last executing test programs: 5.237388686s ago: executing program 0 (id=7279): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x4, @default, 0x103, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @void, @void}, 0x39) (async) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x8, 0xec, 0x1, 0x5, '6(5', 0x4, [0xf, 0x1]}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) 5.143438074s ago: executing program 3 (id=7281): unshare(0x10400) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x80000001, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x18, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xb8410608002e4972, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4}, 0xc) (async) r5 = socket(0x21, 0x80000, 0x80) (async) r6 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000080)) (async) ppoll(&(0x7f0000000980)=[{r9, 0x8401}, {0xffffffffffffffff, 0x500}, {r6, 0x4}], 0x3, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x8905, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000000180), 0x4) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r13 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) 5.103899432s ago: executing program 0 (id=7282): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x21, 0x2, 0x2) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r2, 0xfffffbeb) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4.881170454s ago: executing program 0 (id=7286): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) sendto$netrom(0xffffffffffffffff, 0x0, 0x6c20, 0x881, 0x0, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) (async) r5 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}]}, 0x2c}}, 0x20000004) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4d}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdb0f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x26}]}]}, 0xfffffffffffffe30}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="23000300010007", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f5"], 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="6a5b677e00ebffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8, r8}, 0x4) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x91}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x17, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.485131569s ago: executing program 2 (id=7291): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c000280080002"], 0x80}}, 0x24004044) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002"], 0x28}, 0x1, 0x0, 0x0, 0x24000083}, 0x20044804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000004c76137ad1b97564c997e64c0f00ed"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x8007) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000000)=0x100, 0x2) 4.335303649s ago: executing program 0 (id=7293): socket$rxrpc(0x21, 0x2, 0xa) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0xfffffffffffffffc, 0x3, 0x2, 0x800000ff], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r1]}, 0x7a) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfffeffff}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfffeffff}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5828a059e04ba3292ea54c7beef915d564c90c200239f6406044c4fe545eb6425ba3a9e22e881", 0x2a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xbe53}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x60}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040440}, 0x4000104) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xbe53}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc0}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x60}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040440}, 0x4000104) 4.145116469s ago: executing program 2 (id=7295): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) 4.071308619s ago: executing program 3 (id=7296): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x58, 0x0, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 4.013946269s ago: executing program 1 (id=7297): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000"], 0x50) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x7, 0x4, @loopback}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000740)=ANY=[@ANYRES32=r2], 0x72) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000"], 0x50) (async) close(0x3) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x7, 0x4, @loopback}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000740)=ANY=[@ANYRES32=r2], 0x72) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) (async) 3.840900535s ago: executing program 3 (id=7300): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x2004c8d0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c", 0x1}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)="2a95de1c", 0x4}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)="365e371f", 0x4}], 0x1}}], 0x2, 0x5) shutdown(r5, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000040)={r7}, &(0x7f0000000100)=0x8) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)={0x3, 'hsr0\x00', {0x9}, 0xffff}) (async) socket$kcm(0x2, 0xa, 0x2) (async) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0xfdef) recvfrom$inet(r1, &(0x7f0000000680)=""/245, 0xf5, 0x62, 0x0, 0x0) 3.722040131s ago: executing program 0 (id=7301): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) bind$inet(r5, 0x0, 0x0) close(r4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x57c70ad3}, @sack_perm, @sack_perm, @window={0x3, 0x9, 0x1}], 0x4) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xdbdb}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x8000001, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20002400}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) 3.721253893s ago: executing program 1 (id=7302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newtaction={0x1ef4, 0x30, 0xb, 0x0, 0x0, {}, [{0x1ee0, 0x1, [@m_pedit={0x1edc, 0x13, 0x0, 0x0, {{0xa}, {0x1de8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xe4, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xc4467b6cc8f7c898}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xe357, 0xc, 0x2, 0x9, 0x1}, 0x10, 0xfa, [{0x0, 0x9, 0x3f9, 0x6, 0x4f0, 0x5}, {0x8, 0x1, 0xe, 0x404e, 0xaa0e, 0x38}, {0x7, 0x9, 0x5, 0x3, 0x67a, 0x9}]}, [{0x2, 0xfd12, 0x10001, 0x37, 0x4, 0x1}, {0x3, 0x6c2a416d, 0x2, 0x100, 0x7ff, 0xa}, {0x101, 0x1, 0xb9d, 0x1, 0x40, 0x5}, {0x58, 0xa95c, 0x10, 0x2, 0x20e, 0x8}, {0x2, 0x0, 0x6d, 0x1ea, 0x2, 0x4}, {0x1, 0x2f0, 0x1, 0xfffffffb, 0x5, 0xffffffff}, {0xa3b, 0x4494d4c8, 0x2, 0x9, 0xa, 0x3}, {0x2, 0xf, 0x3, 0x8, 0xa, 0x80}, {0x5, 0x0, 0x9, 0x3ff, 0x2, 0x4}, {0x2, 0x4, 0x9, 0x200, 0x42, 0x5}, {0x0, 0x9, 0x9, 0xfffffffc, 0xfffffffd, 0x10}, {0x2e8, 0x217, 0x10000, 0x3, 0x0, 0x8}, {0x5, 0x3, 0x0, 0x4, 0x7, 0x1}, {0x9, 0x1, 0x48000000, 0x66, 0x7, 0xe}, {0x7, 0xbb87, 0x8, 0x1, 0x3, 0x6}, {0x5, 0x800, 0x9, 0x80000001, 0x0, 0x3ff}, {0xaac9, 0x10001, 0x17a, 0x4, 0x5}, {0x9, 0x0, 0x7, 0x6, 0xff, 0x8}, {0x10001, 0x3, 0x100, 0xf, 0x2, 0x7}, {0x1, 0x3, 0x3, 0x80, 0x9, 0xfffff162}, {0x7, 0x318, 0xb04, 0xfffff001, 0x694, 0x2}, {0x7ff, 0x5, 0x9f48b9e, 0x4, 0x401, 0x4}, {0x2, 0x59d5, 0x9, 0x7f, 0x2, 0x1ff}, {0x7, 0x6, 0xfff, 0x8, 0x9, 0xe}, {0x9, 0x2, 0xb1bf, 0x7, 0x9}, {0x4, 0x4eba, 0x1b45, 0xa03, 0x0, 0x97}, {0x4, 0x15f5, 0x7, 0x8, 0x9, 0x5af2}, {0xb, 0x62596b99, 0x3, 0x0, 0x7, 0x4}, {0x2, 0xfffff001, 0x800, 0xb2, 0xffffff8f, 0x4}, {0x9750, 0x10, 0xb, 0x0, 0x10000, 0x10000}, {0x0, 0x49d, 0x1, 0x8, 0x3, 0x9}, {0x1, 0xf, 0x0, 0x4, 0x9, 0xfffffffc}, {0xffff075f, 0x2, 0x1ff, 0x8, 0x7, 0x2bf1}, {0x2, 0xb71c, 0x36f, 0x400, 0x60c7, 0x50f454da}, {0x8, 0x8, 0x101, 0x4, 0x7, 0xc}, {0x96, 0xffffffcd, 0x4, 0x1a0cbca4, 0x9, 0x6}, {0x5, 0x6, 0x835, 0x4, 0x6, 0x3ff}, {0xfc000000, 0x68e, 0xed8, 0x3, 0x6, 0x3}, {0x800, 0x82, 0x3, 0x401, 0x3, 0xd90}, {0x1, 0x1, 0x800, 0x3ff, 0x9, 0x8}, {0x5, 0x10, 0x8, 0x5, 0x0, 0xc}, {0x1, 0x37, 0x1, 0x1, 0xa, 0x2}, {0x5, 0x4c2, 0x3, 0x80000001, 0x1, 0x3}, {0x3, 0x0, 0x5, 0x3, 0x1, 0xc}, {0x4, 0x11e1, 0xd6, 0x0, 0xffff06f4, 0x4d5e873e}, {0x6, 0x70000, 0x0, 0x6, 0x1b894377, 0x7fffffff}, {0x9, 0x1, 0xfd5, 0x7, 0x7, 0xffffffff}, {0x0, 0x21fb, 0xbcc, 0x301, 0x7fffffff, 0x7f}, {0x9, 0x7, 0xf76, 0xaf, 0x6, 0x7}, {0x7, 0x3, 0x5, 0x400, 0x4, 0x8}, {0xd, 0x1, 0x449, 0x0, 0x1, 0x6}, {0x14, 0x40, 0x5, 0xff, 0x1, 0x6f89}, {0x6, 0x401, 0x6, 0x8, 0x4, 0x7f4}, {0x1, 0x10000000, 0x9, 0x8, 0xe0}, {0x7ff, 0x7, 0x6, 0x0, 0xff}, {0xb7a9, 0x800, 0xadf, 0xc, 0xe}, {0x343a, 0x200, 0x5, 0xe, 0x1, 0x10001}, {0x0, 0xc1b, 0xaf, 0x8, 0x62e1, 0xc30e}, {0x7f, 0x9, 0x4, 0x3, 0xe6c, 0x4}, {0x9, 0xa, 0x3, 0xffff, 0xa, 0x3}, {0x9, 0x8b, 0x4, 0x81, 0x401, 0x7}, {0x0, 0x2d4, 0x80000001, 0xe0e, 0x100, 0x2}, {0x3, 0x1, 0x3, 0x1, 0x8, 0x5}, {0x9a, 0x6, 0x0, 0x3d44a289, 0x1, 0x80000000}, {0x3, 0x10001, 0x5d, 0xffffffff, 0x80000000, 0x8}, {0x800, 0x8000, 0x8, 0xcba0, 0xfffff801, 0xfffffffe}, {0x1, 0x3, 0x5, 0x8000, 0x3, 0xa}, {0x8, 0x8, 0x7f21, 0x10120000, 0xfffffffd, 0x2}, {0x6, 0x6, 0x1, 0x9, 0x7}, {0x8b, 0x2fb3, 0x3, 0x6, 0x4, 0x7}, {0x9, 0xffff, 0x1, 0x58, 0x4, 0x4}, {0x893, 0x1, 0xae, 0x1000, 0x6, 0x7f}, {0x400, 0x100, 0x10, 0x9, 0xb8, 0x3}, {0x6, 0x0, 0x574, 0x2, 0x2800, 0x2}, {0xfffffffb, 0x5, 0x10001, 0x200, 0x53b, 0x8}, {0x0, 0x9, 0x3, 0xa, 0x5000, 0x5}, {0x8, 0x100, 0x8, 0x8b11, 0x682ac524, 0x800}, {0x101, 0x2, 0x6, 0x5, 0x80, 0x522}, {0x8000, 0x3, 0xd, 0x6, 0x0, 0x9}, {0x2d15, 0x79ac, 0x0, 0x8, 0x2, 0x7}, {0x3, 0x6, 0x0, 0x1000, 0x1925, 0x1ff}, {0x7, 0x8, 0x6, 0x702, 0x7, 0x2}, {0x4, 0x6, 0x1bdc8379, 0x10, 0x5, 0xcae}, {0x3ffa, 0x0, 0xffffffff, 0x7, 0x400, 0x7}, {0x1, 0x5, 0x6, 0x7, 0x2, 0xb0}, {0x2, 0x0, 0x7, 0x4, 0x0, 0x3}, {0x166, 0xaf00dcbd, 0x6, 0x5, 0x8000, 0x1}, {0x9, 0x40, 0x8001, 0x6, 0x80, 0xa5c6}, {0x5, 0xd, 0x5, 0x3, 0x5}, {0x1, 0xffffff80, 0xe6c015c, 0x80000000, 0x2, 0x5}, {0x459, 0x6e, 0x6, 0x4, 0xd, 0x1}, {0xfffffffa, 0x5, 0x401, 0x1, 0xfd23, 0xfffffffb}, {0xfffff0cc, 0x5, 0x5, 0x5, 0x5, 0xe3}, {0x1, 0xfff, 0x80, 0x7, 0xd, 0xfffffffa}, {0x0, 0x29, 0x5, 0x2, 0x0, 0x3}, {0x13d, 0x5, 0x3, 0x40, 0x1}, {0x4, 0x7f, 0x8, 0xc, 0x5, 0x8}, {0x1000, 0x80000001, 0x4290, 0x439c87a3, 0x10, 0xfffffffa}, {0x8, 0x8, 0xf, 0x5, 0x5, 0x5}, {0x3, 0x4, 0x5, 0x9, 0x0, 0x9}, {0x7f, 0xe69, 0x1, 0x9, 0x4, 0x6}, {0xff, 0x0, 0x2, 0x3, 0x100, 0x80}, {0x7, 0x4, 0x1000, 0x7, 0xfa, 0x6}, {0x9, 0x9, 0xdfc9, 0x9, 0x8, 0x7fff}, {0xfffffffb, 0x5, 0x1, 0x9, 0x5, 0x1}, {0xffffff80, 0x3ff, 0x8000, 0x4, 0x6, 0x9}, {0x8ea9, 0x0, 0xc1, 0x7, 0x101}, {0x4, 0x3ff, 0x8, 0x101, 0x1cb0, 0x6}, {0x8000, 0x3, 0xfffffff0, 0x6, 0x7, 0x5}, {0x9, 0x4, 0x7, 0x1, 0xfffffc01, 0x6}, {0x3, 0x10001, 0x0, 0x800, 0x0, 0x6}, {0x14000, 0x9, 0x2, 0x33e4, 0xb6a, 0x8000}, {0x35c, 0x5c8, 0x4, 0xc000000, 0xa000000, 0x3ff}, {0x0, 0x3, 0x4, 0x9c, 0x200, 0xf30}, {0x9, 0x2, 0x8001, 0x7f, 0x8, 0x1ff}, {0xd, 0x9, 0xd, 0x10000, 0x5, 0x200}, {0x8, 0x2, 0x1ff, 0x800, 0x6}, {0x3, 0xa, 0x1, 0xb, 0x7, 0x7}, {0x6d, 0x1, 0x3ff, 0x0, 0xdb8, 0x1}, {0x5, 0x3469, 0x101, 0x8, 0x9, 0x3}, {0x81, 0x6, 0x5, 0x8, 0x1c000, 0x9}, {0x8, 0x5d6a4f68, 0x9, 0x0, 0x9, 0x9e8}, {0xf4, 0x4, 0x3, 0x2, 0x5, 0x8}, {0x5, 0xfffffffb, 0x8, 0x0, 0xb56, 0x9}, {0xfffffff9, 0x7, 0x2, 0x7, 0x28cc9bcd, 0x2}, {0xee0, 0x0, 0x1, 0x9, 0x7, 0x8001}, {0xfff, 0x7f, 0x1, 0x3, 0x200, 0x7}, {0xff, 0x8, 0x9, 0xfff, 0x0, 0x3}], [{0x1, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x175834ec59d3fc79}, {0x3, 0x1}, {0x2}, {0x1}, {0x4}, {}, {0x3}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x9aa9f97eb452819e}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0xd6f7dbdad5ff1fe6}, {0x3, 0x1}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x100, 0xff, 0x3, 0x8, 0x5}, 0x58, 0x2, [{0x10001, 0x9, 0x81, 0x0, 0x8, 0x8}, {0x7fff, 0x6, 0xffffff00, 0x5, 0xf2e, 0x3}, {0x4, 0x934, 0x5, 0x3, 0x0, 0x5}, {0x0, 0x5, 0x5d2, 0x0, 0x7, 0x8}, {0x8, 0x5, 0x3, 0x4, 0x4e, 0xa}]}, [{0x5, 0xcf4, 0xfffffffa, 0x2, 0x8, 0x9}, {0x9, 0xac, 0x4, 0x4, 0x825, 0x9}, {0x200, 0x2, 0xf, 0x8, 0x9, 0x6}, {0x7c, 0x9, 0x7, 0x80000000, 0x100, 0xc70}, {0x8, 0x3, 0x2, 0x3, 0x0, 0x4}, {0x4, 0x2, 0x0, 0xc, 0x4, 0x10}, {0x8, 0x3, 0x0, 0xa3e1, 0x9, 0x7}, {0x8, 0x7, 0x5355, 0x1, 0x8, 0x420d7547}, {0x81, 0x4a59, 0x8, 0x8, 0x7, 0x8}, {0xfff, 0x8, 0x30cff001, 0x7f, 0x33d, 0x6}, {0x5, 0xfffff4c8, 0x3, 0x400, 0x33, 0x2}, {0xffff, 0x6, 0x101, 0x5, 0x4, 0x8001}, {0x7e, 0x9, 0x6, 0x80000001, 0x5, 0xffff0001}, {0x5, 0x6, 0xcca5, 0xffffd989, 0x5c0, 0x3}, {0x6, 0x5, 0x68, 0x7fff, 0x6, 0x8}, {0x40, 0x3, 0x8, 0x1, 0x9, 0x1}, {0x3, 0x2, 0x40, 0xc, 0x8, 0x8}, {0x401, 0x81, 0x6, 0x0, 0x5, 0x7ff}, {0xd0a, 0x81, 0x4, 0xafe3, 0x2, 0x1}, {0x1ff, 0x0, 0x1, 0x83}, {0xa3, 0x4, 0x10000, 0x5, 0x8, 0xb}, {0x42, 0x3, 0x2, 0x1, 0x100, 0x7}, {0x0, 0x1, 0x1, 0xb6, 0xb, 0x7}, {0x7, 0xb4, 0x8, 0xd, 0x81, 0x5}, {0x7fffffff, 0x2, 0x516, 0x7, 0x0, 0x9}, {0x8, 0x9, 0x9, 0x9, 0xfffff21f, 0xc0f}, {0x40, 0x4548bb8, 0x5, 0xa, 0x0, 0x1}, {0x8000, 0x6, 0x8, 0x5, 0x2, 0x10}, {0x1, 0x7, 0x6, 0x7, 0x400, 0x5}, {0x8001, 0x0, 0x9, 0x2, 0x15c5, 0x10}, {0x9, 0x2, 0x7068, 0x7, 0x1000, 0x3}, {0x2, 0x0, 0x4fb, 0xe, 0x2, 0xfff}, {0x4, 0x9, 0xcfb, 0x71, 0x7, 0x2}, {0x9, 0x150, 0x5, 0x80, 0x6, 0x4}, {0x2, 0x200, 0x29, 0x3, 0x7024a213, 0x8}, {0x2, 0x3, 0x7, 0x6, 0x7ff, 0x984d}, {0x4, 0x2, 0x200, 0xfffffff7, 0x59ac, 0x3}, {0x0, 0x7, 0x7, 0x2, 0x2, 0x9}, {0xffffff29, 0x4, 0xf5, 0x0, 0x3, 0x2}, {0x80, 0x6, 0x8, 0xffffb3a5, 0x929, 0x7d7}, {0x0, 0x3, 0xffffff7f, 0xff, 0x5, 0x9}, {0xfffffffa, 0x80000001, 0x4, 0xd, 0x6, 0x4}, {0x8a1, 0x9, 0x9, 0x6, 0x8, 0x5}, {0x3e49, 0x8, 0x5, 0x5, 0x9dd0, 0xc3e1}, {0xf66c, 0x4, 0xffffffff, 0x29, 0x9, 0x8fc}, {0x5, 0x3, 0x3, 0xffffffff, 0x8, 0x2}, {0xffffffff, 0xec03, 0xe, 0x5, 0xd7, 0x7f}, {0x6, 0x9, 0x3ff, 0x6, 0x8, 0x4}, {0x7, 0x4, 0x6, 0x2, 0x89, 0x5}, {0x0, 0x2, 0x0, 0x149, 0x6, 0x200}, {0x7, 0x71eac2c3, 0x8000, 0xd, 0x5, 0x5574}, {0x7, 0xfffffc40, 0x7f, 0x5a4e0c78, 0x4, 0x8}, {0x8, 0x9, 0x400, 0x1ff, 0x3, 0x7}, {0x3, 0x1, 0x0, 0x3, 0x7, 0x5}, {0x8, 0xffff, 0x0, 0x1, 0x9, 0x8}, {0xfffffff9, 0x1, 0x9, 0x3, 0x7, 0x4}, {0xab, 0x835b, 0x93, 0xfffffff2, 0x3, 0x8001}, {0x57c, 0x6, 0x7b3a, 0x6, 0xfffffffa, 0xa}, {0x9, 0x6d4a, 0x7f, 0x0, 0x3, 0x5}, {0x5, 0x6, 0x3, 0x7f, 0xd, 0x8}, {0x96e, 0x7, 0x0, 0x3, 0x3, 0xbf}, {0x8, 0x7, 0x9, 0x1, 0xffffffff, 0x4}, {0x2, 0x401, 0x4, 0x0, 0x2, 0x9}, {0x6, 0x3, 0x7f, 0xffff9c32, 0x4, 0x3}, {0x81, 0x3, 0x8, 0x2, 0x4, 0x9}, {0x3, 0x200, 0xfe, 0x1, 0x1, 0xd5ee}, {0x3, 0x3, 0x2, 0x1ff, 0xa, 0x8000}, {0x8001, 0x7, 0x1256, 0x0, 0x1, 0x7}, {0x800, 0xfa, 0x137, 0x4, 0x2}, {0x2, 0x8, 0xfffffffd, 0x9, 0x1, 0xfe59}, {0x3, 0x80, 0x8, 0x5, 0x4, 0x7}, {0x8, 0x10001, 0x5, 0x0, 0xc215, 0x6}, {0x3, 0x8, 0x9, 0x7, 0x9, 0x7f}, {0x8, 0x9, 0x3, 0x8, 0x200, 0x2}, {0x40, 0x2f, 0x2, 0x6872, 0x1, 0x5}, {0xa, 0x8, 0x3, 0x1, 0x0, 0x2}, {0x8364, 0x7ff, 0x6, 0x5, 0x2, 0x9}, {0x2, 0x6, 0x4, 0xfffffffd, 0x0, 0x7}, {0xd, 0x9, 0x2, 0x6, 0xfffff543, 0x7}, {0xffffffff, 0xc, 0x7, 0x40, 0x5, 0x1}, {0x8, 0x10, 0x7fff, 0x0, 0x0, 0xc8}, {0x2244c548, 0x1, 0x8, 0x9, 0x7, 0xff}, {0x9, 0x9, 0x7ff, 0x1, 0x81, 0x9}, {0x0, 0x8, 0x9, 0x3ff, 0x8, 0x6}, {0x8, 0xffffff23, 0x4, 0xf, 0x400, 0x4}, {0x1, 0x1, 0x9, 0x23, 0xab, 0x1}, {0x9, 0x8000, 0xb, 0x6, 0xfffffff7, 0x6}, {0x5, 0x5, 0x8001, 0x5, 0x1, 0xfffffffe}, {0x7ff, 0x401, 0xfffffff9, 0x4, 0x4, 0x1ff}, {0x4, 0x8, 0xa8, 0x8, 0x0, 0x7fffffff}, {0xfffffffb, 0xe, 0xd, 0x7e07, 0x7, 0x24f}, {0xd, 0x6, 0x10, 0xfffffff7, 0x7, 0x6}, {0x3, 0x200, 0xf9, 0x5, 0x4, 0xa66}, {0x6, 0x0, 0x2, 0x3ff, 0x4, 0x80000000}, {0x5, 0x5, 0x5, 0x5, 0x5, 0x100}, {0x0, 0x7, 0x22, 0xfffffffc, 0x1, 0x80000000}, {0x1, 0x6, 0x8000, 0x6, 0xfffffe93, 0x6}, {0x0, 0x2, 0x67, 0x3ff, 0xfffffff7, 0x9}, {0xfb, 0xfff, 0x400, 0x1, 0x93, 0x6af80852}, {0x53, 0x400040, 0x9, 0x8, 0x8, 0xd4}, {0xffff8001, 0x128b, 0x1, 0x2, 0x7ff, 0x1}, {0x8, 0x80000000, 0xffffff83, 0x4, 0xf6a, 0x1}, {0x5, 0x3, 0x2, 0x6, 0x4, 0x9}, {0x9cd, 0xa, 0xfffffff8, 0xfffffb9d, 0x6, 0x14a}, {0x3, 0x80000000, 0xb, 0x1, 0x398}, {0x7fff, 0x1, 0x6, 0xfff, 0x6, 0x3}, {0xfffffbff, 0x401, 0x7, 0xd, 0xfffffffa}, {0x7, 0x7, 0x1ff, 0xd, 0x7fff, 0x3}, {0x3, 0x7, 0x1, 0x8, 0x400}, {0x8, 0x0, 0x4, 0xffffff8a, 0x0, 0x4}, {0x7, 0xd1d3, 0x4, 0x8, 0x1, 0x3}, {0x6, 0x1, 0x9, 0x6, 0x800}, {0x3, 0x2, 0xfff, 0x100, 0x5, 0x400}, {0x2, 0x9, 0x9, 0x4, 0x3, 0x1}, {0x80000000, 0x3, 0x9, 0x9, 0x6, 0xf0dc}, {0x3, 0xdba, 0x3, 0x3ff, 0xc725, 0x3}, {0x8, 0x2, 0x7ff, 0x5, 0xfff, 0x9}, {0x8, 0xfffffffa, 0xfffffff9, 0x1, 0x136508c5, 0x4}, {0x6, 0x9, 0xe04, 0x40, 0xff, 0x1}, {0xffffffc4, 0xff, 0xffffffff, 0x2, 0x1000, 0x2}, {0x0, 0x4b22, 0xcc4, 0x8000, 0x0, 0x8000}, {0x2, 0x800, 0x2, 0x1, 0x9, 0x5}, {0x3, 0x80, 0x7, 0x0, 0x8, 0x4}, {0x7fff, 0x3, 0x1, 0x6, 0x800, 0x7}, {0x1, 0x2, 0x6, 0x7fffffff, 0x6, 0x43}, {0x8f, 0x9, 0x2, 0x0, 0xa, 0x3}, {0x1, 0x0, 0x6, 0x1000, 0xa, 0x8530410e}, {0x8, 0x81, 0x5, 0x2, 0x4, 0x4}], [{0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0xe3284ca8fc51e560}, {0x2, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x91a4623df6fbe557}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0xf2e593191da6377}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0xf83b0ca9ed54de37}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0xf9f37847a4de7fda}, {0x3, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}]}}]}, {0xcc, 0x6, "fa16167616f35a271e22999903b4e79002782c3f3bef8e422194dee9d82cb3f35ba16099c356dbe1e55a3d92bea142012bac2586367c58fe26e02e67f4bae8556df60a47362f4573ef81e77c557c6258c1efd0f4f42e9d446576eecce7cbef715fe6bfc4bd90c1f2916837cad8fa4254faeca44bce4e2b4314100a87d7a0020efefc1743d2a6930b1dd67c02c7ab3c2c68bae115c3d08011d13d19756a48f7d8eeaf8d5c61b1c16a5bc3bea17b16051c0ac429052e8ec1f0b4507181eab530671b5c6fd43f7a4663"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1ef4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) unshare(0x80) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) 3.712253983s ago: executing program 4 (id=7303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0x50, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x700, 0xc5, 0x7, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x68, 0x0, 0xa, 0x2f, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x7, 0xf1, [@rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', r1, 0x20, 0x10, 0xb, 0x101, {{0x37, 0x4, 0x1, 0x2, 0xdc, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x3c, 0xdb, 0x1, 0xf, [{@multicast2, 0x3}, {@private=0xa010100, 0x80000001}, {@remote, 0x272}, {@private=0xa010102, 0x40}, {@loopback, 0x8}, {@loopback, 0x2}, {@broadcast, 0xffffffff}]}, @lsrr={0x83, 0x27, 0xec, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101, @multicast1, @loopback, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @private=0xa010100]}, @end, @ssrr={0x89, 0x3, 0x5e}, @timestamp_addr={0x44, 0xc, 0xed, 0x1, 0x0, [{@multicast2, 0xfffffff5}]}, @lsrr={0x83, 0x27, 0xa8, [@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @multicast2, @remote]}, @ssrr={0x89, 0x3, 0xbc}, @timestamp={0x44, 0x28, 0xb5, 0x0, 0x2, [0x204, 0x3, 0x8, 0x4, 0x5, 0x8, 0xfffffff7, 0x2, 0x1]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0xc0ec, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) write(r3, &(0x7f00000000c0)="29000000110005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x75b}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000200001007000000000000a000040000000000000000014000300687300140011007665e8200000000000007269646765000000", @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000003000000380500000a00000000000000", @ANYRES32, @ANYBLOB="7322a1f600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 3.138081849s ago: executing program 2 (id=7304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000140)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x801, &(0x7f0000000240)={@_ha_fsid={[0x3, 0x2]}, {0x5, 0xf452, 0x10000, 0x6}}, 0x10, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x9}, {[0x2695, 0xfffffff6, 0x40, 0xa50]}, 0x80, 0x87, &(0x7f0000000380)=""/135}) write$cgroup_subtree(r2, &(0x7f00000004c0)={[{0x2d, 'rdma'}]}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0xcf, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e4"}, &(0x7f0000000180)=0xd7) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9cc}, {0xa, 0x0, 0x4, @local, 0xffffffff}, 0x0, {[0x3, 0x0, 0x4, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 3.013163474s ago: executing program 3 (id=7305): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.913713929s ago: executing program 1 (id=7306): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'team0\x00', {0x8}, 0x8000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05072ebd7000ffdbdf2501000000100002800c0001800800010016"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x1, 0x1, 0x198, 0x40, {{0xa, 0x4, 0x1, 0xc, 0x28, 0x68, 0x0, 0xc, 0x29, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x14, 0xa0, 0x0, 0x3, [0x45cc, 0x1b67, 0xfffffe00, 0x653b]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) (rerun: 64) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@multicast1, @local, 0x0}, &(0x7f0000000480)=0xc) (async) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x10, 0x5, 0xfffffffb, {{0x25, 0x4, 0x1, 0x8, 0x94, 0x64, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_addr={0x44, 0x24, 0x42, 0x1, 0xd, [{@empty, 0x1}, {@multicast1, 0x3}, {@multicast1, 0x88}, {@loopback, 0xffffffa1}]}, @lsrr={0x83, 0x1b, 0x77, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "fc207fcb1b0ee8b548"}]}, @timestamp={0x44, 0x2c, 0x56, 0x0, 0x6, [0x1, 0x2, 0xc, 0x2, 0x6e, 0x200, 0x5, 0xc, 0xda3, 0x5]}]}}}}}) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x66, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x7, 0x2, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x66, 0x0, 0xae, 0x2f, 0x0, @private=0xa010102, @loopback, {[@timestamp={0x44, 0x20, 0x98, 0x0, 0xe, [0x400, 0x2, 0x3, 0x0, 0xa, 0x2, 0x4]}, @timestamp_addr={0x44, 0xc, 0xf3, 0x1, 0xd, [{@local, 0x6230}]}, @generic={0x44, 0x6, "0bed94ba"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xc, 0x7, 0x1, @rand_addr=' \x01\x00', @loopback, 0x0, 0xf898, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x4, 0xd, 0x5, 0xf97, 0x50, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x40, 0xffff9d3c, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x69, 0x7, 0x6, 0x1, {{0x16, 0x4, 0x2, 0x4, 0x58, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xeb, 0x0, 0x9, [0x0]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x29, 0x0, [{0x1, 0x6, "bcafac50"}, {0x0, 0x12, "5d831302daf9779ce9fade784e543cc8"}, {0x1, 0xb, "08ad5eecc23f209da4"}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0x59, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000c40)={@private, @remote, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x19c, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.872770975s ago: executing program 2 (id=7307): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x181}, 0x14}}, 0x0) unshare(0x22020600) unshare(0x10200) r3 = socket(0x2d, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) setsockopt$inet_tcp_int(r3, 0x11d, 0x1b, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x28, 0x40, 0x107, 0x70bd2d, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.777848288s ago: executing program 3 (id=7308): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x28000600) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) connect$ax25(r0, &(0x7f0000000380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r7 = socket$inet(0x2, 0x3, 0x2) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="710508c741c50000000000009b10"], 0xf) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x6, 0x4000010, 0xffffffffffffffff, 0x57d2000) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$inet(0x2, 0x3, 0x2) 2.718101674s ago: executing program 2 (id=7309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x60, 0x2, 0x8, 0x6, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x8000, 0x4, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r6, 0x25, 0x5, @void}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000300)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x1, 0x40000000}]}, 0x10) 2.693478145s ago: executing program 1 (id=7310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x3, "89"}]}}}}}}}, 0x0) pipe(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0021954e8374745129caea99bc671e3d", 0x12}], 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.344895948s ago: executing program 4 (id=7311): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.16155373s ago: executing program 3 (id=7312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x30a0, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3074, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x2}}, @TCA_BPF_ACT={0x2fd8, 0x1, [@m_police={0x1e30, 0x19, 0x0, 0x0, {{0xb}, {0xe04, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x5, 0x6, 0x7, {0x9, 0x1, 0x5, 0xfd, 0x8, 0x3}, {0x5, 0x2, 0xfffa, 0x3, 0x401, 0x8}, 0x1, 0x8, 0x8}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x65d, 0x1, 0x1, 0xfffffc01, 0x8, {0x1, 0x0, 0x4, 0x0, 0x7, 0xcdc4}, {0x49, 0x1, 0xb03b, 0x0, 0x5, 0x1}, 0x4, 0xe9, 0xfffffffd}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x0, 0x6, 0x7, {0x40, 0x3, 0x5, 0x3, 0x8, 0x80000000}, {0x5, 0x0, 0x9, 0x7, 0xffff, 0x29}, 0x10000, 0x3ff, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x2, 0x80000001, 0x1, 0x6, {0x4, 0x0, 0x54, 0x76a, 0x100, 0x6}, {0x40, 0x2, 0x1, 0x8, 0x7ba6, 0x3}, 0x7, 0x8, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0x6, 0x6, 0x1, 0x0, 0x81, 0x6, 0x9, 0xb, 0x4, 0xd0, 0x8001, 0xbb21, 0x1, 0x1, 0x4, 0x80000, 0x2, 0x6, 0x1ff, 0xfffffffe, 0x3, 0x621, 0x1, 0x9, 0x7, 0x5, 0x9, 0x8000, 0x2b, 0xfffffffa, 0x3ff, 0x8, 0x7, 0x5, 0x6, 0x1, 0x200, 0x7, 0x40, 0x6, 0xe0, 0x8, 0x2000, 0x1, 0x8, 0x40000, 0x4, 0x80000000, 0xf20, 0x1, 0x0, 0xb, 0xab64, 0x6, 0xbba, 0x4, 0xfffffff7, 0x4, 0x6, 0x1, 0x3ff, 0x0, 0x1, 0x0, 0xffff7fff, 0x0, 0x8, 0x100, 0xd, 0x2, 0x8, 0x3, 0x15, 0x1, 0xf, 0x8, 0x44, 0x2, 0x400, 0x5, 0x0, 0x7f, 0x4, 0xb7, 0x4, 0x4, 0x7fff, 0x200, 0x89c, 0x2, 0x5, 0xf51, 0x800, 0x700c, 0x5, 0x7, 0x9, 0x6, 0x1, 0x9fa, 0xc, 0xd, 0xf4d1, 0x6, 0x0, 0x80000001, 0x9, 0x7fff, 0x2243, 0x4d, 0x1000, 0x8, 0x8, 0xee71, 0x7, 0xfffffffc, 0xc8d, 0xbe, 0x3, 0x3, 0x10001, 0x2, 0x7, 0x2, 0xc9, 0x4, 0x2, 0x1, 0x23a, 0xff, 0x2, 0x7fffffff, 0x5, 0x9, 0x5, 0x0, 0x876d, 0x3, 0x8e, 0x2, 0x15087379, 0xa4, 0x5e8, 0x8, 0x3, 0x100, 0x7, 0x5, 0x800, 0x8, 0x2, 0x84d, 0x8a2, 0x9, 0x6, 0xb4e, 0x5, 0x7, 0x1, 0xd, 0x3, 0x5, 0xfffffffd, 0x8, 0x4, 0x7, 0x1, 0x80000000, 0x8000, 0x7, 0x3, 0xfffffff9, 0x8001, 0x3, 0x1, 0x9, 0x3, 0x5ec, 0x2315, 0x6, 0xfffff801, 0x2c6d, 0x3845014f, 0xffff, 0x4, 0xa5, 0x7, 0xc4, 0x7, 0xfffffff3, 0x5, 0x0, 0xfffffee5, 0xa, 0xfaa, 0x1, 0x0, 0x0, 0x9, 0x100, 0x6, 0x1000, 0x7, 0x1, 0x800, 0x8, 0x3, 0x6, 0x81, 0x6, 0x7, 0x7, 0x956, 0x22, 0x0, 0x2, 0x85eb, 0x8c9, 0x0, 0x80000005, 0xdc0, 0x6, 0x30000000, 0x0, 0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x623ecee8, 0xfff, 0x9, 0x2, 0x7, 0x9, 0x800, 0x0, 0x8, 0x0, 0x8, 0x493, 0x53a2, 0x33, 0x2, 0x9, 0x1ff, 0x892d8f54, 0x0, 0xda5, 0x200, 0x6, 0x8, 0x40000000]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x2, 0x5, 0x18, 0x9, {0xf0, 0x1, 0x70, 0x1, 0x1c30, 0x9}, {0x7, 0x2, 0x8, 0x9, 0x7, 0x7}, 0x5, 0x8, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x4, 0x4, 0x5, {0xa7, 0x1, 0x7, 0x3, 0x7, 0x3}, {0x1, 0x2, 0x9, 0x2909, 0x8001, 0x7b99b316}, 0x101, 0x1, 0x9}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xdd9, 0x4, 0x7, 0x7, 0x380, 0x5a, 0x4, 0xffff, 0x7fff, 0x8, 0x10, 0x8, 0xb417, 0x2, 0xe, 0x4, 0x3, 0x0, 0x1, 0x8, 0x4, 0x1, 0xf56, 0xae4, 0x8000, 0x3, 0xffc8, 0x2, 0x2, 0x21, 0xae, 0x9, 0x24, 0x8, 0xb13f, 0x3ff, 0x0, 0x5, 0x2, 0x7, 0x9, 0xffff8000, 0x1, 0x7, 0x8000, 0x8, 0x7, 0x54182b18, 0xfffff3ea, 0x5, 0x9, 0x7, 0x1, 0x5, 0x80000001, 0x1ff, 0xd5, 0xffffffff, 0x2, 0x0, 0x9, 0x0, 0x9, 0x5, 0x5fe, 0xa, 0xd824, 0x7, 0x8a04, 0x1, 0x3, 0x6, 0x5, 0x5f, 0x9, 0x6, 0xfffffffa, 0x535, 0x2f331fcb, 0x100, 0x9, 0x6a92, 0x80, 0xfffffbff, 0xffffff3c, 0x7ff, 0x2, 0x0, 0x6, 0x9, 0xfffffa3a, 0x8, 0xc44a, 0x9, 0x7fff, 0x4, 0x9, 0xc, 0x0, 0x401, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x9, 0x2, 0x81, 0x3, 0xffffffff, 0x3, 0x2, 0x0, 0x6, 0x200, 0x2, 0x3, 0x2, 0x7edf, 0x9, 0xd, 0xfffffffe, 0x3, 0x7, 0x9, 0xfffffb33, 0x7, 0x0, 0x8, 0xaaf0, 0x9, 0xffffffff, 0x4, 0x3ff, 0xa7e, 0xfffffff7, 0x8, 0x6, 0x2, 0xac9e, 0x8, 0x2, 0x2, 0xff, 0x1, 0x6a, 0x10, 0x5, 0x3, 0x101, 0xfffffffc, 0x0, 0x800, 0x1, 0x4, 0xfffff000, 0x8, 0x6, 0x0, 0xe22, 0x269, 0x3, 0x8, 0x7fff, 0x0, 0xeac, 0xd8d, 0x9, 0xb090, 0x0, 0x9, 0xfffffeff, 0x1, 0x5, 0x4, 0xc7, 0x9, 0x4, 0x8, 0x80000000, 0x6, 0x7, 0xfffffc01, 0x6ae6, 0x8, 0x9, 0x7, 0x3, 0xf, 0x4, 0x863, 0x401, 0x9, 0xfff, 0x5, 0x6, 0x9, 0x1, 0xffff, 0x7, 0x8, 0xa, 0x4d, 0xc95e, 0x8, 0x6, 0x2, 0x0, 0x3, 0x23, 0x1ff, 0x101, 0x2b1c, 0x4, 0x6, 0x5, 0x7, 0x3ff, 0xdb, 0x2, 0x5, 0x0, 0x1b7, 0x0, 0x7fffffff, 0x1, 0xff, 0xfffffcf8, 0xfff, 0x249, 0xb46, 0xaf6, 0x1, 0x4ce9, 0x2, 0xf7d, 0x9d04, 0x3, 0x65f, 0xfffffff7, 0x7901, 0x1, 0x9, 0x7, 0x100, 0x1, 0x7f, 0x0, 0x14b, 0xb7, 0x8, 0x2, 0xfffffff8, 0x101, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x6, 0x9, 0x4, {0x2, 0x0, 0xfff, 0xc, 0x0, 0x5}, {0xf, 0x0, 0x2, 0x2, 0x5, 0x8}, 0x39d6, 0x6, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x80, 0x1, 0x8, 0x6, 0x1000, 0x6, 0x1, 0x4, 0xe5, 0x9, 0xfffffffb, 0x5, 0xfffffffa, 0x10, 0xffffffff, 0xffffffff, 0xb553, 0x9, 0x7, 0xf40e, 0x2, 0x3, 0x8, 0x8000, 0xffffffff, 0x28c0, 0x4, 0xfffffffd, 0xffffffad, 0x1, 0x4029, 0x2, 0x2, 0x1, 0x5, 0x97e, 0x10000, 0x4, 0x8, 0x0, 0x5, 0x4, 0xf6, 0x0, 0x5, 0x59f1, 0x5, 0x7ff, 0x5eaf, 0x1, 0xfffffffa, 0x5, 0x2, 0x3, 0x64, 0x7, 0x7f, 0x698, 0x1, 0x7, 0xffffffff, 0x7, 0x0, 0x9, 0xfff, 0x3, 0xfffffffb, 0x2, 0x8, 0xd, 0xfffffffb, 0x3685d42, 0x401, 0x9, 0xd2, 0x1525, 0x800, 0x1000, 0x8, 0xfffffffb, 0x5, 0x547, 0x758af510, 0x2, 0x80, 0x3, 0x6, 0x49, 0x401, 0x9, 0x2, 0x2a, 0x7, 0x1, 0x3, 0x5, 0x4, 0x3, 0x2, 0xf, 0x8, 0xd, 0x6, 0xf3, 0x9, 0x5, 0x8, 0x7, 0x9, 0x8, 0xa2, 0x7fffffff, 0x17, 0x1000, 0x1ff, 0x9, 0x34, 0x5, 0x0, 0x4, 0xfffff241, 0x7, 0x5, 0x2, 0x50a, 0xfffffffd, 0x6, 0x7, 0x47e6, 0x10000, 0x80, 0x3, 0x0, 0x7f, 0x0, 0x2, 0x7, 0x2, 0x5, 0xf5, 0x5, 0x8, 0x10, 0x6, 0x8, 0x1, 0x5, 0xc, 0x10000, 0x8001, 0xffff, 0xfe9d, 0x4, 0x2, 0x10000, 0x200, 0x80000001, 0xff, 0x418b, 0x38e, 0x8, 0x4, 0x80000000, 0x0, 0xffffe1a1, 0x8, 0x10001, 0xb5b, 0x5e11, 0x3ff, 0x9258, 0x4, 0x1b, 0x5, 0x0, 0x63, 0x12c, 0x0, 0x8, 0xa, 0x2, 0x942, 0x80000001, 0x1, 0x1, 0x7, 0x1, 0x2, 0xe0b, 0x6, 0xd, 0x5, 0x1e5c, 0x3, 0xffff, 0x80, 0x7, 0x3, 0x5, 0xb, 0x9, 0x7, 0x1, 0x80000000, 0x4, 0x7ff, 0x0, 0x81, 0xbd, 0x9, 0x8, 0x9, 0x0, 0x8001, 0x100, 0x5, 0x9, 0x4, 0x9, 0x3, 0x4, 0x3, 0x200, 0x6, 0x46, 0xc, 0x8, 0x7, 0x9, 0x5, 0x7f, 0x9, 0x10, 0x7fffffff, 0x1, 0xf, 0x5242, 0x8001, 0x0, 0x4, 0x1, 0xfffffff4, 0x4d, 0x0, 0x5, 0x5, 0x2, 0x7d5b6d49, 0xfb, 0xffffffff, 0x6, 0x21, 0xf7, 0x7, 0xffffffff]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x154, 0x16, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x260, 0x8, 0x6, 0x80, 0x5}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x10000, 0x5, 0x1, 0x840}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x7fff, 0xf64a}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2b9c, 0x7, 0x32, 0xe9b}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x20000000, 0xffffffff, 0x78}, 0x1b}}]}, {0x99, 0x6, "3b6f867cefd1fffa5b5ef7e947b9e85928bde8dc45574128adc7c0de4f2a2ab013f403bdcdadc95a693c9c2ec84dc737cd410e7692d9bd031ad2100927c570423e76103c5d69073a1870b9d0c41da79e766592786e0865e085d6b2e187f480cfa99922074a0618c12b8702a1edb1a82408d449933d78d0bd769ac97f5ec233365fcc7818fc41be41154c0f53b23757385e3138caec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x1050, 0x20, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffff7, 0x0, 0x3, 0x81, 0x81}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xff4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}]}, @TCA_BPF_ACT={0x74, 0x1, [@m_connmark={0x70, 0x9, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x6, 0x4}, 0x1}}]}, {0x22, 0x6, "91e08efa70fabed3a2669f1051a8237fc128ba7fd2bcf2e1badfdd4e8a26"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}]}, 0x30a0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r4, &(0x7f0000000f80)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x6, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500020000000500010006000000050005000a00000005000400010000000900020073797a32"], 0x60}}, 0x0) close(r3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.134811742s ago: executing program 4 (id=7313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6"], 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000028000000000000000000000007000000940400074414"], 0x48}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000900)=0x5, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @broadcast}, {0x6, @random="cfd4492650b5"}, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000840)="eb5d54db26", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002900)="e00f", 0x2}], 0x1}}], 0x2, 0x80) 2.107627655s ago: executing program 0 (id=7314): r0 = socket(0x29, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000003c0)="3f88d46e61caf692d9c5ce81a4bd149b5283656e1c51b0396361f5e812b547541fa23aecce3a6a04c2757922e48c7d376e2329c07087ca3f62e282d123044d436b71e3e10fb6f687dce1d4e063f6b0473a135b59e1d25fa8af5e577d32b7172faed67fe1e878eaed33957de1122028a146398c02497897996b64e95d36958d98b56bb9", 0x83) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000007004880100001800c00108004000880040008800c000200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000019000109000000002400000002180000000bfd010000000008000100ac14140008"], 0x44}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdabd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0xfff3, 0xfff1}, {0xd, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000040)={0x8, 'vcan0\x00', {'veth1\x00'}, 0x5}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0xea60}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x119, 0x22, 0x0, 0x0) 1.900981346s ago: executing program 1 (id=7315): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="7eb9de3828ba416156e02b41c395e0fd55a0", &(0x7f0000000080)=""/156}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000000900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.830946738s ago: executing program 1 (id=7316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000abaff9), 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) accept4(r1, 0x0, &(0x7f0000000000), 0xc0000) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0xc}, {0x7, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) write(r3, &(0x7f0000000140)="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", 0xfc) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfff1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.786770711s ago: executing program 2 (id=7317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0), 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="3900000014", 0x5}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f00000002c0), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000430000506ce6e1ae747ba42f000900db0554", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x4f, 0x0, 0x9, 0x20, 'syz1\x00', "3857cecaf38ff2380a040060c1ffe9c400", "5e86a45c7cb14d7660fd5bcfea22c83962c9d822c5674ce859d5c887d3bd005b", [{0x401, 0x5, {0x3, 0x1}}, {0xfffa, 0xb, {0x2, 0x68}}, {0x7, 0x9, {0x0, 0x7}}, {0x8, 0x100, {0x0, 0xac}}, {0x0, 0x200, {0x0, 0x7fff}}, {0xca6, 0x40, {0x3, 0x9e}}, {0x4, 0xe4, {0x3}}, {0x4, 0xc25b, {0x0, 0x7}}, {0x4, 0x5, {0x2, 0x5}}, {0x400, 0x5, {0x2, 0xfffffff7}}, {0xefb9, 0x3, {0x0, 0x6}}, {0x200, 0x4, {0x1, 0x6}}, {0x3c, 0x8, {0x0, 0x7}}, {0x3, 0xffff, {0x2, 0xfffffc00}}, {0x4, 0x1, {0x1, 0x6}}, {0x3, 0xf, {0x0, 0xf}}, {0x0, 0xfffd, {0x0, 0x4}}, {0x9, 0x8ebf, {0x0, 0x3}}, {0x81, 0x38, {0x1, 0xa}}, {0xb2, 0x4, {0x7d0b2aa69662c826, 0x9}}, {0x2, 0x7, {0x3, 0xa}}, {0x4, 0x9, {0x2, 0x8}}, {0x100, 0x1, {0x2, 0xfffffff8}}, {0xdb6, 0x8, {0x0, 0x1ff}}, {0x7, 0x8, {0x3, 0x6}}, {0x5, 0x6, {0x3, 0x6}}, {0x5, 0x3, {0x0, 0x10000}}, {0xa, 0xc70, {0xe5709f1ebfa68788, 0xdaf1}}, {0x2, 0xbd, {0x0, 0x3}}, {0xb6, 0x9, {0x2, 0x9}}, {0x3, 0x4, {0x1, 0x77}}, {0x96a, 0x1, {0x3, 0x4a4e83fd}}, {0x200, 0x6, {0x2, 0x4}}, {0x9, 0x9, {0x0, 0x7}}, {0x9, 0x5, {0x1, 0x80000001}}, {0x0, 0x100, {0x1, 0xa1bf}}, {0x4, 0x0, {0x3, 0x84ac}}, {0xa783, 0x4, {0x3, 0x3}}, {0x4, 0x63, {0x3, 0xcc97}}, {0x5, 0x5, {0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0xf7, 0x40, 0x7, 0x5, 0x28, 'syz1\x00', "7d9b3835d7bd41b52fb69a0c782ab715eed315fa5acda01213ac8d0d2e5c5091", "9acddfa517176e9a559333adffccb06f9b5a62c018402b9c95a5db16b17d066d", [{0xfff, 0xffff, {0x2, 0x3}}, {0x4, 0x0, {0x2, 0x2}}, {0x6, 0xc24}, {0x1000, 0x7, {0x3, 0x4}}, {0x1, 0x0, {0x1, 0x8}}, {0x0, 0x4}, {0x5, 0xffff, {0x0, 0x2cd}}, {0x4, 0x5, {0x3, 0x6}}, {0x6, 0x1, {0x3, 0x8}}, {0x6, 0x9, {0x0, 0x8}}, {0x400, 0x1000, {0x0, 0x8}}, {0x800, 0xb4, {0x1, 0xfffffff8}}, {0x1, 0x6, {0x0, 0x1}}, {0xc, 0x0, {0x2, 0x8}}, {0x4, 0xa, {0x2, 0x7}}, {0x3, 0x6, {0x4378b5caa14d5167, 0x9}}, {0x2b, 0x0, {0x2, 0x518}}, {0x0, 0x4, {0x2, 0xfffffff8}}, {0x7fff, 0x800, {0x2, 0xfffffff9}}, {0x3, 0x1000, {0xd7154b83599620a9, 0x3}}, {0x9, 0x2000, {0x3, 0x16}}, {0x6, 0x7c9, {0x0, 0x5}}, {0x3, 0x1ff, {0x3, 0xe72d}}, {0xb6ce, 0x6c, {0x0, 0x3}}, {0x5, 0x4, {0x2, 0x62cbd22d}}, {0xb, 0x9, {0x3, 0x2}}, {0x7fff, 0x0, {0x2, 0x9}}, {0x8, 0x7ff, {0x1, 0x7fff}}, {0x400, 0x7, {0x0, 0x7}}, {0x699, 0x3, {0x2, 0xc818}}, {0x7ff, 0x3, {0x2, 0x1ff}}, {0x401, 0x2, {0x0, 0x3}}, {0x2, 0x101, {0x3, 0x9}}, {0x0, 0x8000, {0x0, 0xfc95}}, {0x0, 0x9, {0x0, 0xa}}, {0x2, 0xe, {0x3, 0x4}}, {0x40, 0x5, {0x0, 0x9}}, {0xfffc}, {0x3, 0x7, {0x0, 0x9}}, {0x6ceb, 0xa, {0x3, 0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4001}, 0x40815) sendmmsg$inet(r4, &(0x7f0000001540), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) r9 = accept4(r8, &(0x7f0000000380)=@nfc_llcp, &(0x7f0000000980)=0x80, 0x800) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f00000009c0)=0x21, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x9, @private0, 0x8}, {0xa, 0x4e22, 0x9, @local, 0xe}, 0xffffffffffffffff, {[0x5, 0x10, 0xffff, 0x5fdc, 0x3, 0x101, 0x800]}}, 0x5c) 1.129239847s ago: executing program 4 (id=7318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.025000278s ago: executing program 4 (id=7319): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) unshare(0x20000400) (async, rerun: 64) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffd, 0x809}, &(0x7f00000007c0)=0x90) (async) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) (async, rerun: 32) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (rerun: 32) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r4, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 0s ago: executing program 4 (id=7320): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020168f58010000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @empty, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100edff00ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x4004800) kernel console output (not intermixed with test programs): VQ 0x0 after dequeue, screwing up backlog [ 880.895950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.921708][T29948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.938995][T29948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.986703][T29948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.010208][T29948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.017196][T29948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.071190][T29948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.240752][T29948] hsr_slave_0: entered promiscuous mode [ 881.247652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.265798][T29948] hsr_slave_1: entered promiscuous mode [ 882.277834][ T50] Bluetooth: hci3: command tx timeout [ 882.416083][T30102] __nla_validate_parse: 1 callbacks suppressed [ 882.416101][T30102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5970'. [ 882.636231][T30106] netlink: 'syz.2.5971': attribute type 4 has an invalid length. [ 882.660249][T29948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.675399][T29948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.683614][T29948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.690744][T30106] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5971'. [ 882.711751][T29948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.722753][T29948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 882.738338][T29948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.754067][T29948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 882.776850][T29948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.952586][T29948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.984018][T29948] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.004189][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.011422][ T7043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.040890][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.048156][ T7043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.233150][T30130] dvmrp0: left allmulticast mode [ 883.524061][T29948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.631241][T30152] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5978'. [ 883.679052][T30152] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5978'. [ 883.701243][T29948] veth0_vlan: entered promiscuous mode [ 883.751333][T29948] veth1_vlan: entered promiscuous mode [ 883.851279][T29948] veth0_macvtap: entered promiscuous mode [ 883.893207][T29948] veth1_macvtap: entered promiscuous mode [ 883.925444][T30156] lo speed is unknown, defaulting to 1000 [ 883.955203][T29948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.982762][T30156] gre0 speed is unknown, defaulting to 1000 [ 883.990487][T29948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.009356][T30162] netlink: 'syz.2.5982': attribute type 1 has an invalid length. [ 884.025561][T16466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.054455][T16466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.079676][T16466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.092872][T30164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5982'. [ 884.238584][T30162] 8021q: adding VLAN 0 to HW filter on device bond16 [ 884.263434][T16466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.347486][ T50] Bluetooth: hci3: command tx timeout [ 884.634530][T25226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.668465][T25226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.761636][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.773219][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.810960][T30181] netlink: 'syz.4.5986': attribute type 8 has an invalid length. [ 884.819370][T30175] gtp2: entered promiscuous mode [ 884.826096][T30175] gtp2: entered allmulticast mode [ 884.834654][T30181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5986'. [ 884.863049][T30180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5985'. [ 884.891107][T30181] veth1_to_team: entered promiscuous mode [ 884.892924][T30180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5985'. [ 884.907059][T30181] veth1: entered promiscuous mode [ 884.938835][T30181] veth1_to_team: left promiscuous mode [ 884.952210][T30181] veth1: left promiscuous mode [ 885.249543][T30196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5989'. [ 885.298690][T30196] netlink: 'syz.0.5989': attribute type 2 has an invalid length. [ 885.319858][T30196] netlink: 'syz.0.5989': attribute type 1 has an invalid length. [ 885.348498][T30196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5989'. [ 885.592616][T30198] netlink: 'syz.4.5990': attribute type 2 has an invalid length. [ 885.613674][T30203] net_ratelimit: 2 callbacks suppressed [ 885.613691][T30203] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 885.664159][T30203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.871780][ T50] block nbd1: Receive control failed (result -32) [ 885.942552][T30213] netlink: 'syz.0.5996': attribute type 1 has an invalid length. [ 886.114825][T30213] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.428638][ T50] Bluetooth: hci3: command tx timeout [ 886.498555][T30244] syzkaller0: entered promiscuous mode [ 886.504336][T30244] syzkaller0: entered allmulticast mode [ 886.513474][T30241] tipc: Enabled bearer , priority 0 [ 886.662311][T30241] tipc: Resetting bearer [ 888.996712][T30241] tipc: Disabling bearer [ 889.002123][ T5143] Bluetooth: hci3: command 0x0405 tx timeout [ 889.275547][T30300] __nla_validate_parse: 8 callbacks suppressed [ 889.275568][T30300] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6020'. [ 889.508898][T30317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6026'. [ 890.000943][T30349] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6037'. [ 890.015533][T30345] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6036'. [ 890.037607][T30348] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6037'. [ 890.056912][T30349] openvswitch: netlink: Flow key attr not present in new flow. [ 890.080208][T30348] openvswitch: netlink: Flow key attr not present in new flow. [ 890.178193][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6039'. [ 890.200267][T30364] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 890.305544][T30369] netlink: 'syz.2.6041': attribute type 2 has an invalid length. [ 890.325138][T30373] xt_TCPMSS: Only works on TCP SYN packets [ 890.344425][T30373] netlink: 'syz.0.6042': attribute type 12 has an invalid length. [ 890.793686][T30380] lo speed is unknown, defaulting to 1000 [ 890.827094][T30380] gre0 speed is unknown, defaulting to 1000 [ 891.124884][T30408] lo speed is unknown, defaulting to 1000 [ 891.523023][T30408] gre0 speed is unknown, defaulting to 1000 [ 891.723291][T30433] lo speed is unknown, defaulting to 1000 [ 892.195035][T30433] gre0 speed is unknown, defaulting to 1000 [ 892.920636][T30457] lo speed is unknown, defaulting to 1000 [ 892.949891][T30457] gre0 speed is unknown, defaulting to 1000 [ 893.437807][T30483] 8021q: VLANs not supported on lo [ 893.912614][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6076'. [ 894.652252][T30526] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6085'. [ 894.811019][T30534] dvmrp1: entered allmulticast mode [ 894.822101][T30534] dvmrp1: left allmulticast mode [ 894.968641][T30541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6089'. [ 895.165468][T30550] lo speed is unknown, defaulting to 1000 [ 895.224506][T30550] gre0 speed is unknown, defaulting to 1000 [ 895.571594][T30614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 895.639184][T30616] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6096'. [ 895.797735][T30624] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6099'. [ 895.915784][T30629] netlink: zone id is out of range [ 895.923774][T30629] netlink: get zone limit has 4 unknown bytes [ 896.254035][T30646] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 896.298829][T30646] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6107'. [ 896.496542][T30657] hsr0: entered promiscuous mode [ 896.522064][T30656] hsr0: left promiscuous mode [ 896.873740][T30676] netlink: 'syz.3.6116': attribute type 1 has an invalid length. [ 897.091942][T30686] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6119'. [ 897.512689][T30708] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6128'. [ 897.545324][T30704] lo speed is unknown, defaulting to 1000 [ 897.562397][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'. [ 897.572191][T30704] gre0 speed is unknown, defaulting to 1000 [ 897.731007][T30716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.862059][T30725] netlink: 'syz.1.6132': attribute type 2 has an invalid length. [ 898.227555][T30735] x_tables: unsorted entry at hook 2 [ 898.245604][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6138'. [ 898.558271][T30748] syzkaller0: entered promiscuous mode [ 898.570987][T30748] syzkaller0: entered allmulticast mode [ 901.048915][T30754] lo speed is unknown, defaulting to 1000 [ 901.081812][T30784] __nla_validate_parse: 1 callbacks suppressed [ 901.081879][T30784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6148'. [ 901.102585][T30785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 901.114922][T30754] gre0 speed is unknown, defaulting to 1000 [ 901.785695][T30814] netlink: 'syz.2.6157': attribute type 49 has an invalid length. [ 901.993007][T30824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6160'. [ 902.062412][T30819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6159'. [ 902.086120][T30819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6159'. [ 902.142369][T30829] netlink: 'syz.0.6162': attribute type 1 has an invalid length. [ 902.349998][T30829] bond1: entered promiscuous mode [ 902.372878][T30829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.400854][T30825] lo speed is unknown, defaulting to 1000 [ 902.433832][ T50] block nbd2: Receive control failed (result -32) [ 902.440801][T30825] gre0 speed is unknown, defaulting to 1000 [ 902.489217][T29953] block nbd2: NBD_DISCONNECT [ 902.496319][T29953] block nbd2: Send disconnect failed -32 [ 902.545243][T29953] block nbd2: shutting down sockets [ 902.977015][T30855] syzkaller0: entered promiscuous mode [ 903.005012][T29953] udevd[29953]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 903.015069][T30855] syzkaller0: entered allmulticast mode [ 903.208748][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 903.225768][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 903.236555][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 903.245138][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 903.253541][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 903.329929][T30861] netlink: 'syz.4.6170': attribute type 10 has an invalid length. [ 903.364668][T30858] lo speed is unknown, defaulting to 1000 [ 903.398246][T30861] team0: left allmulticast mode [ 903.420705][T30861] team0: left promiscuous mode [ 903.466677][T30861] bridge0: port 1(team0) entered disabled state [ 903.494288][T30861] team0: Cannot enslave team device to itself [ 903.552204][T30858] gre0 speed is unknown, defaulting to 1000 [ 903.569521][T30861] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6170'. [ 903.602866][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6170'. [ 903.626761][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6170'. [ 903.654807][T30869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6173'. [ 903.666962][T30861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6170'. [ 903.702911][T30861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.718166][T30861] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.729732][T30861] 0X: left allmulticast mode [ 903.734806][T30861] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 903.862037][T30573] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 904.039364][T30875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 904.046690][T30875] IPv6: NLM_F_CREATE should be set when creating new route [ 904.066176][T30877] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 904.097546][T30573] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 904.222524][T30573] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 904.342532][T30573] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 904.976552][T30573] vlan4: left promiscuous mode [ 904.989989][T30573] team0: left promiscuous mode [ 905.001425][T30573] C: left promiscuous mode [ 905.027719][T30573] team_slave_1: left promiscuous mode [ 905.037088][T30573] bridge6: port 3(vlan4) entered disabled state [ 905.061203][T30573] veth0_to_bond: left allmulticast mode [ 905.079405][T30573] veth0_to_bond: left promiscuous mode [ 905.086322][T30573] bridge6: port 2(veth0_to_bond) entered disabled state [ 905.110376][T30573] veth9: left allmulticast mode [ 905.115309][T30573] veth9: left promiscuous mode [ 905.127499][T30573] bridge6: port 1(veth9) entered disabled state [ 905.152531][T30573] bond11: left allmulticast mode [ 905.164264][T30573] bond11: left promiscuous mode [ 905.181732][T30573] bridge7: port 1(bond11) entered disabled state [ 905.392444][ T50] Bluetooth: hci5: command tx timeout [ 905.506911][T30573] bond4 (unregistering): (slave gretap2): Releasing active interface [ 905.894585][T30573] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 906.014633][T30573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.025136][T30573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.035741][T30573] bond0 (unregistering): Released all slaves [ 906.056357][T30573] bond1 (unregistering): Released all slaves [ 906.073288][T30573] bond2 (unregistering): (slave veth3): Releasing active interface [ 906.082262][T30573] bond2 (unregistering): Released all slaves [ 906.105619][T30573] bond3 (unregistering): (slave veth5): Releasing active interface [ 906.114577][T30573] bond3 (unregistering): Released all slaves [ 906.131333][T30573] bond4 (unregistering): Released all slaves [ 906.150453][T30573] bond5 (unregistering): Released all slaves [ 906.165358][T30573] bond6 (unregistering): Released all slaves [ 906.182692][T30573] bond7 (unregistering): Released all slaves [ 906.205948][T30573] bond8 (unregistering): Released all slaves [ 906.221854][T30573] bond9 (unregistering): Released all slaves [ 906.236877][T30573] bond10 (unregistering): Released all slaves [ 906.260521][T30573] bond11 (unregistering): Released all slaves [ 906.280378][T30573] bond12 (unregistering): Released all slaves [ 906.304011][T30573] bond13 (unregistering): Released all slaves [ 906.321307][T30573] bond14 (unregistering): (slave wireguard0): Releasing backup interface [ 906.329996][T30573] wireguard0: left promiscuous mode [ 906.336798][T30573] bond14 (unregistering): Released all slaves [ 906.352701][T30573] bond15 (unregistering): Released all slaves [ 906.373392][T30573] bond16 (unregistering): Released all slaves [ 906.423636][T30911] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 906.458402][T30911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 906.544034][T30858] chnl_net:caif_netlink_parms(): no params data found [ 906.802835][T30573] !9: left promiscuous mode [ 906.984370][T30573] : left promiscuous mode [ 907.103601][T30858] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.144871][T30940] __nla_validate_parse: 14 callbacks suppressed [ 907.144898][T30940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6191'. [ 907.164831][T30858] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.192230][T30858] bridge_slave_0: entered allmulticast mode [ 907.223972][T30858] bridge_slave_0: entered promiscuous mode [ 907.246086][T30573] !: left promiscuous mode [ 907.270299][T30946] netlink: 'syz.4.6191': attribute type 13 has an invalid length. [ 907.283246][T30858] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.287104][T30946] netlink: 'syz.4.6191': attribute type 17 has an invalid length. [ 907.310805][T30858] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.327784][T30858] bridge_slave_1: entered allmulticast mode [ 907.338370][T30858] bridge_slave_1: entered promiscuous mode [ 907.464392][T30946] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 907.481877][ T50] Bluetooth: hci5: command tx timeout [ 907.493744][T30573] l24): left promiscuous mode [ 907.689393][T30573] tipc: Disabling bearer [ 907.710650][T30573] tipc: Left network mode [ 907.749900][T30858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.802227][T30858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.002907][T30858] team0: Port device team_slave_0 added [ 908.009514][T30992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6198'. [ 908.060765][T30858] team0: Port device team_slave_1 added [ 908.160935][T30573] IPVS: stopping backup sync thread 29377 ... [ 908.183211][T30858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.203605][T30858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.224014][T31001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.262914][T31001] netlink: 'syz.1.6201': attribute type 10 has an invalid length. [ 908.279908][T31001] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 908.311056][T30858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.352057][T30858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.387660][T30858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.458562][T30858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.688694][T31013] batman_adv: batadv0: Adding interface: gretap2 [ 908.707347][T31013] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.738515][T31013] batman_adv: batadv0: Interface activated: gretap2 [ 908.767072][T30858] hsr_slave_0: entered promiscuous mode [ 908.776780][T30858] hsr_slave_1: entered promiscuous mode [ 908.785861][T30858] debugfs: 'hsr0' already exists in 'hsr' [ 908.792500][T30858] Cannot create hsr debugfs directory [ 908.828024][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 908.975557][T31034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6211'. [ 908.988021][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6211'. [ 909.043947][T31034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6211'. [ 909.260198][T31042] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:28193 [ 909.548872][ T50] Bluetooth: hci5: command tx timeout [ 909.863705][T31048] gtp2: entered promiscuous mode [ 909.874698][T31048] gtp2: entered allmulticast mode [ 910.662119][T31072] bond0: (slave batadv0): Releasing backup interface [ 910.685601][T31072] bridge_slave_0: left allmulticast mode [ 910.691792][T31072] bridge_slave_0: left promiscuous mode [ 910.698332][T31072] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.710150][T31072] bridge_slave_1: left allmulticast mode [ 910.717920][T31072] bridge_slave_1: left promiscuous mode [ 910.725621][T31072] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.759897][T31072] bond0: (slave bond_slave_0): Releasing backup interface [ 910.772320][T31072] team0: Port device team_slave_0 removed [ 910.792294][T31072] team0: Port device team_slave_1 removed [ 910.799326][T31072] veth0_to_batadv: left promiscuous mode [ 910.805679][T31072] veth0_to_batadv: left allmulticast mode [ 910.812328][T31072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.821290][T31072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.831749][T31072] team0: Port device macvlan0 removed [ 910.842996][T31072] bond1: (slave veth3): Releasing backup interface [ 910.857508][T31076] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 910.869655][T31072] bond2: (slave bridge1): Releasing active interface [ 910.881255][T31072] bond5: (slave bridge2): Releasing backup interface [ 910.891883][T31072] team1: left promiscuous mode [ 910.896811][T31072] team1: left allmulticast mode [ 910.903113][T31072] bridge4: left promiscuous mode [ 910.910220][T31072] team2: left promiscuous mode [ 910.918386][T31072] team2: left allmulticast mode [ 910.924497][T31072] bond9: left promiscuous mode [ 910.929943][T31072] erspan1: left promiscuous mode [ 910.935140][T31072] bond9: left allmulticast mode [ 910.941319][T31072] erspan1: left allmulticast mode [ 910.948225][T31072] bond9: (slave erspan1): Releasing active interface [ 910.959207][T31072] bond3: (slave ip6gretap1): Releasing backup interface [ 910.968863][T31072] bridge5: left promiscuous mode [ 910.974072][T31072] bridge5: left allmulticast mode [ 910.981765][T31072] team0: Port device bridge5 removed [ 910.993341][T31072] geneve3: left promiscuous mode [ 910.998958][T31072] bond10: left promiscuous mode [ 911.004014][T31072] bond10: left allmulticast mode [ 911.011271][T31072] bond11: (slave veth15): Releasing backup interface [ 911.018735][T31072] bond11: (slave veth15): the permanent HWaddr of slave - 62:f5:2b:18:17:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 911.038598][T31072] bond11: (slave batadv1): Releasing backup interface [ 911.046718][T31072] gtp1: left promiscuous mode [ 911.052050][T31072] gtp1: left allmulticast mode [ 911.057222][T31072] ip6tnl6: left allmulticast mode [ 911.063402][T31072] batman_adv: batadv0: Interface deactivated: gretap2 [ 911.073609][T31072] batman_adv: batadv0: Removing interface: gretap2 [ 911.085498][T31072] gtp2: left promiscuous mode [ 911.090662][T31072] gtp2: left allmulticast mode [ 911.103292][T30573] hsr_slave_0: left promiscuous mode [ 911.118142][T30573] hsr_slave_1: left promiscuous mode [ 911.402265][T30573] team_slave_1 (unregistering): left allmulticast mode [ 911.411543][T30573] team0 (unregistering): Port device team_slave_1 removed [ 911.429435][T30573] C (unregistering): left allmulticast mode [ 911.436047][T30573] team0 (unregistering): Port device C removed [ 911.635460][ T50] Bluetooth: hci5: command tx timeout [ 911.759979][T31023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.818284][T31073] netlink: 'syz.1.6225': attribute type 2 has an invalid length. [ 911.833114][T30858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 911.887183][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 911.895386][T30858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.957143][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 911.988121][T31080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6226'. [ 911.998426][T30858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 912.031133][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 912.061656][T31083] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6227'. [ 912.071733][T30858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.111008][T31089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6228'. [ 912.120502][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 912.141342][T30573] IPVS: stop unused estimator thread 0... [ 912.143174][T31092] netlink: 'syz.3.6226': attribute type 2 has an invalid length. [ 912.239672][T31080] netlink: 'syz.3.6226': attribute type 11 has an invalid length. [ 912.390582][T31080] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6226'. [ 913.035753][T31112] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.457661][T31112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.495333][T31112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.060731][T30600] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.070167][T30600] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.084925][T30600] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.094216][T30600] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.173497][T30858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.229382][T30858] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.252216][T30600] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.259401][T30600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.281161][T31137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6235'. [ 914.292502][T31137] netlink: 780 bytes leftover after parsing attributes in process `syz.3.6235'. [ 914.313144][T30602] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.316280][T31137] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 914.320370][T30602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.379177][T31135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6233'. [ 914.422111][T31141] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6235'. [ 914.463148][T31144] ip6tnl2: entered promiscuous mode [ 914.470219][T31144] ip6tnl2: entered allmulticast mode [ 914.912375][T31164] lo speed is unknown, defaulting to 1000 [ 914.929990][T30858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.952443][T31164] gre0 speed is unknown, defaulting to 1000 [ 915.075823][T30858] veth0_vlan: entered promiscuous mode [ 915.125547][T30858] veth1_vlan: entered promiscuous mode [ 915.314604][T30858] veth0_macvtap: entered promiscuous mode [ 915.360312][T30858] veth1_macvtap: entered promiscuous mode [ 915.416893][T30858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.473445][T30858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.526064][T31191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6243'. [ 915.550716][T30602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.586939][T30602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.624159][T30602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.652763][T30602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.971809][T31207] netlink: 'syz.0.6249': attribute type 13 has an invalid length. [ 915.992314][T31207] netlink: 'syz.0.6249': attribute type 17 has an invalid length. [ 916.200449][T31207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.223043][T31207] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.265855][T31207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 916.441059][T30602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.443903][T31217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 916.458652][T30602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.513194][T31204] lo speed is unknown, defaulting to 1000 [ 916.540801][T31204] gre0 speed is unknown, defaulting to 1000 [ 916.596421][T30602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.613414][T30602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.892477][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6251'. [ 916.933430][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6251'. [ 917.171716][T31239] netlink: 'syz.4.6254': attribute type 2 has an invalid length. [ 917.232416][T31239] netlink: 'syz.4.6254': attribute type 4 has an invalid length. [ 917.525721][T31250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6256'. [ 918.067214][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 918.082656][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 918.092382][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 918.151976][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 918.168700][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 918.199389][T31270] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6259'. [ 918.482198][T18953] lec:lec_start_xmit: lec0:No lecd attached [ 918.491047][T31274] lo speed is unknown, defaulting to 1000 [ 918.603572][T31288] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6261'. [ 918.625397][T31274] gre0 speed is unknown, defaulting to 1000 [ 918.670189][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6261'. [ 918.722132][T31292] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 918.795511][T31295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6264'. [ 918.891926][T31292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 918.908410][T31287] lo speed is unknown, defaulting to 1000 [ 918.930519][T30573] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.984191][T31294] lo speed is unknown, defaulting to 1000 [ 919.032693][T30573] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.045157][T31299] netlink: 'syz.0.6265': attribute type 6 has an invalid length. [ 919.133844][T31301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6266'. [ 919.143290][T31301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6266'. [ 919.189099][T30573] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.229365][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 919.240102][T31287] gre0 speed is unknown, defaulting to 1000 [ 919.293216][T30573] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.608682][T31294] gre0 speed is unknown, defaulting to 1000 [ 919.920266][T31274] chnl_net:caif_netlink_parms(): no params data found [ 920.270598][ T50] Bluetooth: hci2: command tx timeout [ 920.471217][T30573] bond10 (unregistering): (slave gretap1): Releasing active interface [ 920.484001][T30573] tipc: Disabling bearer [ 920.530930][T30573] bond13 (unregistering): (slave geneve3): Releasing active interface [ 920.545483][T30573] geneve3 (unregistering): left allmulticast mode [ 920.560894][T30573] bond5 (unregistering): (slave geneve2): Releasing active interface [ 920.630511][T31321] Bluetooth: MGMT ver 1.23 [ 920.742537][T30573] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 920.751338][T30573] bridge5 (unregistering): left promiscuous mode [ 920.864660][T30573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.875179][T30573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.884933][T30573] bond0 (unregistering): Released all slaves [ 920.896124][T30573] bond1 (unregistering): Released all slaves [ 920.914532][T30573] bond2 (unregistering): (slave lo): Releasing backup interface [ 920.924092][T30573] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 920.936024][T30573] bond2 (unregistering): Released all slaves [ 920.955868][T30573] bond3 (unregistering): Released all slaves [ 920.972358][T30573] bond4 (unregistering): (slave veth7): Releasing backup interface [ 920.981655][T30573] bond4 (unregistering): Released all slaves [ 921.003367][T30573] bond5 (unregistering): Released all slaves [ 921.022662][T30573] bond6 (unregistering): Released all slaves [ 921.038544][T30573] bond7 (unregistering): Released all slaves [ 921.054101][T30573] team0: Port device bond8 removed [ 921.068925][T30573] bond8 (unregistering): Released all slaves [ 921.084928][T30573] bond9 (unregistering): Released all slaves [ 921.100506][T30573] bond10 (unregistering): Released all slaves [ 921.115970][T30573] bond11 (unregistering): Released all slaves [ 921.141118][T30573] bond12 (unregistering): Released all slaves [ 921.163481][T30573] bond13 (unregistering): Released all slaves [ 921.183010][T30573] bond14 (unregistering): Released all slaves [ 921.209075][T30573] bond15 (unregistering): (slave veth9): Releasing active interface [ 921.218287][T30573] bond15 (unregistering): Released all slaves [ 921.311175][ T9] lo speed is unknown, defaulting to 1000 [ 921.495653][T31274] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.527443][T31274] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.535009][T31274] bridge_slave_0: entered allmulticast mode [ 921.544682][T31274] bridge_slave_0: entered promiscuous mode [ 921.554291][T31274] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.562455][T31274] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.570350][T31274] bridge_slave_1: entered allmulticast mode [ 921.579983][T31274] bridge_slave_1: entered promiscuous mode [ 921.588403][T30573] 5: left promiscuous mode [ 921.678532][T31330] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 921.706524][T30573] tipc: Disabling bearer [ 921.717121][T30573] tipc: Disabling bearer [ 921.734407][T30573] tipc: Left network mode [ 921.794239][T31274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.857350][T31274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.048936][T31337] netlink: 'syz.4.6274': attribute type 1 has an invalid length. [ 922.100919][T31338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6274'. [ 922.203529][T31337] 8021q: adding VLAN 0 to HW filter on device bond9 [ 922.318985][T31274] team0: Port device team_slave_0 added [ 922.338363][T31274] team0: Port device team_slave_1 added [ 922.348746][ T50] Bluetooth: hci2: command tx timeout [ 922.516987][T31274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.524221][T31274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.551069][T31274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.566477][T31274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.575440][T31274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.624040][T31274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.668000][T31354] netlink: 'syz.4.6276': attribute type 1 has an invalid length. [ 922.702735][T31354] netlink: 'syz.4.6276': attribute type 2 has an invalid length. [ 922.919473][T31359] FAULT_INJECTION: forcing a failure. [ 922.919473][T31359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.960073][T31359] CPU: 0 UID: 0 PID: 31359 Comm: syz.0.6277 Not tainted syzkaller #0 PREEMPT(full) [ 922.960100][T31359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.960113][T31359] Call Trace: [ 922.960121][T31359] [ 922.960130][T31359] dump_stack_lvl+0xe8/0x150 [ 922.960172][T31359] should_fail_ex+0x412/0x560 [ 922.960206][T31359] _copy_from_iter+0x1d3/0x1670 [ 922.960239][T31359] ? rcu_is_watching+0x15/0xb0 [ 922.960273][T31359] ? __pfx__copy_from_iter+0x10/0x10 [ 922.960309][T31359] ? netlink_sendmsg+0x650/0xb40 [ 922.960336][T31359] ? skb_put+0x11b/0x210 [ 922.960367][T31359] netlink_sendmsg+0x6c0/0xb40 [ 922.960403][T31359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.960434][T31359] ? aa_sock_msg_perm+0xf1/0x1b0 [ 922.960461][T31359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 922.960493][T31359] ____sys_sendmsg+0x972/0x9f0 [ 922.960521][T31359] ? __might_fault+0xaf/0x130 [ 922.960553][T31359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.960589][T31359] ? import_iovec+0x73/0xa0 [ 922.960612][T31359] ___sys_sendmsg+0x2a5/0x360 [ 922.960638][T31359] ? __lock_acquire+0x6b5/0x2cf0 [ 922.960667][T31359] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.960730][T31359] ? __fget_files+0x2a/0x420 [ 922.960753][T31359] ? __fget_files+0x3a0/0x420 [ 922.960784][T31359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 922.960816][T31359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.960854][T31359] ? __pfx_ksys_write+0x10/0x10 [ 922.960891][T31359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.960911][T31359] do_syscall_64+0x15f/0xf80 [ 922.960934][T31359] ? trace_irq_disable+0x3b/0x140 [ 922.960955][T31359] ? clear_bhb_loop+0x40/0x90 [ 922.960979][T31359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.960997][T31359] RIP: 0033:0x7fd3c779c819 [ 922.961015][T31359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.961032][T31359] RSP: 002b:00007fd3c863f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.961054][T31359] RAX: ffffffffffffffda RBX: 00007fd3c7a15fa0 RCX: 00007fd3c779c819 [ 922.961068][T31359] RDX: 0000000024040884 RSI: 00002000000001c0 RDI: 0000000000000003 [ 922.961081][T31359] RBP: 00007fd3c863f090 R08: 0000000000000000 R09: 0000000000000000 [ 922.961093][T31359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.961104][T31359] R13: 00007fd3c7a16038 R14: 00007fd3c7a15fa0 R15: 00007fff73bda828 [ 922.961134][T31359] [ 923.252718][T31274] hsr_slave_0: entered promiscuous mode [ 923.259739][T31274] hsr_slave_1: entered promiscuous mode [ 923.266054][T31274] debugfs: 'hsr0' already exists in 'hsr' [ 923.271996][T31274] Cannot create hsr debugfs directory [ 923.370562][T31367] netlink: 'syz.0.6279': attribute type 14 has an invalid length. [ 923.426862][T31366] netlink: 'syz.0.6279': attribute type 14 has an invalid length. [ 923.471857][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6279'. [ 923.497933][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6279'. [ 923.540413][T31374] netlink: 'syz.4.6280': attribute type 1 has an invalid length. [ 923.663712][T31379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6280'. [ 923.747815][T31374] 8021q: adding VLAN 0 to HW filter on device bond10 [ 923.855388][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 923.867422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 923.875469][ C1] lec:lec_tx_timeout: lec0 [ 924.242229][T31394] netlink: 'syz.0.6285': attribute type 1 has an invalid length. [ 924.301193][T31400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6285'. [ 924.357549][T31401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6286'. [ 924.385670][T31394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 924.399837][T31401] openvswitch: netlink: Flow key attr not present in new flow. [ 924.419573][T31396] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6286'. [ 924.429360][T31396] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 924.447802][ T50] Bluetooth: hci2: command tx timeout [ 924.491967][T31405] FAULT_INJECTION: forcing a failure. [ 924.491967][T31405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.505489][T31405] CPU: 1 UID: 0 PID: 31405 Comm: syz.2.6288 Not tainted syzkaller #0 PREEMPT(full) [ 924.505517][T31405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.505530][T31405] Call Trace: [ 924.505538][T31405] [ 924.505547][T31405] dump_stack_lvl+0xe8/0x150 [ 924.505583][T31405] should_fail_ex+0x412/0x560 [ 924.505616][T31405] _copy_from_iter+0x1d3/0x1670 [ 924.505648][T31405] ? rcu_is_watching+0x15/0xb0 [ 924.505682][T31405] ? __pfx__copy_from_iter+0x10/0x10 [ 924.505728][T31405] ? netlink_sendmsg+0x650/0xb40 [ 924.505757][T31405] ? skb_put+0x11b/0x210 [ 924.505789][T31405] netlink_sendmsg+0x6c0/0xb40 [ 924.505846][T31405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.505881][T31405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 924.505911][T31405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.505947][T31405] ____sys_sendmsg+0x972/0x9f0 [ 924.505980][T31405] ? __might_fault+0xaf/0x130 [ 924.506015][T31405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.506068][T31405] ? import_iovec+0x73/0xa0 [ 924.506092][T31405] ___sys_sendmsg+0x2a5/0x360 [ 924.506119][T31405] ? __lock_acquire+0x6b5/0x2cf0 [ 924.506149][T31405] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.506212][T31405] ? __fget_files+0x2a/0x420 [ 924.506236][T31405] ? __fget_files+0x3a0/0x420 [ 924.506272][T31405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 924.506307][T31405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.506346][T31405] ? __pfx_ksys_write+0x10/0x10 [ 924.506384][T31405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.506406][T31405] do_syscall_64+0x15f/0xf80 [ 924.506432][T31405] ? trace_irq_disable+0x3b/0x140 [ 924.506471][T31405] ? clear_bhb_loop+0x40/0x90 [ 924.506497][T31405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.506519][T31405] RIP: 0033:0x7f13edb9c819 [ 924.506539][T31405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.506559][T31405] RSP: 002b:00007f13eea4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.506584][T31405] RAX: ffffffffffffffda RBX: 00007f13ede15fa0 RCX: 00007f13edb9c819 [ 924.506616][T31405] RDX: 0000000024040884 RSI: 00002000000001c0 RDI: 0000000000000003 [ 924.506630][T31405] RBP: 00007f13eea4b090 R08: 0000000000000000 R09: 0000000000000000 [ 924.506643][T31405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.506655][T31405] R13: 00007f13ede16038 R14: 00007f13ede15fa0 R15: 00007ffcccf77328 [ 924.506689][T31405] [ 925.463202][T31438] netlink: 'syz.1.6298': attribute type 1 has an invalid length. [ 925.522930][T31440] netlink: 'syz.0.6297': attribute type 1 has an invalid length. [ 925.610340][T31444] openvswitch: netlink: Message has 1 unknown bytes. [ 925.621456][T31444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.825968][T31438] bond13: entered promiscuous mode [ 925.853483][T31438] 8021q: adding VLAN 0 to HW filter on device bond13 [ 925.951017][T31445] 8021q: adding VLAN 0 to HW filter on device bond13 [ 925.968310][T31445] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 925.995896][T31445] bond13: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 926.021834][T31445] bond13: (slave vcan0): making interface the new active one [ 926.029419][T31445] vcan0: entered promiscuous mode [ 926.038797][T31445] bond13: (slave vcan0): Enslaving as an active interface with an up link [ 926.091405][T31440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 926.111787][T31448] netlink: 'syz.1.6298': attribute type 3 has an invalid length. [ 926.121732][T31448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.162969][T31450] bond4: (slave geneve2): making interface the new active one [ 926.172954][T31450] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 926.199571][T31439] lo speed is unknown, defaulting to 1000 [ 926.221680][ T1322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.231048][ T1322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.244112][T30573] hsr_slave_0: left promiscuous mode [ 926.255558][T30573] hsr_slave_1: left promiscuous mode [ 926.270872][T30573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.362676][T30573] pim6reg (unregistering): left allmulticast mode [ 926.496685][T30573] team0 (unregistering): Port device 76 removed [ 926.508780][ T50] Bluetooth: hci2: command tx timeout [ 926.513644][T31476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6303'. [ 926.535853][T30573] team0 (unregistering): Port device team_slave_0 removed [ 926.703698][ T1322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.712854][T31439] gre0 speed is unknown, defaulting to 1000 [ 926.819384][T31475] 8021q: adding VLAN 0 to HW filter on device bond14 [ 926.827007][T31274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 926.880236][T31274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.904377][T31274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 926.935416][T31274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 926.960283][ T1322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.980301][T31274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 926.987941][T31482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6305'. [ 927.022963][T31274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.048357][T31274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 927.081465][T31274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.270656][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.432546][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.590450][T31508] validate_nla: 5 callbacks suppressed [ 927.590473][T31508] netlink: 'syz.4.6310': attribute type 4 has an invalid length. [ 927.645527][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.681411][T30573] IPVS: stop unused estimator thread 0... [ 927.905932][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.020997][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6313'. [ 928.075064][T31516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6313'. [ 928.204041][T31274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.267129][T31274] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.273981][T31524] netlink: 'syz.4.6315': attribute type 1 has an invalid length. [ 928.302712][T31524] 8021q: adding VLAN 0 to HW filter on device bond11 [ 928.320875][T30573] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.340217][T30604] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.347606][T30604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.390947][ T1322] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.402501][T30573] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.409674][T30573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.457294][T30573] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.485130][T30573] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.509987][T31527] gre0 speed is unknown, defaulting to 1000 [ 928.744576][T31535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 928.777422][T31535] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 928.831537][T31535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 928.847494][T31535] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 928.924569][T31535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 928.950719][T31274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.985835][T31535] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 929.004209][T31274] veth0_vlan: entered promiscuous mode [ 929.033512][T31274] veth1_vlan: entered promiscuous mode [ 929.084148][T31547] netlink: 'syz.0.6319': attribute type 1 has an invalid length. [ 929.107437][T31547] __nla_validate_parse: 2 callbacks suppressed [ 929.107457][T31547] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6319'. [ 929.205794][T31554] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6321'. [ 929.245783][T31274] veth0_macvtap: entered promiscuous mode [ 929.250568][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6320'. [ 929.321254][T31557] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20002 [ 929.346633][T31552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.366324][T31274] veth1_macvtap: entered promiscuous mode [ 929.532994][T31274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.598324][T31274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.658802][T30600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.690935][T30600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.726584][T30600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.757158][T30600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.769320][T31573] netlink: 'syz.1.6325': attribute type 1 has an invalid length. [ 929.826938][T31578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6325'. [ 929.917576][T31573] 8021q: adding VLAN 0 to HW filter on device bond15 [ 930.223775][T30600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.261950][T30600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.363241][T31592] syzkaller0: entered promiscuous mode [ 930.369721][T30600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.384812][T31592] syzkaller0: entered allmulticast mode [ 930.392201][T30600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.664331][T31608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6336'. [ 930.751222][T31613] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6257'. [ 930.837516][T31616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6337'. [ 931.034138][T31625] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6341'. [ 931.067890][T31625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6341'. [ 931.091865][T31628] netlink: 'syz.2.6342': attribute type 1 has an invalid length. [ 931.122843][T31630] ip6gretap0: entered promiscuous mode [ 931.229268][T31628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.259483][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 931.274239][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 931.285332][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 931.301897][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 931.316882][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.458631][T31643] gre0 speed is unknown, defaulting to 1000 [ 931.554851][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.569050][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 931.631028][T30600] dvmrp0: left allmulticast mode [ 931.949929][T30600] bond8 (unregistering): (slave gretap2): Releasing active interface [ 932.343993][T30600] team0: Port device bridge7 removed [ 932.383910][T30600] bond0 (unregistering): Released all slaves [ 932.394725][T30600] bond1 (unregistering): Released all slaves [ 932.410065][T30600] bond2 (unregistering): Released all slaves [ 932.426304][T30600] bond3 (unregistering): Released all slaves [ 932.452190][T30600] bond4 (unregistering): (slave bond5): Releasing backup interface [ 932.461250][T30600] bond4 (unregistering): Released all slaves [ 932.476608][T30600] bond5 (unregistering): Released all slaves [ 932.492333][T30600] bond6 (unregistering): Released all slaves [ 932.507142][T30600] bond7 (unregistering): Released all slaves [ 932.524733][T30600] bond8 (unregistering): Released all slaves [ 932.553943][T30600] bond9 (unregistering): Released all slaves [ 932.593572][T31642] gre0 speed is unknown, defaulting to 1000 [ 932.926198][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6351'. [ 933.025880][T30608] smc: removing ib device syz1 [ 933.387511][ T50] Bluetooth: hci0: command tx timeout [ 934.096179][T31700] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 934.673096][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6361'. [ 934.781719][T31642] chnl_net:caif_netlink_parms(): no params data found [ 935.106384][T31713] mac80211_hwsim hwsim104 syzkaller0: entered promiscuous mode [ 935.116450][T31713] mac80211_hwsim hwsim104 syzkaller0: entered allmulticast mode [ 935.132713][T31718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'. [ 935.329242][T31718] netlink: 'syz.0.6363': attribute type 2 has an invalid length. [ 935.337168][T31718] netlink: 'syz.0.6363': attribute type 2 has an invalid length. [ 935.351109][T31718] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6363'. [ 935.467446][ T50] Bluetooth: hci0: command tx timeout [ 935.545801][T31642] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.553985][T31642] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.561840][T31642] bridge_slave_0: entered allmulticast mode [ 935.629671][T31727] netlink: 'syz.0.6365': attribute type 7 has an invalid length. [ 935.644739][T31642] bridge_slave_0: entered promiscuous mode [ 935.666060][T31642] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.683519][T31642] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.698687][T31642] bridge_slave_1: entered allmulticast mode [ 935.772765][T31642] bridge_slave_1: entered promiscuous mode [ 935.893708][T31642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.919119][T31733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6367'. [ 935.943202][T31642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.000204][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6367'. [ 936.026456][T31736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6367'. [ 936.219055][T31642] team0: Port device team_slave_0 added [ 936.242725][T31642] team0: Port device team_slave_1 added [ 936.398108][T31745] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6369'. [ 936.438403][T31642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.446523][T31642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.473629][T31642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.492531][T31642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.500008][T31642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.526850][T31642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.585070][T31642] hsr_slave_0: entered promiscuous mode [ 936.593360][T31642] hsr_slave_1: entered promiscuous mode [ 936.600333][T31642] debugfs: 'hsr0' already exists in 'hsr' [ 936.606755][T31642] Cannot create hsr debugfs directory [ 936.827410][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 936.835524][ C1] lec:lec_tx_timeout: lec0 [ 936.854112][T30600] tipc: Disabling bearer [ 936.893786][T30600] tipc: Disabling bearer [ 936.917031][T30600] tipc: Left network mode [ 936.968044][T31750] netlink: 'syz.0.6371': attribute type 9 has an invalid length. [ 937.298259][T30600] IPVS: stopping backup sync thread 21952 ... [ 937.425876][T31751] netlink: 'syz.3.6372': attribute type 1 has an invalid length. [ 937.465636][T31751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.550300][ T50] Bluetooth: hci0: command tx timeout [ 937.655182][T31771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6377'. [ 937.665180][T31771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6377'. [ 937.698783][T31771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6377'. [ 938.029098][T31783] dvmrp6: entered allmulticast mode [ 938.221271][T31795] netlink: 'syz.0.6382': attribute type 2 has an invalid length. [ 938.504265][T31813] netlink: 'syz.2.6387': attribute type 1 has an invalid length. [ 938.530826][T30600] hsr_slave_0: left promiscuous mode [ 938.545167][T30600] hsr_slave_1: left promiscuous mode [ 938.552397][T30600] batman_adv: batadv0: Removing interface: macvlan2 [ 938.574432][T30600] virt_wifi0: left promiscuous mode [ 939.565544][T31813] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 939.628683][ T50] Bluetooth: hci0: command tx timeout [ 939.720368][T31642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 939.800165][T31642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.827389][T31642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 940.100098][T31642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.164826][T31642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 940.243936][T31642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.271020][T31642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 940.345226][T31642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.559409][T31874] netlink: 'syz.4.6399': attribute type 1 has an invalid length. [ 940.732043][T30600] IPVS: stop unused estimator thread 0... [ 940.853790][T31642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.936411][T31642] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.950950][T31890] __nla_validate_parse: 4 callbacks suppressed [ 940.950967][T31890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6400'. [ 940.983070][T30604] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.990293][T30604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.055867][T30604] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.063206][T30604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.102245][T31890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6400'. [ 941.371009][T31903] netlink: 'syz.3.6403': attribute type 13 has an invalid length. [ 941.703849][T31924] Bluetooth: MGMT ver 1.23 [ 941.903225][T31925] syzkaller1: entered promiscuous mode [ 941.923890][T31925] syzkaller1: entered allmulticast mode [ 942.214637][T31642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.455289][T31642] veth0_vlan: entered promiscuous mode [ 942.484036][T31955] xt_l2tp: missing protocol rule (udp|l2tpip) [ 942.496609][T31642] veth1_vlan: entered promiscuous mode [ 942.604348][T31642] veth0_macvtap: entered promiscuous mode [ 942.626744][T31958] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6410'. [ 942.638405][T31642] veth1_macvtap: entered promiscuous mode [ 942.671527][T31958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.694175][T31958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.713257][T31958] bond0 (unregistering): Released all slaves [ 943.043255][T31962] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.050979][T31962] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.652060][T31962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.713752][T31962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.050362][T32007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6416'. [ 944.088703][T30605] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.116294][T30605] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.166068][T30605] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.181880][T31642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.198564][T32015] scsi_nl_rcv_msg: discarding partial skb [ 944.211372][T30605] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.224964][T31642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.854346][T32030] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 944.863796][T32030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.638057][T30572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.667801][T30608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.726907][T30608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.770990][T30608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.979558][T32048] nbd: socks must be embedded in a SOCK_ITEM attr [ 946.986306][T30605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.015706][T30605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.093164][T30608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.111419][T30608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.266494][T32064] netlink: 'syz.1.6338': attribute type 1 has an invalid length. [ 947.323124][T32067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6338'. [ 947.359596][T32064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.429765][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.445480][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.454140][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.463996][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.472370][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.068793][T32090] x_tables: duplicate underflow at hook 2 [ 948.344100][T32113] netlink: 364 bytes leftover after parsing attributes in process `syz.3.6441'. [ 948.362725][T32116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6440'. [ 948.373782][T32112] netlink: 364 bytes leftover after parsing attributes in process `syz.3.6441'. [ 948.452735][T32070] chnl_net:caif_netlink_parms(): no params data found [ 948.515478][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880566d6c00: rx timeout, send abort [ 948.524532][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880566d6c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 948.687241][T32070] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.696541][T32070] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.704725][T32070] bridge_slave_0: entered allmulticast mode [ 948.714108][T32070] bridge_slave_0: entered promiscuous mode [ 948.775150][T32070] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.784276][T32070] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.792770][T32070] bridge_slave_1: entered allmulticast mode [ 948.807165][T32070] bridge_slave_1: entered promiscuous mode [ 949.006499][T32070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.062125][T32070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.111786][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'. [ 949.121011][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 949.130357][T32149] netlink: 'syz.0.6448': attribute type 18 has an invalid length. [ 949.364827][T30573] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 949.376770][T30573] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 949.408072][T30573] bond4 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 949.418635][T30573] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 949.547837][ T5143] Bluetooth: hci1: command tx timeout [ 949.914678][T30573] team0: Port device bridge6 removed [ 950.084550][T30573] bond0 (unregistering): Released all slaves [ 950.096597][T30573] bond1 (unregistering): Released all slaves [ 950.114249][T30573] bond2 (unregistering): Released all slaves [ 950.130789][T30573] bond3 (unregistering): Released all slaves [ 950.154552][T30573] bond4 (unregistering): Released all slaves [ 950.171482][T30573] bond5 (unregistering): Released all slaves [ 950.188003][T30573] bond6 (unregistering): Released all slaves [ 950.203127][T30573] bond7 (unregistering): Released all slaves [ 950.230589][T30573] bond8 (unregistering): Released all slaves [ 950.246546][T30573] bond9 (unregistering): Released all slaves [ 950.269522][T30573] bond10 (unregistering): Released all slaves [ 950.285287][T30573] bond11 (unregistering): Released all slaves [ 950.325189][T32070] team0: Port device team_slave_0 added [ 950.346461][T32157] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 950.445009][T32070] team0: Port device team_slave_1 added [ 950.474329][T32165] netlink: 'syz.1.6452': attribute type 1 has an invalid length. [ 950.532891][T32168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6452'. [ 950.638355][T32165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 950.673930][T32070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.689176][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.721193][T32174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'. [ 950.730236][T32070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.755997][T32070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.772836][T32070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.800685][T32070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.819349][T30573] 5: left promiscuous mode [ 950.877091][T30573] : left promiscuous mode [ 950.974990][T32070] hsr_slave_0: entered promiscuous mode [ 950.986269][T32070] hsr_slave_1: entered promiscuous mode [ 951.000974][T32070] debugfs: 'hsr0' already exists in 'hsr' [ 951.006785][T32070] Cannot create hsr debugfs directory [ 951.040293][T30573] : left promiscuous mode [ 951.093953][T30573] tipc: Disabling bearer [ 951.107492][T30573] tipc: Left network mode [ 951.405406][T32200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 951.545860][T32207] netlink: 'syz.3.6461': attribute type 1 has an invalid length. [ 951.627366][ T5143] Bluetooth: hci1: command tx timeout [ 951.722859][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056704000: rx timeout, send abort [ 951.732438][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056704000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 951.896576][T32223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6464'. [ 952.155781][T32234] netlink: 'syz.0.6467': attribute type 1 has an invalid length. [ 952.218938][T32234] netem: change failed [ 952.390123][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 952.404653][T32242] netlink: 'syz.2.6469': attribute type 1 has an invalid length. [ 952.483230][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 952.492912][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 952.536244][T32246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6469'. [ 952.623680][T32242] bond2: entered promiscuous mode [ 952.630092][T32242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.640057][T32246] ip6tnl0: entered promiscuous mode [ 952.649918][T32246] ip6tnl0: entered allmulticast mode [ 952.713380][T32242] bond2: (slave bridge1): making interface the new active one [ 952.721926][T32256] netlink: 'syz.1.6473': attribute type 1 has an invalid length. [ 952.726507][T32242] bridge1: entered promiscuous mode [ 952.736675][T32242] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 952.770527][T32254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.782846][T32257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6473'. [ 952.810006][T30573] hsr_slave_0: left promiscuous mode [ 952.822697][T30573] hsr_slave_1: left promiscuous mode [ 953.271499][T32260] netlink: 660 bytes leftover after parsing attributes in process `syz.2.6474'. [ 953.281593][T32260] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6474'. [ 953.415860][T32256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 953.492753][T32254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.722015][ T5143] Bluetooth: hci1: command tx timeout [ 953.730550][T32254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.910616][T32254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.971169][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888054a49400: rx timeout, send abort [ 953.979937][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054a49400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 954.004680][T32070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 954.021069][T32070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.041271][T32070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 954.052762][T32070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.080269][T32070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 954.093315][T32070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.101637][T32070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 954.121764][T32070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.138564][T30573] IPVS: stop unused estimator thread 0... [ 954.293621][T32070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.315192][T32070] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.334871][T30608] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.342107][T30608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.415327][T30602] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.422604][T30602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.623675][T32291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.787187][T32308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6481'. [ 955.024555][ T1322] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.207221][T32308] bond3: (slave vcan1): refused to change device type [ 955.269273][ T1322] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.330239][ T1322] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.429427][T30605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.475451][T32333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6484'. [ 955.659194][T32340] netlink: 'syz.0.6486': attribute type 1 has an invalid length. [ 955.713592][T32347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6486'. [ 955.731282][T32340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.783686][T32346] bridge2: entered allmulticast mode [ 955.800432][ T5143] Bluetooth: hci1: command tx timeout [ 956.123518][T32365] x_tables: duplicate underflow at hook 2 [ 956.283890][T32070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.005630][T32070] veth0_vlan: entered promiscuous mode [ 957.042835][T32070] veth1_vlan: entered promiscuous mode [ 957.159577][T32070] veth0_macvtap: entered promiscuous mode [ 957.190623][T32070] veth1_macvtap: entered promiscuous mode [ 957.238986][T32070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.276330][T32070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.340710][T30600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.426243][T30600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.472667][T30600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.490750][T30600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.600421][T32411] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6496'. [ 957.753007][T30605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.781303][T30605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.890268][T30573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.916272][T30573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.924945][T32417] netlink: 'syz.1.6498': attribute type 1 has an invalid length. [ 957.984333][T32421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6498'. [ 958.071386][T32417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 958.097182][T32420] batadv_slave_0: Caught tx_queue_len zero misconfig [ 958.384567][T32438] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.6501'. [ 958.423361][T32438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6501'. [ 958.448088][T32438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6501'. [ 958.461957][T32441] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 958.493135][T32444] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6503'. [ 958.504382][T32442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6502'. [ 958.690185][T32450] ip6tnl0: Caught tx_queue_len zero misconfig [ 958.743518][T32453] netlink: 'syz.4.6505': attribute type 4 has an invalid length. [ 958.784798][T32453] netlink: 'syz.4.6505': attribute type 4 has an invalid length. [ 959.158699][T32470] netlink: 'syz.4.6510': attribute type 1 has an invalid length. [ 959.164581][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880565be000: rx timeout, send abort [ 959.175515][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880565be000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 959.322669][T32474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6511'. [ 959.401502][T32476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6512'. [ 959.428050][T32476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6512'. [ 959.898492][T32499] netlink: 'syz.4.6520': attribute type 13 has an invalid length. [ 959.917660][T32499] netlink: 'syz.4.6520': attribute type 17 has an invalid length. [ 959.933391][T32502] netlink: 'syz.3.6522': attribute type 1 has an invalid length. [ 959.956079][T32507] netlink: 'syz.2.6523': attribute type 22 has an invalid length. [ 960.025698][T32510] netlink: 'syz.2.6523': attribute type 22 has an invalid length. [ 960.153835][T32496] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.161556][T32496] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.250598][T32496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.264117][T32496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.443900][T32499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.452734][T32499] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.464273][T32499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.500327][T32502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 960.532860][ T1322] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.566661][ T1322] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.610153][ T1322] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.744456][ T1322] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.768599][T32525] netlink: 'syz.3.6526': attribute type 10 has an invalid length. [ 961.736543][T32567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 961.992023][T32585] lo: Caught tx_queue_len zero misconfig [ 962.620753][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.664918][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.671905][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.678831][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.685742][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.692631][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.699504][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.706332][T32616] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 962.767406][T32619] __nla_validate_parse: 18 callbacks suppressed [ 962.767428][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.897844][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.910260][T32622] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.922636][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.932940][T32622] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.943222][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6549'. [ 962.953100][T32623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6551'. [ 963.065774][T32624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6549'. [ 963.781697][T32621] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 963.803812][T32641] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6555'. [ 963.957107][T32646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6557'. [ 964.046724][T32653] validate_nla: 2 callbacks suppressed [ 964.046747][T32653] netlink: 'syz.4.6558': attribute type 1 has an invalid length. [ 964.543864][T32672] netlink: 'syz.0.6566': attribute type 1 has an invalid length. [ 964.601970][T32672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 965.650608][T32724] netlink: 'syz.3.6580': attribute type 1 has an invalid length. [ 965.662457][T32726] net_ratelimit: 3322 callbacks suppressed [ 965.662479][T32726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.686840][T32723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.782007][T32724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 965.897664][T32726] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.139404][T32723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.159107][ T9] IPVS: starting estimator thread 0... [ 966.183142][T32726] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.258904][T32753] IPVS: using max 27 ests per chain, 64800 per kthread [ 966.278891][T32726] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.431240][T32723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.549401][T32726] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.804030][T32723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.000661][T32723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.043585][T30573] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.098273][T30600] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.160957][T30572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.230089][T30600] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.255901][ T308] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 967.401724][ T316] netlink: 'syz.4.6595': attribute type 1 has an invalid length. [ 967.464338][ T319] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 967.480384][ T319] netlink: 'syz.0.6597': attribute type 11 has an invalid length. [ 967.595860][ T316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 967.624298][T30600] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.697915][ T322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 967.804106][T30605] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.820741][ T337] __nla_validate_parse: 84 callbacks suppressed [ 967.820760][ T337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6602'. [ 967.850654][T30605] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.958838][T30572] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.080931][ T346] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6603'. [ 968.411408][ T380] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 968.426171][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6610'. [ 968.488893][ T381] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6610'. [ 968.506576][ T387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6611'. [ 968.648759][ T380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 968.995323][ T413] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6621'. [ 969.020677][ T414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6621'. [ 969.081347][ T421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6623'. [ 969.093414][ T421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6623'. [ 969.103759][ T421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6623'. [ 969.121368][ T416] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 969.658573][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888035a28800: rx timeout, send abort [ 969.667343][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888035a28800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 970.044177][ T456] bridge0: entered promiscuous mode [ 970.482849][ T478] netlink: 'syz.4.6641': attribute type 1 has an invalid length. [ 970.535748][ T478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 970.721631][ T488] bpq0: left allmulticast mode [ 971.501397][ T519] netlink: 'syz.4.6654': attribute type 1 has an invalid length. [ 971.561169][ T519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 971.952922][ T544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.178396][ T549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 972.259783][ T569] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 972.308255][ T569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 972.708699][ T585] syzkaller0: entered promiscuous mode [ 972.720857][ T585] syzkaller0: entered allmulticast mode [ 972.750937][ T585] netlink: 'syz.1.6672': attribute type 33 has an invalid length. [ 972.827300][ T593] netlink: 'syz.3.6674': attribute type 9 has an invalid length. [ 972.899548][ T595] tipc: Started in network mode [ 972.915533][ T595] tipc: Node identity 1ed6699d0487, cluster identity 4711 [ 972.934598][ T595] tipc: Enabled bearer , priority 0 [ 972.957717][ T602] syzkaller0: entered promiscuous mode [ 972.997357][ T602] syzkaller0: entered allmulticast mode [ 973.004718][ T604] __nla_validate_parse: 177 callbacks suppressed [ 973.004742][ T604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6677'. [ 973.021057][ T604] netlink: 'syz.1.6677': attribute type 7 has an invalid length. [ 973.030579][ T604] netlink: 'syz.1.6677': attribute type 8 has an invalid length. [ 973.046719][ T604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 973.094072][ T604] ip6gretap0: entered promiscuous mode [ 973.112588][ T604] syz_tun: entered promiscuous mode [ 973.139356][ T604] ip6gretap0: left promiscuous mode [ 973.154993][ T604] syz_tun: left promiscuous mode [ 973.187575][ T594] tipc: Resetting bearer [ 973.204210][ T610] netlink: 'syz.2.6679': attribute type 1 has an invalid length. [ 973.241964][ T594] tipc: Disabling bearer [ 973.256060][ T614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6679'. [ 973.352788][ T610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 973.714517][ T634] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20004 [ 973.873601][ T639] wg2: entered allmulticast mode [ 974.234095][ T658] netlink: 'syz.0.6693': attribute type 10 has an invalid length. [ 974.418316][ T670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6696'. [ 974.453097][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888099000000: rx timeout, send abort [ 974.461968][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888099000000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 974.500056][ T674] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 974.537917][ T674] syzkaller1: linktype set to 768 [ 974.658629][ T676] erspan0: entered promiscuous mode [ 974.678527][ T676] macsec2: entered promiscuous mode [ 974.716368][ T676] erspan0: left promiscuous mode [ 974.869000][ T688] netlink: 'syz.2.6698': attribute type 11 has an invalid length. [ 974.903151][ T688] netlink: 'syz.2.6698': attribute type 4 has an invalid length. [ 974.933229][ T688] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.6698'. [ 974.963216][ T681] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6697'. [ 975.590673][ T717] validate_nla: 2 callbacks suppressed [ 975.590693][ T717] netlink: 'syz.4.6708': attribute type 1 has an invalid length. [ 975.643886][ T722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6708'. [ 975.659965][ T721] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6709'. [ 975.670599][ T721] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6709'. [ 975.812333][ T717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 975.839065][ T732] openvswitch: netlink: Flow key attribute not present in set flow. [ 976.021432][ T742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6713'. [ 976.037098][ T742] nbd: must specify at least one socket [ 976.193532][ T755] netlink: 'syz.1.6712': attribute type 1 has an invalid length. [ 976.214746][ T755] netlink: 'syz.1.6712': attribute type 2 has an invalid length. [ 976.484647][ T761] : renamed from team_slave_1 [ 977.285499][ T783] netlink: 'syz.4.6725': attribute type 1 has an invalid length. [ 977.352433][ T783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 977.555680][ T804] No such timeout policy "syz1" [ 977.726872][ T810] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 977.829200][ T810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 978.071407][ T831] syzkaller0: entered promiscuous mode [ 978.084217][ T831] syzkaller0: entered allmulticast mode [ 978.366458][ T842] netlink: 'syz.2.6742': attribute type 1 has an invalid length. [ 978.440583][ T845] __nla_validate_parse: 9 callbacks suppressed [ 978.440604][ T845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6742'. [ 978.476356][ T842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 978.753708][ T856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.893520][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 979.356903][ T892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6756'. [ 979.487174][ T895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6758'. [ 979.496383][T30600] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.512408][T30600] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.539062][T30600] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.594138][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888099cd1c00: rx timeout, send abort [ 979.603101][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888099cd1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 979.640609][T30600] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.680157][ T902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6760'. [ 979.732395][ T902] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 979.832809][ T912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6762'. [ 980.394759][ T936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6767'. [ 980.405339][ T936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6767'. [ 980.517475][ T939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'. [ 980.664419][ T951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.678157][ T950] netlink: 'syz.2.6771': attribute type 1 has an invalid length. [ 980.714313][ T950] 8021q: adding VLAN 0 to HW filter on device bond9 [ 980.726660][ T950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6771'. [ 981.360361][ T981] netlink: 'syz.1.6779': attribute type 1 has an invalid length. [ 981.712314][T18953] lec:lec_start_xmit: lec0:No lecd attached [ 981.927181][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806b55fc00: rx timeout, send abort [ 981.936284][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806b55fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 982.141546][T30572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.156435][T30572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.195435][T30572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.216231][T30572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.322539][ T1030] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.494097][ T1030] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.614436][ T1030] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.851735][ T1030] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.342950][T30572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.451377][ T1073] __nla_validate_parse: 39 callbacks suppressed [ 983.451399][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.468799][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.482440][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.492724][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.503794][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.515209][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.525006][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.534972][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.552037][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.564618][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6799'. [ 983.575122][ T1083] netlink: 'syz.0.6803': attribute type 21 has an invalid length. [ 983.610573][ T1076] syzkaller0: entered promiscuous mode [ 983.623135][ T1076] syzkaller0: entered allmulticast mode [ 983.702223][ T1083] netlink: 'syz.0.6803': attribute type 4 has an invalid length. [ 983.717629][ T1083] netlink: 'syz.0.6803': attribute type 5 has an invalid length. [ 983.753105][T30600] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.838235][T30572] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.893933][ T1091] xt_TCPMSS: Only works on TCP SYN packets [ 983.913614][T30572] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.966330][ T1093] xt_HMARK: spi-set and port-set can't be combined [ 984.033895][ T1100] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 984.272753][ T1106] tipc: Started in network mode [ 984.315997][ T1106] tipc: Node identity 46c48730aa05, cluster identity 4711 [ 984.334533][ T1106] tipc: Enabled bearer , priority 0 [ 984.368182][ T1108] syzkaller0: entered promiscuous mode [ 984.383618][ T1108] syzkaller0: entered allmulticast mode [ 984.561880][ T1103] tipc: Resetting bearer [ 984.587595][ T1102] tipc: Resetting bearer [ 984.659952][ T1102] tipc: Disabling bearer [ 985.139712][ T1144] netlink: 'syz.3.6818': attribute type 10 has an invalid length. [ 985.173227][ T1144] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 985.325222][ T1152] bond0: entered promiscuous mode [ 985.337346][ T1152] bond_slave_0: entered promiscuous mode [ 985.352787][ T1152] bond_slave_1: entered promiscuous mode [ 985.360250][ T1152] batadv0: entered promiscuous mode [ 985.366685][ T1152] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 985.379210][ T1152] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 985.393587][ T1152] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 985.404313][ T1152] bond0: left promiscuous mode [ 985.409892][ T1152] bond_slave_0: left promiscuous mode [ 985.415777][ T1152] bond_slave_1: left promiscuous mode [ 985.423088][ T1152] batadv0: left promiscuous mode [ 986.445562][ T1194] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 986.649111][ T1202] bridge_slave_1: left allmulticast mode [ 986.659404][ T1202] bridge_slave_1: left promiscuous mode [ 986.666487][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.691139][ T1202] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 986.827401][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 986.835516][ C1] lec:lec_tx_timeout: lec0 [ 986.904000][ T1210] ip6tnl2: entered promiscuous mode [ 987.103098][ T1218] syzkaller1: entered promiscuous mode [ 987.112132][ T1218] syzkaller1: entered allmulticast mode [ 987.345932][ T1226] gtp0: entered promiscuous mode [ 987.369546][ T1226] gtp0: entered allmulticast mode [ 987.478465][ T1226] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 987.478903][ T1234] x_tables: duplicate underflow at hook 1 [ 987.509142][ T1226] bond7 (unregistering): Released all slaves [ 987.561899][ T1231] team_slave_0: mtu less than device minimum [ 987.768215][ T1247] tipc: Started in network mode [ 987.773225][ T1247] tipc: Node identity e0000001, cluster identity 4711 [ 987.780456][ T1247] tipc: Enabling of bearer rejected, failed to enable media [ 988.263721][ T1274] netlink: 'syz.2.6859': attribute type 21 has an invalid length. [ 988.426723][ T1284] openvswitch: netlink: Flow key attribute not present in set flow. [ 988.610678][ T1294] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20000 [ 988.743879][ T1293] smc: net device wlan0 applied user defined pnetid SYZ0 [ 989.176778][ T1315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.219440][ T1327] 8021q: VLANs not supported on tunl0 [ 989.372728][ T1329] __nla_validate_parse: 462 callbacks suppressed [ 989.372760][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.401979][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.417378][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.459010][ T1331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6872'. [ 989.461148][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.496284][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.506105][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.515667][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.526267][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.566373][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6871'. [ 989.754444][ T1355] x_tables: duplicate underflow at hook 1 [ 990.030402][ T1371] netlink: 'syz.4.6880': attribute type 13 has an invalid length. [ 990.060479][ T1371] netlink: 'syz.4.6880': attribute type 5 has an invalid length. [ 990.176590][ T1378] netlink: 'syz.3.6883': attribute type 1 has an invalid length. [ 990.296820][ T1378] 8021q: adding VLAN 0 to HW filter on device bond5 [ 990.354542][ T1380] bond5: (slave ip6erspan0): making interface the new active one [ 990.376508][ T1380] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 990.751441][ T1400] netlink: 'syz.3.6890': attribute type 9 has an invalid length. [ 990.972513][ T1407] team1: entered promiscuous mode [ 990.982603][ T1407] team1: entered allmulticast mode [ 990.999403][ T1407] 8021q: adding VLAN 0 to HW filter on device team1 [ 991.109378][ T1412] team2: entered promiscuous mode [ 991.114749][ T1412] team2: entered allmulticast mode [ 991.121787][ T1412] 8021q: adding VLAN 0 to HW filter on device team2 [ 991.141236][ T1419] netlink: 'syz.3.6896': attribute type 2 has an invalid length. [ 991.168867][ T1420] netlink: 'syz.3.6896': attribute type 2 has an invalid length. [ 991.303490][ T1424] bond6: option lacp_active: invalid value (8) [ 991.312699][ T1424] bond6 (unregistering): Released all slaves [ 992.850700][ T1480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.996649][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.011508][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 993.122515][ T1489] tipc: Enabled bearer , priority 0 [ 993.130525][ T1489] syzkaller0: entered promiscuous mode [ 993.136650][ T1489] syzkaller0: entered allmulticast mode [ 993.196947][ T1489] tipc: Resetting bearer [ 993.209938][ T1488] tipc: Resetting bearer [ 993.301688][ T1488] tipc: Disabling bearer [ 993.492957][ T1503] netlink: 'syz.2.6921': attribute type 1 has an invalid length. [ 993.719700][ T1503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 993.922132][ T1504] team0 (unregistering): Port device team_slave_0 removed [ 993.941889][ T1504] team0 (unregistering): Port device 76 removed [ 994.530470][ T1546] netlink: 'syz.0.6931': attribute type 3 has an invalid length. [ 994.729956][ T1557] __nla_validate_parse: 183 callbacks suppressed [ 994.729980][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 994.739070][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056b75c00: rx timeout, send abort [ 994.754440][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056b75c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 995.268125][ T1577] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6940'. [ 995.295902][ T1577] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6940'. [ 995.465178][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 995.589791][ T1595] netlink: 'syz.3.6946': attribute type 1 has an invalid length. [ 995.635006][ T1595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 995.651987][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6947'. [ 995.656660][ T1595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6946'. [ 995.811592][ T1603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6947'. [ 995.884148][ T1612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6949'. [ 995.939890][ T1612] ip6gre1: entered promiscuous mode [ 995.945336][ T1612] ip6gre1: entered allmulticast mode [ 996.058401][ T1620] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6952'. [ 996.275567][ T1626] 8021q: VLANs not supported on caif0 [ 996.435788][ T1629] syzkaller0: entered promiscuous mode [ 996.446281][ T1629] syzkaller0: entered allmulticast mode [ 996.457291][T30604] 0: reclassify loop, rule prio 0, protocol 800 [ 996.716439][ T1634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6956'. [ 996.747004][ T1637] netlink: 'syz.3.6957': attribute type 12 has an invalid length. [ 996.893714][ T1644] netlink: 'syz.2.6959': attribute type 1 has an invalid length. [ 996.941601][ T1644] 8021q: adding VLAN 0 to HW filter on device bond11 [ 998.027631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.035828][ C1] lec:lec_tx_timeout: lec0 [ 998.093166][ T1691] netlink: 'syz.1.6967': attribute type 10 has an invalid length. [ 998.142729][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805154cc00: rx timeout, send abort [ 998.151500][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805154cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 998.345739][ T1692] syzkaller0: entered promiscuous mode [ 998.360605][ T1692] syzkaller0: entered allmulticast mode [ 998.423159][ T1709] x_tables: duplicate underflow at hook 2 [ 998.437101][ T1701] ip6_vti0: entered promiscuous mode [ 1002.750433][ T1726] vlan3: entered promiscuous mode [ 1002.755666][ T1726] erspan0: entered promiscuous mode [ 1002.761584][ T1726] vlan3: entered allmulticast mode [ 1002.766877][ T1726] erspan0: entered allmulticast mode [ 1002.951054][ T1738] netlink: 'syz.2.6980': attribute type 1 has an invalid length. [ 1002.964344][ T1739] __nla_validate_parse: 7 callbacks suppressed [ 1002.964366][ T1739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6979'. [ 1003.013830][ T1743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6980'. [ 1003.093408][ T1738] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1003.302955][ T1754] syzkaller0: entered promiscuous mode [ 1003.330918][ T1754] syzkaller0: entered allmulticast mode [ 1003.509022][ T1760] netlink: 'syz.4.6986': attribute type 1 has an invalid length. [ 1003.597102][ T1760] bond7: entered promiscuous mode [ 1003.603052][ T1760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1003.732404][ T1770] vxcan3: entered promiscuous mode [ 1003.930173][ T1777] bridge0: port 2(syz_tun) entered blocking state [ 1003.948412][ T1777] bridge0: port 2(syz_tun) entered disabled state [ 1003.961365][ T1777] syz_tun: entered allmulticast mode [ 1003.971991][ T1782] sctp: [Deprecated]: syz.1.6992 (pid 1782) Use of int in maxseg socket option. [ 1003.971991][ T1782] Use struct sctp_assoc_value instead [ 1003.991442][ T1777] syz_tun: entered promiscuous mode [ 1004.199907][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e422c00: rx timeout, send abort [ 1004.209517][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e422c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1004.600372][ T1811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1004.629994][ T1814] netlink: 'syz.4.6999': attribute type 83 has an invalid length. [ 1004.678717][ T1811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1004.792971][T30606] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.811836][T30606] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.844445][T30606] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.881916][T30606] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.264623][ T1830] netlink: 'syz.3.7004': attribute type 1 has an invalid length. [ 1005.277683][ T1830] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7004'. [ 1005.464663][ T1840] netlink: 'syz.3.7007': attribute type 1 has an invalid length. [ 1005.523012][ T1842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1005.686742][ T1836] team_slave_0: entered promiscuous mode [ 1005.696739][ T1836] team_slave_1: entered promiscuous mode [ 1005.732607][ T1836] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.826852][ T1841] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1005.855850][ T1851] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1006.122366][ T1859] netlink: 'syz.3.7012': attribute type 21 has an invalid length. [ 1006.142513][ T1859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7012'. [ 1006.266426][ T1867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7015'. [ 1006.454152][ T1878] netlink: 'syz.3.7019': attribute type 30 has an invalid length. [ 1006.470680][ T1881] netlink: 'syz.1.7020': attribute type 1 has an invalid length. [ 1006.483894][ T1881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1006.566792][ T1879] hsr0: entered promiscuous mode [ 1006.573314][ T1878] hsr_slave_0: left promiscuous mode [ 1006.579806][ T1878] hsr_slave_1: left promiscuous mode [ 1006.588419][ T1878] hsr0 (unregistering): left promiscuous mode [ 1006.701911][ T1890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.479449][ T1923] netlink: 'syz.3.7031': attribute type 1 has an invalid length. [ 1007.493524][ T1923] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1007.564032][ T1928] syzkaller0: entered promiscuous mode [ 1007.580209][ T1928] syzkaller0: entered allmulticast mode [ 1007.719961][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a606c00: rx timeout, send abort [ 1007.731273][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a606c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1008.042425][ T1938] vlan2: entered promiscuous mode [ 1008.057773][ T1938] batadv0: entered promiscuous mode [ 1008.809745][ T1952] batadv0: entered promiscuous mode [ 1008.824728][ T1952] vlan3: entered promiscuous mode [ 1009.112499][ T1972] __nla_validate_parse: 2 callbacks suppressed [ 1009.112519][ T1972] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1009.498441][ T1990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7053'. [ 1009.528744][ T1993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7052'. [ 1009.552029][ T1995] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7054'. [ 1009.590462][ T1988] IPv6: Can't replace route, no match found [ 1009.839096][ T2009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1009.866675][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1010.247064][ T2027] netlink: 'syz.2.7064': attribute type 5 has an invalid length. [ 1010.770507][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1010.806850][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1011.556176][ T2045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1011.766981][ T2056] erspan0: entered promiscuous mode [ 1011.936954][ T2065] syzkaller0: entered promiscuous mode [ 1011.950611][ T2065] syzkaller0: entered allmulticast mode [ 1011.987015][ T2073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1012.693454][ T2101] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1012.703419][ T2101] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1013.198479][ T2115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.264890][ T2115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.280371][ T2115] bond0 (unregistering): Released all slaves [ 1013.351222][ T2127] bond6: option updelay: invalid value (18446744073709493611) [ 1013.367959][ T2127] bond6: option updelay: allowed values 0 - 2147483647 [ 1013.385442][ T2127] bond6 (unregistering): Released all slaves [ 1013.784938][ T2156] ip6gre1: entered promiscuous mode [ 1013.796015][ T2156] ip6gre1: entered allmulticast mode [ 1014.498397][ T2191] __nla_validate_parse: 8 callbacks suppressed [ 1014.498421][ T2191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7111'. [ 1014.616131][ T2189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7111'. [ 1015.361556][ T2219] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1015.407848][ T2219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1015.419218][ T2219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1015.450112][ T9] IPVS: starting estimator thread 0... [ 1015.569001][ T2227] IPVS: using max 25 ests per chain, 60000 per kthread [ 1015.868208][ T2242] hm3): entered promiscuous mode [ 1016.140997][ T2218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.406324][ T2248] netlink: 'syz.2.7129': attribute type 1 has an invalid length. [ 1016.511845][ T2247] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1016.543770][ T2247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1016.578961][ T2254] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1016.598419][ T2254] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 1016.702166][ T2257] vlan3: entered promiscuous mode [ 1016.832435][ T2248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7129'. [ 1016.983513][ T2248] bond13: (slave bridge3): Enslaving as an active interface with a down link [ 1017.078270][ T2248] macvlan2: entered promiscuous mode [ 1017.105551][ T2248] macvlan2: entered allmulticast mode [ 1017.112699][ T2248] bond13: entered promiscuous mode [ 1017.119732][ T2248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1017.136037][ T2248] bond13: left promiscuous mode [ 1017.254099][ T2261] netlink: 'syz.3.7132': attribute type 1 has an invalid length. [ 1017.285352][ T2261] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7132'. [ 1017.340198][ T2279] syzkaller0: entered promiscuous mode [ 1017.346522][ T2279] syzkaller0: entered allmulticast mode [ 1017.363966][ T2297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1022.776031][ T2307] __nla_validate_parse: 1 callbacks suppressed [ 1022.776051][ T2307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1022.798316][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1022.844132][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1022.892965][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1022.932201][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.009349][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.082342][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.109177][ T2343] ip6_vti0: left promiscuous mode [ 1023.143683][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.170513][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.193405][ T2343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1023.257698][ T2343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1023.307725][ T2346] bond0: option resend_igmp: invalid value (2878) [ 1023.314522][ T2346] bond0: option resend_igmp: allowed values 0 - 255 [ 1023.325926][ T2346] bond0 (unregistering): Released all slaves [ 1024.072525][ T2390] bond8: option mode: invalid value (254) [ 1024.125096][ T2390] bond8 (unregistering): Released all slaves [ 1025.284831][ T2474] : entered promiscuous mode [ 1025.549263][ T2487] netlink: 'syz.2.7182': attribute type 1 has an invalid length. [ 1026.202247][ T2521] batman_adv: batadv0: Adding interface: dummy0 [ 1026.250164][ T2521] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.301119][ T2521] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1026.341042][ T2537] syzkaller0: entered promiscuous mode [ 1026.367144][ T2537] syzkaller0: entered allmulticast mode [ 1044.838413][T18953] lec:lec_start_xmit: lec0:No lecd attached [ 1049.867411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1049.875534][ C1] lec:lec_tx_timeout: lec0 [ 1054.432582][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.443646][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1059.867427][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1059.875574][ C1] lec:lec_tx_timeout: lec0 [ 1062.194125][ T2567] __nla_validate_parse: 18 callbacks suppressed [ 1062.194149][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 1062.650232][ T2583] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1062.693832][ T2583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7205'. [ 1062.880239][ T2601] tipc: Invalid UDP bearer configuration [ 1062.880295][ T2601] tipc: Enabling of bearer rejected, failed to enable media [ 1062.940767][ T2600] tipc: Invalid UDP bearer configuration [ 1062.940825][ T2600] tipc: Enabling of bearer rejected, failed to enable media [ 1063.169457][ T2613] lo: entered allmulticast mode [ 1063.189560][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7213'. [ 1063.218228][ T2613] lo: left allmulticast mode [ 1063.505170][ T2632] xt_hashlimit: max too large, truncated to 1048576 [ 1063.547801][ T2632] xt_bpf: check failed: parse error [ 1063.829905][ T2649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1063.895830][ T2652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7224'. [ 1064.863574][ T2701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.298189][ T2726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7238'. [ 1065.723938][ T2748] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1066.054730][ T2762] syzkaller1: entered promiscuous mode [ 1066.075366][ T2762] syzkaller1: entered allmulticast mode [ 1066.165548][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1066.195630][ T2762] syz_tun: entered promiscuous mode [ 1066.212403][ T2762] syzk: entered promiscuous mode [ 1066.225084][ T2762] syzk: entered allmulticast mode [ 1066.240702][ T2762] syz_tun: entered allmulticast mode [ 1066.512383][ T2772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1066.536839][ T2772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1066.704180][ T2772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.711971][ T2772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.745235][ T2772] team_slave_0: left promiscuous mode [ 1066.754234][ T2772] team_slave_1: left promiscuous mode [ 1066.842579][ T2772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.860779][ T2772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.016111][ T2772] syz_tun: left allmulticast mode [ 1067.035070][T30600] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.055592][T30600] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.074640][T30600] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.093758][T30600] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.239419][ T2793] sctp: [Deprecated]: syz.3.7253 (pid 2793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1067.239419][ T2793] Use struct sctp_sack_info instead [ 1067.506656][ T2808] __nla_validate_parse: 179 callbacks suppressed [ 1067.506672][ T2808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7257'. [ 1067.508130][ T2809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7257'. [ 1067.681701][ T2780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.042994][ T2831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1068.082438][ T2831] bridge2: entered promiscuous mode [ 1068.088416][ T2831] macsec2: entered promiscuous mode [ 1068.093889][ T2831] macsec2: entered allmulticast mode [ 1068.101374][ T2831] bridge2: entered allmulticast mode [ 1068.109974][ T2831] bridge2: port 1(macsec2) entered blocking state [ 1068.119347][ T2831] bridge2: port 1(macsec2) entered disabled state [ 1068.130165][ T2837] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1068.152762][ T2831] bridge2: left allmulticast mode [ 1068.162051][ T2837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7261'. [ 1068.177672][ T2831] bridge2: left promiscuous mode [ 1068.676085][ T2882] netlink: 'syz.1.7272': attribute type 1 has an invalid length. [ 1068.812935][ T2889] bond0: (slave geneve3): making interface the new active one [ 1068.822005][ T2889] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1068.834433][T30573] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1068.855596][T30573] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1068.864923][T30573] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1068.873758][T30573] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1068.891478][ T2882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7272'. [ 1068.904715][ T2891] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1068.919626][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1068.932769][ T2882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.945226][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1068.969178][ T2896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1069.085724][ T2902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1069.163404][T30600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.187893][T30600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.570631][ T2932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1069.689283][ T2935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1069.908989][ T2947] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.7291'. [ 1069.919703][ T2947] openvswitch: netlink: Message has 16 unknown bytes. [ 1069.953878][ T2947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1069.961429][ T2947] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1071.506004][ T3010] nbd: must specify a device to reconfigure [ 1071.514505][ T2994] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1071.516788][ T3010] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1072.043286][ T3035] netlink: 'syz.4.7311': attribute type 4 has an invalid length. [ 1072.084723][ T3035] netlink: 'syz.4.7311': attribute type 4 has an invalid length. [ 1072.269689][ T3039] openvswitch: netlink: Multiple metadata blocks provided [ 1072.401472][ T3037] netlink: 'syz.3.7312': attribute type 39 has an invalid length. [ 1072.530040][ T3037] bond0 (unregistering): Released all slaves [ 1072.716442][ T3055] netlink: 'syz.1.7316': attribute type 13 has an invalid length. [ 1072.737921][ T1322] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.753127][ T1322] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.761716][ T3055] netlink: 'syz.1.7316': attribute type 17 has an invalid length. [ 1072.798286][ T1322] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1072.817691][ T3055] lo: entered promiscuous mode [ 1072.827531][ T3055] lo: entered allmulticast mode [ 1072.854653][ T3055] tunl0: entered promiscuous mode [ 1072.864378][ T3055] tunl0: entered allmulticast mode [ 1072.882452][ T3055] gre0: entered promiscuous mode [ 1072.896753][ T3055] gre0: entered allmulticast mode [ 1072.912031][ T3055] gretap0: entered promiscuous mode [ 1072.917661][ T3055] gretap0: entered allmulticast mode [ 1072.930976][ T3055] erspan0: entered promiscuous mode [ 1072.936482][ T3055] erspan0: entered allmulticast mode [ 1072.950231][ T3055] ip_vti0: entered promiscuous mode [ 1072.955713][ T3055] ip_vti0: entered allmulticast mode [ 1072.966506][ T3055] ip6_vti0: entered promiscuous mode [ 1072.975569][ T3055] ip6_vti0: entered allmulticast mode [ 1073.004603][ T3055] sit0: entered promiscuous mode [ 1073.017390][ T3055] sit0: entered allmulticast mode [ 1073.044388][ T3055] ip6tnl0: entered promiscuous mode [ 1073.058068][ T3055] ip6tnl0: entered allmulticast mode [ 1073.074622][ T3055] ip6gre0: entered promiscuous mode [ 1073.089212][ T3055] ip6gre0: entered allmulticast mode [ 1073.122595][ T3055] syz_tun: left promiscuous mode [ 1073.149898][ T3055] syz_tun: entered promiscuous mode [ 1073.170038][ T3055] syz_tun: entered allmulticast mode [ 1073.212730][ T3055] ip6gretap0: entered promiscuous mode [ 1073.224806][ T3055] ip6gretap0: entered allmulticast mode [ 1073.258142][ T3055] bridge0: entered promiscuous mode [ 1073.272092][ T3055] bridge0: entered allmulticast mode [ 1073.292125][ T3055] vcan0: entered promiscuous mode [ 1073.308774][ T3055] vcan0: entered allmulticast mode [ 1073.326557][ T3055] team0: entered promiscuous mode [ 1073.340025][ T3055] team_slave_0: entered promiscuous mode [ 1073.349822][ T3055] team_slave_1: entered promiscuous mode [ 1073.355838][ T3055] team0: entered allmulticast mode [ 1073.362626][ T3055] team_slave_0: entered allmulticast mode [ 1073.369431][ T3055] team_slave_1: entered allmulticast mode [ 1073.376676][ T3055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.427218][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1178.434035][ C0] rcu: 0-...!: (10505 ticks this GP) idle=9444/1/0x4000000000000000 softirq=190826/190826 fqs=91 [ 1178.446213][ C0] rcu: (t=10501 jiffies g=214793 q=3034 ncpus=2) [ 1178.452752][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10319 jiffies! g214793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1178.465194][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=93265 [ 1178.473135][ C0] rcu: rcu_preempt kthread starved for 10322 jiffies! g214793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1178.484878][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1178.495039][ C0] rcu: RCU grace-period kthread stack dump: [ 1178.500953][ C0] task:rcu_preempt state:I stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1178.512916][ C0] Call Trace: [ 1178.516223][ C0] [ 1178.519178][ C0] __schedule+0x17b4/0x5680 [ 1178.523757][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1178.528750][ C0] ? __pfx___schedule+0x10/0x10 [ 1178.533673][ C0] ? schedule+0x90/0x360 [ 1178.537940][ C0] schedule+0x164/0x360 [ 1178.542127][ C0] schedule_timeout+0x158/0x2c0 [ 1178.547011][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1178.552497][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1178.557832][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1178.563704][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1178.569279][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1178.574180][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1178.580366][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1178.585804][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.591646][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1178.596313][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1178.601534][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.607493][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1178.612480][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1178.617591][ C0] kthread+0x388/0x470 [ 1178.621700][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1178.626954][ C0] ? __pfx_kthread+0x10/0x10 [ 1178.631571][ C0] ret_from_fork+0x514/0xb70 [ 1178.636199][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1178.641335][ C0] ? __switch_to+0xc79/0x1410 [ 1178.646219][ C0] ? __pfx_kthread+0x10/0x10 [ 1178.650827][ C0] ret_from_fork_asm+0x1a/0x30 [ 1178.655645][ C0] [ 1178.658680][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1178.665031][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1178.670260][ C1] NMI backtrace for cpu 1 [ 1178.670279][ C1] CPU: 1 UID: 0 PID: 3039 Comm: syz.0.7314 Not tainted syzkaller #0 PREEMPT(full) [ 1178.670299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1178.670311][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x65e/0xbc0 [ 1178.670340][ C1] Code: 24 48 0f b6 04 01 84 c0 75 6f 48 8b 44 24 10 80 38 00 74 1d 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 28 c6 44 01 06 f8 f3 90 <41> ff c4 75 bf eb 68 4c 8b 7c 24 10 4c 89 ff be 02 00 00 00 e8 39 [ 1178.670357][ C1] RSP: 0018:ffffc90005ddfa00 EFLAGS: 00000206 [ 1178.670375][ C1] RAX: dffffc0000000000 RBX: ffffc90005ddfaa0 RCX: 1ffff92000bbbf4c [ 1178.670390][ C1] RDX: ffffc90016329000 RSI: 0000000000049761 RDI: ffff8880b873be00 [ 1178.670404][ C1] RBP: ffffc90005ddfb10 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 1178.670418][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 00000000ffffbf6e [ 1178.670433][ C1] R13: 0000000000000000 R14: 1ffff110065eb03a R15: ffff8880b873be14 [ 1178.670446][ C1] FS: 00007fd3c863f6c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 1178.670462][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1178.670475][ C1] CR2: 00007fc1949e9f00 CR3: 00000000758a8000 CR4: 00000000003526f0 [ 1178.670492][ C1] Call Trace: [ 1178.670501][ C1] [ 1178.670516][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1178.670541][ C1] ? schedule+0x16e/0x360 [ 1178.670563][ C1] ? schedule_timeout+0xc3/0x2c0 [ 1178.670584][ C1] do_raw_spin_lock+0x26c/0x2f0 [ 1178.670603][ C1] ? lock_sock_nested+0x6a/0x100 [ 1178.670626][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1178.670649][ C1] ? lock_sock_nested+0x6a/0x100 [ 1178.670672][ C1] lock_sock_nested+0x6a/0x100 [ 1178.670695][ C1] llc_ui_connect+0x6a8/0xd50 [ 1178.670730][ C1] ? __pfx_llc_ui_connect+0x10/0x10 [ 1178.670757][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 1178.670787][ C1] ? hook_socket_connect+0x107/0x190 [ 1178.670815][ C1] ? bpf_lsm_socket_connect+0x9/0x20 [ 1178.670845][ C1] __sys_connect+0x312/0x450 [ 1178.670872][ C1] ? __pfx___sys_connect+0x10/0x10 [ 1178.670903][ C1] ? rcu_is_watching+0x15/0xb0 [ 1178.670933][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.670953][ C1] __x64_sys_connect+0x7a/0x90 [ 1178.670978][ C1] do_syscall_64+0x15f/0xf80 [ 1178.671001][ C1] ? trace_irq_disable+0x3b/0x140 [ 1178.671021][ C1] ? clear_bhb_loop+0x40/0x90 [ 1178.671042][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.671061][ C1] RIP: 0033:0x7fd3c779c819 [ 1178.671079][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.671095][ C1] RSP: 002b:00007fd3c863f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1178.671113][ C1] RAX: ffffffffffffffda RBX: 00007fd3c7a15fa0 RCX: 00007fd3c779c819 [ 1178.671126][ C1] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1178.671139][ C1] RBP: 00007fd3c7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1178.671151][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.671163][ C1] R13: 00007fd3c7a16038 R14: 00007fd3c7a15fa0 R15: 00007fff73bda828 [ 1178.671188][ C1] [ 1178.987066][ C0] CPU: 0 UID: 0 PID: 3062 Comm: syz.3.7312 Not tainted syzkaller #0 PREEMPT(full) [ 1178.987091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1178.987102][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 1178.987127][ C0] Code: de 5b e9 b3 1b 60 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 08 52 78 11 <65> 8b 15 29 52 78 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 1178.987144][ C0] RSP: 0018:ffffc900000077e0 EFLAGS: 00000246 [ 1178.987163][ C0] RAX: ffffffff866c4838 RBX: 0000000000000000 RCX: ffff888066393d80 [ 1178.987177][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.987189][ C0] RBP: 0000000000000000 R08: ffffc90000007a7f R09: 0000000000000000 [ 1178.987202][ C0] R10: ffffc90000007a10 R11: ffffffff866c4770 R12: 0000000000000000 [ 1178.987214][ C0] R13: dffffc0000000000 R14: ffff8880285bc028 R15: 0000000000000000 [ 1178.987226][ C0] FS: 00007f02e13d56c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1178.987240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1178.987251][ C0] CR2: 0000556a3894d950 CR3: 000000002e1ea000 CR4: 00000000003526f0 [ 1178.987266][ C0] Call Trace: [ 1178.987275][ C0] [ 1178.987282][ C0] bond_select_queue+0xc8/0x130 [ 1178.987343][ C0] ? __pfx_bond_select_queue+0x10/0x10 [ 1178.987367][ C0] netdev_core_pick_tx+0x11c/0x350 [ 1178.987389][ C0] __dev_queue_xmit+0x5d1/0x3950 [ 1178.987405][ C0] ? shmem_alloc_and_add_folio+0x866/0xf80 [ 1178.987431][ C0] ? __get_user_pages+0x165b/0x29d0 [ 1178.987452][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1178.987480][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1178.987512][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1178.987539][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.987559][ C0] ? local_clock_noinstr+0xc0/0xe0 [ 1178.987578][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1178.987596][ C0] ? skb_dequeue+0x124/0x160 [ 1178.987618][ C0] llc_conn_send_pdus+0x144/0x1e0 [ 1178.987640][ C0] llc_conn_ac_send_sabme_cmd_p_set_x+0x2f9/0x420 [ 1178.987675][ C0] llc_conn_state_process+0x4f1/0x1360 [ 1178.987703][ C0] llc_conn_tmr_common_cb+0x34a/0x790 [ 1178.987726][ C0] call_timer_fn+0x192/0x5e0 [ 1178.987751][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1178.987767][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1178.987789][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1178.987819][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1178.987836][ C0] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 1178.987855][ C0] __run_timer_base+0x652/0x8b0 [ 1178.987876][ C0] ? ktime_get+0x45/0x220 [ 1178.987903][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1178.987936][ C0] run_timer_softirq+0xb7/0x170 [ 1178.987958][ C0] handle_softirqs+0x22a/0x840 [ 1178.987983][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1178.988011][ C0] __irq_exit_rcu+0xca/0x220 [ 1178.988034][ C0] irq_exit_rcu+0x9/0x30 [ 1178.988060][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1178.988080][ C0] [ 1178.988086][ C0] [ 1178.988094][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1178.988113][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1178.988131][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7a e6 eb f5 48 89 df e8 82 5b ec f5 e8 8d 77 17 f6 fb bf 01 00 00 00 32 ed dd f5 65 8b 05 2b f0 87 07 85 c0 74 07 5b e9 d1 47 00 00 [ 1178.988145][ C0] RSP: 0018:ffffc90005fef370 EFLAGS: 00000202 [ 1178.988160][ C0] RAX: 0000000000002767 RBX: ffff888041ecad98 RCX: 0000000080000001 [ 1178.988171][ C0] RDX: 0000000000000007 RSI: ffffffff8dfb65fa RDI: 0000000000000001 [ 1178.988186][ C0] RBP: ffffc90005fef4d0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 1178.988198][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: ffffc90005fef420 [ 1178.988210][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 1178.988234][ C0] shmem_add_to_page_cache+0xa5e/0xd40 [ 1178.988265][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1178.988289][ C0] ? percpu_ref_put+0xf9/0x180 [ 1178.988308][ C0] ? __mem_cgroup_charge+0x149/0x1e0 [ 1178.988340][ C0] shmem_alloc_and_add_folio+0x866/0xf80 [ 1178.988367][ C0] ? filemap_get_entry+0xca/0x320 [ 1178.988395][ C0] ? filemap_get_entry+0xca/0x320 [ 1178.988420][ C0] ? filemap_get_entry+0x2ac/0x320 [ 1178.988453][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1178.988479][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1178.988511][ C0] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 1178.988538][ C0] shmem_get_folio_gfp+0x5a9/0x1670 [ 1178.988574][ C0] shmem_fault+0x179/0x390 [ 1178.988604][ C0] __do_fault+0x138/0x390 [ 1178.988630][ C0] do_pte_missing+0x228f/0x3490 [ 1178.988654][ C0] ? do_pte_missing+0x130a/0x3490 [ 1178.988686][ C0] ? handle_mm_fault+0xee/0x3310 [ 1178.988710][ C0] handle_mm_fault+0x1bec/0x3310 [ 1178.988743][ C0] ? handle_mm_fault+0xee/0x3310 [ 1178.988771][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1178.988792][ C0] ? follow_page_pte+0x841/0x1450 [ 1178.988820][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 1178.988849][ C0] __get_user_pages+0x165b/0x29d0 [ 1178.988892][ C0] populate_vma_page_range+0x2be/0x3c0 [ 1178.988914][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1178.988937][ C0] ? down_read+0x270/0x2e0 [ 1178.988957][ C0] ? __mm_populate+0x173/0x390 [ 1178.988978][ C0] __mm_populate+0x25f/0x390 [ 1178.988999][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1178.989026][ C0] vm_mmap_pgoff+0x3aa/0x4f0 [ 1178.989050][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1178.989076][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 1178.989097][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 1178.989121][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.989138][ C0] do_syscall_64+0x15f/0xf80 [ 1178.989158][ C0] ? trace_irq_disable+0x3b/0x140 [ 1178.989175][ C0] ? clear_bhb_loop+0x40/0x90 [ 1178.989205][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.989222][ C0] RIP: 0033:0x7f02e319c819 [ 1178.989237][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.989251][ C0] RSP: 002b:00007f02e13d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1178.989266][ C0] RAX: ffffffffffffffda RBX: 00007f02e3416180 RCX: 00007f02e319c819 [ 1178.989278][ C0] RDX: b635773f05ebbee1 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1178.989289][ C0] RBP: 00007f02e3232c91 R08: ffffffffffffffff R09: 0000000000000000 [ 1178.989299][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1178.989309][ C0] R13: 00007f02e3416218 R14: 00007f02e3416180 R15: 00007ffc6dcfa6d8 [ 1178.989334][ C0] [ 1180.631774][ C0] sched: DL replenish lagged too much