last executing test programs: 6.292406172s ago: executing program 1 (id=2004): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x40440c0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3, 0x7}, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 5.763571704s ago: executing program 0 (id=2008): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async, rerun: 32) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000380)=""/237, &(0x7f0000000480)=0xed) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='GPL\x00', 0x50080, &(0x7f00000000c0)={@align=0x44, {0x2041, 0x0, 0xffffffff, 0x1ff}}, 0x2, &(0x7f00000001c0), &(0x7f0000000140)=0x35}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x2000000000000335, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.689875349s ago: executing program 3 (id=2009): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000150001002abd7000fedbdf257f0000010000000000000000000000007f0000010000000000000000000000004e2200004e220101020080a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00000000000a00100052"], 0x5c}}, 0x80c4) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r3, &(0x7f0000000040)='\v#!}}]\\-7-+}:\x00', 0x151080, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x5]}, {0x4, 0x7, 0x9, 0xd9}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000580)=""/138, 0x8a}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x1) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000007c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000150001002abd7000fedbdf257f0000010000000000000000000000007f0000010000000000000000000000004e2200004e220101020080a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b06b6e00000000000a00100052"], 0x5c}}, 0x80c4) (async) socket$kcm(0xf, 0x3, 0x2) (async) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r3, &(0x7f0000000040)='\v#!}}]\\-7-+}:\x00', 0x151080, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x5]}, {0x4, 0x7, 0x9, 0xd9}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) (async) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/113, 0x71}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000580)=""/138, 0x8a}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x1) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000007c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) 5.620495378s ago: executing program 0 (id=2010): r0 = epoll_create1(0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001440)={0xc8, 0x0, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000001) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4044848) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0x8, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041880) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)="4d6b5d219ed58a4120c133", 0xb}, {&(0x7f0000001800)="d915b727d9d68b072df833a488675dc4ddff9452d50adb41630b06abbc1b0882c342971a2dea99b29f274fe7213a30cfa4de8639d9371513d11c0191c1aca500647d18dbb07e7ba9582baf9b58e2e5410336765d36d318051096e06edc38b14f5b6ab12b5ed0f3445223529abfb10937821a486ec70581950ee40342a0268351d3aabf7ec813dcc0996d7fe747eb4ce71dc0c351b71ccac8d3a6ef27892410ae484b5e942873ae4252906254d63454b7f0ea833faa0cf7a036b48fe4de9819c8695de854e57c9c812279bf25", 0xcc}, {&(0x7f0000001600)="372bd53619d4ae25cbf97fa92dee392428b6efb8190ebf611f276a0f8a08376a774610e44655053664b415e77a984bcd518e7e2c74befc4aedce9ae78c5637951309a80e1d9d602f60b99793c9238e865b2e436c642ff66071b9e497c8c3a87dc8390cc5936b0c52d90f0318dfc4c7cdacfcd4417fe2745d40c1f03ae1c341d0287f78a193e80a348ecc74d579e4908405b88b133b65f588a756e8471a11e03757864b547c7257a4ddf7", 0xaa}, {&(0x7f00000016c0)="c3aea9f8d2bfac424b5e8edbba1276f9e4d456ad1231b32c12ccf0139c0e69cc35a6c2377319e67b9760933b20016ab865020975a8dae98582287f6c3b91b7c4f7d228be7f33598c756ea8e94f656c24fafc47e49b5ddc7c4492cdd4f5ee6c3fb82b6cc308d3451a8a735724e4d9cd6686f59f02ebd00ec03d233dbc905090478e320a58cf2c79e50e9000fcaeebf2d1bf4d6c423b78", 0x96}], 0x4}}], 0x1, 0x40000) close(r8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x304}, "f3318b691a722862", "21440a1d270ac31d326965ae00", "73dfb6ad", "efa63c068e3496d4"}, 0x28) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f0000000100)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x17, 0x2014}, 0x20) r10 = socket$inet6(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r10, 0x20}, {r10, 0x6478}, {r10, 0x1}], 0x3, 0x0, 0x0, 0x0) shutdown(r10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.437095181s ago: executing program 3 (id=2012): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000500)={r2, @in={{0x2, 0x0, @empty}}, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r2, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x8000, 0x1}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000052f7b019c5917d08bc3e055f3d8e784c98ebda49d450a70eb7a9b9b33d7ae4cc249bc7c973603188bb3c7221440a77a04d72e601c07dd03b095b97d05d44d347b46c5adeb7535107e954", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16a71e30", 0x4}], 0x1}}], 0x2, 0x20000000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11002600000000dfc082047d465c3d4a72d169000000020100"], 0x0, 0x26, 0x0, 0x2}, 0x28) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) 5.233541042s ago: executing program 1 (id=2014): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000e80)={{r0, &(0x7f0000000680)='-\x00', 0x10001, &(0x7f00000006c0)={@align=0x6, {0xaf5, 0x1, 0x7, 0x3}}, 0xf, &(0x7f0000000700), &(0x7f0000000740)=0x9}, 0x0, &(0x7f0000000d80)}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @local, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x8000, 0x100}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000780)={r4, 0x55, "94dfaabd0b53cc8ef15efafef912644d718eb35d10828676a033e8bbe91da423d34cce518ca4d214ce60d269be0668f1bc0017cf53b2021003838c8c87545450555277678a6aac1cb38600c80dd4338dd17f4052e0"}, &(0x7f0000000800)=0x5d) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r8 = socket(0xa, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000040c0)={r10, 0x6, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000f00)={0x9ef1, 0x4, 0xff, 0x2a7, r10}, &(0x7f0000000f40)=0x10) 4.941382898s ago: executing program 3 (id=2015): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x21c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcb, 0xa8, @random="42bf9d5dea95eeed2c2477356b04ad8df230c8b76bd2045da81411afe58542ac4a3a333c2be067d4d3197063246bae96deb1f053b460e8f84c9477c64eaa5d13f62b585fdeaff21d961142baad97e26ef2c0bb42d3ebab79218ae5d20f800ae0532a8ae3ece1a88603c390e629151b5b0a192a0060d89bda3d80910f868da16ccad31f527330406cdc02f9b5d5d627ccdbb4286687c05c3094664ff561a29e9beeb39ed12c7e3f76acb01f185fe3c9f3dc02a21261eada648ebca5e873fb4edad3a4d634c260b1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdc, 0xa8, @random="49d5137a36ae96dc4005f47de5b1f44bf821381f2dfdec11052c08c1fb6aeb2e83e902504ee665b382e1c3c55763ec20544ebe814ac53c2dc4d3832f3e70d5c855bbec0f55d826a606b78c5ff44028135ff80f9a72bfb30d1cbdb45f26635d611bf4636b020d2e875fab1626a35b4752760dacdcedc76da922a534ccc2a5f7e48cab7f3a21ece0f1ff86901c58fb6d302fe2471cbe99aa8e2b852923ef08b2273dd9da4de80b1b0827d1dbe62b27de6e8a5c156a31f9de6ab20550b07869843b5caed8825301e7e1c6992f23b6d48cc81778eb3ecc2158df"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) 4.868721937s ago: executing program 0 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9a1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x80, @empty, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @remote}], 0x7c) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 4.666090999s ago: executing program 4 (id=2018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000140)={r1, &(0x7f0000000000)='syzkaller\x00', 0x200100, &(0x7f0000000080)={@align=0x8000000000000001, {0x7, 0x9, 0x8, 0x8}}, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 4.504860887s ago: executing program 4 (id=2019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000016) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="36e0cbb4aec23ab20a6f27dc386db7dccd065259a1265c065ee2b498dce90fc2a11c307880e698822762dcc32349c3a8a5ec16fa6776168b5d253c5602097438f0ae335967d72a801bd3b1d03f68ab3e24d33462a55567facf02ece0d5b340000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250700000014000180080003000000000008000f0000000000000001802b0002007465616d30000000000000000000000008dc7edc3e5b6863dbf502fb031efd45aef44920baebc6b513aa08d699e5c134d9fa1e3e1eace3b35b4ef6151bc232f34bd28679c95936253e17463b20093156fe1bb38459b953d7b0594dce7a593d309c927228a6e561", @ANYBLOB="c9afc08a7d66417e1feb868c775b73d7cc69781f94b94c184674536f397113b369462126f430bccffb6d445defaf95fefd1896421c5ab3af13584ab070ffe6eed5aaac93f60ba16201e763fdb2d642b3e61f0ba3f6c9101215ed59fffcadeb636dc1bb5efe94841b4dca22d1405958778f97b1af4d3a40c655ff095ccdb55f718a1a65878203d814fc51082057b0072459711b4823e69cfff6cdd0b7a5cbb31aa1dc4ceb639192dcd0950f5dfc07bbf1c77b8a14cfd75898a60cbf4cf370204699bb0ca378b080c5409d7c2dfd7cfd2c8099a3c22fe65b3975b3ac7390f61cac59a1e64f30fe9bfff5da6ab2d15605c11428d46b9673db", @ANYBLOB="4bad7abf031ef036e1b733c9dfc2d77db2f154110f979f2e370e23b0f42ad50f97d8ea1f9175f649ee8b21c3ce12828771fd9c6ad47a66355569cdd610311c2b8579d20a68aa8155cacdef37a4911e86c7461fc189ba49b2beb9f07b286ff200d16a64c6698b2a6177059f7c673b02cc22c9de66c5a996c9c74afd5dcaa02194f5fe7dd030120667d645047955644a52ca3eee568a00c3b5362cad45eddba08adf2c33043ed41a33f76aa1f9"], 0x50}, 0x1, 0x0, 0x0, 0x4004810}, 0xc802) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000026c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0315000000020000140031800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a0037abc5d33b3708cfcab954b0f6bc53029ba216e757d253d02a5b172c10b557f25a2f3277cc37042a52a552ba731b6e3b2e5353cd3fe69524d1116d9c58d7c71be4ac5e39a7e5dadaae8eb6e39d7608c4959afa1a4690", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c0003000000000000006e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) close(0x3) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x7, 0xb, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) connect$inet6(r7, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000fc0)=@gcm_256={{0x304}, "9572c2cc59c7b3ca", "f86b7bef8b1c7417eac6a1c1a9c530a41718e43819e7eeb93dc3259d6f72dc9b", "cdf5f36f", "fc34166489c6486b"}, 0xfffffffffffffe64) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a61744a39c4f98f3547190", 0xb}, {&(0x7f0000000240)="45add59ebdb383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a274b0cbb535144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xca7}], 0x5, &(0x7f0000001480)}, 0x20008000) (async) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000001380)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x7fffffff, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x95, 0x0, 0x4, [0xffff, 0x2, 0x3, 0x3, 0xff, 0x8, 0x7]}, @end, @timestamp_addr={0x44, 0x14, 0x40, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}, @end, @timestamp={0x44, 0x20, 0x70, 0x0, 0xe, [0xc15f, 0x4, 0x5, 0xc2, 0x7, 0x8000, 0x81]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x8, [{@loopback, 0x1ff}, {@multicast1, 0x7}, {@remote, 0x8}, {@multicast1, 0xd73f}]}, @timestamp_prespec={0x44, 0x2c, 0x8e, 0x3, 0x6, [{@loopback, 0x1}, {@broadcast}, {@loopback, 0x7fff}, {@loopback, 0x6}, {@local, 0x2}]}]}}}}}) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x200000000000030f, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000034100122ffffffff9500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, r9}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000200)='ip_vti0\x00', 0x2100, &(0x7f0000000240)={@_ha_fsid={[0x3ff, 0x2]}, {0x2, 0x4, 0x1, 0x791}}, 0x8001, &(0x7f0000001080)={@_ha_fsid}, &(0x7f00000003c0)=0x4}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 4.300503507s ago: executing program 2 (id=2020): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0xec, 0x6, 0x1, 0x0, 0x2, 0x0, [{0x9, 0x8, 0x80, '\x00', 0x2108}, {0x6, 0x8000, 0x2, '\x00', 0x886}]}) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100)="44f60b0ee3aa3eace27fd0a05d5fcf90e8639a094ec891b6a3014d9725fe46062587bccace6ababdcfc323654d67bcd7c30f719788ffe1209c9440e76224d4a4b046a366c03e77bfcb7e69e2468b1cf0e04b", &(0x7f0000000180)=""/40}, 0x20) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000200)='\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x7, 0x7fff]}, {0x6, 0x6, 0xb02, 0xfffffffffffffffd}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)}) (rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f00000004c0)=@ctrl_frame=@cf_end={{}, {0x7}}, 0x10) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000500)={0x6, 0x1ff, 0x1, 0x0, 0x5, 0x0, [{0x3, 0x6d9, 0x8001}, {0x25, 0x3, 0x0, '\x00', 0xa}, {0xb18, 0x5, 0x8, '\x00', 0xd89}, {0xa1b5, 0x1, 0x7df, '\x00', 0xd01}, {0x2639, 0x1000, 0xff, '\x00', 0x1100}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000640)={0x0, 0x5, [0x1, 0x9, 0x8, 0x4, 0x1, 0x100000001]}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000680)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000740)={0x1}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000780)={0x1, 'ipvlan1\x00', {}, 0x1}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r4) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3fe000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x40080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x50}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x2, 0x3, 0xfff, 0xc, 0x1000, 0x1, 0xf09, '\x00', 0x0, r4, 0x5, 0x2, 0x5}, 0x50) (async, rerun: 64) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x408c0}, 0x8044) (rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x194, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x8c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "78fe74017d66635aed1fd7a398dc5cab"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f6cf6c1c90de2757cb7eefb6bc2e9f11de62538dd351151bac68ff1421c109c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x84}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0xd0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "11bced64b19f4d8d8ef5185357ea61f8b515b46006daaeabf37170dea63e67cb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ccea72a88beafb70bb1e2f5840d785386bf362504281c525fc08bd419499fa9"}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.172537394s ago: executing program 1 (id=2021): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a30000000000800410073697700140031"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.969598745s ago: executing program 2 (id=2022): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 3.968416757s ago: executing program 3 (id=2023): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newae={0x70, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@multicast1, 0x4d5, 0x0, 0x2b}, @in6=@remote, 0x2, 0x34fb}, [@mark={0xc, 0x15, {0x35075a, 0x8}}, @lifetime_val={0x24, 0x9, {0xfc0, 0x1, 0x6, 0xff}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="17000000020001", 0x7) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="17000000020001", 0x7) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="811068000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) (async) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000010000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 3.927130455s ago: executing program 1 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x502b2, 0x823}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_OKEY={0x8, 0x5, 0xf}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x68}}, 0xc010) 3.722546878s ago: executing program 4 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000876c0000000e0000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x0) 3.622033608s ago: executing program 2 (id=2026): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x20}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.536960785s ago: executing program 1 (id=2027): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 3.362507339s ago: executing program 3 (id=2028): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) close(0x3) 3.293875448s ago: executing program 0 (id=2029): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r1, 0x10e, 0xa, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001ec0)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x503, 0xfffffffc, 0x701, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKMODE={0x5, 0x11, 0x51}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4c030) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xb}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c044) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xb}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c044) 3.187105085s ago: executing program 3 (id=2030): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x8000000}, 0x94) (async, rerun: 64) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x41) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, 0x0, 0x400c044) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000001f40)=""/24, 0x18}, {&(0x7f0000001f80)=""/132, 0x84}], 0x3}, 0x4}], 0x32, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x8, 0x0, &(0x7f00000006c0)="0000000005000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000004a00)={0x10, 0x3f8, 0x100, 0x70bd24, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x24000044) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x1000) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x4}, 0x94) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x3) 3.088388434s ago: executing program 4 (id=2031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x38, 0x40004}}], 0x1, 0x0) 2.87735745s ago: executing program 4 (id=2032): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000040)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="91debd8d2e1ac6", 0x7, 0x4000000, &(0x7f0000000140)={0x11, 0x7, r0, 0x1, 0x8, 0x6, @multicast}, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}]}, 0x24}}, 0x2000001) r3 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$nci(r4, &(0x7f00000003c0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0xdb, {0x7, 0x1}}, 0x5) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={r5, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x3ff, @mcast1, 0x100}, @in6={0xa, 0x4e24, 0x9, @empty, 0x8}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x5}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000540)=0x10) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000580)) (async) syz_emit_ethernet(0x1e, &(0x7f00000005c0)={@broadcast, @random="b66249de428f", @void, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "cab78d30c513d3cc"}}}}, &(0x7f0000000600)={0x1, 0x1, [0x1e8, 0x98b, 0xbca, 0x709]}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000640)={'veth0_to_bridge\x00', {0x2, 0x4e20, @local}}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000680)='veno', 0x4) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f00000006c0)) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000740)=0x9119, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$OCFS2_IOC_REFLINK(r7, 0x40186f04, &(0x7f0000000800)={&(0x7f0000000780)='veth0_to_bridge\x00', &(0x7f00000007c0)='#{+\x00', 0x1000}) (async) sendmsg$nl_route(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@ipv6_delroute={0x44, 0x19, 0x8, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x14, 0xfa, 0xfc, 0x4, 0xfd, 0x6}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0xfffffffffffffffa}}, @RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc041) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x1}, ["", ""]}, 0x18}}, 0x4000) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000a80)=0x7fff, 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000ac0)={0x3, 'veth1_vlan\x00', {0xbe}, 0x6a4}) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000b00)={0x0, 0x7fff, 0x1, 0xef, 0x2, 0x0, [{0x1ff, 0xffff, 0xd, '\x00', 0x709}, {0x7f, 0x10001, 0x3, '\x00', 0x200}]}) socket(0x5, 0x4, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000bc0)) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000c00)) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 2.66127697s ago: executing program 2 (id=2033): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @broadcast}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000040)="03", 0x1) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000000), 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000e000000100000000000000000000000002000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffffffffffff0c00000000000000000000000000000000000000000000dd0000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000080000000000000feffffffff7f4000020000000000000800000000000000000100010000000000440005000030633b8e7102ece600fffffffffffffffffffc3c00000002000000ac1414aa0000000000000000000000000435000004030000010400"/180], 0xfc}}, 0xc004004) ioctl$FITHAW(r2, 0xc0045878) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xfffffff8}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0xff14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0xffff8000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.559354953s ago: executing program 2 (id=2034): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2502000000140001800800030004000000080003000000000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x68, r8, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff2547}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 489.162884ms ago: executing program 0 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0x7, 0x1, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xffff, 0x20, 0x6, 0x78bb}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={r5, 0xd8, &(0x7f0000000280)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e23, 0x33b, @empty, 0x3}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x5}, @in6={0xa, 0x4e20, 0x39d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x5}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1}, @in6={0xa, 0x4e23, 0x7, @remote, 0x14b862a9}]}, &(0x7f00000003c0)=0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8003}, 0x41) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 488.346715ms ago: executing program 1 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3054, 0x2c, 0x400, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x7, 0x59a27bb0aa3df301}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3014, 0x2, [@TCA_CGROUP_ACT={0x638, 0x1, [@m_sample={0xc8, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x80000001}]}, {0x93, 0x6, "06b3f582ba09fbd595ee727dbf9b326a75c4aebf04b4e60dec0b6cdbbe999b9eb16cfea1192b469ada76f5a244792e69f02455567a57a36323e7c17850416ea6402fc586111ebb28510f311ace9687478960c4f8917719ebd39166b29aa42b4330c72ef48588b2f3a7fd3a20c5c6cd2e08674be77e485628ceac88486216eeb32823319ab9dc60741e9843e82232d1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xb0, 0xd, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x10000000, 0x9, 0xe616}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x44, 0x6, "e9345d742d0cd8221e94c609bf9c99d971a7c4f62e6e02e3828c7471456edf8b37d86c1f9a06bd6c3affc3a6ac4946dcbb5573dbd614845d0ceb1b09a1c569e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x224, 0x13, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xf, 0x3, 0xfa1, 0x8}, @empty, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x3, 0x0, 0xaa}, @loopback, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x2, 0x3, 0x9}, @private=0xa010100, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x6, 0x6, 0x2, 0xc0000000}, @empty, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x7, 0x9bf0, 0x2}, @private=0xa010100, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xb, 0x0, 0x8, 0x9}, @empty, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4b0, 0x7, 0x3, 0xe000000, 0xff}, @local, @private=0xa010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0x10000000, 0x4, 0x40}, @loopback, @private=0xa010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4310, 0xfffffffe, 0x3, 0xfffffffb, 0x6}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xa, 0xffffffffdffffffb, 0x7b, 0xfc0f}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}]}, {0x6a, 0x6, "aef86ac35c97cd10f86167c744e528501f989396e21bc4cad0e39481ddfc4e23269478cf45173890422388655480c2943908de35fa047bba666aa0576f85e7db56784b190021468ece030c2b52ab8df7fca3def244c063694d25b60e7f8671e82a574385b4f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x120, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x50, 0x4, 0x6, 0x8000, 0x6}, 0x4}}]}, {0xd6, 0x6, "4c32e5ed9efb2101daf4fb93e1a722b99be897b69b8a866ec977b36298149687cc45273ddd17ffc6f4c0c3ac990d5babe604caf361e8ed0abc50eafecb87db05ecb88b3fb7f9819c3c8cc6f9edbfe797e48f1cf311df30bfc311a46da78b4bc5c9a3fa5c20e3ed84989e2bf7d080a9822c50269f474a818a7b3b10c7473fde0adad4c94f598087f66a5bab44321493d45b3e0b0c46001d3a2d22d9e0d61f4165d16119daf27d78ccb7a12e879adead6dcadd1c6345a7ee76a883035f9c46e111dc22837c4da80af61ba1b04d8204f39ffe1c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_nat={0x144, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0xed, 0x6, 0x0, 0x8}, @private=0xa010100, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0xffffffffffffffff, 0x3ff, 0x5}, @private=0xa010102, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3d34, 0x5, 0x9, 0xff}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x49c}, @local, @multicast1}}]}, {0x7c, 0x6, "09b454e6a0ecdd9f81dfc306871872821cd7b457032224336dedebf15c0e2c0ca7248a20bbc03df1b0603b9eaea79b1155cf95b0db891e9428987f95ffa8e0e5da7772f2893986e3392d49a86c20a79ad889471d98755a587aa2945d44294709350fe808a6a89a009ff6c27ae2e5086b1833ad909bcd454a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x34, 0x0, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0x32, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xbb, 0x1, 0x4, 0xfffff304, 0x400, 0x9, 0x80000001, 0x6, 0x1313f332, 0x5, 0x5, 0xfffffe00, 0x8, 0x1, 0xf, 0x3, 0xe62d, 0xfab5d072, 0x8, 0x0, 0x2ca000, 0x5, 0x5, 0xed, 0x5, 0xff, 0x8, 0x1, 0xf, 0x1, 0x4, 0xe00000, 0x7, 0x4fc7, 0x5, 0xd894, 0x1000, 0x4, 0xa, 0x4, 0x5, 0x5192, 0x90, 0x7fffffff, 0x4, 0x0, 0x68, 0xfffffffc, 0x5, 0x405b, 0x7, 0xc7, 0x88de, 0x14b8, 0x10, 0x8, 0xfffff2e6, 0x2, 0xfff, 0xf1a, 0x0, 0x3fedcae7, 0x5, 0x155e, 0x2, 0x63ed, 0x2, 0x0, 0x5, 0x1, 0x2, 0x9, 0x7d, 0xff, 0x9, 0xffff, 0x9, 0x0, 0x401, 0x400, 0x4, 0x8, 0x400, 0x469, 0x2, 0x401, 0x0, 0x7, 0x6, 0x101, 0x7, 0x2, 0x9, 0x3, 0x1, 0x0, 0x6, 0x97c5, 0x2, 0x5, 0x0, 0x8, 0x0, 0x1, 0x80000000, 0x80, 0x6, 0x3, 0x6d6, 0x89, 0x3122, 0xa8a8, 0xffffff67, 0x1, 0x1, 0x200, 0x401, 0x8, 0x800, 0xfffffffd, 0xfff, 0x3, 0x10000, 0x800, 0x8, 0x2, 0x1ff, 0x3, 0x6, 0x9, 0x800, 0xd, 0xcff1, 0x81, 0x1000, 0x343f, 0x6, 0x10000, 0x1, 0x5, 0x2, 0x4, 0x10000, 0x10, 0x8, 0x8ae88ac4, 0x0, 0x0, 0xd, 0x40, 0x7, 0x3, 0x5, 0xeae, 0x0, 0x7, 0x5, 0x40, 0x5, 0xded, 0x4, 0x8, 0x2, 0x7fffffff, 0xfffffcfe, 0x7fffffff, 0x3, 0xffff0001, 0x81, 0x2, 0x0, 0x7ff, 0x6477, 0x3, 0x9, 0xfc7, 0x6, 0x6, 0xfffffff9, 0x4, 0x18e, 0x9, 0x3, 0x1, 0x0, 0x7, 0x9, 0x81, 0x8, 0x1000, 0x9, 0x1ff, 0x10001, 0x3, 0x10000, 0x80000000, 0x6, 0xfffffffd, 0x3, 0x9, 0x9, 0x8, 0x3ff, 0x9, 0x6, 0x7fff, 0x7, 0x9, 0x4fd8, 0x9, 0x6, 0x2, 0x0, 0x8, 0x80000000, 0x2, 0x9, 0x8, 0xc, 0x5, 0x3, 0x621, 0x8001, 0x1, 0x6, 0x0, 0x6b8, 0x0, 0x8, 0x8, 0x6, 0x9db0, 0x0, 0x6, 0x8, 0x100, 0x5, 0x9, 0xa8, 0x400, 0x2, 0xffffffff, 0xe77d, 0x400, 0xd, 0x9, 0xfffff129, 0x10000, 0x2, 0x7730, 0x8001, 0x9fe, 0x9, 0x3, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x5, 0x800, 0x5, {0x5a, 0x0, 0x8, 0x3, 0x800, 0x80000000}, {0x9, 0x1, 0xfffe, 0x40, 0x4, 0xff}, 0x67b9, 0x8001, 0xfffffffc}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x7, 0x6, 0x4, 0x0, 0x0, 0x2, 0x4, 0x3, 0x6, 0x0, 0xfffffffe, 0x4, 0xf, 0x511, 0x2, 0x7, 0x5, 0x7, 0x10, 0x9, 0x101, 0x1, 0x8, 0x4, 0x200, 0x4, 0x9, 0x3, 0x4, 0x7f, 0x6, 0x9, 0x7fffffff, 0x1, 0x2, 0x8, 0x3, 0xffff, 0x4, 0xffffffff, 0x24deb83f, 0xfffffffb, 0x0, 0x0, 0x9b, 0x0, 0x7, 0x658000, 0x2, 0x4800, 0xa, 0x10000, 0x2, 0x4, 0x76d2, 0xb24, 0x9, 0xf, 0xe6, 0x11ff, 0x8, 0x4, 0x100, 0xffffff0e, 0x6, 0x8, 0x4, 0x200, 0x8, 0x3c, 0x8, 0x91ae, 0x2, 0x9, 0x2, 0x9, 0x6, 0x2, 0x9, 0x2, 0x6, 0x2, 0x3, 0x420, 0xffffffff, 0x78, 0x4, 0x6, 0x0, 0x7ff, 0x3, 0x7, 0x3, 0x7, 0x4, 0x2, 0x88c4, 0x3, 0x5, 0x5, 0x2, 0x5, 0x4, 0x10001, 0x4, 0x400, 0x7, 0x6, 0xe7, 0x3, 0x1000, 0x7fff, 0x1, 0x5, 0x1, 0xe27172, 0x0, 0x2, 0xfff, 0x8, 0x9, 0xea2, 0x8, 0x40, 0x1000, 0x200, 0x81, 0xfffffffe, 0x2, 0x0, 0xc67, 0x0, 0x5, 0xffff, 0x2, 0x2, 0x7, 0xffffffff, 0x7, 0xfbe7, 0x1, 0x1, 0x80000000, 0xdb, 0x7, 0x3, 0x1, 0x10, 0xc4b7, 0x8, 0x8, 0x4, 0x8, 0x5, 0x9, 0x1, 0x9, 0x89, 0x362c, 0x401, 0x71ef, 0x1, 0xe84, 0x81, 0x9, 0x809, 0x5, 0x9, 0x8, 0x2, 0x6, 0x7, 0x4, 0x8, 0x7, 0x1, 0xb90, 0x9, 0x1, 0x0, 0x5, 0x53982f2d, 0x2, 0x2, 0xb, 0x1, 0x4, 0x0, 0x2, 0x2, 0xb, 0x3, 0x1, 0x2, 0xff, 0x3ff, 0x731, 0x2, 0xd, 0x1d8, 0x400, 0x5, 0x0, 0x0, 0x7, 0xa7, 0x33b9bfb9, 0xa, 0x80000001, 0x7, 0x2, 0x5ba, 0x1, 0x5, 0x8001, 0x80000001, 0x2, 0x7, 0x3, 0x7, 0x7f, 0x0, 0x8, 0x3, 0x7085, 0x401, 0xfffffffc, 0x52, 0x10000, 0x10001, 0x8, 0x1501, 0xac3, 0x5, 0x2, 0xf, 0x3, 0x17e5d16c, 0x97b, 0x1, 0x3, 0x9, 0x7, 0x4, 0x7, 0x1, 0x3, 0xfffffff9, 0x0, 0x4d5, 0x0, 0x9, 0x8, 0x9b]}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}]}, @TCA_CGROUP_ACT={0x2174, 0x1, [@m_connmark={0x1130, 0x6, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x5, 0x10000000, 0x0, 0x8}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x47f4ec0b, 0xfffff08d, 0x3, 0xffff, 0xffffffff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x0, 0xf4ea, 0x4}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xb, 0x6, 0x6, 0x200}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7f, 0x8, 0xffff0000, 0x3}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x1, 0x0, 0x1, 0x6}, 0xbcc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a6, 0x5, 0x8, 0x4, 0xc9}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x9e6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x525, 0x2, 0x9, 0x139a340e}, 0xfffb}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x1040, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x351}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x80, 0xe}}]}, 0x3054}, 0x1, 0x0, 0x0, 0x20000}, 0xc010) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000004cc0), 0x0, 0x40) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000840)={0x42, 0x864f49, 0x4, 0x4, 0x800, 0x1}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xd}, {0x0, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044885}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000bc0)=@newtfilter={0x330, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2fc, 0x2, [@TCA_MATCHALL_ACT={0x2f8, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e2, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_nat={0x154, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x1, 0xff, 0x2}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x14c, 0x1d, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x401}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x635}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xfffffffd, 0x4, 0x7}, 0x1}}]}, {0xb6, 0x6, "10b8ef520b0cca7d74c872ffe2cf4c02e31d1dd4678e0378cd53d3945659be7d92e9c70bdbfc074115f1704ca13f63a2bef1bbd50ea571712bbba968648fe03b21cc38c03ef6640a91cb7dc6c90fb1877cd9b45bd4989f29fe2de169e50251bf0820a727136a1f51a1302e3d9611748bc7cc0873685928e9138e07d47bd02a8debaa38918d0981dfbc6ac87b2907e486b3ccc8679c9c1cac94b7ca03cf243f22229ba20e2904c968d380e5803a21fdeec201"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x40001}, 0x44000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 486.392126ms ago: executing program 2 (id=2037): socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="5fe774115338050d51eca246211e45afe321861014492422e6447cac2e7ff37387", @ANYRES16=r1, @ANYBLOB="899025bd7000ffdbdf25010000000500040002000000050003002f000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8804) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 330.589994ms ago: executing program 4 (id=2038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272694bd769f864909333367dd73067650000280022800c002300020000000000000005002500000000000500240000"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272694bd769f864909333367dd73067650000280022800c002300020000000000000005002500000000000500240000"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 0s ago: executing program 0 (id=2039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r3], 0x50}}, 0x4000040) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10b85, 0x41830}, [@IFLA_ADDRESS={0xa, 0x1, @random="11169b10eb57"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r9, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): parsing attributes in process `syz.2.177'. [ 115.221263][ T6723] xt_hashlimit: size too large, truncated to 1048576 [ 115.739695][ T6733] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 115.802059][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 115.920201][ T6731] syzkaller0: entered promiscuous mode [ 116.029788][ T6740] veth1: entered promiscuous mode [ 116.035292][ T6740] veth1: entered allmulticast mode [ 116.472913][ T5980] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 116.947912][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 116.961958][ T6757] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.890126][ T6765] netlink: del zone limit has 8 unknown bytes [ 118.366521][ T6788] netlink: 56 bytes leftover after parsing attributes in process `syz.0.193'. [ 118.597612][ T6795] xt_hashlimit: size too large, truncated to 1048576 [ 118.652653][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'. [ 118.989114][ T6815] lo speed is unknown, defaulting to 1000 [ 119.251087][ T6826] netlink: 'syz.1.204': attribute type 13 has an invalid length. [ 119.301269][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 119.329212][ T4578] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.362087][ T4578] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.400181][ T4578] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.429372][ T4578] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.562441][ T6834] netlink: 'syz.4.206': attribute type 4 has an invalid length. [ 119.617402][ T6836] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.810245][ T6846] xt_hashlimit: size too large, truncated to 1048576 [ 119.822685][ T6846] xt_hashlimit: invalid interval [ 119.840891][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 120.522392][ T6875] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 120.568333][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.611198][ T6875] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.617489][ T6876] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 120.691611][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 120.724328][ T6876] batadv0: entered promiscuous mode [ 120.749617][ T6876] batadv0: entered allmulticast mode [ 120.766847][ T6876] bond0: (slave batadv0): Releasing backup interface [ 120.806778][ T6876] bridge0: port 3(batadv0) entered blocking state [ 120.824165][ T6876] bridge0: port 3(batadv0) entered disabled state [ 120.897503][ T6880] 8021q: VLANs not supported on wg0 [ 120.928404][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 121.118429][ T5975] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 121.128536][ T5975] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 121.593813][ T6904] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 121.629925][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 121.751544][ T6918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.071008][ T6925] netlink: 260 bytes leftover after parsing attributes in process `syz.4.230'. [ 122.149612][ T6927] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 122.347996][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.233'. [ 122.392731][ T6937] x_tables: arp_tables: AUDIT target: not valid for this family [ 122.433397][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 122.437160][ T6935] erspan0: entered promiscuous mode [ 122.922670][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.378603][ T6974] __nla_validate_parse: 2 callbacks suppressed [ 123.378624][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 124.075893][ T6999] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.087749][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 124.116715][ T7010] netlink: 64 bytes leftover after parsing attributes in process `syz.4.251'. [ 124.194873][ T7006] lo speed is unknown, defaulting to 1000 [ 124.896485][ T7009] lo speed is unknown, defaulting to 1000 [ 125.379405][ T7041] bridge_slave_0: left allmulticast mode [ 125.402688][ T7041] bridge_slave_0: left promiscuous mode [ 125.423818][ T7042] netlink: 'syz.1.258': attribute type 2 has an invalid length. [ 125.434663][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.485813][ T7041] bridge_slave_1: left allmulticast mode [ 125.491621][ T7041] bridge_slave_1: left promiscuous mode [ 125.515965][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.576902][ T7041] bond0: (slave bond_slave_0): Releasing backup interface [ 125.612188][ T7050] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 125.641962][ T7041] bond0: (slave bond_slave_1): Releasing backup interface [ 125.676769][ T7041] team0: Port device team_slave_0 removed [ 125.689469][ T7041] team0: Port device team_slave_1 removed [ 125.696719][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.705420][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.722354][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.736323][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.747171][ T7041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.839248][ T7050] netlink: 830 bytes leftover after parsing attributes in process `syz.1.258'. [ 126.070699][ T7058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.546945][ T7074] lo: entered allmulticast mode [ 126.562632][ T7067] lo speed is unknown, defaulting to 1000 [ 126.735356][ T7085] netlink: 176 bytes leftover after parsing attributes in process `syz.2.268'. [ 126.892789][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 127.096723][ T7087] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.180183][ T7093] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.400083][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 127.420863][ T5830] Bluetooth: hci4: link tx timeout [ 127.428606][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.437346][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 127.865288][ T7112] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 127.940518][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 127.958086][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 127.977424][ T7119] trusted_key: syz.3.275 sent an empty control message without MSG_MORE. [ 128.146425][ T7125] xt_hashlimit: size too large, truncated to 1048576 [ 128.529363][ T7135] __nla_validate_parse: 1 callbacks suppressed [ 128.529384][ T7135] netlink: 136 bytes leftover after parsing attributes in process `syz.3.283'. [ 128.579958][ T7135] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 128.660943][ T7139] pim6reg: entered allmulticast mode [ 128.674750][ T7134] pim6reg: left allmulticast mode [ 128.845146][ T7144] netlink: 32 bytes leftover after parsing attributes in process `syz.4.285'. [ 128.977572][ T7151] tipc: Started in network mode [ 128.997618][ T7151] tipc: Node identity eeecaa00de2f, cluster identity 4711 [ 129.014850][ T7151] tipc: Enabled bearer , priority 0 [ 129.034642][ T7151] syzkaller0: entered promiscuous mode [ 129.051564][ T7151] syzkaller0: entered allmulticast mode [ 129.090937][ T7151] tipc: Resetting bearer [ 129.127489][ T7149] tipc: Resetting bearer [ 129.158331][ T7149] tipc: Disabling bearer [ 129.182236][ T7158] lo speed is unknown, defaulting to 1000 [ 129.193898][ T7160] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 129.249090][ T7159] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 129.324411][ T7159] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 129.463377][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 129.485254][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.292'. [ 129.539697][ T7168] netlink: 128 bytes leftover after parsing attributes in process `syz.4.292'. [ 129.546074][ T7167] netlink: 'syz.4.292': attribute type 4 has an invalid length. [ 129.808048][ T7174] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 129.846031][ T7174] netlink: 2 bytes leftover after parsing attributes in process `syz.4.296'. [ 129.874584][ T7174] hsr0: entered promiscuous mode [ 129.888921][ T7174] bridge0: port 3(hsr0) entered blocking state [ 129.916911][ T7174] bridge0: port 3(hsr0) entered disabled state [ 129.934985][ T7174] hsr0: entered allmulticast mode [ 129.957509][ T7174] hsr_slave_0: entered allmulticast mode [ 129.984311][ T7174] hsr_slave_1: entered allmulticast mode [ 130.009634][ T7174] bridge0: port 3(hsr0) entered blocking state [ 130.016304][ T7174] bridge0: port 3(hsr0) entered forwarding state [ 130.515012][ T9] IPVS: starting estimator thread 0... [ 130.682982][ T7204] netlink: zone id is out of range [ 130.694997][ T7201] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.711994][ T7204] netlink: zone id is out of range [ 130.729120][ T7204] netlink: zone id is out of range [ 130.738464][ T7199] lo speed is unknown, defaulting to 1000 [ 130.757142][ T7204] netlink: zone id is out of range [ 130.791012][ T7204] netlink: zone id is out of range [ 130.813304][ T7204] netlink: zone id is out of range [ 130.839941][ T7204] netlink: zone id is out of range [ 130.853329][ T7204] netlink: zone id is out of range [ 130.866823][ T7204] netlink: zone id is out of range [ 130.878427][ T7204] netlink: zone id is out of range [ 130.885905][ T7204] netlink: zone id is out of range [ 130.891406][ T7204] netlink: zone id is out of range [ 130.900275][ T7204] netlink: zone id is out of range [ 131.356146][ T7216] Illegal XDP return value 4294967274 on prog (id 81) dev N/A, expect packet loss! [ 131.421078][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 131.984091][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 132.257232][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 132.339062][ T7238] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.542639][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 132.892311][ T7251] hsr0: entered promiscuous mode [ 132.909655][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918322][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194977][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 133.736950][ T7281] veth1_macvtap: left promiscuous mode [ 134.442164][ T7305] __nla_validate_parse: 1 callbacks suppressed [ 134.442185][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 134.970066][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 135.242667][ T7341] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.343'. [ 135.323323][ T7344] geneve1: entered promiscuous mode [ 135.872389][ T5488] veth1_macvtap: entered promiscuous mode [ 136.092072][ T5828] IPVS: starting estimator thread 0... [ 136.111588][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.162649][ T7380] sock: sock_timestamping_bind_phc: sock not bind to device [ 136.213622][ T7381] IPVS: using max 25 ests per chain, 60000 per kthread [ 136.284468][ T7384] tipc: Started in network mode [ 136.305654][ T7384] tipc: Node identity 9eef4bbf80d1, cluster identity 4711 [ 136.344982][ T7384] tipc: Enabled bearer , priority 0 [ 136.386248][ T7390] syzkaller0: entered promiscuous mode [ 136.404723][ T7390] syzkaller0: entered allmulticast mode [ 136.532706][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'. [ 136.545270][ T7384] tipc: Resetting bearer [ 136.594829][ T7384] ip6tnl1: entered allmulticast mode [ 136.755664][ T7383] tipc: Resetting bearer [ 136.835885][ T7383] tipc: Disabling bearer [ 137.037670][ T7421] netlink: 504 bytes leftover after parsing attributes in process `syz.1.362'. [ 137.340477][ T7435] net_ratelimit: 352 callbacks suppressed [ 137.340496][ T7435] IPVS: fo: FWM 3 0x00000003 - no destination available [ 137.548968][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 138.101740][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 138.185121][ T7480] netlink: 76 bytes leftover after parsing attributes in process `syz.2.371'. [ 138.552315][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 138.654941][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 138.691224][ T7502] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 140.421327][ T7585] __nla_validate_parse: 3 callbacks suppressed [ 140.421351][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.472453][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 140.774546][ T7590] IPv6: Can't replace route, no match found [ 141.194671][ T7600] lo speed is unknown, defaulting to 1000 [ 142.648626][ T7626] lo speed is unknown, defaulting to 1000 [ 143.108883][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 143.683828][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 144.238976][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 144.272846][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.415'. [ 144.415085][ T7670] syzkaller0: entered promiscuous mode [ 146.068686][ T7691] bridge_slave_0: left allmulticast mode [ 146.074596][ T7691] bridge_slave_0: left promiscuous mode [ 146.082122][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.099665][ T7691] bridge_slave_1: left allmulticast mode [ 146.108667][ T7691] bridge_slave_1: left promiscuous mode [ 146.115070][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.132509][ T7691] bond0: (slave bond_slave_0): Releasing backup interface [ 146.151831][ T7691] bond0: (slave bond_slave_1): Releasing backup interface [ 146.221726][ T7691] team0: Port device team_slave_0 removed [ 146.244238][ T7691] team0: Port device team_slave_1 removed [ 146.251868][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.262314][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.280752][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.300422][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.315108][ T7691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.331652][ T1224] lo speed is unknown, defaulting to 1000 [ 146.789371][ T7720] sctp: [Deprecated]: syz.3.426 (pid 7720) Use of int in maxseg socket option. [ 146.789371][ T7720] Use struct sctp_assoc_value instead [ 147.082500][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 147.182440][ T7731] ip6gre1: entered promiscuous mode [ 147.216175][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.431'. [ 147.300035][ T7743] vlan0: entered promiscuous mode [ 147.321062][ T7739] netlink: 'syz.4.431': attribute type 5 has an invalid length. [ 147.519573][ T7749] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 147.551022][ T7749] bond2 (unregistering): Released all slaves [ 147.599429][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 147.769643][ T7760] only policy match revision 0 supported [ 147.769669][ T7760] unable to load match [ 147.897507][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.951242][ T7763] team_slave_0: entered promiscuous mode [ 147.958342][ T7763] team_slave_1: entered promiscuous mode [ 147.970522][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 147.987636][ T7763] macsec1: entered promiscuous mode [ 148.007086][ T7763] team0: entered promiscuous mode [ 148.023026][ T7763] macsec1: entered allmulticast mode [ 148.046783][ T7763] team0: entered allmulticast mode [ 148.056358][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 148.066202][ T7763] team_slave_0: entered allmulticast mode [ 148.078276][ T7763] team_slave_1: entered allmulticast mode [ 148.101602][ T7763] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 148.122340][ T7763] team0: Device macsec1 is already an upper device of the team interface [ 148.161524][ T7763] team0: left allmulticast mode [ 148.174541][ T7763] team_slave_0: left allmulticast mode [ 148.201764][ T7763] team_slave_1: left allmulticast mode [ 148.220958][ T7763] team0: left promiscuous mode [ 148.234585][ T7763] team_slave_0: left promiscuous mode [ 148.240137][ T7763] team_slave_1: left promiscuous mode [ 148.494187][ T5903] IPVS: starting estimator thread 0... [ 148.543221][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.443'. [ 148.614889][ T7787] IPVS: using max 25 ests per chain, 60000 per kthread [ 148.835277][ T7776] ip6gretap0: entered promiscuous mode [ 148.871803][ T7776] macsec0: entered promiscuous mode [ 148.918910][ T7776] macsec0: entered allmulticast mode [ 148.936839][ T7776] ip6gretap0: entered allmulticast mode [ 148.953874][ T7776] ip6gretap0: left allmulticast mode [ 148.980131][ T7776] ip6gretap0: left promiscuous mode [ 148.991770][ T7801] xt_hashlimit: size too large, truncated to 1048576 [ 149.534198][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 149.855602][ T7830] batman_adv: batadv0: Adding interface: macvtap1 [ 149.889271][ T7830] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.965426][ T7830] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 150.004641][ T7835] ip6tnl0: mtu less than device minimum [ 150.010575][ T7838] ip6tnl0: mtu less than device minimum [ 150.363780][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 150.370052][ T7855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.463'. [ 150.658856][ T7876] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 150.670756][ T7876] netlink: 'syz.4.468': attribute type 2 has an invalid length. [ 150.698488][ T7878] netlink: 'syz.3.469': attribute type 30 has an invalid length. [ 150.809739][ T7884] netlink: 'syz.4.471': attribute type 21 has an invalid length. [ 151.460505][ T7902] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 151.487132][ T7902] bond2 (unregistering): Released all slaves [ 152.589393][ T7945] __nla_validate_parse: 4 callbacks suppressed [ 152.589413][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 152.649936][ T7945] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 152.838671][ T7951] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 152.862079][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 152.882584][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 152.907039][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 153.359183][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 153.436559][ T7977] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 153.449969][ T7964] lo speed is unknown, defaulting to 1000 [ 153.669080][ T7987] netlink: 'syz.0.498': attribute type 2 has an invalid length. [ 153.686111][ T7988] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 153.787174][ T7993] ip6gretap1: entered allmulticast mode [ 154.184479][ T8012] netlink: 68 bytes leftover after parsing attributes in process `syz.2.506'. [ 154.464657][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 155.729124][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 155.744116][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 156.410312][ T8032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.495671][ T8036] : entered promiscuous mode [ 156.796599][ T8053] bridge0: port 3(hsr0) entered disabled state [ 156.804259][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.812188][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.117145][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.151546][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.948838][ T8056] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.986452][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.021534][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.047210][ T8035] lo speed is unknown, defaulting to 1000 [ 158.163587][ T8108] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 158.487245][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.595048][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.941735][ T8133] netlink: 'syz.4.523': attribute type 13 has an invalid length. [ 159.093041][ T8133] gretap0: refused to change device tx_queue_len [ 159.119974][ T8133] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 159.188507][ T8121] delete_channel: no stack [ 159.802219][ T8145] sctp: [Deprecated]: syz.0.526 (pid 8145) Use of int in maxseg socket option. [ 159.802219][ T8145] Use struct sctp_assoc_value instead [ 159.911858][ T8152] bridge0: port 1(vlan2) entered blocking state [ 159.920441][ T8152] bridge0: port 1(vlan2) entered disabled state [ 159.927113][ T8152] vlan2: entered allmulticast mode [ 159.932530][ T8152] geneve0: entered allmulticast mode [ 159.938525][ T8158] block nbd1: server does not support multiple connections per device. [ 159.962248][ T8158] block nbd1: shutting down sockets [ 160.199907][ T8163] syzkaller0: entered promiscuous mode [ 160.233566][ T8163] syzkaller0: entered allmulticast mode [ 160.372076][ T8174] vxcan2: entered allmulticast mode [ 160.391912][ T8180] netlink: 152 bytes leftover after parsing attributes in process `syz.0.530'. [ 160.508299][ T8174] tipc: Enabled bearer , priority 0 [ 160.511606][ T8176] lo speed is unknown, defaulting to 1000 [ 160.521863][ T8174] syzkaller0: entered promiscuous mode [ 160.521888][ T8174] syzkaller0: entered allmulticast mode [ 160.876353][ T8183] tipc: Resetting bearer [ 160.914949][ T8165] lo speed is unknown, defaulting to 1000 [ 160.973960][ T8172] tipc: Resetting bearer [ 161.035021][ T8172] tipc: Disabling bearer [ 163.019725][ T8249] lo speed is unknown, defaulting to 1000 [ 163.171833][ T8258] syzkaller0: entered promiscuous mode [ 163.189314][ T8258] syzkaller0: entered allmulticast mode [ 163.332079][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 163.389405][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 163.411551][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.493334][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 163.639258][ T8246] lo speed is unknown, defaulting to 1000 [ 163.915678][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 164.645032][ T8299] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 164.658968][ T8304] netlink: zone id is out of range [ 164.679755][ T8304] netlink: zone id is out of range [ 164.693585][ T8299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.557'. [ 164.713833][ T8304] netlink: zone id is out of range [ 164.729703][ T8304] netlink: zone id is out of range [ 164.760278][ T8304] netlink: zone id is out of range [ 164.810647][ T8304] netlink: zone id is out of range [ 164.834468][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 164.838463][ T8304] netlink: zone id is out of range [ 164.875785][ T8304] netlink: zone id is out of range [ 164.887615][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 164.903054][ T8304] netlink: zone id is out of range [ 164.989425][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 165.014258][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 165.026305][ T8317] netlink: 'syz.4.564': attribute type 2 has an invalid length. [ 165.056080][ T8311] geneve2: entered promiscuous mode [ 165.269250][ T8323] IPVS: set_ctl: invalid protocol: 3 224.0.0.2:20265 [ 165.277456][ T5895] IPVS: starting estimator thread 0... [ 165.310461][ T5975] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.393768][ T8324] IPVS: using max 24 ests per chain, 57600 per kthread [ 165.408580][ T5975] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.435962][ T5975] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.644760][ T8335] __nla_validate_parse: 1 callbacks suppressed [ 165.644775][ T8335] netlink: 7 bytes leftover after parsing attributes in process `syz.4.569'. [ 165.664234][ T5975] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.764164][ T8329] lo speed is unknown, defaulting to 1000 [ 165.932423][ T8339] tipc: Can't bind to reserved service type 2 [ 166.136310][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 166.148000][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 167.182704][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.583'. [ 167.211786][ T8383] bond0: entered promiscuous mode [ 167.221727][ T8383] bond0: left promiscuous mode [ 167.525209][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 167.556487][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.585'. [ 167.893993][ T8390] syzkaller1: entered promiscuous mode [ 167.907983][ T8390] syzkaller1: entered allmulticast mode [ 168.406343][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 168.448207][ T8409] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 168.515727][ T8407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.593'. [ 168.675990][ T8415] FAULT_INJECTION: forcing a failure. [ 168.675990][ T8415] name failslab, interval 1, probability 0, space 0, times 1 [ 168.703068][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(full) [ 168.703098][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.703120][ T8415] Call Trace: [ 168.703129][ T8415] [ 168.703138][ T8415] dump_stack_lvl+0xe8/0x150 [ 168.703177][ T8415] should_fail_ex+0x412/0x560 [ 168.703215][ T8415] should_failslab+0xa8/0x100 [ 168.703241][ T8415] __kmalloc_noprof+0xe8/0x760 [ 168.703280][ T8415] ? __pfx_nsim_set_coalesce+0x10/0x10 [ 168.703305][ T8415] ? ethnl_default_notify+0x1b2/0xbe0 [ 168.703334][ T8415] ethnl_default_notify+0x1b2/0xbe0 [ 168.703356][ T8415] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 168.703389][ T8415] ? do_raw_spin_lock+0x12b/0x2f0 [ 168.703416][ T8415] ? __pfx_ethnl_default_notify+0x10/0x10 [ 168.703456][ T8415] ? mutex_is_locked+0x17/0x50 [ 168.703487][ T8415] ? rtnl_is_locked+0x15/0x20 [ 168.703511][ T8415] ethnl_default_set_doit+0x6ad/0xad0 [ 168.703548][ T8415] genl_family_rcv_msg_doit+0x22a/0x330 [ 168.703574][ T8415] ? __asan_memcpy+0x40/0x70 [ 168.703608][ T8415] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.703647][ T8415] ? bpf_lsm_capable+0x9/0x20 [ 168.703671][ T8415] ? security_capable+0x7e/0x2c0 [ 168.703707][ T8415] genl_rcv_msg+0x61c/0x7a0 [ 168.703739][ T8415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.703762][ T8415] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 168.703786][ T8415] ? __pfx_ref_tracker_free+0x10/0x10 [ 168.703831][ T8415] netlink_rcv_skb+0x232/0x4b0 [ 168.703864][ T8415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.703890][ T8415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.703940][ T8415] ? down_read+0x270/0x2e0 [ 168.703968][ T8415] ? genl_rcv+0xd/0x40 [ 168.703992][ T8415] genl_rcv+0x28/0x40 [ 168.704013][ T8415] netlink_unicast+0x75c/0x8e0 [ 168.704054][ T8415] netlink_sendmsg+0x813/0xb40 [ 168.704098][ T8415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.704134][ T8415] ? aa_sock_msg_perm+0xf1/0x1b0 [ 168.704166][ T8415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.704202][ T8415] ____sys_sendmsg+0x972/0x9f0 [ 168.704236][ T8415] ? __might_fault+0xaf/0x130 [ 168.704282][ T8415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.704325][ T8415] ? import_iovec+0x73/0xa0 [ 168.704350][ T8415] ___sys_sendmsg+0x2a5/0x360 [ 168.704381][ T8415] ? __lock_acquire+0x6b5/0x2cf0 [ 168.704413][ T8415] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.704488][ T8415] ? __fget_files+0x2a/0x420 [ 168.704515][ T8415] ? __fget_files+0x3a0/0x420 [ 168.704555][ T8415] __x64_sys_sendmsg+0x1bd/0x2a0 [ 168.704592][ T8415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.704637][ T8415] ? __pfx_ksys_write+0x10/0x10 [ 168.704679][ T8415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.704703][ T8415] do_syscall_64+0x15f/0xf80 [ 168.704728][ T8415] ? trace_irq_disable+0x3b/0x140 [ 168.704751][ T8415] ? clear_bhb_loop+0x40/0x90 [ 168.704778][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.704799][ T8415] RIP: 0033:0x7f5ee5d9c819 [ 168.704827][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.704845][ T8415] RSP: 002b:00007f5ee6cb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.704876][ T8415] RAX: ffffffffffffffda RBX: 00007f5ee6015fa0 RCX: 00007f5ee5d9c819 [ 168.704892][ T8415] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 168.704905][ T8415] RBP: 00007f5ee6cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.704918][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.704931][ T8415] R13: 00007f5ee6016038 R14: 00007f5ee6015fa0 R15: 00007ffdbc8cc9a8 [ 168.704967][ T8415] [ 169.210568][ T8430] net_ratelimit: 9 callbacks suppressed [ 169.210588][ T8430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.307494][ T8435] netlink: 176 bytes leftover after parsing attributes in process `syz.3.603'. [ 169.424309][ T8440] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.719880][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 169.929581][ T8462] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 170.134457][ T8468] netlink: 'syz.3.614': attribute type 9 has an invalid length. [ 170.471865][ T8479] nbd: couldn't find device at index 2097152 [ 170.681738][ T8491] __nla_validate_parse: 3 callbacks suppressed [ 170.681758][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 170.695490][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 170.717625][ T8500] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 170.742195][ T8500] netlink: 'syz.0.623': attribute type 2 has an invalid length. [ 170.767410][ T8500] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 170.790882][ T8500] netlink: 'syz.0.623': attribute type 3 has an invalid length. [ 171.057978][ T8509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.624'. [ 171.319921][ T8521] bridge1: entered promiscuous mode [ 171.582592][ T8529] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 171.622878][ T8529] netlink: 2 bytes leftover after parsing attributes in process `syz.3.628'. [ 171.655856][ T8529] hsr0: entered promiscuous mode [ 171.685049][ T8529] bridge0: port 4(hsr0) entered blocking state [ 171.742779][ T8529] bridge0: port 4(hsr0) entered disabled state [ 171.792730][ T8529] hsr0: entered allmulticast mode [ 171.825550][ T8529] hsr_slave_0: entered allmulticast mode [ 171.852220][ T8529] hsr_slave_1: entered allmulticast mode [ 171.919041][ T8529] bridge0: port 4(hsr0) entered blocking state [ 171.925498][ T8529] bridge0: port 4(hsr0) entered forwarding state [ 171.968827][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.631'. [ 172.002385][ T8544] netlink: 'syz.3.628': attribute type 27 has an invalid length. [ 172.831759][ T8576] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 172.857010][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 172.877317][ T8576] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.041409][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 173.073671][ T8584] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 173.089016][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'. [ 173.106575][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.640'. [ 173.245721][ T8589] bond1: Unable to set down delay as MII monitoring is disabled [ 173.268182][ T8589] bond1 (unregistering): Released all slaves [ 173.307610][ T8595] syzkaller0: entered promiscuous mode [ 173.316634][ T8595] syzkaller0: entered allmulticast mode [ 173.516617][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 174.618246][ T8664] veth7: entered allmulticast mode [ 175.456217][ T8723] digital: digital_start_poll: Unknown protocol [ 175.704879][ T8726] bond2: (slave bond_slave_1): Device is not bonding slave [ 175.734256][ T8726] bond2: option active_slave: invalid value (bond_slave_1) [ 175.807326][ T8726] bond2 (unregistering): Released all slaves [ 175.972372][ T8740] syz_tun: entered allmulticast mode [ 176.081236][ T8734] lo speed is unknown, defaulting to 1000 [ 178.360453][ T8723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.603215][ T5830] Bluetooth: hci4: link tx timeout [ 178.609141][ T5830] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.776328][ T8831] __nla_validate_parse: 4 callbacks suppressed [ 178.776349][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 178.833337][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.688'. [ 179.085469][ T8842] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.696'. [ 179.641441][ T8875] gretap1: entered promiscuous mode [ 179.654251][ T8875] gretap1: entered allmulticast mode [ 179.661391][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 179.694592][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 179.731004][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 179.761102][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 179.824942][ T8877] lo speed is unknown, defaulting to 1000 [ 180.091627][ T8900] netlink: 'syz.1.708': attribute type 4 has an invalid length. [ 180.484897][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 180.558343][ T8918] tipc: Enabling of bearer rejected, failed to enable media [ 180.663177][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 181.240902][ T8948] lo speed is unknown, defaulting to 1000 [ 181.857844][ T8962] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 181.935953][ T8965] tipc: Enabled bearer , priority 0 [ 181.956399][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 181.970707][ T8965] syzkaller0: entered promiscuous mode [ 181.982613][ T8965] syzkaller0: entered allmulticast mode [ 182.111785][ T8965] tipc: Resetting bearer [ 182.145804][ T8965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.226107][ T8964] tipc: Resetting bearer [ 182.285375][ T8964] tipc: Disabling bearer [ 182.571450][ T8985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.730'. [ 182.589039][ T8976] syzkaller0: entered promiscuous mode [ 182.600309][ T8976] syzkaller0: entered allmulticast mode [ 182.617965][ T8986] Unsupported ieee802154 address type: 0 [ 182.871802][ T8995] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 182.917821][ T8995] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 182.983431][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 183.022938][ T9004] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 183.096471][ T9008] netlink: 'syz.0.739': attribute type 62 has an invalid length. [ 183.110549][ T8993] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 183.150232][ T9009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.421277][ T9016] Bluetooth: MGMT ver 1.23 [ 183.438592][ T9016] netlink: 'syz.2.740': attribute type 13 has an invalid length. [ 185.518217][ T8993] batadv_slave_1: entered promiscuous mode [ 185.524768][ T9012] batadv_slave_1: left promiscuous mode [ 185.530945][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.594786][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.822622][ T9021] bridge0: port 2(bond0) entered blocking state [ 185.829236][ T9021] bridge0: port 2(bond0) entered disabled state [ 185.836729][ T9021] bond0: entered allmulticast mode [ 185.852401][ T9021] bond0: entered promiscuous mode [ 185.858156][ T9021] vlan2: entered promiscuous mode [ 185.863540][ T9021] geneve0: entered promiscuous mode [ 185.898689][ T9025] bond0: left allmulticast mode [ 185.913470][ T9025] bond0: left promiscuous mode [ 185.940577][ T9025] bridge0: port 2(bond0) entered disabled state [ 185.997689][ T9025] vlan2: left promiscuous mode [ 186.025553][ T9025] geneve0: left promiscuous mode [ 186.282078][ T9050] __nla_validate_parse: 9 callbacks suppressed [ 186.282097][ T9050] netlink: 276 bytes leftover after parsing attributes in process `syz.1.746'. [ 186.375006][ T9057] lo: Caught tx_queue_len zero misconfig [ 186.752421][ T9075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.864499][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 187.317057][ T9099] sctp: [Deprecated]: syz.4.760 (pid 9099) Use of int in max_burst socket option. [ 187.317057][ T9099] Use struct sctp_assoc_value instead [ 187.423762][ T9095] lo speed is unknown, defaulting to 1000 [ 187.997404][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 188.297863][ T9107] lo speed is unknown, defaulting to 1000 [ 188.334646][ T9127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.767'. [ 188.422651][ T9137] ÿ: renamed from bond_slave_0 [ 189.246525][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.771'. [ 189.368316][ T9157] netlink: 'syz.1.774': attribute type 21 has an invalid length. [ 189.382775][ T9157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.774'. [ 189.394506][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 190.505044][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 190.864751][ T9175] lo speed is unknown, defaulting to 1000 [ 191.137004][ T9192] netlink: 'syz.4.785': attribute type 21 has an invalid length. [ 191.163321][ T9192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.785'. [ 191.491127][ T9198] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 191.575705][ T9198] bond4: entered promiscuous mode [ 191.588627][ T9198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.702757][ T9198] bond4: (slave bridge4): making interface the new active one [ 191.721004][ T9198] bridge4: entered promiscuous mode [ 191.735607][ T9198] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 192.040091][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 192.125369][ T9215] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.360356][ T9222] 8021q: VLANs not supported on nlmon0 [ 192.401135][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 192.439269][ T9224] SET target dimension over the limit! [ 192.464851][ T9227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'. [ 192.555768][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 192.567872][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 192.588221][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 192.779438][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 192.894655][ T9244] tipc: Enabled bearer , priority 0 [ 192.925523][ T9244] tipc: Resetting bearer [ 192.997461][ T9243] tipc: Disabling bearer [ 193.015987][ T9252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.804'. [ 193.036825][ T9255] netlink: 84 bytes leftover after parsing attributes in process `syz.3.805'. [ 193.111161][ T9259] netlink: 88 bytes leftover after parsing attributes in process `syz.4.806'. [ 193.248629][ T9267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.491132][ T9276] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 193.579061][ T9276] syzkaller0: entered promiscuous mode [ 193.610412][ T9276] syzkaller0: entered allmulticast mode [ 193.667591][ T9276] netlink: 'syz.1.812': attribute type 64 has an invalid length. [ 193.692699][ T9289] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 193.723288][ T9289] hsr0: entered promiscuous mode [ 193.734323][ T9289] bridge0: port 1(hsr0) entered blocking state [ 193.766967][ T9289] bridge0: port 1(hsr0) entered disabled state [ 193.806824][ T9289] hsr0: entered allmulticast mode [ 193.843800][ T9289] hsr_slave_0: entered allmulticast mode [ 193.881062][ T9289] hsr_slave_1: entered allmulticast mode [ 193.898087][ T9289] bridge0: port 1(hsr0) entered blocking state [ 193.904495][ T9289] bridge0: port 1(hsr0) entered forwarding state [ 194.351409][ T9315] macvtap0: entered promiscuous mode [ 194.351974][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365132][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.445514][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.673704][ T9322] syzkaller0: entered promiscuous mode [ 194.679703][ T9322] syzkaller0: entered allmulticast mode [ 194.702361][ T9323] geneve3: entered promiscuous mode [ 194.715486][ T9324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.445902][ T9417] __nla_validate_parse: 9 callbacks suppressed [ 197.445922][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 197.483569][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 197.757851][ T9426] xt_HMARK: proto mask must be zero with L3 mode [ 197.841474][ T9433] netlink: 256 bytes leftover after parsing attributes in process `syz.0.863'. [ 198.061615][ T9430] lo speed is unknown, defaulting to 1000 [ 198.624749][ T9456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.868'. [ 198.671041][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.867'. [ 198.942658][ T9464] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.869'. [ 199.139058][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'. [ 200.097675][ T9513] sctp: [Deprecated]: syz.3.880 (pid 9513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.097675][ T9513] Use struct sctp_sack_info instead [ 200.740875][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 200.797356][ T9542] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 200.839867][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 200.851763][ T9537] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 200.867413][ T8092] lo speed is unknown, defaulting to 1000 [ 200.878546][ T9535] syzkaller0: entered promiscuous mode [ 200.888920][ T9535] syzkaller0: entered allmulticast mode [ 200.908027][ T8071] lo speed is unknown, defaulting to 1000 [ 201.103191][ T9546] Cannot find del_set index 1 as target [ 201.230030][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'. [ 201.261819][ T9551] bond0: (slave bond_slave_1): Releasing backup interface [ 201.284123][ T8092] lo speed is unknown, defaulting to 1000 [ 201.488085][ T9550] lo speed is unknown, defaulting to 1000 [ 201.706537][ T9567] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 201.758216][ T9571] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 202.779922][ T9608] __nla_validate_parse: 1 callbacks suppressed [ 202.779944][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.907'. [ 202.984651][ T9614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.908'. [ 203.234569][ T9617] lo speed is unknown, defaulting to 1000 [ 203.272055][ T9619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.910'. [ 203.494149][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 203.525857][ T9631] block nbd1: Unsupported socket: should be TCP or UNIX. [ 203.630258][ T9634] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 203.680338][ T9641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 203.811133][ T9645] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 203.918715][ T9645] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.956466][ T9645] bond5: (slave ip6gretap1): making interface the new active one [ 203.970121][ T9645] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 203.993331][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 204.411973][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 204.671701][ T9665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.853211][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.966486][ T9666] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.061523][ T9666] bond6: (slave lo): Enslaving as an active interface with an up link [ 205.094869][ T9666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 205.369775][ T9684] netlink: 'syz.0.924': attribute type 8 has an invalid length. [ 205.736372][ T9696] netlink: 88 bytes leftover after parsing attributes in process `syz.4.929'. [ 206.034396][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 206.086622][ T9720] batadv_slave_0: entered promiscuous mode [ 206.135050][ T9719] batadv_slave_0: left promiscuous mode [ 206.630840][ T9750] x_tables: duplicate underflow at hook 4 [ 206.657978][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 206.667089][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 206.670340][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 206.680364][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 206.690072][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 206.701326][ T9754] xt_cluster: node mask cannot exceed total number of nodes [ 207.007609][ T9752] hsr0: left promiscuous mode [ 207.346849][ T9769] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 207.802720][ T9793] __nla_validate_parse: 5 callbacks suppressed [ 207.802787][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 207.919094][ T9799] netlink: 'syz.3.959': attribute type 5 has an invalid length. [ 208.071256][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 208.111350][ T9804] Cannot find set identified by id 3 to match [ 208.470334][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.967'. [ 208.471499][ T9828] erspan1: entered allmulticast mode [ 208.552161][ T9822] lo speed is unknown, defaulting to 1000 [ 208.626113][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'. [ 208.708519][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 208.926894][ T9843] netlink: 'syz.0.969': attribute type 22 has an invalid length. [ 208.954840][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 208.979455][ T9843] bond0: option ad_select: unable to set because the bond device is up [ 209.278645][ T9833] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 209.286432][ T9845] lo speed is unknown, defaulting to 1000 [ 209.361524][ T9864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.477728][ T9866] team0: Mode changed to "activebackup" [ 209.581379][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.605954][ T9869] geneve1: Caught tx_queue_len zero misconfig [ 209.681530][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 209.771910][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 209.891458][ T9865] lo speed is unknown, defaulting to 1000 [ 210.202281][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 210.257284][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 210.311277][ T9887] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 210.529090][ T9887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.583615][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 211.400147][ T9913] bond2 (unregistering): Released all slaves [ 212.809732][ T9987] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 212.846500][ T9987] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 212.945295][ T9987] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 212.972448][ T9987] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 212.989727][ T9987] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 212.999708][ T9993] __nla_validate_parse: 6 callbacks suppressed [ 212.999726][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1007'. [ 213.018593][ T9987] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 213.027214][ T9987] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 213.197726][ T9999] pim6reg1: entered promiscuous mode [ 213.204314][ T9999] pim6reg1: entered allmulticast mode [ 213.692734][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 213.743273][T10025] bond2: entered promiscuous mode [ 213.754866][T10025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.947617][T10021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.992154][T10021] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 214.005068][T10021] bond2: (slave ip6gre2): Error -95 calling set_mac_address [ 214.071650][T10040] netlink: 'syz.3.1021': attribute type 39 has an invalid length. [ 214.188022][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1022'. [ 214.219219][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1022'. [ 214.778998][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 214.895458][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 214.940448][T10073] nbd: device at index 64 is going down [ 214.993807][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 215.006356][T10076] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.062033][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 215.098152][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 215.559344][T10097] netlink: 'syz.1.1037': attribute type 2 has an invalid length. [ 215.568579][T10097] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1037'. [ 215.985118][T10110] vlan0: entered promiscuous mode [ 216.003954][T10110] bridge0: entered promiscuous mode [ 216.579977][T10126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.509917][T10173] lo speed is unknown, defaulting to 1000 [ 218.147688][T10206] ip6tnl0: Caught tx_queue_len zero misconfig [ 218.202280][T10198] __nla_validate_parse: 3 callbacks suppressed [ 218.202301][T10198] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1055'. [ 218.389504][T10209] IPVS: Error connecting to the multicast addr [ 218.678374][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1063'. [ 218.821061][T10224] netlink: 772 bytes leftover after parsing attributes in process `syz.3.1063'. [ 218.900690][T10237] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 219.032107][T10237] pim6reg: entered allmulticast mode [ 219.064068][T10239] pim6reg: left allmulticast mode [ 219.185599][T10246] netlink: 'syz.1.1067': attribute type 6 has an invalid length. [ 219.207941][T10246] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1067'. [ 219.245709][T10249] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1067'. [ 219.663934][ T5835] udevd[5835]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 219.692868][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 219.734577][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 219.779804][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 219.836957][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 219.870580][T10270] openvswitch: netlink: Flow key attr not present in new flow. [ 220.422404][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 220.451893][T10296] openvswitch: netlink: Invalid VLAN frame [ 220.511094][T10303] netlink: 'syz.0.1081': attribute type 39 has an invalid length. [ 220.641545][T10303] syz_tun (unregistering): left allmulticast mode [ 221.000204][ T6673] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.030817][ T6673] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.046175][ T6673] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.056782][ T6673] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.383768][T10347] hsr0: entered promiscuous mode [ 222.185353][T10367] ip6tnl0: Caught tx_queue_len zero misconfig [ 222.383993][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.566097][T10376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.577743][T10376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.589808][T10376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.701654][T10376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.716120][T10376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.729360][T10376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 222.874372][T10376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.887939][T10376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.898967][T10376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.057609][T10376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.069934][T10376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.081212][T10376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 223.261405][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.279055][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.288047][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.324061][ T5975] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.332917][ T5975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.341882][ T5975] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.369325][ T5975] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.378566][ T5975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.392121][ T5975] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.422779][ T5975] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.432261][ T5975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.459091][ T5975] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.709341][T10419] pim6reg1: entered allmulticast mode [ 223.740921][T10419] syzkaller0: entered promiscuous mode [ 223.746989][T10419] syzkaller0: entered allmulticast mode [ 223.916062][T10421] __nla_validate_parse: 22 callbacks suppressed [ 223.916082][T10421] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1115'. [ 224.015339][T10428] Cannot find set identified by id 0 to match [ 224.068804][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 224.296581][T10446] netlink: 'syz.4.1121': attribute type 13 has an invalid length. [ 224.309283][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1120'. [ 224.694036][T10469] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 224.886283][T10476] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1129'. [ 224.903798][T10476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1129'. [ 224.997269][T10471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1128'. [ 225.019473][T10479] netlink: 'syz.1.1128': attribute type 39 has an invalid length. [ 225.036812][T10471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1128'. [ 225.058976][T10471] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 225.092921][T10477] lo speed is unknown, defaulting to 1000 [ 225.472557][T10497] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 225.490722][T10497] netlink: 'syz.4.1135': attribute type 3 has an invalid length. [ 225.508874][T10497] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1135'. [ 225.742892][T10480] lo speed is unknown, defaulting to 1000 [ 226.020544][T10501] netlink: 'syz.4.1136': attribute type 7 has an invalid length. [ 226.737119][T10519] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1140'. [ 226.749153][T10519] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1140'. [ 227.011032][T10535] netlink: 'syz.4.1143': attribute type 8 has an invalid length. [ 227.155360][T10535] bond0: entered promiscuous mode [ 227.188815][T10535] bond_slave_0: entered promiscuous mode [ 227.220446][T10535] bond_slave_1: entered promiscuous mode [ 227.252442][T10535] gretap0: entered promiscuous mode [ 227.290072][T10535] hsr1: entered promiscuous mode [ 227.554925][T10562] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 227.564288][T10562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.673677][T10566] openvswitch: netlink: Multiple metadata blocks provided [ 227.806023][T10568] x_tables: duplicate underflow at hook 3 [ 228.386238][T10584] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 228.438463][T10588] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 229.088338][T10609] __nla_validate_parse: 7 callbacks suppressed [ 229.088359][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 229.111608][T10600] lo speed is unknown, defaulting to 1000 [ 229.845486][T10618] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1160'. [ 229.986513][T10621] 8021q: VLANs not supported on wg0 [ 230.012651][T10621] x_tables: duplicate underflow at hook 2 [ 230.652066][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 231.159349][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 231.177088][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 231.280666][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 231.751275][T10671] lo speed is unknown, defaulting to 1000 [ 232.298241][T10686] openvswitch: netlink: IP tunnel dst address not specified [ 232.377156][T10688] netlink: 'syz.4.1177': attribute type 13 has an invalid length. [ 232.398567][T10688] netlink: 'syz.4.1177': attribute type 17 has an invalid length. [ 232.609439][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 233.173913][T10688] erspan0: left promiscuous mode [ 233.262887][T10701] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1179'. [ 233.298287][T10688] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.333534][T10688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.923361][T10711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1182'. [ 233.957885][T10711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1182'. [ 234.143184][T10713] lo speed is unknown, defaulting to 1000 [ 234.358595][T10729] __nla_validate_parse: 1 callbacks suppressed [ 234.358617][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 234.676015][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 234.835350][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1193'. [ 235.089489][T10751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1195'. [ 235.164188][T10753] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1195'. [ 235.319982][T10761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.570151][T10770] xt_TCPMSS: Only works on TCP SYN packets [ 235.594625][T10770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1203'. [ 235.624507][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 235.653990][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 235.679537][T10770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1203'. [ 236.267770][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 237.633994][T10871] ksmbd: Unknown IPC event: 1, ignore. [ 238.136854][T10891] netlink: 'syz.4.1239': attribute type 4 has an invalid length. [ 238.154471][T10889] syzkaller0: entered promiscuous mode [ 238.160644][T10889] syzkaller0: entered allmulticast mode [ 238.177623][T10891] netlink: 'syz.4.1239': attribute type 4 has an invalid length. [ 238.223285][ T4578] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 238.451724][T10903] syzkaller1: entered promiscuous mode [ 238.495604][T10903] syzkaller1: entered allmulticast mode [ 238.598439][T10915] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 238.717598][T10909] lo speed is unknown, defaulting to 1000 [ 238.822266][T10920] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.856833][T10920] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 238.971974][T10916] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.984200][T10916] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 240.652382][T10998] lo: Caught tx_queue_len zero misconfig [ 240.677878][T10998] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 240.905234][T11007] ipt_ECN: cannot use operation on non-tcp rule [ 241.559811][T11046] lo speed is unknown, defaulting to 1000 [ 241.611583][T11054] __nla_validate_parse: 6 callbacks suppressed [ 241.611602][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1280'. [ 241.760217][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 241.776489][T11060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1282'. [ 241.794784][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 241.808509][T11060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1282'. [ 241.960345][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 242.004913][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 242.621721][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 242.643442][T11090] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1292'. [ 242.684580][T11090] tipc: Invalid UDP bearer configuration [ 242.684640][T11090] tipc: Enabling of bearer rejected, failed to enable media [ 242.866513][T11096] C: renamed from team_slave_0 [ 242.878913][T11096] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1294'. [ 243.920509][T11135] C: renamed from team_slave_0 (while UP) [ 243.973117][T11137] nbd: must specify at least one socket [ 244.053954][T11135] netlink: 'syz.3.1307': attribute type 4 has an invalid length. [ 244.066378][T11135] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.439719][T11179] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 245.666979][T11183] chnl_net:caif_netlink_parms(): no params data found [ 246.313012][T11212] lo speed is unknown, defaulting to 1000 [ 246.693344][T11247] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 246.864135][T11231] __nla_validate_parse: 6 callbacks suppressed [ 246.864154][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1333'. [ 247.396439][T11264] lo speed is unknown, defaulting to 1000 [ 247.784670][T11295] netlink: 'syz.4.1349': attribute type 30 has an invalid length. [ 248.189939][T11314] netlink: 'syz.4.1353': attribute type 17 has an invalid length. [ 248.216705][T11314] netlink: 'syz.4.1353': attribute type 49 has an invalid length. [ 248.268854][T11317] FAULT_INJECTION: forcing a failure. [ 248.268854][T11317] name failslab, interval 1, probability 0, space 0, times 0 [ 248.343136][T11317] CPU: 1 UID: 0 PID: 11317 Comm: syz.0.1354 Not tainted syzkaller #0 PREEMPT(full) [ 248.343166][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.343189][T11317] Call Trace: [ 248.343198][T11317] [ 248.343208][T11317] dump_stack_lvl+0xe8/0x150 [ 248.343246][T11317] should_fail_ex+0x412/0x560 [ 248.343283][T11317] should_failslab+0xa8/0x100 [ 248.343308][T11317] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 248.343341][T11317] ? __alloc_skb+0x186/0x7d0 [ 248.343370][T11317] ? __alloc_skb+0x1d0/0x7d0 [ 248.343397][T11317] ? __local_bh_enable_ip+0xd0/0x130 [ 248.343432][T11317] __alloc_skb+0x1d0/0x7d0 [ 248.343468][T11317] netlink_sendmsg+0x5d4/0xb40 [ 248.343510][T11317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.343546][T11317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.343577][T11317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.343613][T11317] ____sys_sendmsg+0x972/0x9f0 [ 248.343647][T11317] ? __might_fault+0xaf/0x130 [ 248.343683][T11317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.343726][T11317] ? import_iovec+0x73/0xa0 [ 248.343752][T11317] ___sys_sendmsg+0x2a5/0x360 [ 248.343783][T11317] ? __lock_acquire+0x6b5/0x2cf0 [ 248.343817][T11317] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.343897][T11317] ? __fget_files+0x2a/0x420 [ 248.343924][T11317] ? __fget_files+0x3a0/0x420 [ 248.343962][T11317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.343999][T11317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.344067][T11317] ? __pfx_ksys_write+0x10/0x10 [ 248.344121][T11317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.344147][T11317] do_syscall_64+0x15f/0xf80 [ 248.344178][T11317] ? trace_irq_disable+0x3b/0x140 [ 248.344201][T11317] ? clear_bhb_loop+0x40/0x90 [ 248.344237][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.344260][T11317] RIP: 0033:0x7fe3be19c819 [ 248.344280][T11317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.344298][T11317] RSP: 002b:00007fe3bef78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.344322][T11317] RAX: ffffffffffffffda RBX: 00007fe3be415fa0 RCX: 00007fe3be19c819 [ 248.344338][T11317] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 248.344352][T11317] RBP: 00007fe3bef78090 R08: 0000000000000000 R09: 0000000000000000 [ 248.344365][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.344377][T11317] R13: 00007fe3be416038 R14: 00007fe3be415fa0 R15: 00007ffe9ec5d4d8 [ 248.344413][T11317] [ 248.955415][T11320] nbd2: detected capacity change from 0 to 63 [ 248.989676][ T5830] block nbd2: Receive control failed (result -32) [ 249.008615][ T5835] block nbd2: Dead connection, failed to find a fallback [ 249.034866][ T5835] block nbd2: shutting down sockets [ 249.045690][ T5835] blk_print_req_error: 138 callbacks suppressed [ 249.045708][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.084259][ T5835] buffer_io_error: 138 callbacks suppressed [ 249.084287][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read [ 249.124074][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.154506][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 249.192968][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.226811][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read [ 249.264455][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.311919][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read [ 249.337021][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.365751][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read [ 249.396589][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.417087][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 249.438468][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.459920][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read [ 249.488987][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.524311][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read [ 249.545547][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 249.555783][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.577392][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read [ 249.589107][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 249.603719][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.644970][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 249.687439][ T5835] ldm_validate_partition_table(): Disk read failed. [ 249.699718][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 249.717352][ T5835] Dev nbd2: unable to read RDB block 0 [ 249.759805][ T5835] nbd2: unable to read partition table [ 249.819908][ T5835] ldm_validate_partition_table(): Disk read failed. [ 249.856847][ T5835] Dev nbd2: unable to read RDB block 0 [ 249.882593][ T5835] nbd2: unable to read partition table [ 250.112179][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 250.200138][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 250.422138][T11367] netlink: 'syz.3.1366': attribute type 3 has an invalid length. [ 250.537492][T11366] lo speed is unknown, defaulting to 1000 [ 250.584457][T11367] block nbd3: Unsupported socket: should be TCP or UNIX. [ 250.623635][T11367] block nbd3: shutting down sockets [ 250.660595][T11371] block nbd3: NBD_DISCONNECT [ 251.367418][T11377] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.389702][T11377] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 252.050204][T11430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 252.088250][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 252.363289][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'. [ 252.380425][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 252.612216][T11450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1388'. [ 252.727506][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.052561][T11470] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 253.086265][T11470] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 253.166711][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1392'. [ 253.181349][T11479] xt_policy: neither incoming nor outgoing policy selected [ 253.292303][T11485] FAULT_INJECTION: forcing a failure. [ 253.292303][T11485] name failslab, interval 1, probability 0, space 0, times 0 [ 253.318371][T11485] CPU: 0 UID: 0 PID: 11485 Comm: syz.1.1399 Not tainted syzkaller #0 PREEMPT(full) [ 253.318400][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.318413][T11485] Call Trace: [ 253.318421][T11485] [ 253.318430][T11485] dump_stack_lvl+0xe8/0x150 [ 253.318468][T11485] should_fail_ex+0x412/0x560 [ 253.318506][T11485] should_failslab+0xa8/0x100 [ 253.318539][T11485] __kmalloc_noprof+0xe8/0x760 [ 253.318572][T11485] ? ctnl_timeout_parse_policy+0x59/0x1d0 [ 253.318607][T11485] ctnl_timeout_parse_policy+0x59/0x1d0 [ 253.318642][T11485] nfnetlink_rcv_msg+0xc03/0x12c0 [ 253.318670][T11485] ? unwind_get_return_address+0x4d/0x90 [ 253.318692][T11485] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 253.318743][T11485] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 253.318833][T11485] netlink_rcv_skb+0x232/0x4b0 [ 253.318866][T11485] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 253.318897][T11485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.318940][T11485] ? bpf_lsm_capable+0x9/0x20 [ 253.318964][T11485] ? security_capable+0x7e/0x2c0 [ 253.319000][T11485] nfnetlink_rcv+0x2c0/0x27b0 [ 253.319041][T11485] ? __local_bh_enable_ip+0xd0/0x130 [ 253.319070][T11485] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.319096][T11485] ? __dev_queue_xmit+0x2b6/0x3950 [ 253.319116][T11485] ? __local_bh_enable_ip+0xd0/0x130 [ 253.319143][T11485] ? __dev_queue_xmit+0x2b6/0x3950 [ 253.319164][T11485] ? __dev_queue_xmit+0x1fe5/0x3950 [ 253.319184][T11485] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 253.319225][T11485] ? __dev_queue_xmit+0x2b6/0x3950 [ 253.319253][T11485] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 253.319290][T11485] ? __pfx___dev_queue_xmit+0x10/0x10 [ 253.319321][T11485] ? ref_tracker_free+0x693/0x840 [ 253.319357][T11485] ? __pfx_ref_tracker_free+0x10/0x10 [ 253.319410][T11485] ? skb_clone+0x246/0x3a0 [ 253.319435][T11485] ? __netlink_deliver_tap+0x807/0x850 [ 253.319466][T11485] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.319504][T11485] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.319541][T11485] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.319579][T11485] netlink_unicast+0x75c/0x8e0 [ 253.319621][T11485] netlink_sendmsg+0x813/0xb40 [ 253.319664][T11485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.319700][T11485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 253.319731][T11485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.319768][T11485] ____sys_sendmsg+0x972/0x9f0 [ 253.319801][T11485] ? __might_fault+0xaf/0x130 [ 253.319838][T11485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.319882][T11485] ? import_iovec+0x73/0xa0 [ 253.319909][T11485] ___sys_sendmsg+0x2a5/0x360 [ 253.319940][T11485] ? __lock_acquire+0x6b5/0x2cf0 [ 253.319974][T11485] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.320050][T11485] ? __fget_files+0x2a/0x420 [ 253.320076][T11485] ? __fget_files+0x3a0/0x420 [ 253.320116][T11485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 253.320153][T11485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.320198][T11485] ? __pfx_ksys_write+0x10/0x10 [ 253.320240][T11485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.320264][T11485] do_syscall_64+0x15f/0xf80 [ 253.320289][T11485] ? trace_irq_disable+0x3b/0x140 [ 253.320312][T11485] ? clear_bhb_loop+0x40/0x90 [ 253.320339][T11485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.320361][T11485] RIP: 0033:0x7f2b7979c819 [ 253.320381][T11485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.320398][T11485] RSP: 002b:00007f2b7a6c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.320423][T11485] RAX: ffffffffffffffda RBX: 00007f2b79a15fa0 RCX: 00007f2b7979c819 [ 253.320437][T11485] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 253.320451][T11485] RBP: 00007f2b7a6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 253.320464][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.320476][T11485] R13: 00007f2b79a16038 R14: 00007f2b79a15fa0 R15: 00007ffc61612258 [ 253.320512][T11485] [ 254.024684][T11491] lo speed is unknown, defaulting to 1000 [ 254.096342][T11503] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 254.121167][T11503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1406'. [ 254.162866][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 254.777797][T11535] lo speed is unknown, defaulting to 1000 [ 254.797205][T11528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1414'. [ 254.875585][T11538] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 254.889967][T11538] bridge4: entered promiscuous mode [ 254.907309][T11538] bridge4: entered allmulticast mode [ 255.227472][T11551] openvswitch: netlink: Missing valid actions attribute. [ 255.235174][T11551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.768200][T11556] syzkaller0: entered promiscuous mode [ 255.788850][T11556] syzkaller0: entered allmulticast mode [ 255.804352][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.413997][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.421690][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.936595][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.396728][ T5978] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.416943][ T5978] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.441780][ T5978] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.510089][ T5978] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.718941][T11590] __nla_validate_parse: 6 callbacks suppressed [ 257.718961][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1431'. [ 257.952331][T11599] syzkaller0: entered promiscuous mode [ 257.965808][T11599] syzkaller0: entered allmulticast mode [ 258.041573][T11603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1437'. [ 258.236473][T11604] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.290527][T11610] tipc: Enabled bearer , priority 0 [ 258.331238][T11610] syzkaller0: entered promiscuous mode [ 258.338258][T11610] syzkaller0: entered allmulticast mode [ 258.346767][T11615] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 258.356630][T11615] netlink: 'syz.3.1441': attribute type 3 has an invalid length. [ 258.364946][T11615] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1441'. [ 258.403572][T11610] tipc: Resetting bearer [ 258.428278][T11609] tipc: Resetting bearer [ 258.469780][T11609] tipc: Disabling bearer [ 258.680387][T11624] IPVS: length: 528 != 736 [ 258.688577][T11597] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.960194][T11642] syzkaller0: entered promiscuous mode [ 258.966639][T11642] syzkaller0: entered allmulticast mode [ 259.581465][T11668] lo speed is unknown, defaulting to 1000 [ 260.080484][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1464'. [ 260.157535][T11667] lo speed is unknown, defaulting to 1000 [ 262.124357][T11773] netlink: 'syz.2.1488': attribute type 4 has an invalid length. [ 262.425141][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 262.475729][T11780] lo speed is unknown, defaulting to 1000 [ 263.288439][T11813] lo speed is unknown, defaulting to 1000 [ 263.400055][T11814] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1499'. [ 263.675602][T11825] netlink: 'syz.4.1501': attribute type 4 has an invalid length. [ 263.951316][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'. [ 264.142978][T11831] netlink: 'syz.4.1502': attribute type 7 has an invalid length. [ 264.439414][T11836] tipc: Enabled bearer , priority 0 [ 264.636315][T11836] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 264.661104][T11836] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 264.666538][T11842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 264.690733][T11836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.718016][T11844] ipt_ECN: cannot use operation on non-tcp rule [ 264.728174][T11844] x_tables: duplicate underflow at hook 3 [ 264.757857][T11835] tipc: Disabling bearer [ 265.191094][T11863] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 265.278405][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 265.950336][T11886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1517'. [ 266.061359][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 266.325431][T11895] netlink: 49 bytes leftover after parsing attributes in process `syz.1.1520'. [ 266.357633][T11895] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1520'. [ 266.381205][T11895] netlink: 49 bytes leftover after parsing attributes in process `syz.1.1520'. [ 266.952179][T11910] syzkaller0: entered promiscuous mode [ 266.985877][T11910] syzkaller0: entered allmulticast mode [ 267.042290][T11913] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 267.111324][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 267.140460][T11918] netlink: 'syz.4.1527': attribute type 3 has an invalid length. [ 267.169521][T11913] bond4: entered promiscuous mode [ 267.175863][T11913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.319069][T11928] macvlan2: entered allmulticast mode [ 267.325186][T11928] bridge0: port 2(macvlan2) entered blocking state [ 267.332211][T11928] bridge0: port 2(macvlan2) entered disabled state [ 267.342671][T11928] macvlan2: entered promiscuous mode [ 267.348808][T11928] vlan2: entered promiscuous mode [ 267.365756][T11928] geneve0: entered promiscuous mode [ 267.490867][T11938] bridge5: entered promiscuous mode [ 267.607079][T11939] lo speed is unknown, defaulting to 1000 [ 267.917992][T11956] syz_tun: renamed from dummy0 [ 268.521427][T11991] __nla_validate_parse: 1 callbacks suppressed [ 268.521449][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'. [ 268.605928][T11994] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 268.640680][T11993] bridge0: port 2(veth0_to_bridge) entered blocking state [ 268.670463][T11993] bridge0: port 2(veth0_to_bridge) entered disabled state [ 268.709950][T11993] veth0_to_bridge: entered allmulticast mode [ 268.746966][T11993] veth0_to_bridge: entered promiscuous mode [ 268.761327][T11993] bridge0: port 2(veth0_to_bridge) entered blocking state [ 268.769498][T11993] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 268.808362][T11995] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1547'. [ 268.905386][T11991] bond6: (slave geneve4): making interface the new active one [ 268.932797][T11991] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 268.987574][ T4578] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 269.003513][ T4578] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 269.057434][ T4578] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 269.087229][ T4578] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 269.532307][T12016] lo speed is unknown, defaulting to 1000 [ 269.590306][T12027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1552'. [ 269.643636][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 270.024002][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 271.514532][T12090] syzkaller0: entered promiscuous mode [ 271.532581][T12090] syzkaller0: entered allmulticast mode [ 272.688882][T12137] lo speed is unknown, defaulting to 1000 [ 272.707048][T12139] syzkaller0: entered promiscuous mode [ 272.726201][T12139] syzkaller0: entered allmulticast mode [ 272.840844][T12143] syzkaller0: entered promiscuous mode [ 272.847190][T12143] syzkaller0: entered allmulticast mode [ 272.874783][T12109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.075880][T12146] bridge0: port 3(bond0) entered blocking state [ 273.098113][T12146] bridge0: port 3(bond0) entered disabled state [ 273.117041][T12146] bond0: entered allmulticast mode [ 273.131326][T12146] bond_slave_0: entered allmulticast mode [ 273.181871][T12146] bond0: entered promiscuous mode [ 273.194834][T12146] bond_slave_0: entered promiscuous mode [ 273.202007][T12153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.285920][T12150] bond0: left allmulticast mode [ 273.295815][T12150] bond_slave_0: left allmulticast mode [ 273.315922][T12150] bond0: left promiscuous mode [ 273.353180][T12150] bond_slave_0: left promiscuous mode [ 273.391117][T12150] bridge0: port 3(bond0) entered disabled state [ 273.501566][T12162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.247700][T12198] netlink: 'syz.1.1588': attribute type 11 has an invalid length. [ 274.259159][T12199] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1589'. [ 274.290637][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 274.524758][T12201] bridge2: entered promiscuous mode [ 274.533317][T12201] bridge2: entered allmulticast mode [ 274.795517][T12216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.891669][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1594'. [ 275.219894][T12237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.301568][T12246] nftables ruleset with unbound chain [ 275.578869][T12242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 275.670596][T12241] gre0: entered promiscuous mode [ 275.693985][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.694279][T12241] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 276.253340][ T5980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.408673][T12296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.503338][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.303889][ T5980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.340843][T12344] netlink: 'syz.1.1618': attribute type 2 has an invalid length. [ 277.349135][ T5980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.384894][T12344] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 277.400434][T12344] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 277.445025][T12348] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 277.466931][T12348] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1619'. [ 277.533669][ T8073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.597765][T12338] lo speed is unknown, defaulting to 1000 [ 277.738738][T12357] dummy0: entered promiscuous mode [ 277.746738][ T8073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 277.767493][T12357] macsec1: entered promiscuous mode [ 277.773904][T12357] vlan2: entered promiscuous mode [ 277.799884][T12357] vlan2: left promiscuous mode [ 277.808247][T12357] dummy0: left promiscuous mode [ 278.199481][ T8073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.344154][ T8073] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.476997][T12378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.640551][T12383] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 278.706936][ T5978] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 278.848228][ T4578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.863998][ T5980] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.084386][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 279.119933][T12410] tipc: Enabled bearer , priority 0 [ 279.153006][T12410] syzkaller0: entered promiscuous mode [ 279.153143][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 279.187010][T12410] syzkaller0: entered allmulticast mode [ 279.464062][T12418] tipc: Resetting bearer [ 282.016509][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.035543][T12408] tipc: Resetting bearer [ 282.094666][T12422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.107835][T12408] tipc: Disabling bearer [ 282.190712][ T8087] tipc: Node number set to 818129408 [ 282.366416][T12436] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1638'. [ 282.405891][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1639'. [ 282.501640][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 282.850633][T12452] lo speed is unknown, defaulting to 1000 [ 283.028539][T12466] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1646'. [ 283.053293][T12466] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1646'. [ 283.089457][T12466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'. [ 283.281090][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 283.445543][T12480] bond3: option tlb_dynamic_lb: invalid value (115) [ 283.505524][T12480] bond3 (unregistering): Released all slaves [ 283.607040][T12483] IPVS: Unknown mcast interface: vcan0 [ 283.741617][T12494] syzkaller1: entered promiscuous mode [ 283.763591][T12494] syzkaller1: entered allmulticast mode [ 283.804595][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.026247][T12507] raw_sendmsg: syz.3.1655 forgot to set AF_INET. Fix it! [ 284.587067][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.984368][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.024569][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 285.175268][T12548] geneve5: entered promiscuous mode [ 285.540127][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1669'. [ 285.555171][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.643395][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.686367][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.121173][T12594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 286.505640][ T8087] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.664671][ T4578] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.761178][T12623] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 286.817989][T12623] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 287.063257][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 287.279105][T12647] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 287.297166][T12650] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 287.308696][T12650] netlink: 'syz.1.1690': attribute type 3 has an invalid length. [ 287.590298][T12658] lo speed is unknown, defaulting to 1000 [ 287.788724][T12677] __nla_validate_parse: 7 callbacks suppressed [ 287.788746][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 287.849778][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1695'. [ 288.322014][T12694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.541199][ T8087] IPVS: starting estimator thread 0... [ 288.649092][T12701] IPVS: using max 25 ests per chain, 60000 per kthread [ 288.694219][T12706] netlink: 'syz.2.1701': attribute type 29 has an invalid length. [ 288.747412][T12712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 288.832356][T12718] sit1: entered allmulticast mode [ 289.008951][T12697] lo speed is unknown, defaulting to 1000 [ 289.987793][T12747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1709'. [ 290.328312][T12761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.526999][T12758] syzkaller0: entered promiscuous mode [ 290.533945][T12758] syzkaller0: entered allmulticast mode [ 290.549251][T12762] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1710'. [ 292.109117][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.175605][T12778] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 293.612068][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1716'. [ 293.648743][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.663144][T12793] lo speed is unknown, defaulting to 1000 [ 293.686995][T12712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 293.918421][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 294.253603][T12817] batadv0: entered promiscuous mode [ 294.260367][T12817] vlan3: entered promiscuous mode [ 294.397820][T12826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.595151][T12834] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 294.675411][T12834] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 295.209498][T12868] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1733'. [ 295.238989][T12861] syzkaller0: entered promiscuous mode [ 295.257204][T12861] syzkaller0: entered allmulticast mode [ 295.331576][T12861] veth1_to_team: mtu less than device minimum [ 295.710740][T12881] lo speed is unknown, defaulting to 1000 [ 295.877499][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 296.109642][T12901] bridge0: port 4(erspan0) entered blocking state [ 296.153354][T12901] bridge0: port 4(erspan0) entered disabled state [ 296.182229][T12901] erspan0: entered allmulticast mode [ 296.249621][T12901] erspan0: left allmulticast mode [ 296.645241][T12922] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 296.799104][T12924] bond4: entered promiscuous mode [ 296.826457][T12924] bond4: entered allmulticast mode [ 296.846501][T12924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.871787][T12922] bridge5: entered promiscuous mode [ 296.877969][T12922] bridge5: entered allmulticast mode [ 296.884741][T12922] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 296.914558][ T4578] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 296.938013][T12933] tipc: Enabled bearer , priority 0 [ 296.960980][T12918] lo speed is unknown, defaulting to 1000 [ 297.034419][ T57] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.048826][T12922] bridge6: entered promiscuous mode [ 297.060577][T12922] bridge6: entered allmulticast mode [ 297.079714][T12922] bond4: (slave bridge6): Enslaving as a backup interface with a down link [ 297.143358][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.244331][T12930] syzkaller0: entered promiscuous mode [ 297.256681][T12930] syzkaller0: entered allmulticast mode [ 297.270269][T12930] tipc: Resetting bearer [ 297.345258][T12923] tipc: Resetting bearer [ 299.388935][T12923] tipc: Disabling bearer [ 299.426935][ T8080] tipc: Node number set to 507399103 [ 299.979948][T12968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'. [ 300.100793][T12955] lo speed is unknown, defaulting to 1000 [ 300.305998][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.351063][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 300.395037][T12956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1752'. [ 300.415256][T12956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1752'. [ 300.434265][T12956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1752'. [ 300.611154][T12990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 301.724044][T13020] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 301.742070][T13020] bond5 (unregistering): Released all slaves [ 302.183623][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.278220][T12712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.770667][T13051] netlink: 'syz.0.1768': attribute type 9 has an invalid length. [ 303.355857][T13067] syzkaller0: entered promiscuous mode [ 303.375866][T13067] syzkaller0: entered allmulticast mode [ 303.421329][T13074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.428914][T13074] IPv6: NLM_F_CREATE should be set when creating new route [ 303.436454][T13074] IPv6: NLM_F_CREATE should be set when creating new route [ 303.739963][T13089] netlink: 'syz.3.1778': attribute type 7 has an invalid length. [ 303.865916][T13096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.887075][T13095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.160705][T13099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1781'. [ 305.980678][T13087] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 306.023937][T13099] bridge0: entered promiscuous mode [ 306.115562][T13103] lo: entered allmulticast mode [ 306.127643][T13103] lo: left allmulticast mode [ 306.946583][T13148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.223239][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.436943][T13162] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 307.521973][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1800'. [ 307.647633][T13162] bond5: entered promiscuous mode [ 307.686736][T13162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.711357][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.742159][T13170] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.775185][T13170] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 307.803110][T13170] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 307.857950][T13169] veth1_to_team: entered promiscuous mode [ 307.876768][T13169] gretap0: entered promiscuous mode [ 307.892109][T13169] gretap0: left promiscuous mode [ 307.915826][T13169] veth1_to_team: left promiscuous mode [ 308.036331][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 308.821460][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'. [ 308.869687][T13218] bridge0: port 3(vlan2) entered blocking state [ 308.887350][T13218] bridge0: port 3(vlan2) entered disabled state [ 308.897454][T13220] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 308.924223][T13218] vlan2: entered allmulticast mode [ 308.929319][T13220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1809'. [ 308.941352][T13218] geneve0: entered allmulticast mode [ 308.946455][T13220] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 308.982341][T13220] netlink: 638 bytes leftover after parsing attributes in process `syz.3.1809'. [ 309.019178][T13220] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1809'. [ 309.035933][T13218] vlan2: entered promiscuous mode [ 309.041585][T13218] geneve0: entered promiscuous mode [ 309.447133][T13241] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1814'. [ 309.499409][T13241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1814'. [ 310.203978][T13271] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 310.302941][T13275] netlink: 'syz.2.1819': attribute type 3 has an invalid length. [ 310.335304][T13277] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1818'. [ 310.368642][T13275] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 310.442912][T13275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1819'. [ 310.526809][T13271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.550695][T13270] lo speed is unknown, defaulting to 1000 [ 311.037292][T13305] dvmrp1: entered allmulticast mode [ 312.162487][T13341] pim6reg1: entered promiscuous mode [ 312.179795][T13341] pim6reg1: entered allmulticast mode [ 312.263213][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.589248][T13351] __nla_validate_parse: 5 callbacks suppressed [ 312.589271][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 312.632762][T13351] bridge_slave_0: entered promiscuous mode [ 312.654963][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 312.668305][ T5488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.065763][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 313.124852][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 313.449818][T13378] 8021q: adding VLAN 0 to HW filter on device bond9 [ 313.750006][T13396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1842'. [ 313.780974][T13396] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1842'. [ 313.885258][ T5980] bond8: (slave ip6gretap1): link status up again after 0 ms [ 313.934678][ T5980] bond8: (slave ip6gretap1): link status up again after 0 ms [ 313.947350][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.021641][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1843'. [ 314.064661][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.096540][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 314.110433][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1844'. [ 314.235072][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.393914][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.520887][T13420] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1847'. [ 314.531703][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.687761][T13427] caif0: entered allmulticast mode [ 314.734030][ T57] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 314.797648][T13433] syzkaller1: entered promiscuous mode [ 314.837684][T13433] syzkaller1: entered allmulticast mode [ 314.914631][ T5978] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 315.132036][T13444] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 315.195891][ T57] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 316.200337][T13484] netlink: 'syz.1.1860': attribute type 29 has an invalid length. [ 316.247915][T13489] lo speed is unknown, defaulting to 1000 [ 316.258366][T13493] team_slave_0: Caught tx_queue_len zero misconfig [ 316.776478][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.014476][T13503] bridge_slave_0 (unregistering): left allmulticast mode [ 317.109963][T13503] bridge_slave_0 (unregistering): left promiscuous mode [ 317.168624][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.238705][ T1299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.303366][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.624657][T13543] __nla_validate_parse: 5 callbacks suppressed [ 317.624678][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 317.712768][T13530] lo speed is unknown, defaulting to 1000 [ 317.825694][T13553] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 317.885081][T13553] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 318.292376][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 318.378164][T12712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.387173][T13570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.678632][T13586] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 318.699648][T13586] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1882'. [ 318.716116][T13588] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 318.796716][T13593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1883'. [ 318.833640][T13588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.591655][T13612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1889'. [ 319.626069][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1889'. [ 319.646482][ T5975] net_ratelimit: 19 callbacks suppressed [ 319.646502][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 319.663261][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 319.793840][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 319.935199][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.213473][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.365618][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.456093][ T5830] block nbd3: Receive control failed (result -32) [ 320.456794][ T50] block nbd3: Receive control failed (result -32) [ 320.496197][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.575211][T13641] 8021q: adding VLAN 0 to HW filter on device bond11 [ 320.603522][T13645] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 320.629269][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.763162][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.998773][T13659] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 321.069094][T13645] bond4: (slave bond_slave_1): Device is not bonding slave [ 321.089791][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1896'. [ 321.112838][T13645] bond4: option active_slave: invalid value (bond_slave_1) [ 321.207104][T13645] bond4 (unregistering): Released all slaves [ 321.566999][ T12] bond4: (slave bridge5): link status up again after 0 ms [ 321.656135][T13659] bond7: entered promiscuous mode [ 321.681931][T13659] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.714535][T13661] bond7: entered allmulticast mode [ 321.748085][T13673] bond7: (slave bridge4): making interface the new active one [ 321.773831][T13673] bridge4: entered promiscuous mode [ 321.788833][T13673] bridge4: entered allmulticast mode [ 321.806146][T13673] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 321.899121][T13689] batman_adv: batadv0: Adding interface: dummy0 [ 321.944334][T13689] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.026115][T13689] batman_adv: batadv0: Interface activated: dummy0 [ 322.203327][T13704] sctp: [Deprecated]: syz.2.1904 (pid 13704) Use of int in max_burst socket option deprecated. [ 322.203327][T13704] Use struct sctp_assoc_value instead [ 322.345320][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.381330][T13710] netlink: 'syz.0.1907': attribute type 4 has an invalid length. [ 322.402587][T13711] netlink: 'syz.0.1907': attribute type 4 has an invalid length. [ 322.419090][T13710] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1907'. [ 322.448225][T13711] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1907'. [ 322.561844][T13716] tipc: Enabling of bearer rejected, failed to enable media [ 322.994751][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 323.402418][T13753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 324.685435][T13811] lo speed is unknown, defaulting to 1000 [ 324.691012][T13782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.754669][ T4578] net_ratelimit: 92 callbacks suppressed [ 324.754690][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 324.803435][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 324.917134][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 324.974233][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 325.133280][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 325.166875][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 325.216767][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 325.254640][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 325.283980][ T6673] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 325.376005][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 325.413907][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.262891][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 326.300943][T13849] vlan3: entered promiscuous mode [ 326.322204][T13849] team0: entered promiscuous mode [ 326.350758][ T29] audit: type=1804 audit(1776821066.771:2): pid=13853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1938" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1866 res=1 errno=0 [ 326.426201][ T29] audit: type=1800 audit(1776821066.771:3): pid=13853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1938" name="cgroup.controllers" dev="tmpfs" ino=1866 res=0 errno=0 [ 326.575945][T13858] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1937'. [ 326.996525][T13870] lo speed is unknown, defaulting to 1000 [ 327.107743][T13864] Cannot find add_set index 3 as target [ 327.383175][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 329.854768][ T5980] net_ratelimit: 58 callbacks suppressed [ 329.854792][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 329.923206][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 330.033261][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 330.073249][ T5975] bond4: (slave bridge5): failed to get link speed/duplex [ 330.164022][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 330.203426][ T5975] bond4: (slave bridge5): failed to get link speed/duplex [ 330.293182][ T57] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 330.413234][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 330.463176][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 330.556272][ T57] bond4: (slave bridge5): failed to get link speed/duplex [ 330.585917][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1959'. [ 330.638524][T13973] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 330.657254][T13988] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 330.759480][T13994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'. [ 330.786995][T13988] bond12: entered promiscuous mode [ 330.795013][T13988] 8021q: adding VLAN 0 to HW filter on device bond12 [ 330.877015][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 330.896328][T13995] 8021q: adding VLAN 0 to HW filter on device bond12 [ 330.915761][T13995] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 330.928161][T13995] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 330.952664][T13995] bond12: (slave wireguard0): making interface the new active one [ 330.961367][T13995] wireguard0: entered promiscuous mode [ 330.970385][T13995] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 331.042423][T14002] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1966'. [ 331.140659][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 331.378583][T14009] lo speed is unknown, defaulting to 1000 [ 331.586382][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 331.719618][T14029] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.948424][T14041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1973'. [ 332.140145][T14023] lo speed is unknown, defaulting to 1000 [ 332.423229][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 332.439918][T14044] syzkaller0: entered promiscuous mode [ 332.452033][T14044] syzkaller0: entered allmulticast mode [ 332.630074][T14067] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 332.712715][T14067] netlink: 'syz.4.1979': attribute type 21 has an invalid length. [ 333.551392][T14077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 335.836989][T14086] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.850554][T14086] net_ratelimit: 10 callbacks suppressed [ 335.850563][T14086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.226393][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 336.384189][ T5980] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 336.425161][ T8087] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 336.441160][ T5980] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 336.494722][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 336.533907][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 336.633931][ T6673] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 336.663383][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 336.672546][T14113] netlink: 'syz.4.1988': attribute type 7 has an invalid length. [ 336.753811][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 336.784573][ T6673] bond4: (slave bridge5): failed to get link speed/duplex [ 336.883737][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 336.928103][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 336.993945][ T8087] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 337.014147][ T12] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 337.224034][ T43] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 337.242083][T14142] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 337.290683][T14144] netlink: 'syz.2.1993': attribute type 9 has an invalid length. [ 337.463395][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 337.474470][T14142] bond5: entered promiscuous mode [ 337.516279][T14142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.566912][T14155] rdma_rxe: rxe_newlink: failed to add lo [ 337.721192][T14146] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.750117][T14146] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 337.775593][T14146] bond5: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 337.799393][T14146] bond5: (slave gre2): making interface the new active one [ 337.810113][T14146] gre2: entered promiscuous mode [ 337.818314][T14146] bond5: (slave gre2): Enslaving as an active interface with an up link [ 337.851245][T14162] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1995'. [ 338.066557][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 338.143877][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 338.172835][T14166] macvtap1: entered promiscuous mode [ 338.189777][T14166] macvtap1: entered allmulticast mode [ 338.291213][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 338.600801][T14170] bond9 (unregistering): Released all slaves [ 338.608476][T14186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2003'. [ 338.624972][T14186] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2003'. [ 338.639375][T14186] netlink: 'syz.0.2003': attribute type 5 has an invalid length. [ 338.648726][T14186] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2003'. [ 338.685850][T14187] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2002'. [ 338.745658][T14195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2004'. [ 338.967291][T14201] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.449283][T14224] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 339.559029][T14231] xt_connbytes: Forcing CT accounting to be enabled [ 340.065709][T14247] delete_channel: no stack [ 340.658533][T14268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.764599][T14273] netlink: 'syz.1.2021': attribute type 49 has an invalid length. [ 340.823255][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 340.943778][ T714] net_ratelimit: 42 callbacks suppressed [ 340.943832][ T714] bond4: (slave bridge5): failed to get link speed/duplex [ 340.964616][ T714] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 341.073860][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 341.091122][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 341.215509][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 341.303721][ T714] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 341.428299][T14295] bond10: (slave bond_slave_1): Device is not our slave [ 341.442907][T14295] bond10: option active_slave: invalid value (bond_slave_1) [ 341.452564][T14302] netlink: 'syz.1.2027': attribute type 13 has an invalid length. [ 341.486301][T14295] bond10 (unregistering): Released all slaves [ 341.679719][T14310] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 342.082410][T14302] batman_adv: batadv0: Interface deactivated: dummy0 [ 342.349923][T14336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 342.362415][T14336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 342.369985][T14336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 342.377101][T14336] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 342.420421][T14337] __nla_validate_parse: 4 callbacks suppressed [ 342.420442][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 342.487710][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 342.497899][T14338] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2034'. [ 342.507445][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.519996][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 342.530762][T14338] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2034'. [ 342.543676][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 344.154745][T14310] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 344.165905][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.194154][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.219634][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.235527][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.245252][T14316] lo speed is unknown, defaulting to 1000 [ 344.258056][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.297671][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.347562][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.377066][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.546640][T14354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 344.581381][T14354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 344.621034][T14358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2038'. [ 344.654159][T14360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2038'. [ 344.739034][T14354] bridge0: entered promiscuous mode [ 344.767448][T14354] ip6gretap0: entered promiscuous mode [ 344.801172][T14354] debugfs: 'hsr1' already exists in 'hsr' [ 344.821504][T14354] Cannot create hsr debugfs directory [ 344.944098][ C1] [ 344.946502][ C1] ============================================ [ 344.952773][ C1] WARNING: possible recursive locking detected [ 344.959126][ C1] syzkaller #0 Not tainted [ 344.963586][ C1] -------------------------------------------- [ 344.969869][ C1] syz.3.2030/14316 is trying to acquire lock: [ 344.976069][ C1] ffff8880347f4fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 344.985213][ C1] [ 344.985213][ C1] but task is already holding lock: [ 344.993168][ C1] ffff888028ea0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 345.003530][ C1] [ 345.003530][ C1] other info that might help us debug this: [ 345.011627][ C1] Possible unsafe locking scenario: [ 345.011627][ C1] [ 345.019194][ C1] CPU0 [ 345.022666][ C1] ---- [ 345.026065][ C1] lock(&hsr->seqnr_lock); [ 345.030870][ C1] lock(&hsr->seqnr_lock); [ 345.035602][ C1] [ 345.035602][ C1] *** DEADLOCK *** [ 345.035602][ C1] [ 345.043896][ C1] May be due to missing lock nesting notation [ 345.043896][ C1] [ 345.052417][ C1] 14 locks held by syz.3.2030/14316: [ 345.057744][ C1] #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 345.067206][ C1] #1: ffffffff8fb26828 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 345.076993][ C1] #2: ffffffff8fb269e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 345.086862][ C1] #3: ffff88807ac90fe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 345.098472][ C1] #4: ffff88801be9d980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x2ae/0x5c0 [ 345.109229][ C1] #5: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 345.118777][ C1] #6: ffffc90000a08cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 345.128873][ C1] #7: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 345.138177][ C1] #8: ffff888028ea0fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 345.149050][ C1] #9: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 345.158584][ C1] #10: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 345.168812][ C1] #11: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 345.178420][ C1] #12: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 345.188854][ C1] #13: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 345.198467][ C1] [ 345.198467][ C1] stack backtrace: [ 345.204458][ C1] CPU: 1 UID: 0 PID: 14316 Comm: syz.3.2030 Not tainted syzkaller #0 PREEMPT(full) [ 345.204478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 345.204489][ C1] Call Trace: [ 345.204499][ C1] [ 345.204507][ C1] dump_stack_lvl+0xe8/0x150 [ 345.204533][ C1] print_deadlock_bug+0x279/0x290 [ 345.204561][ C1] __lock_acquire+0x253f/0x2cf0 [ 345.204588][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 345.204610][ C1] ? skb_network_protocol+0x234/0x400 [ 345.204640][ C1] ? hsr_dev_xmit+0x237/0x360 [ 345.204662][ C1] lock_acquire+0x106/0x350 [ 345.204683][ C1] ? hsr_dev_xmit+0x237/0x360 [ 345.204709][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 345.204724][ C1] ? lock_acquire+0x106/0x350 [ 345.204745][ C1] ? hsr_dev_xmit+0x237/0x360 [ 345.204768][ C1] _raw_spin_lock_bh+0x36/0x50 [ 345.204786][ C1] ? hsr_dev_xmit+0x237/0x360 [ 345.204814][ C1] hsr_dev_xmit+0x237/0x360 [ 345.204837][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 345.204862][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 345.204885][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 345.204905][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 345.204922][ C1] ? ebt_do_table+0x2665/0x2830 [ 345.204940][ C1] ? ebt_do_table+0x2665/0x2830 [ 345.204959][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 345.204987][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 345.205011][ C1] ? lock_acquire+0x106/0x350 [ 345.205037][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 345.205063][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 345.205088][ C1] NF_HOOK+0x360/0x3f0 [ 345.205112][ C1] ? NF_HOOK+0xa2/0x3f0 [ 345.205134][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 345.205158][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 345.205181][ C1] ? lock_acquire+0x106/0x350 [ 345.205206][ C1] br_forward_finish+0xd3/0x130 [ 345.205229][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 345.205253][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 345.205276][ C1] NF_HOOK+0x360/0x3f0 [ 345.205301][ C1] ? NF_HOOK+0xa2/0x3f0 [ 345.205322][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 345.205346][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 345.205371][ C1] ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70 [ 345.205390][ C1] ? br_handle_vlan+0x3e7/0x530 [ 345.205412][ C1] __br_forward+0x397/0x540 [ 345.205435][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 345.205459][ C1] ? br_dev_xmit+0x193/0x1990 [ 345.205477][ C1] br_dev_xmit+0x12bd/0x1990 [ 345.205494][ C1] ? br_dev_xmit+0x193/0x1990 [ 345.205514][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 345.205535][ C1] ? is_skb_forwardable+0xb1/0x200 [ 345.205564][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 345.205587][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 345.205602][ C1] ? handle_softirqs+0x22a/0x840 [ 345.205626][ C1] ? kernfs_root+0xf6/0x230 [ 345.205649][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 345.205664][ C1] ? ib_setup_port_attrs+0x170d/0x2380 [ 345.205681][ C1] ? ops_init+0x35c/0x5c0 [ 345.205702][ C1] ? copy_net_ns+0x50e/0x730 [ 345.205721][ C1] ? create_new_namespaces+0x3e7/0x6a0 [ 345.205743][ C1] ? __x64_sys_unshare+0x38/0x50 [ 345.205758][ C1] ? do_syscall_64+0x15f/0xf80 [ 345.205778][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.205800][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 345.206020][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 345.206054][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 345.206089][ C1] ? skb_clone+0x246/0x3a0 [ 345.206106][ C1] hsr_forward_skb+0x167e/0x2a80 [ 345.206130][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 345.206148][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 345.206163][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.206184][ C1] ? __asan_memset+0x22/0x50 [ 345.206206][ C1] ? __skb_pad+0x405/0x610 [ 345.206225][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 345.206257][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 345.206283][ C1] hsr_announce+0x1db/0x370 [ 345.206308][ C1] ? hsr_announce+0x89/0x370 [ 345.206331][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.206354][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.206375][ C1] call_timer_fn+0x192/0x5e0 [ 345.206399][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.206423][ C1] ? call_timer_fn+0xd4/0x5e0 [ 345.206445][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 345.206472][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.206490][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 345.206515][ C1] __run_timer_base+0x652/0x8b0 [ 345.206536][ C1] ? ktime_get+0x45/0x220 [ 345.206559][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 345.206588][ C1] run_timer_softirq+0xb7/0x170 [ 345.206609][ C1] handle_softirqs+0x22a/0x840 [ 345.206634][ C1] ? __irq_exit_rcu+0xca/0x220 [ 345.206660][ C1] __irq_exit_rcu+0xca/0x220 [ 345.206682][ C1] irq_exit_rcu+0x9/0x30 [ 345.206703][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.206724][ C1] [ 345.206730][ C1] [ 345.206736][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.206756][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 345.206779][ C1] Code: 19 00 00 b8 ff ff ff ff 65 0f c1 05 64 dd 8a 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 345.206795][ C1] RSP: 0018:ffffc900033a74e8 EFLAGS: 00000206 [ 345.206812][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 345.206823][ C1] RDX: ffff8880295b3d80 RSI: ffffffff8e22a119 RDI: ffffffff8c27f000 [ 345.206837][ C1] RBP: 00000000ffffffff R08: ffffffff8270ce6c R09: ffffffff8e95d020 [ 345.206851][ C1] R10: dffffc0000000000 R11: ffffed10037d3b25 R12: 0000000000000246 [ 345.206864][ C1] R13: ffff8880295b3d80 R14: ffffffff8e95d020 R15: 0000000000000005 [ 345.206880][ C1] ? kernfs_root+0x1c/0x230 [ 345.206907][ C1] ? kernfs_root+0x1c/0x230 [ 345.206930][ C1] kernfs_root+0xf6/0x230 [ 345.206953][ C1] kernfs_activate_one+0xd4/0x370 [ 345.206979][ C1] kernfs_add_one+0x447/0x5c0 [ 345.207005][ C1] __kernfs_create_file+0x22b/0x2e0 [ 345.207025][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 345.207047][ C1] internal_create_group+0x673/0x1180 [ 345.207076][ C1] ? kobject_add+0x163/0x240 [ 345.207128][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 345.207154][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 345.207179][ C1] sysfs_create_groups+0x59/0x120 [ 345.207203][ C1] ib_setup_port_attrs+0x170d/0x2380 [ 345.207234][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 345.207250][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.207268][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 345.207297][ C1] ? device_add+0x70b/0xb70 [ 345.207319][ C1] add_one_compat_dev+0x448/0x650 [ 345.207343][ C1] ? down_read+0x270/0x2e0 [ 345.207366][ C1] rdma_dev_init_net+0x243/0x2f0 [ 345.207391][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 345.207415][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 345.207444][ C1] ops_init+0x35c/0x5c0 [ 345.207470][ C1] setup_net+0x118/0x340 [ 345.207492][ C1] ? __pfx_setup_net+0x10/0x10 [ 345.207514][ C1] ? preinit_net+0x492/0x7b0 [ 345.207535][ C1] copy_net_ns+0x50e/0x730 [ 345.207557][ C1] create_new_namespaces+0x3e7/0x6a0 [ 345.207583][ C1] ? security_capable+0x7e/0x2c0 [ 345.207608][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 345.207633][ C1] ksys_unshare+0x54e/0x970 [ 345.207651][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 345.207666][ C1] ? rcu_is_watching+0x15/0xb0 [ 345.207694][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.207712][ C1] __x64_sys_unshare+0x38/0x50 [ 345.207730][ C1] do_syscall_64+0x15f/0xf80 [ 345.207751][ C1] ? trace_irq_disable+0x3b/0x140 [ 345.207770][ C1] ? clear_bhb_loop+0x40/0x90 [ 345.207789][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.207806][ C1] RIP: 0033:0x7f5ee5d9c819 [ 345.207824][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.207840][ C1] RSP: 002b:00007f5ee6c90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 345.207858][ C1] RAX: ffffffffffffffda RBX: 00007f5ee6016090 RCX: 00007f5ee5d9c819 [ 345.207872][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 345.207883][ C1] RBP: 00007f5ee5e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 345.207894][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.207904][ C1] R13: 00007f5ee6016128 R14: 00007f5ee6016090 R15: 00007ffdbc8cc9a8 [ 345.207925][ C1] [ 346.930096][T14370] 8021q: VLANs not supported on ip_vti0 [ 346.968047][T14369] syzkaller1: entered promiscuous mode [ 346.974453][T14369] syzkaller1: entered allmulticast mode [ 346.987453][ T5980] net_ratelimit: 3330 callbacks suppressed [ 346.987473][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 347.055587][ T714] bond4: (slave bridge5): failed to get link speed/duplex [ 347.106012][ T714] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 347.177961][ T5977] bond4: (slave bridge5): failed to get link speed/duplex [ 347.243211][ T714] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 347.305090][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 347.353223][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 347.425472][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 347.464690][ T5980] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 347.543113][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.552881][ T5980] bond4: (slave bridge5): failed to get link speed/duplex [ 349.867304][T12712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.033639][ T5975] net_ratelimit: 79 callbacks suppressed [ 352.033660][ T5975] bond4: (slave bridge5): failed to get link speed/duplex [ 352.053684][ T5977] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 352.153314][ T5977] bond4: (slave bridge5): failed to get link speed/duplex [ 352.174393][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 352.273824][ T5977] bond4: (slave bridge5): failed to get link speed/duplex [ 352.284754][ T5977] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 352.383194][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 352.413600][ T4578] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 352.505513][ T4578] bond4: (slave bridge5): failed to get link speed/duplex [ 352.523201][ T5975] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 352.583463][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!