272][T11196] release_sock+0x5f/0x1f0 [ 214.703284][T11196] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 214.703297][T11196] rds_send_xmit+0x207e/0x28d0 [ 214.703309][T11196] ? __lock_acquire+0x6b5/0x2cf0 [ 214.703321][T11196] ? look_up_lock_class+0x57/0x110 [ 214.703347][T11196] ? __pfx_rds_send_xmit+0x10/0x10 [ 214.703360][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 214.703375][T11196] rds_send_worker+0x7d/0x2e0 [ 214.703389][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 214.703402][T11196] process_scheduled_works+0xaec/0x17a0 [ 214.703423][T11196] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.703438][T11196] ? assign_work+0x3d5/0x5e0 [ 214.703452][T11196] worker_thread+0xa50/0xfc0 [ 214.703473][T11196] kthread+0x388/0x470 [ 214.703489][T11196] ? __pfx_worker_thread+0x10/0x10 [ 214.703501][T11196] ? __pfx_kthread+0x10/0x10 [ 214.703517][T11196] ret_from_fork+0x51e/0xb90 [ 214.703531][T11196] ? __pfx_ret_from_fork+0x10/0x10 [ 214.703544][T11196] ? __switch_to+0xc7d/0x1400 [ 214.703558][T11196] ? __pfx_kthread+0x10/0x10 [ 214.703573][T11196] ret_from_fork_asm+0x1a/0x30 [ 214.703594][T11196] [ 215.101048][T11196] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 215.109845][T11196] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11196, name: kworker/u8:19 [ 215.119259][T11196] preempt_count: 201, expected: 0 [ 215.124305][T11196] RCU nest depth: 0, expected: 0 [ 215.129239][T11196] INFO: lockdep is turned off. [ 215.134039][T11196] Preemption disabled at: [ 215.134047][T11196] [<0000000000000000>] 0x0 [ 215.142796][T11196] CPU: 1 UID: 0 PID: 11196 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 215.142818][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.142830][T11196] Workqueue: krds_cp_wq#9/0 rds_send_worker [ 215.142854][T11196] Call Trace: [ 215.142861][T11196] [ 215.142867][T11196] dump_stack_lvl+0xe8/0x150 [ 215.142890][T11196] __might_resched+0x378/0x4d0 [ 215.142911][T11196] lock_sock_nested+0x5d/0x100 [ 215.142928][T11196] inet6_getname+0x15d/0x650 [ 215.142956][T11196] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.142979][T11196] rds_tcp_conn_slots_available+0x288/0x470 [ 215.143004][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 215.143034][T11196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 215.143053][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 215.143076][T11196] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 215.143093][T11196] ? rds_send_worker+0x7d/0x2e0 [ 215.143110][T11196] ? process_scheduled_works+0xaec/0x17a0 [ 215.143127][T11196] ? worker_thread+0xa50/0xfc0 [ 215.143148][T11196] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 215.143170][T11196] rds_recv_incoming+0x9f6/0x12d0 [ 215.143191][T11196] ? __pfx_rds_recv_incoming+0x10/0x10 [ 215.143207][T11196] ? skb_copy_bits+0x7e5/0x8f0 [ 215.143229][T11196] rds_tcp_data_recv+0x7f1/0xa40 [ 215.143252][T11196] __tcp_read_sock+0x196/0x970 [ 215.143276][T11196] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 215.143294][T11196] rds_tcp_data_ready+0x369/0x950 [ 215.143309][T11196] ? __pfx_sock_def_readable+0x10/0x10 [ 215.143332][T11196] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 215.143351][T11196] tcp_data_queue+0x1e2e/0x5e50 [ 215.143379][T11196] ? tcp_urg+0x106/0x410 [ 215.143398][T11196] ? __pfx_tcp_data_queue+0x10/0x10 [ 215.143417][T11196] ? __pfx_tcp_urg+0x10/0x10 [ 215.143435][T11196] ? ktime_get+0x45/0x200 [ 215.143453][T11196] ? seqcount_lockdep_reader_access+0x60/0x100 [ 215.143474][T11196] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 215.143497][T11196] tcp_rcv_established+0x1270/0x2670 [ 215.143523][T11196] ? __pfx_tcp_rcv_established+0x10/0x10 [ 215.143541][T11196] ? ip6_dst_check+0x70/0x7e0 [ 215.143559][T11196] ? ip6_dst_check+0xe2/0x7e0 [ 215.143575][T11196] ? ip6_dst_check+0x5e3/0x7e0 [ 215.143590][T11196] ? __pfx_ip6_dst_check+0x10/0x10 [ 215.143607][T11196] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 215.143632][T11196] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 215.143652][T11196] __release_sock+0x1b8/0x3a0 [ 215.143675][T11196] release_sock+0x5f/0x1f0 [ 215.143689][T11196] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 215.143706][T11196] rds_send_xmit+0x207e/0x28d0 [ 215.143723][T11196] ? __lock_acquire+0x6b5/0x2cf0 [ 215.143738][T11196] ? look_up_lock_class+0x57/0x110 [ 215.143771][T11196] ? __pfx_rds_send_xmit+0x10/0x10 [ 215.143789][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 215.143809][T11196] rds_send_worker+0x7d/0x2e0 [ 215.143826][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 215.143843][T11196] process_scheduled_works+0xaec/0x17a0 [ 215.143871][T11196] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.143891][T11196] ? assign_work+0x3d5/0x5e0 [ 215.143909][T11196] worker_thread+0xa50/0xfc0 [ 215.143943][T11196] kthread+0x388/0x470 [ 215.143963][T11196] ? __pfx_worker_thread+0x10/0x10 [ 215.143979][T11196] ? __pfx_kthread+0x10/0x10 [ 215.143999][T11196] ret_from_fork+0x51e/0xb90 [ 215.144019][T11196] ? __pfx_ret_from_fork+0x10/0x10 [ 215.144035][T11196] ? __switch_to+0xc7d/0x1400 [ 215.144051][T11196] ? __pfx_kthread+0x10/0x10 [ 215.144071][T11196] ret_from_fork_asm+0x1a/0x30 [ 215.144097][T11196] [ 215.144107][T11196] BUG: scheduling while atomic: kworker/u8:19/11196/0x00000202 [ 215.420152][T13049] syzkaller0: entered promiscuous mode [ 215.423581][T11196] INFO: lockdep is turned off. [ 215.423591][T11196] Modules linked in: [ 215.423602][T11196] Preemption disabled at: [ 215.423607][T11196] [<0000000000000000>] 0x0 [ 215.423629][T11196] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 215.423730][T11196] CPU: 1 UID: 0 PID: 11196 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.423754][T11196] Tainted: [W]=WARN [ 215.423761][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.423774][T11196] Workqueue: krds_cp_wq#9/0 rds_send_worker [ 215.423797][T11196] Call Trace: [ 215.423806][T11196] [ 215.423813][T11196] vpanic+0x1e0/0x670 [ 215.423835][T11196] panic+0xc5/0xd0 [ 215.423853][T11196] ? __pfx_panic+0x10/0x10 [ 215.423871][T11196] ? __pfx__printk+0x10/0x10 [ 215.423890][T11196] ? vprintk_emit+0x4eb/0x560 [ 215.423919][T11196] ? __pfx_vprintk_emit+0x10/0x10 [ 215.423939][T11196] check_panic_on_warn+0x89/0xb0 [ 215.423959][T11196] __schedule_bug+0xf6/0x150 [ 215.423981][T11196] __schedule+0x168c/0x5290 [ 215.423999][T11196] ? __wake_up_klogd+0xe6/0x120 [ 215.424022][T11196] ? vprintk_emit+0x4eb/0x560 [ 215.424040][T11196] ? rcu_is_watching+0x15/0xb0 [ 215.424061][T11196] ? __pfx_vprintk_emit+0x10/0x10 [ 215.424078][T11196] ? unwind_next_frame+0xa5/0x23c0 [ 215.424102][T11196] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.424122][T11196] ? prepare_to_wait_exclusive+0x45/0x240 [ 215.424145][T11196] ? __pfx___schedule+0x10/0x10 [ 215.424162][T11196] ? schedule+0x90/0x360 [ 215.424178][T11196] ? rcu_is_watching+0x15/0xb0 [ 215.424197][T11196] ? rcu_is_watching+0x15/0xb0 [ 215.424214][T11196] ? lock_release+0x4b/0x3a0 [ 215.424230][T11196] ? schedule+0x90/0x360 [ 215.424246][T11196] ? wq_worker_sleeping+0x63/0x250 [ 215.424267][T11196] schedule+0x164/0x360 [ 215.424285][T11196] __lock_sock+0x161/0x2c0 [ 215.424306][T11196] ? __pfx___lock_sock+0x10/0x10 [ 215.424325][T11196] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.424345][T11196] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.424366][T11196] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 215.424386][T11196] ? dump_stack_lvl+0x135/0x150 [ 215.424407][T11196] ? lock_sock_nested+0x6a/0x100 [ 215.424423][T11196] lock_sock_nested+0x9f/0x100 [ 215.424443][T11196] inet6_getname+0x15d/0x650 [ 215.424466][T11196] ? do_raw_spin_lock+0x12b/0x2f0 [ 215.424488][T11196] rds_tcp_conn_slots_available+0x288/0x470 [ 215.424514][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 215.424543][T11196] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 215.424563][T11196] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 215.424586][T11196] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 215.424603][T11196] ? rds_send_worker+0x7d/0x2e0 [ 215.424621][T11196] ? process_scheduled_works+0xaec/0x17a0 [ 215.424637][T11196] ? worker_thread+0xa50/0xfc0 [ 215.424665][T11196] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 215.424687][T11196] rds_recv_incoming+0x9f6/0x12d0 [ 215.424708][T11196] ? __pfx_rds_recv_incoming+0x10/0x10 [ 215.424725][T11196] ? skb_copy_bits+0x7e5/0x8f0 [ 215.424747][T11196] rds_tcp_data_recv+0x7f1/0xa40 [ 215.424770][T11196] __tcp_read_sock+0x196/0x970 [ 215.424794][T11196] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 215.424811][T11196] rds_tcp_data_ready+0x369/0x950 [ 215.424827][T11196] ? __pfx_sock_def_readable+0x10/0x10 [ 215.424850][T11196] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 215.424871][T11196] tcp_data_queue+0x1e2e/0x5e50 [ 215.424898][T11196] ? tcp_urg+0x106/0x410 [ 215.424917][T11196] ? __pfx_tcp_data_queue+0x10/0x10 [ 215.424937][T11196] ? __pfx_tcp_urg+0x10/0x10 [ 215.424956][T11196] ? ktime_get+0x45/0x200 [ 215.424974][T11196] ? seqcount_lockdep_reader_access+0x60/0x100 [ 215.424995][T11196] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 215.425018][T11196] tcp_rcv_established+0x1270/0x2670 [ 215.425044][T11196] ? __pfx_tcp_rcv_established+0x10/0x10 [ 215.425063][T11196] ? ip6_dst_check+0x70/0x7e0 [ 215.425081][T11196] ? ip6_dst_check+0xe2/0x7e0 [ 215.425097][T11196] ? ip6_dst_check+0x5e3/0x7e0 [ 215.425113][T11196] ? __pfx_ip6_dst_check+0x10/0x10 [ 215.425130][T11196] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 215.425155][T11196] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 215.425175][T11196] __release_sock+0x1b8/0x3a0 [ 215.425199][T11196] release_sock+0x5f/0x1f0 [ 215.425214][T11196] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 215.425231][T11196] rds_send_xmit+0x207e/0x28d0 [ 215.425249][T11196] ? __lock_acquire+0x6b5/0x2cf0 [ 215.425264][T11196] ? look_up_lock_class+0x57/0x110 [ 215.425297][T11196] ? __pfx_rds_send_xmit+0x10/0x10 [ 215.425314][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 215.425334][T11196] rds_send_worker+0x7d/0x2e0 [ 215.425352][T11196] ? process_scheduled_works+0xa0f/0x17a0 [ 215.425370][T11196] process_scheduled_works+0xaec/0x17a0 [ 215.425398][T11196] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.425418][T11196] ? assign_work+0x3d5/0x5e0 [ 215.425436][T11196] worker_thread+0xa50/0xfc0 [ 215.425464][T11196] kthread+0x388/0x470 [ 215.425484][T11196] ? __pfx_worker_thread+0x10/0x10 [ 215.425500][T11196] ? __pfx_kthread+0x10/0x10 [ 215.425520][T11196] ret_from_fork+0x51e/0xb90 [ 215.425539][T11196] ? __pfx_ret_from_fork+0x10/0x10 [ 215.425557][T11196] ? __switch_to+0xc7d/0x1400 [ 215.425573][T11196] ? __pfx_kthread+0x10/0x10 [ 215.425593][T11196] ret_from_fork_asm+0x1a/0x30 [ 215.425620][T11196] [ 215.429827][T11196] Kernel Offset: disabled