last executing test programs: 10.534692343s ago: executing program 2 (id=5828): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000600)="06ff03076844268cb89e14f0080040e0ffff00febabec41177fb860200080000030c62079f4b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 10.221411457s ago: executing program 2 (id=5833): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) accept4(r0, &(0x7f0000000000)=@ethernet, &(0x7f0000000080)=0x80, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 10.064094993s ago: executing program 2 (id=5838): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4082) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001505000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.701307991s ago: executing program 2 (id=5843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000001cc0)={0xffffffffffffffff, &(0x7f0000001bc0)='NLBL_UNLBL\x00', 0x80040, &(0x7f0000001c00)={@_ha_fsid={[0x5, 0x9a]}, {0x0, 0x3, 0x400, 0x8000000000000001}}, 0x6, &(0x7f0000001c40), &(0x7f0000001c80)=0x9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcf}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bind$llc(r1, &(0x7f0000001d00)={0x1a, 0x33a, 0xff, 0x4, 0xd, 0x80, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1, &(0x7f0000000240)=""/10, 0xa}, 0x7}, {{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5, &(0x7f00000016c0)=""/129, 0x81}}, {{&(0x7f0000001780)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001800)=""/116, 0x74}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f0000001940)=""/241, 0xf1}], 0x3, &(0x7f0000001a80)=""/35, 0x23}, 0x7d}], 0x3, 0x20, &(0x7f0000001b80)={0x77359400}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) 9.640762081s ago: executing program 2 (id=5846): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x1}, 0x6}) 4.388468209s ago: executing program 4 (id=5895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000520001002bbd7000000000000200000008000700"], 0x1c}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd001600003f4ed58838068b91000000106fa9be002a389680eb044337b5f1b3f94f5c05dd9099c38045ad229c2669573130b0d3691899392fd7cb3179448e830b67a070179a7701eaf2efa864355734229b7152ec0045d2ccf7ff1afa4b863b392214899d75d1880f8e30c942a7b90c3e2436264739c61b8793fa5a1cadba7bc0f9cd1d4a233bffff53947157fb319fb73d7003ffd594e2ea4f3ac97f696b3f97574547ca78157fce8bc99f4a035c70251025eb61c42e10b4edfa9eb48f8dc79f998f81462ea54722e1eaae2bd1c23bcb38c1841b383c679390be1695d43a9d9e10e8764e127867b6f72df156da226cf1ecb07f"], 0x4e) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xd6002, 0x0) socket$netlink(0x10, 0x3, 0x14) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000009}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.889619195s ago: executing program 4 (id=5901): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r2, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x20000005, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@private0, 0x0}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r12, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4e7dbacae9c39686}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x408c0) 3.516123241s ago: executing program 4 (id=5906): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x6, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0xfe, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3.351734703s ago: executing program 4 (id=5909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000}, 0x90) 3.14821751s ago: executing program 4 (id=5912): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003f00), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000003f40)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002200)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4044045) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1200}}, 0x1c}}, 0x60800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_TABLE={0x8, 0xf, 0x8000}]}, 0x24}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, &(0x7f00000001c0)="9f9553") readv(r4, &(0x7f00000020c0)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000400)=""/64, 0x40}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 2.340870213s ago: executing program 0 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 2.337728885s ago: executing program 3 (id=5918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2f, 0x80000000, 0x0, 0x9, 0x12, 0x3, 0x3, 0xfc, 0x2, 0xff, 0x0, 0x9, 0x6, 0xff, 0x0, 0x5}}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r3, 0x29, 0xc8, 0x0, 0x0) 2.160615422s ago: executing program 0 (id=5919): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000011180101002020782500000000002027207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000620000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xfe, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x604}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1820"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x51}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x3) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @sched_cls=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.154670258s ago: executing program 3 (id=5920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0xff7f0000, 0x0, 0x2000c0c1}, 0x40000) 1.773563782s ago: executing program 4 (id=5923): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0xa, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010104, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e21, 0x0, 0x2, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.607262849s ago: executing program 0 (id=5925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x6, 0x4, 0x3, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) 1.396875619s ago: executing program 3 (id=5926): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0xf8}]}, 0x28}}, 0x0) 1.323107036s ago: executing program 1 (id=5927): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r6, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYRESOCT=r5, @ANYRES16=r4, @ANYRESOCT=r6, @ANYRES32=r5], 0x5c}, 0x1, 0x400000000000000}, 0x40000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000500)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)={0x32c, r4, 0x303, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r2}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r15, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r16}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.27989135s ago: executing program 3 (id=5928): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67eb6b6b1e28d8a17f721bbd9025bd0fd5bbb51b8db492bcbd535b7518bf9e5514b0f407c2625fa5c462d1064d6f4356a3ee3c8fe49a5ebac025c298b6e09d6743c2b479867c5706d4", 0x49}, {&(0x7f0000000280)="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", 0xfb}], 0x2, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f0000000800)=r7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r1, 0x0, 0x10000008eb9, 0x0) splice(r0, 0x0, r9, 0x0, 0x80000025a2, 0xf) close(0x3) close(0x4) 1.133474645s ago: executing program 1 (id=5929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "a75f", "2dd6ed", 0x7, "4c33136714ddcb132b55c0bf9d2b8527935b084ea471b7c66acb8befb475b832258e8e543d3bd96d0a509105d80f84198f275d56e70bfe0beaf5fcf43790506a8d56762c1d4c29b891234998a89169de3e2c089ef12195ed4c9542ba1dc74182349b2ba88e3f3b1e07e9a05af30694b14146a92d916763492651f6a6b6b82876a60fdb032aec389b6e816a0059e4b6607b97acd1cdbb85d797189b041a8cadeea2d366c4e08dacf08a3b487cff0589508091b04994567f06f664"}}}}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x26}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) 975.430388ms ago: executing program 1 (id=5930): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x80, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r3, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000480)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4044004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r1, 0x16, 0x0, 0x8, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r1, 0x2}, 0x20) socket(0x1e, 0x3, 0x9) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 793.531752ms ago: executing program 1 (id=5931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4000}, 0x90) 492.794263ms ago: executing program 0 (id=5932): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x2, 0x60, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES64, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRES32=r1], 0x2c}}, 0x20000884) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x55f}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x29c8, 0x155f}, &(0x7f00000000c0)=0x8) 492.183852ms ago: executing program 1 (id=5933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a \x00Q', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff0200000000000000000000000000010c"], 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000009c0)={r6, 0x6, 0x8, 0x1}) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0)='M', 0x0}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r9, 0xcc071acbf25dbf8f}, 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 381.361938ms ago: executing program 0 (id=5934): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 298.849064ms ago: executing program 0 (id=5935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07ef28bd7000ee89df0c28000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000c80)={0x2dc, r6, 0x27594df03360d53b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c0, 0x11d, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x4, 0xc, 0x4, 0xc, 0x6, 0x9, 0x3, 0x2, 0x72f487421f16155, 0x24, 0x30, 0x1, 0x60, 0x6, 0x48, 0x60, 0x24, 0x1b, 0x9, 0x12, 0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x6c, 0xb, 0x24, 0x3, 0x12, 0x6c, 0x36, 0x48, 0xc, 0x5, 0x6a, 0xb, 0x6]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x9}, {0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {}, {0x1, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x6, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x4, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x6}, {0x3}, {0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff00, 0xffff, 0x5, 0x9, 0x0, 0x690d, 0x81, 0x6]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x4}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x2}, {0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x8}, {0x2}, {0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x5, 0x4}, {0x7}, {0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x8}, {0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x5}, {0x3, 0x1}, {0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x2, 0x7d, 0x6, 0x9, 0x16, 0x6, 0x47, 0x2, 0x36, 0xc, 0x3, 0x4, 0xb, 0xb, 0x1b, 0x36, 0x1b, 0x3, 0x5c, 0x1, 0x0, 0x48, 0x12, 0x9, 0x16, 0x18, 0x3, 0x6c, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x2, 0x7f, 0xe5ae, 0x9, 0x6, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x60]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x8, 0x80, 0x100, 0x1, 0x7fff, 0x401, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1ff, 0xace9, 0x6, 0x80, 0x7, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x6, 0xc, 0x9, 0x9, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0xa}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x1}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x5}, {0x1, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {}, {0x3, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x1}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc75b, 0xfff7, 0xaf0a, 0x9, 0x6, 0x9, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x905, 0x7, 0xd, 0x1, 0x5, 0x3, 0x80, 0xf5ce]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x101, 0xa6e, 0x6, 0x1, 0x1, 0x40, 0x81]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x1000, 0x6, 0xff, 0x1ff, 0x3ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xa578, 0x4, 0x7, 0x97c, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x44040015}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf07, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r11, 0x143, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 241.448413ms ago: executing program 1 (id=5936): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r2], 0x2c}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{r0, 0xc481}], 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00005e000f00462822ba8d70bccf00"/24], 0x30}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000240)={r7, 0x2}, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}}, 0x884) 224.068443ms ago: executing program 3 (id=5937): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x4, 0x0, 0x11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x53, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r3, 0x29, 0x80, 0xfb, 0xdc21, 0x49, @remote, @rand_addr=' \x01\x00', 0x40, 0x20, 0x7, 0xd}}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv6_deladdr={0x78, 0x15, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x8, 0xff, r6}, [@IFA_FLAGS={0x8, 0x8, 0x541}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_RT_PRIORITY={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000038000000bca3000000000000550305002dfeffff630af0ff0000000071a400fe000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430200000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a0acf30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478b41d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d859f49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f00960298f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2ccb0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab53080d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f982c91ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f098b6367917888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee1ee17da1900004c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f01ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864eeb6511004c1d44d90da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acccbc48d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d29000000003e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa63264648225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4db8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc351bc8a7c040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9dce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac42218301009bbf61e4bba695a41e2109eba8e40c3702bd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843ff3fd404f535be474f456778b5ef85afb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000003f1c0483706db2cb51a9439c2bf24fce70bb9ef9c150397aa1458d9045e9a066c4c07dcb5d3fd47532e6400d78e799e33dda64665388d543741c7440ebdd551ee967b6e2d14a1cc096f18779bc4e34f7de607ec7cbb28efa359d13683d5ef3adc614110f4d8610ebbb5e2d404be76418a0008f12850c49024211b4ea30dc07a52d95989123702f3caab2060f0dbd693ebcf0d5d32b4b76c473d668d63643a162bb4705764fd5656b033c4e49c28c9df7e20bb73ee59205520ad1e2ad93e22231f8251bba43534818baf226082d7d94e9544fe721af383b271d36a43e429ac976ce49ca182f6fcf5f5d1bc6388247669bb217af8c314cf5df36729c23cbcbab2fc7a2fdff67bf87c2651d0c1d87409d1dbef5457ba659111a23ebf03f9b876a03c00ee6b3e29f85321e9b47702f12e3eba8395cbbf7e5e67acc4d20a78ba87899884be807834578d1f2818140ba9facdb716cc8e744c17e5e66ca54b9a243067f85bf63ab86a7bd3bdc7bfd27a5be263205a1f8e2c650e88495fa4b3b6f7176c21c8dc81c9843479f4b14b9a13d8c0fc238e7500a399195373514c3b82efafcc261cfa53944f187ba7ea751a3437c3d4116399d5b65ddf8a641441086bbd30307adc59be211373873ef0fdb10d2c585e07dfd366f256f4b14f7db958cefc154f46bba0893f51acf2f8dd8a19055ffe12661932ac9a648e50683df90d17809e0bd5ec0e0c43f73e85cdc4912ad91b0753bd4561d79906588f9f5d09f56464cc2f56684d287b262b57c23ec78d2eaf96fb17c64f11ead4430c265c28ec02dca4ba38ecfecd4561855adeb2412430abcfa1e0391d0653567bf10827ccc1961743e096dcf2cc2e380b106491ae16d2a1a668de060f838408fbb60bbf017ad4d8dbd7a762c3c0705839f15a3c9f77ebe36bebbd27d98b519f36b12f5153905ed31453958c8c46cb8f974197eb01c819439fd43f43a15920fc1977f2f2a4bdd5d079283e1d6308251a5ae0461e2bd8190284f93f60244101ef8b6541a717a832ddf8aeed5455ed90bdeb9b03dae5481f6cbbf176321fff5e1aeb29840466177af699e84e49d3f9254e557e31a19bbfe55b62e20439710a75bcfa5c8c5f69f5b6cadddfc811fb73b78477688935b00f2f4971ba8c4c7c930e24d9f2fbcc9dc0bd2bf64294e47f02f69b0a84bdd4c0fedac522c7274d74bf367ca6c5441e177fbfc95a56d9490731b1aa1af08aeebb5a9e56d1b50bad5fc3f3ba8eb3095adba4ac1f236580000000000000000000000000000000000000000002e7ec9df3c71f02bb6d639855e3584aafd546739b880ffac40b1292971abc7faa153f90ec46f8c707fdb5b603ce64c155d76aeb8115f54ac9cb6eca976f8026a8bc56392b233a5a661d2e7ee1bbb330cef4da2ec20a4bc1249e45a3c69742ec706a8924bb3ed655137690e951b66fbafe688d98f898fcd545555ed60b3173dc2600f1c6f025dde0629055074e01f79751ba93da933a503a6b928ee43ced85e63996abd88f535bbd6eb7a1f613d2b1bb278341a9a3ed1f0cc81a2b39213ddad2e1e8e94ef639ec16f1d4ba1b89172e8036529d96cb07b409420b8c523103faeadb52341e2adbee1fc90e82924b64e948aea9bf810eb8623263c1dd4d8cc2eef8464f2554a4494a505ef204232f44665eb41c30ad2305056a89255734b3121849af8f6e7348cc9c13c76d285d701c2c078a7b2a41e0c7b2aded6377380e1454c00000000000000000000009355e100fd97c3214075e1ccb353b3e87c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, r4}, 0x94) 6.180764ms ago: executing program 3 (id=5938): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @remote, @netrom, @netrom, @remote, @remote, @null, @netrom]}, &(0x7f0000000080)=0x48) (async) sendto$netrom(r0, &(0x7f00000000c0)="1ce686b9e276585a9adc7f3e27b4789b98d312846f88e28129a461b340f834ab3217b3481d31d9b541980a473da0fd6331dd1b0dd70ece4d13b192a48d61927af6f6e70223ebd73adf9e73814e74a57c0b26bdff6923b95104f4b8ca0a171246fbd372528c3af04bd80665555ea51d6e042b2ac957bfdb4d3aea3e97a0e652ddba688b0374dcc47eeb57ecff0567e509404e5d16eea9d2240d2dccc87fc1deb550917636559a9e38d73f6a1eee8bfa86d7d7c16341f327", 0xb7, 0x4004004, 0x0, 0x0) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={{r0}, r1, 0x4, @inherit={0x58, &(0x7f0000000380)={0x0, 0x2, 0x6, 0x6, {0x0, 0x5, 0xfffffffffffffffa, 0x4, 0x7}, [0xfffffffffffffffd, 0x3]}}, @subvolid=0x1}) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001440)=0x1c) getsockname$l2tp6(r2, &(0x7f0000001480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000014c0)=0x20) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001500)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000001540)) (async) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000001580)=@alg, 0x80, &(0x7f0000002740)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/69, 0x45}, {&(0x7f0000002680)=""/38, 0x26}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/59, 0x3b}], 0x5, &(0x7f00000027c0)=""/181, 0xb5}, 0x40000040) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f00000028c0)={0x80000}) writev(r0, &(0x7f0000002bc0)=[{&(0x7f0000002900)="de7b5b8ee8cd543895a402578643b57266c6a73a0f865b4a427765a639d3b0e2fb36c09fb6df3d4bccb9ec03d20f4be95d4a42cb40bb8e0afd558ee36d1ce2cb29bcda2470ccbe33f951b947030dc4915e7863d81bc47e2ab0de6968bbeb6d5f24969e8ef61f8b270f6a224c461a0505dd5e6eeffa710957a8309f92ad28e7a1e9fe694111c36c99b905a76a987f2ce754b875c26a656a44c088fd674565c37a423955b27d6e1a2095bdf3efa8093e654a19985d5e35db4c7dd6eb4cc3e42a229ddad2cbdb8e546ba2e5a1ae76319a1f123e07fe3e385ede86ecc8d1fcc8b30cf86c2476504e", 0xe6}, {&(0x7f0000002a00)="4ce41651f3f8eb514f3993c417a4499e80243487008e8e02bb4b756e44e08f21e5130c4ed56cea4f0134ad92dc851e42adb748525ab508fea0b6f21216ecb0a8e794d3aa65fd7939ba110dd9a11dd5ebb20cc9bd3b9a4e5e3a0fc1b697a78d10643a9724bb79f8b9d38fff319d9886b3ba2f6e989483fbe7f9179caf5a2e9c193cd8ef4093acd0a117be5c895a857d27f7ed1378fc0b9ce4679b6ff08c54e7712a3fa30d6975697a71e7c687cf23fd2261", 0xb1}, {&(0x7f0000002ac0)="55de1a8af918e6ef3f6c0ace1fed7384c33a6f9245f36d000ede3af51dc5edf3bff454dc1c3160f987ede942b70a8c7433b47b0ba8bd79ffe1a4603b52e83666e8d22672ae796537e4c8d29b9c43c241d551fa744b29ec557fc7c590ca6175d1251974de3afd3b2b9cb1eaea342623d9f0bbf20873fdfe499bbf11b834c37093e978220fcc16c8aabd2279b2697668491734f153beaf6c97668997975b06aab088de3ee4806b77207eb33c67a6431670491a6bc299c8b62dc46b19fa9fa8e9460fa15873156177cc86d62e2bb512b6b24d06eac28f3326230a", 0xd9}], 0x3) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000002c00)=0xd, &(0x7f0000002c40)=0x2) (async) socket$inet6(0xa, 0x1, 0xf) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000002d80)={r3, &(0x7f0000002c80)='cgroup.procs\x00', 0x4a0000, &(0x7f0000002cc0)={@_ha_fsid={[0x9, 0x3]}, {0x10, 0x4000, 0xfffffffd, 0x2}}, 0xe9, &(0x7f0000002d00)={@_ha_fsid}, &(0x7f0000002d40)=0x5}) r6 = openat$cgroup_ro(r5, &(0x7f0000002dc0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000002e00)) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000002e40)={'team_slave_0\x00', {0x2, 0x0, @loopback}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl2\x00', 0x0, 0x29, 0x14, 0x81, 0x7, 0xa, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8000, 0x401}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003500)={'vcan0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000006280)=[{{&(0x7f0000002e80)={0xa, 0x4e22, 0x10000, @remote, 0xff}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002ec0)="ca5401089ca9657a3b7330fd242d5e7835ffba47013be4", 0x17}, {&(0x7f0000002f00)="9da874308e1e132f8ec5c852bc8cdbcb16ffd71d270e0e36fb0d548dfe0eabf6beb3f9f159a7c2f45452a519dbe3fe65106855058b7982463c0fbb4d58a7528d78c16aaf62186f9016589c910442ddb8fcbd1344a2f7e8e9", 0x58}, {&(0x7f0000002f80)="a6b67697336739e8ee72b5", 0xb}, {&(0x7f0000002fc0)="2bcdb7d87e4b41112299ce35aa8a808ed90a835ac128c83d0bc2c477c48c5d4312095de6922be2091396a8394ebafcb826ea50c05985582129c54e10613b719e60699ebfdf7596d794ad5b20f7ce612337adf8a7480c884c6273e2da2636feb439aa957b4971adc974656880bfd791e35ef02be6cb62f61dbc7f1e018a533ebb31fe42b3de904a2273547b39d97c0239cada3746a83d7c4982f7987887648a7e820c920545f2437eb71d526a8b593ecc40afb386e2afb4bbd2f1df91240c58d1ba1e0dc2c27e3fe037d508bd6f706cb177cb5783524c477c4559a9c43ae51aadc6a753a85f52021657004e2fcd8f8f0fca95043748", 0xf5}], 0x4, &(0x7f00000031c0)=[@hopopts_2292={{0x1a0, 0x29, 0x36, {0x3a, 0x30, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x92, 0x4e, "cc5af96cea34fd8f180c5c5e69d0ad8b324a1d013dd4ebb9b2b3c8252e39c824e9633f71e1534ea7ef7b7ecf6c2ae57a4e782651ce06444856c9eba3a6b9ceb7a17eb87a695b1434bed04049f12b"}, @generic={0x10, 0x6b, "7a6fc27a13ad0fc38aea274face55579a78e4618b38beca994c1f40b0e31841752f15af894ea5890aa368e6426716046ddf39a3362aabe47a5625335d04a31658099172b62762ebffb1ee08f15c04f7153091aabc902e7cb45b56f708908ccb7b8ce2bbeb9d0fe99f6d81c"}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x2, 0x2, 0xc, 0x2, [0x4]}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x5, 0x87, "8e6c42fd1e54d71c519012136f4dd9354fe4eca1a823026cea14f2551f913cfaeb03c5c88173f3e536dc6b504566e51d97d5e0af0cbd4780a2c553cb4cad236215e094be5021c17a68814f994f0cba341e75b7559eb786f52e9de9026d7e30443ba0f86eaefa85595637c5ab6d36ce8d05ead372b952d910af5858f82e763c33393fa00b53d593"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r7}}}], 0x1f8}}, {{&(0x7f00000033c0)={0xa, 0x4e22, 0xc4, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c, &(0x7f00000034c0)=[{&(0x7f0000003400)="c6cf413fb8c674f1447363420f2ead933135566744b85a74317af93f4b688828b2cc8ac08fe1d2bafa5cd2659a28011756e1a3ae7291e27024ce1bb6c5b2b1da", 0x40}, {&(0x7f0000003440)="3590128922cd037da38d3b8dfdc745770f8c4810cd19bd7b557ec5416cc33a85432aeb6eba81feec9df711ec2c44b1e12a0559687969303c38d3b8ef35266f4d07bb06ec925202f348a563836ad8d2fc0a03e411139f14996fcd4eb79fb03bf6aacb98ac56aa", 0x66}], 0x2, &(0x7f0000003540)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r8}}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x1d, 0xe, '\x00', [@generic={0xae, 0x42, "41543ecd132ef6c6a4cde32f5f908555b10a74bca916669b616d457fd702fd56c72134b03ec174a6f40192c77fcd7414ab01f87e9e6cfd7296738a3a4c7f5676d4a9"}, @ra={0x5, 0x2, 0x26}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0xcb}, @jumbo={0xc2, 0x4, 0x1d5c00}, @jumbo={0xc2, 0x4, 0xffffff01}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0xef3d}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0x2, 0x6, 0x0, [@empty, @remote, @mcast2, @remote, @local, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x1d, 0x7, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xfffffffb}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @local}]}}}, @dstopts_2292={{0x1138, 0x29, 0x4, {0xff, 0x223, '\x00', [@generic={0x9, 0xdc, "7fc19a99f2c60414620de60a83b0b56b1e0ffcb37e8441e4239ebe8a21c3ae31aab53193142dd838098c8b53deac3992aefb1ba69fd2a683116644681c3a8a52739790cdc4a89cdd488c185862e821f8b0af6382ba8a023184883cb12608b835d6503e258b5dd6dd353a1a69af5cdf4788ccbcfd6123b000a9eb6db68b984580a52c552f684f4a6ec4c947638212ac00ca1b24f64c82492e635ea533a7e8b8375fc47cc84ddac32d9feeafcb4a1c56a656a9ec7d30db3b968b948a2a2e62f965439e2f3214173a365f1873c0c62a55043f5349ccfdc91484e45e3be9"}, @enc_lim={0x4, 0x1, 0xdb}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x4, [0x3, 0x21, 0x0, 0x1]}}, @generic={0x9, 0x1000, "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"}]}}}, @dstopts={{0x108, 0x29, 0x37, {0x2c, 0x1d, '\x00', [@generic={0xff, 0x3a, "133d8e61bae8b8301ca11eb98f12cf82ba00b091bfc29743845de9ada4d3f538eaf9b3b225652337d5ef0c3691f8f0420b12e316f22cf7744fc2"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0x0, [0x5d7, 0xd]}}, @ra, @generic={0x7, 0x85, "ce475ae09fa698a9a50754648ae0a9b96b6f312ff9b7a2cd676cba010318b679004a290938ceb07511513b4f62f4ac4901bf1f7db98e186228dca3bc747f9a9f66b62ca2fc9c67ec22b4302c26e556e2612822e49271713b2cd18e47ba3a01fa3dcf12d3a693945bfd04742c6e5f3f409bc7d4b2890aa508e3ae4cb9f90e9df8dd231cc168"}, @enc_lim, @jumbo={0xc2, 0x4, 0x4}]}}}], 0x13e0}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004940)="f50633b193e5b964a2e49e15d7d772509c25823014098e8922af0548d56970afe4f281c4dfba925292e0777466bddedb6fe0356e9c586430843060003ddcca5a2e9b4aa7b496db8e461e1daa248280e610e2f79aaa4ad57521238953abb0c6b303eef202f11f184b7cb529778fbd8a2dcf30beae668bedf4bd48abf31462f88f81a2400731d949522cf1bc5481e9c81de90d416759959284dc690272fcebb5bb37a2ba0cf38898b7899a7620fa2627d3b6cf40221fd7aef9557593539829", 0xbe}, {&(0x7f0000004a00)="ef7d468eaf7ef121374f4c605c59bf63b4e438ef271ddd8fd51b390f437611c3e2", 0x21}, {&(0x7f0000004a40)="920c5818046ae274d0d3fe949c108b701d74c3bd1ef551a84b441f983bf288215d74584483f2c313f2435cc0bf9f9f48a8fa2865084c78022c95adb44c4cdf3fcfd3c1d1f8e15f06d3b019d45a28c8dc18519b468f987ebec03a58b211c43efc3825665a02fe99402de490985818ab0d7dcecd7a26730a9dc3052836e0109eff5e7d2caf346018b466987fe4208f10bb8132e8cd36b6da084f802271538da75c0b5ee32ca7425ea539c81cc657914d3dc2d23a9438049f6a7315c09239cf574834611192c01bb40d9be876b5baeaaffee8738727253dfa4cb5c24bdb688c01f83b268075da", 0xe5}, {&(0x7f0000004b40)="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", 0x1000}, {&(0x7f0000005b40)="20774da6832b019c280e15dbf279816a3073d6a88e03d62bd027117b9d03cefd7745dbe2cdfec4f48549470f47ad827d328318699a984bfffc35ba1a17d2229e6916f91779473f8d175f1344ae1acc6caf67342d9cfef7e0a68928bbbb7a25e8d3bbe7e4c0b5e99012a0347eca6196eff549e0db881df930c23760124b2a1a189477d8680106f0a0a8032e7ca050039ffa164297f06d43810037d54ee25653ec75d346f5446e1cf949e947ba1ade646e997590a3a7f1e8da96c02ac1f85bb9b7b4c7a7176b8750196a24d7a6cc2b0f75225b29a4a08d65b758d064e4f722b9664bf490b4295a82eb4292", 0xea}], 0x5, &(0x7f0000005cc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8a}}, @hopopts={{0xc0, 0x29, 0x36, {0x3b, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x7, 0x89, "55a54df464f7eb02d4689a8d8d48346ae38ce2ea40b5038781178a47dc12c9390e1fbb15cb7c256037ed4ae706757d06a5d8f54ad178601e72854b9c5639798d3a432af9b2a8c1eba7e39ba6418cbb8c38c676745fd1c924207ddaa4ca74244deee083eee586c53c1127f6ce487059acbd1b56f8c3fee15e3bc4228f1414c9d1d5cd6dfef244e504d2"}, @generic={0x9, 0x11, "63de203d4e29a46b227bf5cbedcfb13012"}]}}}], 0xd8}}, {{&(0x7f0000005dc0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, 0x1c, &(0x7f0000006000)=[{&(0x7f0000005e00)="9cab1bc8abd65f983a29db8346d068d02a4b23aab0e261d1ca631103cac7ae8638b0aad82f966a6d993408256f9124bcf31d23f6b32d586b1974630c2609b601de3ac02aafb508d0a9a5709b86a71334526d4c1e9c56c030d741f0746d241af611c2489360decf0b00fda20bddce7271a0a534585ed092f5bc5950c1b9e4507a65ea1d64f5a7b5bf7d898e4f153f251cff6b8d9cc838384e66c6a8ddb4c9a114b9eff6ca023dfbc80cde7af5444c5f6a7d87bde3fe0a17f3f5f5933cf6a3f4cc62047a40306576a45ebb", 0xca}, {&(0x7f0000005f00)="fe8cefe4402190aefcfde99a21132418", 0x10}, {&(0x7f0000005f40)="8c3a09bad80ca04f17f4c3ce763a59cdea50fefba7d4c358e175f157b7e5590c7015fb83adca897268b5ee1672f53b8c15c6c6345d22aec89a411a7b2c49ffe5717b4ec2a5c724f9c237a69204029cfd698e04974e03dc5fb20750016e59d8ded6d182928f28bdfc120b5d3ea3e73377fa3af478de775c203b30f58a05aa7fba007d7cc141f88065d165a7a8cd3e88ffed337bafdf556e83355b808e4e6f438288ff3f0bb6ead4f2", 0xa8}], 0x3, &(0x7f0000006040)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x150, 0x29, 0x36, {0x16, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0x4, 0x9f, "9da1d3dcf40fdc48985583fef9a4f95283548510e8f0432f536c1a7f4903e24335f861dafb6a11429b7bea17347cdb5fa2eac141b5f454a14b42b6e896e8e27b56df9890dbaeceb051ba9a1cec0cd3def88a7af3e168e81b641addbcd0d6c337b9fbba2729e54b037501af043313dde1e88eab027cc9b7e847c2a98b080bac382f43899b3043af8c90281f22bfa4f32ec7421ac5b00757c3163171d67d631d"}, @ra={0x5, 0x2, 0x1}, @generic={0x1, 0x8c, "436b89023b260755f1f8bb1b1a1eb2cf2316029f4e3e10974917b43c5b6d7aaa0523272ca4a2ca4ac8e269726f7bc5c1b0980cab4549c308b83e81f01f722c36a0acf5f2380f55ed67e1333a40d8d2469258b18578b751d96432bbf06eec9e37e05d82ffcf60cd7915cd697c01638f6646468d05d8218f5583b2f4cd11a1c50cbfb3a262b3d62ab5bb2abd23"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x2, 0x4, 0x0, [@empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private2, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hopopts={{0x18}}], 0x228}}], 0x4, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000006380)) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000063c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000006500)={&(0x7f0000006440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x18, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}}, 0x805) r10 = accept4(r5, &(0x7f0000006540)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000065c0)=0x80, 0x80800) recvmsg(r10, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000006940)=[{&(0x7f0000006600)=""/117, 0x75}, {&(0x7f0000006680)=""/138, 0x8a}, {&(0x7f0000006740)=""/154, 0x9a}, {&(0x7f0000006800)=""/108, 0x6c}, {&(0x7f0000006880)=""/165, 0xa5}], 0x5, &(0x7f00000069c0)=""/4096, 0x1000}, 0x40) (async) socketpair(0x26, 0x80000, 0x8000, &(0x7f0000007a00)) 0s ago: executing program 2 (id=5849): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000001380)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r9 = accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) recvfrom(r9, &(0x7f00000002c0)=""/173, 0xad, 0x10042, &(0x7f0000000380)=@llc={0x1a, 0x307, 0x69, 0xc9, 0x4, 0x2, @multicast}, 0x80) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) kernel console output (not intermixed with test programs): 672][T21836] ip6tnl0: left allmulticast mode [ 582.428632][T21836] ip6gre0: left allmulticast mode [ 582.440146][T21836] syz_tun: left allmulticast mode [ 582.452979][T21836] ip6gretap0: left allmulticast mode [ 582.460212][T21836] bridge0: left allmulticast mode [ 582.471823][T21836] vcan0: left allmulticast mode [ 582.480148][T21836] : left allmulticast mode [ 582.489666][T21836] team0: left allmulticast mode [ 582.496803][T21836] dummy0: left allmulticast mode [ 582.503966][T21836] nlmon0: left allmulticast mode [ 582.509328][T21836] caif0: left allmulticast mode [ 582.515244][T21836] vxcan0: left allmulticast mode [ 582.520571][T21836] vxcan1: left allmulticast mode [ 582.527487][T21836] veth0: left allmulticast mode [ 582.536546][T21836] veth1: left allmulticast mode [ 582.541722][T21836] wg0: left allmulticast mode [ 582.548665][T21836] wg1: left allmulticast mode [ 582.555870][T21836] wg2: left allmulticast mode [ 582.560851][T21836] veth0_to_bridge: left allmulticast mode [ 582.577563][T21836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 584.083432][T16943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.398401][T21850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.587613][T21880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.596554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.632122][T21880] syzkaller1: entered promiscuous mode [ 585.641208][T21880] syzkaller1: entered allmulticast mode [ 585.683115][T21880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4260'. [ 585.692336][T21884] netlink: 'syz.2.4258': attribute type 2 has an invalid length. [ 585.727105][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 585.822253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.838892][ T7175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.866731][T21889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.892769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.072074][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 586.080561][ C1] lec:lec_tx_timeout: lec0 [ 586.086094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.174168][T21879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.182940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.241155][T21921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4273'. [ 586.393826][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 586.466264][T21930] bond9: entered promiscuous mode [ 586.474469][T21930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 586.496543][T21930] vlan6: entered allmulticast mode [ 586.501710][T21930] bond9: entered allmulticast mode [ 586.733840][T21949] netlink: 'syz.1.4284': attribute type 7 has an invalid length. [ 586.900172][T21955] netlink: 'syz.0.4286': attribute type 4 has an invalid length. [ 586.918738][T21955] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4286'. [ 586.944188][T21955] .`: renamed from bond0 [ 587.112647][T16943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.433283][T20081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.470512][T21971] netlink: 'syz.4.4288': attribute type 5 has an invalid length. [ 587.504872][T21963] veth0: entered promiscuous mode [ 587.536137][T21956] veth0: left promiscuous mode [ 587.686448][T21954] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 587.733820][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4294'. [ 587.824172][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4292'. [ 587.852885][T21985] Cannot find set identified by id 0 to match [ 588.024943][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'. [ 588.091042][T21997] netlink: 'syz.3.4299': attribute type 4 has an invalid length. [ 588.117351][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4299'. [ 588.130985][T21997] netlink: 'syz.3.4299': attribute type 5 has an invalid length. [ 588.153625][T21997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4299'. [ 588.445388][T22018] netlink: 'syz.4.4304': attribute type 4 has an invalid length. [ 588.709117][T22043] netlink: 'syz.1.4310': attribute type 9 has an invalid length. [ 590.162386][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.501202][T22051] netlink: 'syz.1.4313': attribute type 1 has an invalid length. [ 590.625108][T22051] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.893197][T22079] __nla_validate_parse: 3 callbacks suppressed [ 590.893221][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 590.930547][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'. [ 591.101986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 591.110166][ C1] lec:lec_tx_timeout: lec0 [ 591.115147][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 591.276297][T16943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.467163][T22102] netlink: 'syz.2.4329': attribute type 1 has an invalid length. [ 591.593165][T22110] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4330'. [ 591.622871][T22112] netlink: 'syz.4.4332': attribute type 1 has an invalid length. [ 591.631705][T22102] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.822122][T22113] bond5: (slave gretap1): making interface the new active one [ 591.833252][T22113] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 591.874087][T22116] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4333'. [ 591.972909][T22125] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 592.080179][T22125] bond6: entered promiscuous mode [ 592.094887][T22125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 592.305047][T22140] netlink: 'syz.2.4341': attribute type 11 has an invalid length. [ 592.366021][T22144] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4342'. [ 592.438384][T22146] IPv6: Can't replace route, no match found [ 592.452414][T22146] IPv6: Can't replace route, no match found [ 592.486109][T22148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4345'. [ 592.539597][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4345'. [ 592.566069][T22148] bond0: entered promiscuous mode [ 592.571281][T22148] batadv0: entered promiscuous mode [ 592.633381][T22148] bond0: left promiscuous mode [ 592.638326][T22148] batadv0: left promiscuous mode [ 592.656472][T22167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.665269][T22167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.736729][T22166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.754907][T22166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.781094][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4353'. [ 592.878749][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 592.933425][T22181] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4353'. [ 592.978695][T22187] netlink: 'syz.4.4356': attribute type 1 has an invalid length. [ 593.026278][T22190] netlink: 'syz.0.4357': attribute type 11 has an invalid length. [ 593.028647][T22187] 8021q: adding VLAN 0 to HW filter on device bond6 [ 593.142177][T22196] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 593.807214][T22230] netlink: 'syz.2.4370': attribute type 11 has an invalid length. [ 594.140878][T22246] team0: Device gtp0 is up. Set it down before adding it as a team port [ 594.389711][T22259] nbd: illegal input index 2958377 [ 594.472888][T20084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.806287][T22273] syzkaller0: entered promiscuous mode [ 594.812948][T22273] syzkaller0: entered allmulticast mode [ 595.122221][T20084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.251639][T22284] netlink: 'syz.0.4388': attribute type 16 has an invalid length. [ 595.713066][T22321] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 595.741006][T22321] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 595.807706][T22325] sit0: entered promiscuous mode [ 595.912960][T20987] Bluetooth: hci3: command 0x0406 tx timeout [ 596.031784][T22338] netlink: 'syz.2.4407': attribute type 3 has an invalid length. [ 596.048006][T22338] __nla_validate_parse: 72 callbacks suppressed [ 596.048026][T22338] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4407'. [ 596.099884][T22341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4408'. [ 596.103645][T22347] netlink: 'syz.1.4410': attribute type 2 has an invalid length. [ 596.121946][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 596.130034][ C1] lec:lec_tx_timeout: lec0 [ 596.136828][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 596.208485][T22341] Cannot find map_set index 65533 as target [ 596.458841][T22366] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4414'. [ 596.511729][T22366] netlink: 'syz.0.4414': attribute type 10 has an invalid length. [ 596.538052][T22366] hsr0: left allmulticast mode [ 596.543633][T22366] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.560428][T22371] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4414'. [ 596.571780][T22374] netlink: 'syz.0.4414': attribute type 10 has an invalid length. [ 596.580725][T22374] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.957357][T22390] tipc: Started in network mode [ 596.962650][T22390] tipc: Node identity 3ea5c6520358, cluster identity 4711 [ 596.987516][T22390] tipc: Enabled bearer , priority 0 [ 597.007368][T22390] syzkaller0: entered promiscuous mode [ 597.020460][T22390] syzkaller0: entered allmulticast mode [ 597.075267][T22390] tipc: Resetting bearer [ 597.094742][T22388] tipc: Resetting bearer [ 597.106181][T22397] netlink: zone id is out of range [ 597.117938][T22397] netlink: del zone limit has 4 unknown bytes [ 597.139304][T22388] tipc: Disabling bearer [ 597.152963][T22401] netlink: 'syz.0.4428': attribute type 1 has an invalid length. [ 597.170959][T22401] netlink: 6364 bytes leftover after parsing attributes in process `syz.0.4428'. [ 597.361804][T22406] syzkaller0: entered promiscuous mode [ 597.376339][T22406] syzkaller0: entered allmulticast mode [ 597.393322][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4430'. [ 597.406562][T22410] veth0: entered promiscuous mode [ 597.456189][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4431'. [ 597.745652][T22426] tun0: tun_chr_ioctl cmd 1074025675 [ 597.751033][T22426] tun0: persist disabled [ 597.826003][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4439'. [ 598.009276][T22448] netlink: 'syz.4.4443': attribute type 22 has an invalid length. [ 598.011346][T22444] netlink: 'syz.2.4442': attribute type 7 has an invalid length. [ 598.019077][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4443'. [ 598.041719][T22446] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4441'. [ 598.041761][T22448] netlink: 'syz.4.4443': attribute type 22 has an invalid length. [ 598.155049][T16943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.328329][T22462] netlink: 'syz.0.4450': attribute type 1 has an invalid length. [ 598.338229][T22462] netlink: 'syz.0.4450': attribute type 21 has an invalid length. [ 598.346498][T22464] netlink: 'syz.0.4450': attribute type 21 has an invalid length. [ 598.481778][T22476] netlink: 'syz.0.4452': attribute type 1 has an invalid length. [ 598.601311][T22434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.095820][T22520] macvlan0: left allmulticast mode [ 599.394314][T22543] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 599.472786][T22543] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 599.519769][T22553] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 599.745536][T22555] bond7 (unregistering): Released all slaves [ 599.842433][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 599.944868][T22570] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 600.226747][T22574] bond0: entered promiscuous mode [ 600.244582][T22574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.288727][T22580] bond7: entered promiscuous mode [ 600.298130][T22580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 600.313105][T22582] vlan3: entered allmulticast mode [ 600.318453][T22582] bond0: entered allmulticast mode [ 600.330580][T22583] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.343857][T22583] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 600.356605][T22583] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 600.488414][T22597] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.535073][T22597] bond7: (slave lo): Enslaving as an active interface with an up link [ 600.572780][T22597] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 600.814489][T22611] xt_HMARK: spi-set and port-set can't be combined [ 600.883508][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.966202][T22613] syzkaller0: entered promiscuous mode [ 600.984843][T22613] syzkaller0: entered allmulticast mode [ 601.152698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 601.160954][ C1] lec:lec_tx_timeout: lec0 [ 601.172086][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 601.388104][T22653] __nla_validate_parse: 17 callbacks suppressed [ 601.388128][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4494'. [ 603.011435][T22644] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 603.025920][T22653] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 603.048357][T19612] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.143399][T19612] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.173359][T19612] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.228857][T19612] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.327107][T22679] IPv6: sit1: Disabled Multicast RS [ 603.336143][T22679] sit1: entered allmulticast mode [ 603.398455][T22685] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 603.410070][T22685] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 603.456101][T22671] validate_nla: 3 callbacks suppressed [ 603.456123][T22671] netlink: 'syz.1.4497': attribute type 2 has an invalid length. [ 603.649315][T22703] tipc: Enabling of bearer rejected, failed to enable media [ 603.695056][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4504'. [ 604.472659][T22744] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4514'. [ 604.574270][T22744] bond9 (unregistering): Released all slaves [ 604.721532][T22759] geneve2: entered promiscuous mode [ 604.753506][T22759] geneve2: entered allmulticast mode [ 604.760796][T14660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.770343][T14660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.791149][T14660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.803928][T14660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.894776][T22766] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 605.079680][T22780] xt_hashlimit: overflow, rate too high: 0 [ 605.121862][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 605.138599][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 605.152844][T22784] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4526'. [ 605.173431][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4526'. [ 605.215917][T22789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4529'. [ 605.230070][T22790] netlink: 'syz.1.4530': attribute type 3 has an invalid length. [ 605.238187][T22790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4530'. [ 605.376379][T19610] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 605.435924][T22806] syzkaller0: entered promiscuous mode [ 605.441642][T22806] syzkaller0: entered allmulticast mode [ 605.450012][T22799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.491571][T22813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4535'. [ 605.530090][T22813] nbd: couldn't find a device at index 0 [ 605.590539][T22819] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20000 [ 605.621176][T22819] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20000 [ 605.726433][T22826] netlink: 'syz.0.4539': attribute type 1 has an invalid length. [ 605.795553][T22835] netlink: 'syz.0.4539': attribute type 1 has an invalid length. [ 605.930727][T22841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.940098][T22841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.955757][T22841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.966430][T22841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.975074][T22841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.186355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 606.194814][ C1] lec:lec_tx_timeout: lec0 [ 606.199858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.424706][T22826] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 607.434679][T22835] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 607.549253][T22846] bond11: entered promiscuous mode [ 607.823586][T22856] __nla_validate_parse: 1 callbacks suppressed [ 607.823609][T22856] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4546'. [ 607.880557][T22856] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4546'. [ 607.883491][T22868] veth9: entered promiscuous mode [ 607.935341][T22868] veth9: entered allmulticast mode [ 608.002401][T22868] xt_hashlimit: size too large, truncated to 1048576 [ 608.193821][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4555'. [ 608.387776][T22895] sctp: [Deprecated]: syz.2.4558 (pid 22895) Use of int in max_burst socket option. [ 608.387776][T22895] Use struct sctp_assoc_value instead [ 608.426653][T22895] sctp: [Deprecated]: syz.2.4558 (pid 22895) Use of int in max_burst socket option deprecated. [ 608.426653][T22895] Use struct sctp_assoc_value instead [ 608.452485][T22895] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20002 [ 609.136220][T22947] bridge_slave_0: left promiscuous mode [ 609.157356][T22947] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.206466][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.249103][T22947] bridge_slave_1: left promiscuous mode [ 609.273799][T22947] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.296748][T22947] .`: (slave bond_slave_0): Releasing backup interface [ 609.311420][T22947] .`: (slave bond_slave_1): Releasing backup interface [ 609.330049][T22947] team0: Port device team_slave_0 removed [ 609.338756][T22947] team0: Port device team_slave_1 removed [ 609.356595][T22947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.390989][T22947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.402919][T22947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.533023][T22953] syzkaller0: entered promiscuous mode [ 609.538809][T22953] syzkaller0: entered allmulticast mode [ 609.566054][T22969] IPVS: Error connecting to the multicast addr [ 609.578289][T22969] x_tables: duplicate underflow at hook 2 [ 611.212843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 611.221085][ C1] lec:lec_tx_timeout: lec0 [ 611.226054][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 611.367714][T22973] wg1 speed is unknown, defaulting to 1000 [ 611.685650][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 612.208450][T23021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4594'. [ 612.221861][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 612.245074][T23024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4594'. [ 612.256084][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 612.366712][T23033] netlink: 'syz.0.4598': attribute type 1 has an invalid length. [ 612.407403][T23033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.578186][T23046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4602'. [ 612.893258][T23068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4609'. [ 612.956877][T19612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.966225][T19612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.974165][T23074] netlink: 'syz.3.4611': attribute type 1 has an invalid length. [ 612.994192][T16943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.082248][T23080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4612'. [ 613.106467][T23074] bond12: entered promiscuous mode [ 613.113828][T23074] 8021q: adding VLAN 0 to HW filter on device bond12 [ 613.122411][T16943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.143182][T23081] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 613.156065][T23081] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 613.169192][T23081] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 613.216375][T23085] tipc: Enabled bearer , priority 0 [ 613.358932][T23085] syzkaller0: entered promiscuous mode [ 613.392653][T23085] syzkaller0: entered allmulticast mode [ 613.399119][T23085] tipc: Resetting bearer [ 613.413318][T16943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.577410][T19609] tipc: Resetting bearer [ 613.625631][T23084] tipc: Resetting bearer [ 614.316043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.324278][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.527045][T23084] tipc: Disabling bearer [ 615.663773][T23137] netlink: 'syz.3.4628': attribute type 1 has an invalid length. [ 615.760809][T23137] bond13: entered promiscuous mode [ 615.767340][T23137] 8021q: adding VLAN 0 to HW filter on device bond13 [ 615.810974][T23137] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 615.843626][T23137] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 615.884835][T23137] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 615.958649][T23154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 616.137230][T23161] netlink: 'syz.4.4637': attribute type 1 has an invalid length. [ 616.242208][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 616.250376][ C1] lec:lec_tx_timeout: lec0 [ 616.256025][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.805055][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4651'. [ 616.882094][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.995292][T23225] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 617.103777][T23228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4653'. [ 617.277526][T23215] hsr_slave_0 (unregistering): left promiscuous mode [ 617.769026][T23246] netlink: 'syz.3.4657': attribute type 11 has an invalid length. [ 617.797308][T23246] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4657'. [ 617.994312][T23262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4662'. [ 618.313303][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4665'. [ 618.560906][T23298] IPVS: Unknown mcast interface: dvmrp0 [ 618.703768][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4676'. [ 618.794754][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.841640][T23316] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 618.861298][T23318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4682'. [ 618.913247][T23316] bond8: entered promiscuous mode [ 618.919106][T23316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 618.963865][T23322] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 618.989052][T23322] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 619.020116][T23322] bond8: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 619.161496][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4685'. [ 619.455758][T23349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4692'. [ 619.559266][T23349] bridge6: entered promiscuous mode [ 619.569699][T23349] bridge6: entered allmulticast mode [ 619.664311][T23363] netlink: 'syz.4.4697': attribute type 1 has an invalid length. [ 619.676105][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4697'. [ 619.916961][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4700'. [ 620.053272][T23356] infiniband syz1: set down [ 620.058643][T23356] infiniband syz1: added bond_slave_0 [ 620.110856][T23356] RDS/IB: syz1: added [ 620.116562][T23356] smc: adding ib device syz1 with port count 1 [ 620.124264][T23356] smc: ib device syz1 port 1 has no pnetid [ 620.513047][T23402] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4706'. [ 620.714596][T23408] netlink: 'syz.2.4709': attribute type 1 has an invalid length. [ 620.875794][T23408] bond9: entered promiscuous mode [ 620.896556][T23408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 620.915573][T23418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4713'. [ 620.960218][T23420] bond14: option lp_interval: invalid value (0) [ 620.990139][T23420] bond14: option lp_interval: allowed values 1 - 2147483647 [ 621.028334][T23420] bond14 (unregistering): Released all slaves [ 621.132696][T23427] netlink: 'syz.3.4712': attribute type 2 has an invalid length. [ 621.180107][T23418] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 621.214470][T23418] bond9 (unregistering): Released all slaves [ 622.071930][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 622.080180][ C1] lec:lec_tx_timeout: lec0 [ 622.352218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.361000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.369769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.378125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.665678][T23493] netlink: 'syz.3.4735': attribute type 2 has an invalid length. [ 623.813219][T23541] __nla_validate_parse: 7 callbacks suppressed [ 623.813240][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 623.831044][T23541] netlink: 'syz.2.4749': attribute type 3 has an invalid length. [ 623.832506][T23538] syzkaller0: entered promiscuous mode [ 623.872153][T23538] syzkaller0: entered allmulticast mode [ 624.000622][T23548] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 624.051037][T23550] SET target dimension over the limit! [ 624.116686][T23548] bond14: entered promiscuous mode [ 624.128662][T23548] 8021q: adding VLAN 0 to HW filter on device bond14 [ 624.156090][T23557] netlink: 'syz.2.4753': attribute type 8 has an invalid length. [ 624.165000][T23553] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 624.177850][T23553] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 624.188723][T23553] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 624.299884][T23562] bridge4: entered promiscuous mode [ 624.305207][T23562] bridge4: entered allmulticast mode [ 624.320123][T23562] team0: Port device bridge4 added [ 624.342680][T23562] bridge0: port 1(team0) entered blocking state [ 624.359376][T23562] bridge0: port 1(team0) entered disabled state [ 624.393384][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 624.474630][T23571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.484458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.567275][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.568390][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.582093][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.585654][T19608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.593706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.599629][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.608208][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 624.614051][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.776429][T23580] syzkaller0: entered promiscuous mode [ 624.783979][T23580] syzkaller0: entered allmulticast mode [ 624.959908][T23597] netlink: 'syz.1.4767': attribute type 1 has an invalid length. [ 624.966288][T23600] netlink: 'syz.4.4769': attribute type 15 has an invalid length. [ 625.002259][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4769'. [ 625.065276][T23597] bond9: entered promiscuous mode [ 625.073341][T23597] 8021q: adding VLAN 0 to HW filter on device bond9 [ 625.096302][T23600] netlink: 'syz.4.4769': attribute type 15 has an invalid length. [ 625.105263][T19612] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 625.108328][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4769'. [ 625.129171][T19612] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 625.158647][T19612] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 625.182118][T19612] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 625.238030][T23613] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 625.397088][T23620] netlink: 'syz.3.4774': attribute type 1 has an invalid length. [ 625.455456][T23620] 8021q: adding VLAN 0 to HW filter on device bond15 [ 625.482115][T23624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4775'. [ 625.632750][T23620] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.4774'. [ 625.729515][T23636] netlink: 'syz.3.4774': attribute type 1 has an invalid length. [ 625.737716][T23636] netlink: 'syz.3.4774': attribute type 2 has an invalid length. [ 625.842279][ T30] audit: type=1800 audit(1774558645.696:4): pid=23634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4778" name="memory.events" dev="tmpfs" ino=1334 res=0 errno=0 [ 627.213690][T23626] bond15: (slave veth3): Enslaving as an active interface with a down link [ 627.231221][T23630] veth0_to_bond: left allmulticast mode [ 627.247601][T23630] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 627.459026][T23649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4784'. [ 627.518945][T23656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4783'. [ 627.520468][T23651] vlan4: entered allmulticast mode [ 627.543083][T23651] hsr0: entered allmulticast mode [ 627.627350][T23655] 8021q: adding VLAN 0 to HW filter on device  [ 627.641259][T23655] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.663753][T23655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.735868][T23666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4787'. [ 627.828272][T23666] bond16: entered promiscuous mode [ 627.835185][T23666] 8021q: adding VLAN 0 to HW filter on device bond16 [ 627.870035][T23666] vlan7: entered allmulticast mode [ 627.875934][T23666] bond16: entered allmulticast mode [ 627.913741][T23669] syzkaller0: entered promiscuous mode [ 627.925051][T23669] syzkaller0: entered allmulticast mode [ 627.940967][T23676] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4792'. [ 628.269893][T23695] netlink: 'syz.0.4796': attribute type 1 has an invalid length. [ 628.304567][T23669] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.312393][T23669] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.618964][T23669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.650948][T23669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.946473][T19608] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.972082][T19608] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 628.993743][T19608] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.025811][T23703] netlink: 'syz.0.4798': attribute type 1 has an invalid length. [ 629.117003][T19608] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.126595][T19608] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 629.136276][T19608] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.162273][T23703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 629.177368][T19608] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.193150][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 629.202517][T19608] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 629.211524][T19608] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.234688][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.241141][T19608] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.258246][T19608] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 629.268568][T19608] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.278633][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.301493][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4803'. [ 629.380766][T23718] bond9: entered promiscuous mode [ 629.387883][T23718] 8021q: adding VLAN 0 to HW filter on device bond9 [ 629.396057][T19608] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.405899][T19608] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.436733][T23723] vlan5: entered allmulticast mode [ 629.444121][T23723] bond9: entered allmulticast mode [ 629.449550][T19608] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.458997][T19608] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.475520][T23709] netlink: 'syz.1.4801': attribute type 2 has an invalid length. [ 629.493485][T23709] netlink: 'syz.1.4801': attribute type 11 has an invalid length. [ 629.545145][T23709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.558084][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4805'. [ 629.628528][T23709] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.654375][T23709] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.697345][T23709] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4801'. [ 629.978070][T23749] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4812'. [ 630.072142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5460 ms [ 630.080239][ C1] lec:lec_tx_timeout: lec0 [ 639.913041][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.105645][T15282] lec:lec_start_xmit: lec0:No lecd attached [ 650.296601][T23760] netlink: 'syz.0.4813': attribute type 11 has an invalid length. [ 650.305607][T23760] netlink: 'syz.0.4813': attribute type 11 has an invalid length. [ 650.339075][T23760] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4813'. [ 650.383707][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4817'. [ 650.613141][T23764] bond9: entered promiscuous mode [ 650.652537][T23764] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.660213][T23785] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4823'. [ 650.681735][T23771] vlan0: entered allmulticast mode [ 650.687397][T23771] bond9: entered allmulticast mode [ 650.864754][T23792] syzkaller0: entered promiscuous mode [ 650.873849][T23798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4828'. [ 650.885798][T23792] syzkaller0: entered allmulticast mode [ 651.000113][T23808] FAULT_INJECTION: forcing a failure. [ 651.000113][T23808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.040779][T23808] CPU: 0 UID: 0 PID: 23808 Comm: syz.3.4831 Not tainted syzkaller #0 PREEMPT(full) [ 651.040810][T23808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.040822][T23808] Call Trace: [ 651.040831][T23808] [ 651.040841][T23808] dump_stack_lvl+0xe8/0x150 [ 651.040878][T23808] should_fail_ex+0x412/0x560 [ 651.040914][T23808] _copy_from_user+0x2d/0xb0 [ 651.040938][T23808] kstrtouint_from_user+0xd6/0x180 [ 651.040973][T23808] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 651.041024][T23808] proc_fail_nth_write+0x8e/0x210 [ 651.041056][T23808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 651.041091][T23808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 651.041122][T23808] vfs_write+0x29a/0xb90 [ 651.041156][T23808] ? __pfx_vfs_write+0x10/0x10 [ 651.041182][T23808] ? __fget_files+0x2a/0x420 [ 651.041218][T23808] ? __fget_files+0x3a0/0x420 [ 651.041246][T23808] ? __fget_files+0x2a/0x420 [ 651.041294][T23808] ksys_write+0x150/0x270 [ 651.041321][T23808] ? __pfx_ksys_write+0x10/0x10 [ 651.041359][T23808] do_syscall_64+0x14d/0xf80 [ 651.041383][T23808] ? trace_irq_disable+0x3b/0x150 [ 651.041413][T23808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.041435][T23808] ? clear_bhb_loop+0x40/0x90 [ 651.041462][T23808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.041483][T23808] RIP: 0033:0x7f5041f5cfce [ 651.041505][T23808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.041523][T23808] RSP: 002b:00007f5042ebffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.041545][T23808] RAX: ffffffffffffffda RBX: 00007f5042ec06c0 RCX: 00007f5041f5cfce [ 651.041561][T23808] RDX: 0000000000000001 RSI: 00007f5042ec00a0 RDI: 0000000000000005 [ 651.041575][T23808] RBP: 00007f5042ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 651.041588][T23808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.041600][T23808] R13: 00007f5042216038 R14: 00007f5042215fa0 R15: 00007fffac36dba8 [ 651.041637][T23808] [ 651.264900][T23811] netlink: 'syz.4.4832': attribute type 1 has an invalid length. [ 651.408587][T23817] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4835'. [ 651.408937][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 651.480001][T23821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4836'. [ 651.517007][T23824] openvswitch: netlink: Flow key attribute not present in set flow. [ 651.531127][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4835'. [ 651.544002][T23819] batman_adv: batadv0: Removing interface: ipvlan2 [ 651.555691][T23827] netlink: 'syz.1.4837': attribute type 1 has an invalid length. [ 651.576150][T23824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.647712][T23827] 8021q: adding VLAN 0 to HW filter on device bond11 [ 651.679680][T23833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4839'. [ 651.708666][T23830] bond11: (slave bridge7): making interface the new active one [ 651.718311][T23830] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 651.735402][T23833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4839'. [ 651.822612][T23837] netlink: 'syz.2.4839': attribute type 2 has an invalid length. [ 651.834304][T23833] syzkaller0: entered promiscuous mode [ 651.850849][T23833] syzkaller0: entered allmulticast mode [ 653.838739][T23868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.996582][T23865] bond0: (slave gre0): Error: Device type is different from other slaves [ 654.102089][T14660] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.111033][T14660] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.111964][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 654.127987][ C1] lec:lec_tx_timeout: lec0 [ 654.165707][T14660] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.196434][T14660] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.209344][T23880] bond0: (slave gre0): Error: Device type is different from other slaves [ 654.233461][T14660] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.247217][T14660] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.256406][T14660] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.265718][T14660] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.459427][T23898] bond17: Invalid ad_actor_system MAC address. [ 654.466566][T23898] bond17: option ad_actor_system: invalid value (1) [ 654.479494][T23898] bond17 (unregistering): Released all slaves [ 654.703008][T23925] netlink: 'syz.4.4860': attribute type 1 has an invalid length. [ 654.715693][T23914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.729551][T23928] netlink: 'syz.3.4859': attribute type 32 has an invalid length. [ 654.744917][T23925] 8021q: adding VLAN 0 to HW filter on device bond10 [ 654.797752][T23928] bond17: option coupled_control: invalid value (192) [ 654.809945][T23928] bond17 (unregistering): Released all slaves [ 654.853230][T23925] bond10: (slave bridge8): making interface the new active one [ 654.861568][T23925] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 655.105272][T23942] netlink: 'syz.0.4866': attribute type 10 has an invalid length. [ 655.263122][T23947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.267780][T23956] netlink: 'syz.2.4870': attribute type 1 has an invalid length. [ 655.298352][T23955] netlink: 'syz.2.4870': attribute type 1 has an invalid length. [ 655.435003][T23960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.553144][T23971] __nla_validate_parse: 9 callbacks suppressed [ 655.553165][T23971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4874'. [ 655.580214][T23954] bond10: (slave gretap1): making interface the new active one [ 655.588563][T23954] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 655.768277][T23972] bond0: (slave gre0): Error: Device type is different from other slaves [ 655.968727][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4880'. [ 655.985946][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4882'. [ 655.994851][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4880'. [ 656.009907][T23995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.230310][T19612] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.248028][T24014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4886'. [ 656.267182][T19612] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.286281][T24006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4887'. [ 656.297200][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4888'. [ 656.329538][T19612] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.353289][T19612] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.499706][T24033] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 656.508781][T24033] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 656.767386][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4899'. [ 656.776817][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4899'. [ 656.788956][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4899'. [ 657.099525][T24057] x_tables: duplicate underflow at hook 2 [ 657.204421][T24068] Bluetooth: MGMT ver 1.23 [ 657.474948][T24079] can: request_module (can-proto-0) failed. [ 657.742326][T24103] netlink: 'syz.4.4922': attribute type 39 has an invalid length. [ 657.766681][T24099] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 657.774974][T24099] batadv1: entered allmulticast mode [ 657.781648][T24099] team0: Port device batadv1 added [ 658.028824][T24121] syzkaller1: entered promiscuous mode [ 658.042124][T24121] syzkaller1: entered allmulticast mode [ 658.058499][T24115] syzkaller0: entered promiscuous mode [ 658.068654][T24115] syzkaller0: entered allmulticast mode [ 658.119390][T24125] netlink: 'syz.4.4930': attribute type 1 has an invalid length. [ 658.169967][T24125] bond11: entered promiscuous mode [ 658.177944][T24125] 8021q: adding VLAN 0 to HW filter on device bond11 [ 658.195448][T24127] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 658.197109][T24129] netlink: zone id is out of range [ 658.208603][T24130] netlink: zone id is out of range [ 658.215321][T24129] netlink: zone id is out of range [ 658.225890][T24129] netlink: zone id is out of range [ 658.232805][T24130] netlink: zone id is out of range [ 658.237193][T24127] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 658.238219][T24129] netlink: zone id is out of range [ 658.250465][T24127] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 658.254897][T14654] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 658.254918][T14654] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 658.265448][T24130] netlink: zone id is out of range [ 658.299906][T24129] netlink: zone id is out of range [ 658.307801][T24130] netlink: zone id is out of range [ 658.308421][T24131] bond0: left promiscuous mode [ 658.323478][T24129] netlink: zone id is out of range [ 658.597799][T24141] bridge6: entered promiscuous mode [ 658.604617][T24141] bridge6: entered allmulticast mode [ 658.620534][T24148] syzkaller0: entered allmulticast mode [ 658.665128][T24152] netlink: 'syz.3.4937': attribute type 1 has an invalid length. [ 658.778804][T24152] 8021q: adding VLAN 0 to HW filter on device bond17 [ 658.961776][T24154] vlan8: entered promiscuous mode [ 658.967619][T24154] bond17: entered promiscuous mode [ 658.974863][T24154] vlan8: entered allmulticast mode [ 658.980096][T24154] bond17: entered allmulticast mode [ 659.027113][T24157] syzkaller0: entered promiscuous mode [ 659.045209][T24157] syzkaller0: entered allmulticast mode [ 659.146066][T24169] SET target dimension over the limit! [ 659.272488][T20987] Bluetooth: hci2: command 0x0c1a tx timeout [ 659.278700][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 659.515870][T24200] x_tables: duplicate entry at hook 3 [ 659.573965][T24200] syzkaller0: entered promiscuous mode [ 659.579622][T24200] syzkaller0: entered allmulticast mode [ 659.720261][T24211] netlink: 'syz.1.4955': attribute type 15 has an invalid length. [ 659.751509][T19609] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.770770][T24211] netlink: 'syz.1.4955': attribute type 15 has an invalid length. [ 659.779941][T19609] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.827125][T19609] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 659.939051][T19609] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 660.127792][T24223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.327508][T24249] netlink: 'syz.2.4966': attribute type 11 has an invalid length. [ 660.397178][T24255] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 660.406107][T14660] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.420719][T14660] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.435831][T14660] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.447817][T14660] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.723433][T24274] __nla_validate_parse: 28 callbacks suppressed [ 660.723458][T24274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 660.877192][T24277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.955169][T24294] netlink: 1384 bytes leftover after parsing attributes in process `syz.4.4978'. [ 661.221002][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 661.591457][T24325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.673225][T24337] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4992'. [ 661.911237][T24347] netlink: 'syz.0.4997': attribute type 3 has an invalid length. [ 661.997815][T24355] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5000'. [ 662.008697][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 662.164490][T24371] netlink: 'syz.1.5006': attribute type 12 has an invalid length. [ 662.182086][T24371] netlink: 'syz.1.5006': attribute type 29 has an invalid length. [ 662.189955][T24371] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5006'. [ 662.202777][T24371] netlink: 'syz.1.5006': attribute type 2 has an invalid length. [ 662.210572][T24371] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5006'. [ 662.285847][T24376] syzkaller0: entered promiscuous mode [ 662.293392][T24376] syzkaller0: entered allmulticast mode [ 662.337995][T24376] bridge0: entered allmulticast mode [ 662.356874][T24376] dummy0: entered allmulticast mode [ 662.428087][T24376] veth0_to_bond: entered allmulticast mode [ 662.457038][T24376] macvlan0: left promiscuous mode [ 662.462476][T24376] macvlan0: entered allmulticast mode [ 662.491619][T24376] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 662.499757][T24376] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 662.508455][T24376] mac80211_hwsim hwsim43 wlan2: entered allmulticast mode [ 662.530971][T24376] bond1: left promiscuous mode [ 662.536938][T24376] bond1: entered allmulticast mode [ 662.553766][T24376] bond2: left promiscuous mode [ 662.570725][T24376] bond3: entered allmulticast mode [ 662.580081][T24376] bond4: left promiscuous mode [ 662.586873][T24376] bridge1: entered allmulticast mode [ 662.594261][T24376] bond5: entered allmulticast mode [ 662.605872][T24376] bond6: entered allmulticast mode [ 662.619253][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5013'. [ 662.621049][T24376] bridge2: left promiscuous mode [ 662.638445][T24376] bond7: left promiscuous mode [ 662.654316][T24376] ip6gre1: entered allmulticast mode [ 662.659962][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5014'. [ 662.660784][T24376] syztnl1: entered allmulticast mode [ 662.676394][T24376] ip6tnl1: entered allmulticast mode [ 662.682786][T24376] bond8: entered allmulticast mode [ 662.689702][T24376] gre1: entered allmulticast mode [ 662.702983][T24376] @: entered allmulticast mode [ 662.717554][T24376] macvlan2: entered allmulticast mode [ 662.723179][T24376] batadv0.5: entered allmulticast mode [ 662.729491][T24376] bond9: left promiscuous mode [ 662.736589][T24376] team0.0003: entered allmulticast mode [ 662.744395][T24376] vxlan0: entered allmulticast mode [ 662.752918][T24376] bridge4: entered allmulticast mode [ 662.761826][T24376] bond10: entered allmulticast mode [ 662.767766][T24376] mac80211_hwsim hwsim60 wlan3: entered allmulticast mode [ 662.776159][T24376] bond11: left promiscuous mode [ 662.781105][T24376] bond11: entered allmulticast mode [ 662.787798][T24376] ip6gre2: entered allmulticast mode [ 662.794191][T24376] bond12: left promiscuous mode [ 662.799323][T24376] bond12: entered allmulticast mode [ 662.807432][T24376] bond13: left promiscuous mode [ 662.813056][T24376] bond13: entered allmulticast mode [ 662.821007][T24376] bond14: left promiscuous mode [ 662.826361][T24376] bond14: entered allmulticast mode [ 662.834242][T24376] bond15: entered allmulticast mode [ 662.842342][T24376] veth2: entered allmulticast mode [ 662.848143][T24376] veth3: entered allmulticast mode [ 662.858967][T24376] bridge5: entered allmulticast mode [ 662.868785][T24376] bond16: left promiscuous mode [ 662.879111][T24376] ipvlan2: entered allmulticast mode [ 662.887656][T24376] veth4: entered allmulticast mode [ 662.893714][T24376] veth5: entered allmulticast mode [ 662.899599][T24376] bridge6: left promiscuous mode [ 662.909497][T24376] vlan8: left promiscuous mode [ 662.916180][T24376] bond17: left promiscuous mode [ 662.924920][T24376] syzkaller0: left promiscuous mode [ 662.938139][T19609] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.958841][T19609] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.973904][T19609] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.984342][T19609] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.265958][T24418] sit0: entered promiscuous mode [ 663.292046][T24418] sit0: left allmulticast mode [ 663.297197][T24418] netlink: 'syz.3.5019': attribute type 1 has an invalid length. [ 663.537164][T24437] syzkaller0: entered promiscuous mode [ 663.554810][T24437] syzkaller0: entered allmulticast mode [ 663.795852][T24455] net_ratelimit: 99 callbacks suppressed [ 663.795876][T24455] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 664.029866][T24462] tipc: Enabled bearer , priority 0 [ 664.053558][T24467] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 664.120565][T24462] syzkaller0: entered promiscuous mode [ 664.136926][T24462] syzkaller0: entered allmulticast mode [ 664.143783][T24462] tipc: Resetting bearer [ 664.145997][T24469] IPVS: Scheduler module ip_vs_sip not found [ 664.209506][T19611] tipc: Resetting bearer [ 664.276161][T24461] tipc: Resetting bearer [ 664.479111][T24486] netlink: 'syz.4.5042': attribute type 30 has an invalid length. [ 664.555208][T24489] netlink: 'syz.0.5043': attribute type 1 has an invalid length. [ 665.925232][T24461] tipc: Disabling bearer [ 665.942742][T24486] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 665.944470][T24489] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 666.089843][T24503] netlink: 'syz.2.5047': attribute type 1 has an invalid length. [ 666.132489][T24503] netlink: 'syz.2.5047': attribute type 2 has an invalid length. [ 666.203574][T24503] __nla_validate_parse: 9 callbacks suppressed [ 666.203597][T24503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5047'. [ 666.271733][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5050'. [ 666.307385][T24512] "syz.1.5051" (24512) uses obsolete ecb(arc4) skcipher [ 666.398121][T24525] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 666.431072][T24525] netlink: 'syz.3.5054': attribute type 2 has an invalid length. [ 666.461354][T24525] netlink: 'syz.3.5054': attribute type 1 has an invalid length. [ 666.566238][T24525] 8021q: adding VLAN 0 to HW filter on device bond18 [ 666.752632][T24543] syzkaller0: entered promiscuous mode [ 666.758192][T24543] syzkaller0: entered allmulticast mode [ 666.873417][T14660] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.890641][T14660] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.932916][T14660] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.016421][T24554] delete_channel: no stack [ 667.031259][T14660] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.072966][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5063'. [ 667.213108][T24565] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5066'. [ 667.389543][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5070'. [ 667.411289][T24579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5070'. [ 667.435215][T24579] syzkaller0: entered promiscuous mode [ 667.442688][T24579] syzkaller0: entered allmulticast mode [ 667.458877][T24579] 0: reclassify loop, rule prio 0, protocol 800 [ 667.518604][T24588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5073'. [ 667.637893][T24592] syzkaller0: entered promiscuous mode [ 667.643895][T24592] syzkaller0: entered allmulticast mode [ 667.656735][T24592] vlan2: entered allmulticast mode [ 667.663257][T24592] macvlan2: entered allmulticast mode [ 667.675638][T24592] gtp0: entered allmulticast mode [ 667.685850][T24592] bridge3: entered allmulticast mode [ 667.698577][T24592] macsec1: entered allmulticast mode [ 667.707921][T24592] veth4: entered allmulticast mode [ 667.714461][T24592] veth5: entered allmulticast mode [ 667.719887][T24592] bond7: entered allmulticast mode [ 667.726709][T24592] bridge5: entered allmulticast mode [ 667.729405][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5078'. [ 667.732637][T24592] bond8: entered allmulticast mode [ 667.749585][T24592] ipvlan4: entered allmulticast mode [ 667.755751][T24592] vxlan1: entered allmulticast mode [ 667.763013][T24592] mac80211_hwsim hwsim52 pimreg: entered allmulticast mode [ 667.781098][T24594] macvtap1: entered promiscuous mode [ 667.788189][T24594] macvtap1: entered allmulticast mode [ 667.797303][T24594] veth1_vlan: entered allmulticast mode [ 667.824921][T24597] macvtap2: entered promiscuous mode [ 667.830468][T24597] macvtap2: entered allmulticast mode [ 668.001665][T24605] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.204041][T24617] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5083'. [ 668.315763][T24624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5086'. [ 668.329747][T24624] syzkaller0: entered promiscuous mode [ 668.352849][T24624] syzkaller0: entered allmulticast mode [ 668.387659][T24624] 0: reclassify loop, rule prio 0, protocol 800 [ 668.914672][T24657] bond10: entered promiscuous mode [ 668.921626][T24657] 8021q: adding VLAN 0 to HW filter on device bond10 [ 668.931974][T24660] netlink: 'syz.2.5097': attribute type 2 has an invalid length. [ 668.943868][T24657] vlan6: entered allmulticast mode [ 668.949001][T24657] bond10: entered allmulticast mode [ 669.339770][T24681] netlink: 'syz.0.5102': attribute type 8 has an invalid length. [ 669.358251][T24681] sch_fq: defrate 0 ignored. [ 669.558153][T24704] netlink: 'syz.1.5108': attribute type 1 has an invalid length. [ 669.807192][T24714] netlink: 'syz.4.5110': attribute type 1 has an invalid length. [ 669.915595][T24698] syzkaller0: entered promiscuous mode [ 669.932578][T24698] syzkaller0: entered allmulticast mode [ 670.026334][T24714] bond12: entered promiscuous mode [ 670.033712][T24714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 670.077488][T24717] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 670.096288][T24717] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 670.125980][T24717] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 671.922169][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.126379][T24746] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 672.126906][T24749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.181549][T24752] __nla_validate_parse: 11 callbacks suppressed [ 672.181573][T24752] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5119'. [ 672.212124][T24752] netem: invalid attributes len -24 [ 672.217482][T24752] netem: change failed [ 672.279463][T24772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5120'. [ 672.475056][T24779] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.5122:24779 [ 672.804091][T24804] syzkaller0: entered promiscuous mode [ 672.819221][T24804] syzkaller0: entered allmulticast mode [ 672.825672][T24807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5131'. [ 672.868054][T24804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5130'. [ 672.895311][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5131'. [ 672.972834][T24809] syzkaller0: entered promiscuous mode [ 672.978362][T24809] syzkaller0: entered allmulticast mode [ 673.097335][T24811] tipc: Enabled bearer , priority 0 [ 673.229878][T24811] syzkaller0: entered promiscuous mode [ 673.234840][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5134'. [ 673.242716][T24811] syzkaller0: entered allmulticast mode [ 673.261192][T24811] tipc: Resetting bearer [ 673.283622][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5134'. [ 673.303614][T24810] tipc: Resetting bearer [ 673.363165][T24827] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 674.030726][T24834] netlink: 'syz.0.5139': attribute type 11 has an invalid length. [ 674.966011][T24810] tipc: Disabling bearer [ 675.134908][T24844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'. [ 675.189276][T24844] xt_socket: unknown flags 0xe4 [ 675.369309][T24862] syzkaller0: entered promiscuous mode [ 675.385264][T24862] syzkaller0: entered allmulticast mode [ 677.353488][T24884] wg1 speed is unknown, defaulting to 1000 [ 677.439168][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5155'. [ 677.858341][T24927] tipc: Enabling of bearer rejected, failed to enable media [ 678.534240][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5174'. [ 678.637629][T24962] bond11: entered promiscuous mode [ 678.645776][T24962] 8021q: adding VLAN 0 to HW filter on device bond11 [ 678.673658][T24967] vlan7: entered allmulticast mode [ 678.678914][T24967] bond11: entered allmulticast mode [ 678.927886][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5179'. [ 679.020557][T24990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5181'. [ 679.198631][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'. [ 679.208466][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5183'. [ 679.357952][T25006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.838486][T25034] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 679.927175][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5198'. [ 679.973732][T25038] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 680.023377][T25043] netlink: 'syz.3.5201': attribute type 1 has an invalid length. [ 680.023446][T25039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5200'. [ 680.031164][T25043] netlink: 'syz.3.5201': attribute type 1 has an invalid length. [ 680.190566][T25020] netlink: 'syz.4.5192': attribute type 13 has an invalid length. [ 680.305714][T25020] netlink: 'syz.4.5192': attribute type 29 has an invalid length. [ 680.330721][T25020] netlink: 'syz.4.5192': attribute type 29 has an invalid length. [ 680.390697][T25058] xt_limit: Overflow, try lower: 604147548/4200216962 [ 680.410207][T25060] xt_limit: Overflow, try lower: 604147548/4200216962 [ 680.434323][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5208'. [ 680.435007][T25065] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5208'. [ 680.531695][T25066] macvlan3: entered allmulticast mode [ 680.545377][T25070] netlink: 'syz.3.5210': attribute type 1 has an invalid length. [ 680.557389][T25070] netlink: 'syz.3.5210': attribute type 11 has an invalid length. [ 680.729815][T25078] netlink: 'syz.2.5214': attribute type 21 has an invalid length. [ 680.798260][T25078] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 680.814335][T25078] bond11 (unregistering): Released all slaves [ 680.901615][T25079] syzkaller0: entered promiscuous mode [ 680.910303][T25079] syzkaller0: entered allmulticast mode [ 681.397045][T25114] netlink: 'syz.4.5222': attribute type 3 has an invalid length. [ 681.450735][T25119] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20003 [ 681.737220][T25134] netlink: 'syz.3.5229': attribute type 1 has an invalid length. [ 681.926134][T25138] 8021q: adding VLAN 0 to HW filter on device bond13 [ 682.064356][T25143] macvlan0: entered promiscuous mode [ 682.073825][T25143] macvlan0: entered allmulticast mode [ 682.087101][T25143] bond13: entered allmulticast mode [ 682.102377][T25143] bond13: entered promiscuous mode [ 682.116068][T25143] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 682.146984][T25143] team0: Port device macvlan0 added [ 682.354273][T25155] 8021q: adding VLAN 0 to HW filter on device bond19 [ 682.418193][T25158] bond19: (slave bridge7): making interface the new active one [ 682.427430][T25158] bond19: (slave bridge7): Enslaving as an active interface with an up link [ 682.471736][T25166] 8021q: adding VLAN 0 to HW filter on device bond12 [ 682.493793][T25171] 8021q: adding VLAN 0 to HW filter on device bond12 [ 682.514351][T25171] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 682.570293][T25171] bond12: (slave vcan1): Error -95 calling set_mac_address [ 682.572082][T25178] __nla_validate_parse: 4 callbacks suppressed [ 682.572099][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 683.156829][T25206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5248'. [ 683.405619][T25210] 8021q: adding VLAN 0 to HW filter on device bond13 [ 683.467431][T25212] veth7: entered promiscuous mode [ 683.569704][T25211] syzkaller0: entered promiscuous mode [ 683.729884][T25233] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5256'. [ 683.750200][T25235] ip6t_rpfilter: unknown options [ 684.115711][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5260'. [ 684.125048][T25256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.283709][T25259] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5261'. [ 685.619676][T25243] syzkaller0: entered promiscuous mode [ 685.629799][T25243] syzkaller0: entered allmulticast mode [ 685.719458][T25276] validate_nla: 3 callbacks suppressed [ 685.719480][T25276] netlink: 'syz.1.5266': attribute type 4 has an invalid length. [ 685.780964][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5265'. [ 685.934076][T25290] xt_cgroup: invalid path, errno=-2 [ 685.998339][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 686.008090][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.014948][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.029786][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 687.452173][T25282] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 687.467824][T25282] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 687.516999][T25282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 687.547498][T25282] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 687.607496][T25282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.629721][T25282] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 687.656138][T25304] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5271'. [ 687.700614][T25282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 687.730694][T25282] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 687.853073][T25317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5274'. [ 688.126242][T25330] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5275'. [ 688.273277][T25330] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 688.317065][T25330] bond0 (unregistering): Released all slaves [ 688.575321][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 688.775378][T25369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5284'. [ 689.031498][T25389] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5290'. [ 689.062762][T25390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5289'. [ 689.092451][T25389] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5290'. [ 689.166893][T25390] bond14: entered promiscuous mode [ 689.172557][T25390] 8021q: adding VLAN 0 to HW filter on device bond14 [ 689.205441][T25400] vlan8: entered allmulticast mode [ 689.210624][T25400] bond14: entered allmulticast mode [ 689.429471][T25417] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 689.913498][T25445] netlink: 'syz.1.5304': attribute type 4 has an invalid length. [ 689.923320][T25445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5304'. [ 690.444968][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5308'. [ 690.512732][T25474] bond13: entered promiscuous mode [ 690.526806][T25474] 8021q: adding VLAN 0 to HW filter on device bond13 [ 690.551493][T25475] syzkaller1: entered promiscuous mode [ 690.560105][T25475] syzkaller1: entered allmulticast mode [ 690.587319][T25480] vlan5: entered allmulticast mode [ 690.593286][T25480] bond13: entered allmulticast mode [ 691.041902][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.050125][ C1] lec:lec_tx_timeout: lec0 [ 693.318811][T25561] __nla_validate_parse: 6 callbacks suppressed [ 693.318833][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5323'. [ 693.349522][T25556] lo: Caught tx_queue_len zero misconfig [ 693.537086][T25561] bond0: entered promiscuous mode [ 693.550566][T25581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5324'. [ 693.563935][T25561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.641277][T25570] vlan9: entered allmulticast mode [ 693.658752][T25586] openvswitch: netlink: Message has 80 unknown bytes. [ 693.683449][T25570] bond0: entered allmulticast mode [ 694.120022][T25610] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5332'. [ 694.151553][T25610] xt_policy: neither incoming nor outgoing policy selected [ 694.438320][T25620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5334'. [ 694.503346][T25620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5334'. [ 694.541405][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 694.586816][T25620] syzkaller0: entered promiscuous mode [ 694.610989][T25620] syzkaller0: entered allmulticast mode [ 694.642813][T25620] 0: reclassify loop, rule prio 0, protocol 800 [ 694.683749][T25641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5338'. [ 694.957928][T25656] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 694.977311][T25656] netlink: 'syz.0.5341': attribute type 3 has an invalid length. [ 695.002286][T25656] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5341'. [ 695.043755][T25656] NCSI netlink: No device for ifindex 813332851 [ 695.612006][T25682] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5350'. [ 695.658178][T25682] netlink: 'syz.2.5350': attribute type 11 has an invalid length. [ 695.698623][T25682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5350'. [ 695.839536][T25701] syzkaller0: entered promiscuous mode [ 695.846295][T25701] syzkaller0: entered allmulticast mode [ 695.883201][T25701] 0: reclassify loop, rule prio 0, protocol 800 [ 696.862915][T25739] syzkaller0: entered promiscuous mode [ 696.868775][T25739] syzkaller0: entered allmulticast mode [ 697.205464][ T30] audit: type=1800 audit(1774558717.056:5): pid=25774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5373" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2449 res=0 errno=0 [ 699.066062][T25809] netlink: 'syz.0.5381': attribute type 2 has an invalid length. [ 699.097832][T25809] netlink: 'syz.0.5381': attribute type 1 has an invalid length. [ 699.226330][T25804] team0 (unregistering): Port device team_slave_0 removed [ 699.236939][T25804] team0 (unregistering): Port device team_slave_1 removed [ 699.743912][T25840] __nla_validate_parse: 8 callbacks suppressed [ 699.743943][T25840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5388'. [ 700.312949][T25874] netlink: 'syz.0.5397': attribute type 61 has an invalid length. [ 700.365643][T25880] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5397'. [ 700.550601][T25889] netlink: 'syz.3.5400': attribute type 1 has an invalid length. [ 700.829006][T25904] netlink: 'syz.2.5404': attribute type 1 has an invalid length. [ 701.176721][T25904] syzkaller0: entered promiscuous mode [ 701.184009][T25904] syzkaller0: entered allmulticast mode [ 701.299832][T25904] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 701.323974][T25904] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 701.366252][T25904] bond12: (slave ip6gre2): making interface the new active one [ 701.403559][T25904] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 701.842526][T25958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5416'. [ 702.324556][T25972] netlink: 'syz.2.5420': attribute type 32 has an invalid length. [ 702.354509][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 702.511207][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5423'. [ 702.616062][T25993] xt_hashlimit: size too large, truncated to 1048576 [ 702.672782][T25995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5424'. [ 704.056228][T25972] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 704.250585][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5426'. [ 704.349585][T26016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5430'. [ 704.444493][T26019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.474176][T26019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.495578][T26025] xt_l2tp: wrong L2TP version: 0 [ 704.640842][T26031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5436'. [ 704.713248][T26033] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5437'. [ 704.760053][T26037] netlink: 'syz.0.5439': attribute type 16 has an invalid length. [ 704.784270][T26036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 704.970368][T26053] netlink: 'syz.1.5442': attribute type 15 has an invalid length. [ 704.997384][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5442'. [ 705.166099][T26059] syzkaller0: entered promiscuous mode [ 705.171639][T26059] syzkaller0: entered allmulticast mode [ 705.349006][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5450'. [ 705.414468][T26083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5451'. [ 705.568584][ T30] audit: type=1107 audit(1774558725.426:6): pid=26095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gT?:bŐgr~Fredl(N*hD&/tI_4$wQ_:|M[4h8*s/t~6(0, priority 0 [ 708.755424][T26288] syzkaller0: entered promiscuous mode [ 708.761157][T26288] syzkaller0: entered allmulticast mode [ 708.786012][T26288] tipc: Resetting bearer [ 708.846969][T26285] tipc: Resetting bearer [ 710.726385][T26285] tipc: Disabling bearer [ 710.930172][T26341] __nla_validate_parse: 9 callbacks suppressed [ 710.930195][T26341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5526'. [ 710.947272][T26341] openvswitch: netlink: Flow key attr not present in new flow. [ 711.044613][T26346] xt_hashlimit: overflow, rate too high: 0 [ 711.154541][T26359] syzkaller0: entered promiscuous mode [ 711.170290][T26359] syzkaller0: entered allmulticast mode [ 711.240949][T26364] syzkaller0: entered promiscuous mode [ 711.249153][T26364] syzkaller0: entered allmulticast mode [ 711.341735][T26371] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5535'. [ 711.752848][T26399] netlink: 'syz.2.5543': attribute type 11 has an invalid length. [ 711.947344][T26412] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 711.958642][T26413] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5545'. [ 711.982195][T26413] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5545'. [ 712.005104][T26417] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 712.037456][T26409] bond15: option min_links: invalid value (18446744073709551614) [ 712.058461][T26420] netlink: 'syz.2.5548': attribute type 1 has an invalid length. [ 712.094068][T26409] bond15: option min_links: allowed values 0 - 2147483647 [ 712.118051][T26422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5548'. [ 712.138535][T26409] bond15 (unregistering): Released all slaves [ 712.262460][T26420] bond13: entered promiscuous mode [ 712.268249][T26420] 8021q: adding VLAN 0 to HW filter on device bond13 [ 712.283261][T26422] bond13: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 712.296195][T26422] bond13: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 712.307349][T26422] bond13: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 712.307549][T15282] lec:lec_start_xmit: lec0:No lecd attached [ 712.427170][T26435] syzkaller0: entered promiscuous mode [ 712.433816][T26435] syzkaller0: entered allmulticast mode [ 712.513291][T26443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.520525][T26443] IPv6: NLM_F_CREATE should be set when creating new route [ 712.533758][T26443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5555'. [ 712.568970][T26443] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5555'. [ 712.955542][T26462] syzkaller0: entered promiscuous mode [ 712.963455][T26462] syzkaller0: entered allmulticast mode [ 713.233918][T26485] netlink: 'syz.2.5565': attribute type 1 has an invalid length. [ 714.705017][T26485] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 715.040532][T26500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5568'. [ 715.274985][T26519] netlink: 'syz.3.5578': attribute type 1 has an invalid length. [ 715.345849][T26525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5578'. [ 715.385988][T26519] bond20: entered promiscuous mode [ 715.391716][T26519] 8021q: adding VLAN 0 to HW filter on device bond20 [ 715.399681][T26524] batadv_slave_0: entered promiscuous mode [ 715.436914][T26529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5583'. [ 715.480903][T26525] bond20: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 715.496060][T26525] bond20: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 715.507035][T26525] bond20: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 715.566076][T26524] batadv_slave_0: left promiscuous mode [ 715.655569][T26542] xt_bpf: check failed: parse error [ 715.861674][T26562] xt_hashlimit: max too large, truncated to 1048576 [ 715.907584][T26560] netlink: 'syz.4.5592': attribute type 3 has an invalid length. [ 716.024177][T26570] __nla_validate_parse: 6 callbacks suppressed [ 716.024200][T26570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5594'. [ 716.040372][T26570] unsupported nlmsg_type 40 [ 716.046376][ T5839] block nbd5: Receive control failed (result -32) [ 716.062852][T26569] netlink: 'syz.4.5595': attribute type 63 has an invalid length. [ 716.210837][T26578] "syz.3.5598" (26578) uses obsolete ecb(arc4) skcipher [ 716.238151][T26585] netlink: 'syz.0.5599': attribute type 1 has an invalid length. [ 716.254285][T26586] h: entered promiscuous mode [ 716.331204][T26585] bond15: entered promiscuous mode [ 716.334312][T26593] netlink: 'syz.4.5597': attribute type 10 has an invalid length. [ 716.339928][T26585] 8021q: adding VLAN 0 to HW filter on device bond15 [ 716.397689][T26592] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 716.438408][T26592] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 716.480542][T26592] bond15: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 716.515512][T26597] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5603'. [ 716.537430][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5605'. [ 716.558050][T26608] geneve2: entered promiscuous mode [ 716.567588][T19607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 49722 - 0 [ 716.580439][T19607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 49722 - 0 [ 716.631093][T19607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 49722 - 0 [ 716.662277][T19607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 49722 - 0 [ 716.731696][T26610] syzkaller1: entered promiscuous mode [ 716.736083][T26617] netlink: 'syz.0.5607': attribute type 1 has an invalid length. [ 716.745095][T26610] syzkaller1: entered allmulticast mode [ 716.753860][T26618] netlink: 'syz.3.5608': attribute type 7 has an invalid length. [ 716.761672][T26618] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5608'. [ 716.897437][T26617] 8021q: adding VLAN 0 to HW filter on device bond16 [ 716.920076][T26630] 8021q: adding VLAN 0 to HW filter on device bond16 [ 716.954146][T26630] bond16: (slave vcan1): The slave device specified does not support setting the MAC address [ 717.006553][T26630] bond16: (slave vcan1): Error -95 calling set_mac_address [ 717.039128][T26634] bond16: (slave gretap1): making interface the new active one [ 717.050605][T26634] bond16: (slave gretap1): Enslaving as an active interface with an up link [ 717.091103][T26617] macvlan3: entered promiscuous mode [ 717.103148][T26617] macvlan3: entered allmulticast mode [ 717.116147][T26617] bond16: entered promiscuous mode [ 717.141481][T26617] gretap1: entered promiscuous mode [ 717.158398][T26642] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 717.160686][T26617] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 717.184717][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'. [ 717.218343][T26617] bond16: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 717.245463][T26648] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5616'. [ 717.261488][T26617] bond16: left promiscuous mode [ 717.274027][T26617] gretap1: left promiscuous mode [ 717.328514][T26650] netlink: 'syz.2.5617': attribute type 1 has an invalid length. [ 717.365280][T26654] netlink: 'syz.1.5618': attribute type 1 has an invalid length. [ 717.375279][T26650] 8021q: adding VLAN 0 to HW filter on device bond14 [ 717.405011][T26650] bond14: (slave bridge13): making interface the new active one [ 717.414050][T26650] bond14: (slave bridge13): Enslaving as an active interface with an up link [ 717.485885][T26654] bond14: entered promiscuous mode [ 717.528504][T26654] 8021q: adding VLAN 0 to HW filter on device bond14 [ 717.597253][T26659] bond14: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 717.623529][T26670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5623'. [ 717.632503][T26659] bond14: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 717.632532][T26659] bond14: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 717.934135][T26690] netlink: 'syz.0.5628': attribute type 9 has an invalid length. [ 718.010088][T26693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5629'. [ 718.071270][T26695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5630'. [ 718.078006][T26697] netlink: 'syz.1.5631': attribute type 1 has an invalid length. [ 718.080403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 718.096067][ C1] lec:lec_tx_timeout: lec0 [ 718.194220][T26697] 8021q: adding VLAN 0 to HW filter on device bond15 [ 718.255361][T26707] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 718.280827][T26705] bond15: (slave bridge9): making interface the new active one [ 718.297331][T26705] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 718.320126][T26714] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 718.382054][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5637'. [ 718.406578][T26714] bond17: entered promiscuous mode [ 718.412743][T26714] 8021q: adding VLAN 0 to HW filter on device bond17 [ 718.423644][T26718] syz.2.5636: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 718.458857][T26719] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 718.498321][T26718] CPU: 0 UID: 0 PID: 26718 Comm: syz.2.5636 Not tainted syzkaller #0 PREEMPT(full) [ 718.498354][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 718.498368][T26718] Call Trace: [ 718.498378][T26718] [ 718.498388][T26718] dump_stack_lvl+0xe8/0x150 [ 718.498430][T26718] warn_alloc+0x249/0x340 [ 718.498459][T26718] ? stack_trace_save+0xa9/0x100 [ 718.498486][T26718] ? __pfx_warn_alloc+0x10/0x10 [ 718.498528][T26718] ? kasan_save_track+0x4f/0x80 [ 718.498550][T26718] ? kasan_save_track+0x3e/0x80 [ 718.498571][T26718] ? __kasan_kmalloc+0x93/0xb0 [ 718.498593][T26718] ? __kmalloc_cache_noprof+0x31c/0x660 [ 718.498616][T26718] ? xskq_create+0x56/0x170 [ 718.498637][T26718] ? xsk_setsockopt+0x54c/0x990 [ 718.498666][T26718] ? do_sock_setsockopt+0x17c/0x1b0 [ 718.498687][T26718] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 718.498707][T26718] ? do_syscall_64+0x14d/0xf80 [ 718.498733][T26718] __vmalloc_node_range_noprof+0x132/0x1730 [ 718.498790][T26718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.498823][T26718] ? __kasan_kmalloc+0x93/0xb0 [ 718.498856][T26718] vmalloc_user_noprof+0xad/0xe0 [ 718.498881][T26718] ? xskq_create+0xbf/0x170 [ 718.498904][T26718] xskq_create+0xbf/0x170 [ 718.498930][T26718] xsk_init_queue+0x8a/0xe0 [ 718.498954][T26718] xsk_setsockopt+0x54c/0x990 [ 718.498990][T26718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 718.499024][T26718] ? __pfx_aa_sk_perm+0x10/0x10 [ 718.499059][T26718] ? aa_sock_opt_perm+0xff/0x1a0 [ 718.499095][T26718] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 718.499119][T26718] ? __pfx_xsk_setsockopt+0x10/0x10 [ 718.499154][T26718] do_sock_setsockopt+0x17c/0x1b0 [ 718.499184][T26718] __x64_sys_setsockopt+0x13d/0x1b0 [ 718.499214][T26718] do_syscall_64+0x14d/0xf80 [ 718.499237][T26718] ? trace_irq_disable+0x3b/0x150 [ 718.499266][T26718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.499288][T26718] ? clear_bhb_loop+0x40/0x90 [ 718.499314][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.499334][T26718] RIP: 0033:0x7efffcd9c799 [ 718.499356][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.499375][T26718] RSP: 002b:00007efffdcd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 718.499400][T26718] RAX: ffffffffffffffda RBX: 00007efffd016090 RCX: 00007efffcd9c799 [ 718.499417][T26718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 718.499431][T26718] RBP: 00007efffce32c99 R08: 0000000000000004 R09: 0000000000000000 [ 718.499445][T26718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.499460][T26718] R13: 00007efffd016128 R14: 00007efffd016090 R15: 00007ffdc4833d38 [ 718.499498][T26718] [ 718.499507][T26718] Mem-Info: [ 718.531581][T26727] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 718.546044][T26716] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 718.546075][T26716] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 718.546093][T26716] bond17: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 718.556001][T26718] active_anon:6180 inactive_anon:0 isolated_anon:0 [ 718.556001][T26718] active_file:3698 inactive_file:40224 isolated_file:0 [ 718.556001][T26718] unevictable:768 dirty:44 writeback:0 [ 718.556001][T26718] slab_reclaimable:13758 slab_unreclaimable:125885 [ 718.556001][T26718] mapped:29956 shmem:1380 pagetables:1391 [ 718.556001][T26718] sec_pagetables:0 bounce:0 [ 718.556001][T26718] kernel_misc_reclaimable:0 [ 718.556001][T26718] free:1288219 free_pcp:10107 free_cma:0 [ 718.901300][T26718] Node 0 active_anon:24820kB inactive_anon:0kB active_file:14792kB inactive_file:160688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127924kB dirty:172kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18636kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.052859][T26718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.102763][T26718] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.119167][T26746] : renamed from hsr0 [ 719.185903][T26718] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 719.202677][T26718] Node 0 DMA32 free:1189272kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24504kB inactive_anon:0kB active_file:14792kB inactive_file:160688kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2552700kB mlocked:0kB bounce:0kB free_pcp:40888kB local_pcp:20132kB free_cma:0kB [ 719.242484][T26718] lowmem_reserve[]: 0 0 0 0 0 [ 719.247284][T26718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.279445][T26718] lowmem_reserve[]: 0 0 0 0 0 [ 719.284754][T26718] Node 1 Normal free:3947060kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.320719][T26718] lowmem_reserve[]: 0 0 0 0 0 [ 719.327152][T26718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 719.382923][T26718] Node 0 DMA32: 8280*4kB (UM) 6335*8kB (UME) 2338*16kB (UM) 367*32kB (UM) 45*64kB (UME) 250*128kB (UME) 310*256kB (UME) 176*512kB (UME) 142*1024kB (UE) 81*2048kB (UM) 132*4096kB (UM) = 1189272kB [ 719.411700][T26757] vcan1: entered promiscuous mode [ 719.433858][T26757] vcan1: entered allmulticast mode [ 719.457398][T26718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.502030][T26718] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 11*16kB (UM) 11*32kB (UM) 8*64kB (UM) 8*128kB (UM) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3947060kB [ 719.547856][T26718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.595679][T26718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 719.616604][T26718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.631598][T26718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 719.661547][T26718] 45298 total pagecache pages [ 719.675268][T26766] syzkaller0: entered promiscuous mode [ 719.682778][T26766] syzkaller0: entered allmulticast mode [ 719.712017][T26718] 0 pages in swap cache [ 719.716233][T26718] Free swap = 124996kB [ 719.720410][T26718] Total swap = 124996kB [ 719.736903][T26777] netlink: 'syz.1.5655': attribute type 1 has an invalid length. [ 719.762247][T26778] veth0_to_bridge: entered promiscuous mode [ 719.762978][T26718] 2097051 pages RAM [ 719.787375][T26777] netlink: 'syz.1.5655': attribute type 2 has an invalid length. [ 719.822717][T26777] netlink: 'syz.1.5655': attribute type 1 has an invalid length. [ 719.822915][T26718] 0 pages HighMem/MovableOnly [ 719.873503][T26718] 427041 pages reserved [ 719.889165][T26718] 0 pages cma reserved [ 720.017854][T26768] veth0_to_bridge: left promiscuous mode [ 720.716197][T26823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.976418][T26842] FAULT_INJECTION: forcing a failure. [ 720.976418][T26842] name failslab, interval 1, probability 0, space 0, times 0 [ 721.065128][T26842] CPU: 0 UID: 0 PID: 26842 Comm: syz.0.5675 Not tainted syzkaller #0 PREEMPT(full) [ 721.065158][T26842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.065170][T26842] Call Trace: [ 721.065178][T26842] [ 721.065187][T26842] dump_stack_lvl+0xe8/0x150 [ 721.065220][T26842] should_fail_ex+0x412/0x560 [ 721.065254][T26842] should_failslab+0xa8/0x100 [ 721.065280][T26842] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 721.065301][T26842] ? __alloc_skb+0x186/0x7d0 [ 721.065318][T26842] ? __alloc_skb+0x1d0/0x7d0 [ 721.065335][T26842] ? __local_bh_enable_ip+0xd0/0x130 [ 721.065364][T26842] __alloc_skb+0x1d0/0x7d0 [ 721.065389][T26842] netlink_sendmsg+0x5d4/0xb40 [ 721.065427][T26842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.065459][T26842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 721.065488][T26842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 721.065523][T26842] ____sys_sendmsg+0x972/0x9f0 [ 721.065555][T26842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.065587][T26842] ? import_iovec+0x73/0xa0 [ 721.065612][T26842] ___sys_sendmsg+0x2a5/0x360 [ 721.065641][T26842] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.065701][T26842] ? __fget_files+0x2a/0x420 [ 721.065727][T26842] ? __fget_files+0x3a0/0x420 [ 721.065770][T26842] __x64_sys_sendmsg+0x1bd/0x2a0 [ 721.065795][T26842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.065827][T26842] ? __pfx_ksys_write+0x10/0x10 [ 721.065861][T26842] do_syscall_64+0x14d/0xf80 [ 721.065883][T26842] ? trace_irq_disable+0x3b/0x150 [ 721.065908][T26842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.065927][T26842] ? clear_bhb_loop+0x40/0x90 [ 721.065951][T26842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.065970][T26842] RIP: 0033:0x7f527739c799 [ 721.065989][T26842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.066005][T26842] RSP: 002b:00007f52782ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.066028][T26842] RAX: ffffffffffffffda RBX: 00007f5277615fa0 RCX: 00007f527739c799 [ 721.066042][T26842] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 721.066055][T26842] RBP: 00007f52782ad090 R08: 0000000000000000 R09: 0000000000000000 [ 721.066067][T26842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.066079][T26842] R13: 00007f5277616038 R14: 00007f5277615fa0 R15: 00007ffe3abf3478 [ 721.066112][T26842] [ 721.099601][T26846] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 721.337404][T26846] team0: Device macvlan1 is already an upper device of the team interface [ 721.861702][T26877] ieee802154 phy0 wpan0: encryption failed: -90 [ 721.942125][T26888] __nla_validate_parse: 9 callbacks suppressed [ 721.942146][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5688'. [ 722.096318][T26893] netlink: 'syz.1.5689': attribute type 1 has an invalid length. [ 722.225196][T26903] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5693'. [ 722.251289][T26893] bond16: entered promiscuous mode [ 722.257986][T26893] 8021q: adding VLAN 0 to HW filter on device bond16 [ 722.278465][T26896] bond16: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 722.361939][T26896] bond16: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 722.382958][T26896] bond16: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 722.788775][T26921] syzkaller0: entered promiscuous mode [ 722.827912][T26921] syzkaller0: entered allmulticast mode [ 722.954680][T26940] netlink: 'syz.3.5700': attribute type 2 has an invalid length. [ 722.975882][T26940] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5700'. [ 723.236594][T26950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5703'. [ 723.259898][T26950] netlink: 'syz.1.5703': attribute type 3 has an invalid length. [ 723.268974][T26950] netlink: 'syz.1.5703': attribute type 1 has an invalid length. [ 723.278100][T26950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5703'. [ 725.438185][T26983] tipc: Enabled bearer , priority 0 [ 725.573068][T26983] syzkaller0: entered promiscuous mode [ 725.578972][T26983] syzkaller0: entered allmulticast mode [ 725.594732][T26983] tipc: Resetting bearer [ 725.695754][T26982] tipc: Resetting bearer [ 725.892968][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5718'. [ 725.920457][T27018] netlink: zone id is out of range [ 725.926203][T27018] netlink: zone id is out of range [ 725.931710][T27018] netlink: zone id is out of range [ 725.937278][T27018] netlink: zone id is out of range [ 725.943824][T27018] netlink: zone id is out of range [ 725.949188][T27018] netlink: zone id is out of range [ 725.955210][T27018] netlink: zone id is out of range [ 725.960559][T27018] netlink: zone id is out of range [ 725.966457][T27018] netlink: zone id is out of range [ 725.971754][T27018] netlink: zone id is out of range [ 726.037807][T27018] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 727.674043][T26982] tipc: Disabling bearer [ 727.813130][T27052] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 727.823243][T27052] netlink: 'syz.0.5730': attribute type 2 has an invalid length. [ 727.823594][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5731'. [ 727.855978][T27053] netlink: 'syz.2.5731': attribute type 2 has an invalid length. [ 727.864957][T27053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5731'. [ 727.882376][T27054] netem: incorrect gi model size [ 727.898014][T27054] netem: change failed [ 727.908212][T27056] netlink: 'syz.3.5729': attribute type 11 has an invalid length. [ 727.916459][T27056] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5729'. [ 727.918703][T27048] xt_hashlimit: size too large, truncated to 1048576 [ 728.387350][T27083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5740'. [ 728.810922][T27114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5751'. [ 728.877068][T27118] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 729.055020][T27116] syzkaller0: entered promiscuous mode [ 729.081299][T27116] syzkaller0: entered allmulticast mode [ 729.187509][T27132] xfrm1: entered allmulticast mode [ 729.490236][T27155] netlink: 'syz.0.5762': attribute type 1 has an invalid length. [ 729.592987][T27158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5763'. [ 729.640962][T27158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5763'. [ 729.852251][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5767'. [ 729.872042][T27168] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5767'. [ 729.881132][T27168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5767'. [ 730.276020][T27188] syzkaller0: entered promiscuous mode [ 730.285528][T27188] syzkaller0: entered allmulticast mode [ 730.474586][T27197] syzkaller0: entered promiscuous mode [ 730.480342][T27197] syzkaller0: entered allmulticast mode [ 730.627868][T27208] netlink: 'syz.4.5779': attribute type 12 has an invalid length. [ 730.734194][T27216] netlink: 'syz.0.5782': attribute type 10 has an invalid length. [ 730.791350][T27216] mac80211_hwsim hwsim52 wlan1: left allmulticast mode [ 730.813027][T27216] netlink: 'syz.0.5782': attribute type 83 has an invalid length. [ 730.858672][T27225] ipt_ECN: cannot use operation on non-tcp rule [ 731.097673][T27237] syzkaller0: entered promiscuous mode [ 731.106618][T27237] syzkaller0: entered allmulticast mode [ 731.640165][T27251] syzkaller1: entered promiscuous mode [ 731.653496][T27251] syzkaller1: entered allmulticast mode [ 731.705016][T27255] netlink: 'syz.3.5795': attribute type 1 has an invalid length. [ 731.882282][T27255] 8021q: adding VLAN 0 to HW filter on device bond21 [ 731.921497][T27262] netlink: 'syz.0.5797': attribute type 33 has an invalid length. [ 732.266106][T27283] syzkaller0: entered promiscuous mode [ 732.271650][T27283] syzkaller0: entered allmulticast mode [ 732.347091][T27287] netlink: 'syz.4.5806': attribute type 3 has an invalid length. [ 732.404109][T27285] syzkaller0: entered allmulticast mode [ 732.441185][T27296] syzkaller0: entered promiscuous mode [ 732.451061][T27296] syzkaller0: entered allmulticast mode [ 732.603035][T27299] netlink: 'syz.0.5812': attribute type 4 has an invalid length. [ 732.617857][T27299] netlink: 'syz.0.5812': attribute type 4 has an invalid length. [ 732.893289][T27325] __nla_validate_parse: 12 callbacks suppressed [ 732.893309][T27325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5817'. [ 732.926002][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5817'. [ 732.968094][T27330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5819'. [ 732.973368][T27325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 733.209408][T27340] ieee802154 phy0 wpan0: encryption failed: -22 [ 733.325227][T27347] syzkaller0: entered promiscuous mode [ 733.330850][T27347] syzkaller0: entered allmulticast mode [ 733.423258][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5827'. [ 733.955651][T27386] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5837'. [ 734.030007][T27394] net_ratelimit: 188 callbacks suppressed [ 734.030032][T27394] openvswitch: netlink: Flow actions attr not present in new flow. [ 734.072132][T27399] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5841'. [ 734.246688][T27411] x_tables: duplicate underflow at hook 1 [ 734.308784][T27414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.379163][T27414] lo: entered allmulticast mode [ 734.486069][T27424] netlink: 'syz.1.5848': attribute type 1 has an invalid length. [ 734.609159][T27424] bond17: entered promiscuous mode [ 734.615005][T27424] 8021q: adding VLAN 0 to HW filter on device bond17 [ 734.718719][T20987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.732638][T20987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.743796][T20987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.758265][T20987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.768368][T20987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.841033][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.852415][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.867036][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.878047][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.884666][T27440] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5852'. [ 734.897529][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.242316][T27440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5852'. [ 735.260233][T27428] wg1 speed is unknown, defaulting to 1000 [ 735.323059][T27455] tipc: Enabled bearer , priority 0 [ 735.423392][T27461] netlink: 'syz.1.5855': attribute type 2 has an invalid length. [ 735.459984][T27455] syzkaller0: entered promiscuous mode [ 735.465954][T27455] syzkaller0: entered allmulticast mode [ 735.472904][T27455] tipc: Resetting bearer [ 735.479177][T27458] netlink: 'syz.1.5855': attribute type 12 has an invalid length. [ 735.544127][T27462] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5856'. [ 735.605695][T27462] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5856'. [ 735.661258][T27459] tipc: Resetting bearer [ 736.955675][ T5839] Bluetooth: hci1: command tx timeout [ 737.196276][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.343322][T27459] tipc: Disabling bearer [ 737.368937][T27473] netem: change failed [ 737.373592][ T5887] tipc: Node number set to 1040041554 [ 737.552647][T27483] bond18: entered promiscuous mode [ 737.558469][T27483] 8021q: adding VLAN 0 to HW filter on device bond18 [ 737.649842][T27491] vlan6: entered allmulticast mode [ 737.672385][T27491] bond18: entered allmulticast mode [ 738.050377][T27428] chnl_net:caif_netlink_parms(): no params data found [ 738.217673][T27520] __nla_validate_parse: 2 callbacks suppressed [ 738.217694][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5872'. [ 738.244534][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5871'. [ 738.370940][T27517] vlan1: entered allmulticast mode [ 738.403256][T27517] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 738.553978][T27428] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.590685][T27428] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.607220][T27428] bridge_slave_0: entered allmulticast mode [ 738.622612][T27428] bridge_slave_0: entered promiscuous mode [ 738.631654][T27428] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.641582][T27428] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.650859][T27428] bridge_slave_1: entered allmulticast mode [ 738.659611][T27428] bridge_slave_1: entered promiscuous mode [ 738.701553][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5881'. [ 738.738693][T27549] openvswitch: netlink: Unknown nsh attribute 0 [ 738.754914][T27428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.795934][T27557] netlink: 'syz.3.5883': attribute type 1 has an invalid length. [ 738.815495][T27428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.823664][T27557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 738.934982][T27428] team0: Port device team_slave_0 added [ 738.959805][T27428] team0: Port device team_slave_1 added [ 739.031177][T27428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.038440][ T5839] Bluetooth: hci1: command tx timeout [ 739.044520][T27428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.072679][T27428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.107973][T27428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.116027][T27428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.143675][T27428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.266596][T27428] hsr_slave_0: entered promiscuous mode [ 739.280014][T27428] hsr_slave_1: entered promiscuous mode [ 739.287743][T27428] debugfs: 'hsr0' already exists in 'hsr' [ 739.294404][T27428] Cannot create hsr debugfs directory [ 739.412191][T27592] sit0: Caught tx_queue_len zero misconfig [ 739.430078][T27593] IPv6: NLM_F_CREATE should be specified when creating new route [ 739.596748][T27598] syzkaller1: entered promiscuous mode [ 739.606365][T27598] syzkaller1: entered allmulticast mode [ 739.658187][T27600] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5896'. [ 739.726470][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5897'. [ 739.875303][T27428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.978045][T27428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.074468][T27617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5901'. [ 740.118002][T27428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.193436][T27620] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5901'. [ 740.205081][T27428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.579874][T27428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 740.617565][T27428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.645896][T27428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 740.679562][T27428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 740.886002][T27666] syz.4.5912: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 740.904435][T27666] CPU: 1 UID: 0 PID: 27666 Comm: syz.4.5912 Not tainted syzkaller #0 PREEMPT(full) [ 740.904465][T27666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.904480][T27666] Call Trace: [ 740.904489][T27666] [ 740.904499][T27666] dump_stack_lvl+0xe8/0x150 [ 740.904538][T27666] warn_alloc+0x249/0x340 [ 740.904567][T27666] ? stack_trace_save+0xa9/0x100 [ 740.904596][T27666] ? __pfx_warn_alloc+0x10/0x10 [ 740.904642][T27666] ? kasan_save_track+0x4f/0x80 [ 740.904665][T27666] ? kasan_save_track+0x3e/0x80 [ 740.904685][T27666] ? __kasan_kmalloc+0x93/0xb0 [ 740.904708][T27666] ? __kmalloc_cache_noprof+0x31c/0x660 [ 740.904731][T27666] ? xskq_create+0x56/0x170 [ 740.904751][T27666] ? xsk_setsockopt+0x54c/0x990 [ 740.904781][T27666] ? do_sock_setsockopt+0x17c/0x1b0 [ 740.904804][T27666] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 740.904826][T27666] ? do_syscall_64+0x14d/0xf80 [ 740.904856][T27666] __vmalloc_node_range_noprof+0x132/0x1730 [ 740.904920][T27666] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 740.904954][T27666] ? __kasan_kmalloc+0x93/0xb0 [ 740.904988][T27666] vmalloc_user_noprof+0xad/0xe0 [ 740.905013][T27666] ? xskq_create+0xbf/0x170 [ 740.905037][T27666] xskq_create+0xbf/0x170 [ 740.905062][T27666] xsk_init_queue+0x8a/0xe0 [ 740.905087][T27666] xsk_setsockopt+0x54c/0x990 [ 740.905123][T27666] ? __pfx_xsk_setsockopt+0x10/0x10 [ 740.905156][T27666] ? __pfx_aa_sk_perm+0x10/0x10 [ 740.905191][T27666] ? aa_sock_opt_perm+0xff/0x1a0 [ 740.905222][T27666] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 740.905247][T27666] ? __pfx_xsk_setsockopt+0x10/0x10 [ 740.905282][T27666] do_sock_setsockopt+0x17c/0x1b0 [ 740.905313][T27666] __x64_sys_setsockopt+0x13d/0x1b0 [ 740.905344][T27666] do_syscall_64+0x14d/0xf80 [ 740.905366][T27666] ? trace_irq_disable+0x3b/0x150 [ 740.905397][T27666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.905420][T27666] ? clear_bhb_loop+0x40/0x90 [ 740.905447][T27666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.905470][T27666] RIP: 0033:0x7f9c63b9c799 [ 740.905491][T27666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.905510][T27666] RSP: 002b:00007f9c649be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 740.905533][T27666] RAX: ffffffffffffffda RBX: 00007f9c63e15fa0 RCX: 00007f9c63b9c799 [ 740.905549][T27666] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 740.905563][T27666] RBP: 00007f9c63c32c99 R08: 0000000000000004 R09: 0000000000000000 [ 740.905576][T27666] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.905590][T27666] R13: 00007f9c63e16038 R14: 00007f9c63e15fa0 R15: 00007fff2f7c4b08 [ 740.905635][T27666] [ 740.905644][T27666] Mem-Info: [ 741.051188][T27428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.061516][T27666] active_anon:6071 inactive_anon:0 isolated_anon:0 [ 741.061516][T27666] active_file:3698 inactive_file:40233 isolated_file:0 [ 741.061516][T27666] unevictable:768 dirty:95 writeback:0 [ 741.061516][T27666] slab_reclaimable:14331 slab_unreclaimable:128193 [ 741.061516][T27666] mapped:29849 shmem:1380 pagetables:1369 [ 741.061516][T27666] sec_pagetables:0 bounce:0 [ 741.061516][T27666] kernel_misc_reclaimable:0 [ 741.061516][T27666] free:1285576 free_pcp:10304 free_cma:0 [ 741.123725][ T5839] Bluetooth: hci1: command tx timeout [ 741.174700][T27666] Node 0 active_anon:24584kB inactive_anon:0kB active_file:14792kB inactive_file:160724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119360kB dirty:376kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18908kB pagetables:5524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 741.199329][T27428] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.295744][T27666] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 741.333395][T27666] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.366890][T27666] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 741.383578][T27666] Node 0 DMA32 free:1179836kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24484kB inactive_anon:0kB active_file:14792kB inactive_file:160724kB unevictable:1536kB writepending:176kB zspages:0kB present:3129332kB managed:2552700kB mlocked:0kB bounce:0kB free_pcp:41068kB local_pcp:20552kB free_cma:0kB [ 741.418936][T27666] lowmem_reserve[]: 0 0 0 0 0 [ 741.442576][T27666] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.483793][T19607] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.491178][T19607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.504561][T27666] lowmem_reserve[]: 0 0 0 0 0 [ 741.510231][T27666] Node 1 Normal free:3947060kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.543966][T19610] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.551123][T19610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.588753][T27666] lowmem_reserve[]: 0 0 0 0 0 [ 741.598579][T27666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 741.614748][T27666] Node 0 DMA32: 8909*4kB (UME) 6487*8kB (UME) 2887*16kB (UME) 321*32kB (UM) 105*64kB (UM) 202*128kB (UM) 331*256kB (UM) 192*512kB (UME) 151*1024kB (UE) 79*2048kB (U) 123*4096kB (UM) = 1179836kB [ 741.645984][T27666] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 741.659366][T27666] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 11*16kB (UM) 11*32kB (UM) 8*64kB (UM) 8*128kB (UM) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3947060kB [ 741.742089][T27666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.781179][T27666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 741.839281][T27666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.864547][T27696] netlink: 'syz.3.5920': attribute type 1 has an invalid length. [ 741.903299][T27666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 742.020352][T27666] 45307 total pagecache pages [ 742.025526][T27666] 0 pages in swap cache [ 742.029809][T27666] Free swap = 124996kB [ 742.036063][T27666] Total swap = 124996kB [ 742.040364][T27666] 2097051 pages RAM [ 742.047996][T27666] 0 pages HighMem/MovableOnly [ 742.053857][T27666] 427041 pages reserved [ 742.058046][T27666] 0 pages cma reserved [ 742.157327][T27696] 8021q: adding VLAN 0 to HW filter on device bond22 [ 742.317953][T27721] netlink: 'syz.1.5924': attribute type 1 has an invalid length. [ 742.338785][T27710] bond22: (slave bridge8): making interface the new active one [ 742.355020][T27710] bond22: (slave bridge8): Enslaving as an active interface with an up link [ 742.405071][T27720] wireguard0: entered promiscuous mode [ 742.410606][T27720] wireguard0: entered allmulticast mode [ 742.421208][T27720] team0: Device wireguard0 is of different type [ 742.484770][T27718] wg1 speed is unknown, defaulting to 1000 [ 742.627991][T27428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.887642][T27428] veth0_vlan: entered promiscuous mode [ 742.933827][T27428] veth1_vlan: entered promiscuous mode [ 743.026518][T27428] veth0_macvtap: entered promiscuous mode [ 743.043577][T27428] veth1_macvtap: entered promiscuous mode [ 743.129403][T27428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.166396][T27428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.189470][T19611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.201105][ T5839] Bluetooth: hci1: command tx timeout [ 743.218878][T19611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.233857][T19611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.304565][T19611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.643912][T14662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.655081][T14662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.753288][T27770] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 743.767385][T14662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.773554][T27770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5936'. [ 743.785204][T14662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.834388][T27770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5936'. [ 743.999589][T27778] [ 744.002065][T27778] ====================================================== [ 744.009343][T27778] WARNING: possible circular locking dependency detected [ 744.016361][T27778] syzkaller #0 Not tainted [ 744.020777][T27778] ------------------------------------------------------ [ 744.027881][T27778] syz.3.5938/27778 is trying to acquire lock: [ 744.033938][T27778] ffffffff8fd4a858 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 744.043089][T27778] [ 744.043089][T27778] but task is already holding lock: [ 744.050449][T27778] ffff88804f40b770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 744.059765][T27778] [ 744.059765][T27778] which lock already depends on the new lock. [ 744.059765][T27778] [ 744.070346][T27778] [ 744.070346][T27778] the existing dependency chain (in reverse order) is: [ 744.079356][T27778] [ 744.079356][T27778] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 744.087439][T27778] _raw_spin_lock_bh+0x36/0x50 [ 744.092726][T27778] nr_rt_device_down+0x153/0x860 [ 744.098273][T27778] nr_device_event+0x137/0x150 [ 744.103681][T27778] notifier_call_chain+0x1be/0x400 [ 744.109861][T27778] netif_close_many+0x2ae/0x420 [ 744.115427][T27778] netif_close+0x160/0x220 [ 744.120415][T27778] dev_close+0x10a/0x220 [ 744.125265][T27778] bpq_device_event+0x377/0x6a0 [ 744.130820][T27778] notifier_call_chain+0x1be/0x400 [ 744.136565][T27778] netif_close_many+0x2ae/0x420 [ 744.142121][T27778] netif_close+0x160/0x220 [ 744.147072][T27778] dev_close+0x10a/0x220 [ 744.151926][T27778] bond_setup_by_slave+0x5f/0x3e0 [ 744.157485][T27778] bond_enslave+0x847/0x3c40 [ 744.162718][T27778] bond_do_ioctl+0x6ec/0x8d0 [ 744.167946][T27778] dev_ifsioc+0x961/0x1280 [ 744.172906][T27778] dev_ioctl+0x7b4/0x1150 [ 744.178242][T27778] sock_do_ioctl+0x23e/0x320 [ 744.183449][T27778] sock_ioctl+0x5c6/0x7f0 [ 744.188478][T27778] __se_sys_ioctl+0xfc/0x170 [ 744.193605][T27778] do_syscall_64+0x14d/0xf80 [ 744.198921][T27778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.205346][T27778] [ 744.205346][T27778] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 744.213872][T27778] _raw_spin_lock_bh+0x36/0x50 [ 744.219249][T27778] nr_rt_device_down+0xbe/0x860 [ 744.224629][T27778] nr_device_event+0x137/0x150 [ 744.230002][T27778] notifier_call_chain+0x1be/0x400 [ 744.235701][T27778] netif_close_many+0x2ae/0x420 [ 744.241085][T27778] netif_close+0x160/0x220 [ 744.246024][T27778] dev_close+0x10a/0x220 [ 744.250883][T27778] bpq_device_event+0x377/0x6a0 [ 744.256356][T27778] notifier_call_chain+0x1be/0x400 [ 744.262085][T27778] netif_close_many+0x2ae/0x420 [ 744.267461][T27778] netif_close+0x160/0x220 [ 744.272498][T27778] dev_close+0x10a/0x220 [ 744.277271][T27778] bond_setup_by_slave+0x5f/0x3e0 [ 744.282817][T27778] bond_enslave+0x847/0x3c40 [ 744.288011][T27778] bond_do_ioctl+0x6ec/0x8d0 [ 744.293299][T27778] dev_ifsioc+0x961/0x1280 [ 744.298420][T27778] dev_ioctl+0x7b4/0x1150 [ 744.303281][T27778] sock_do_ioctl+0x23e/0x320 [ 744.308397][T27778] sock_ioctl+0x5c6/0x7f0 [ 744.313335][T27778] __se_sys_ioctl+0xfc/0x170 [ 744.318456][T27778] do_syscall_64+0x14d/0xf80 [ 744.323752][T27778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.330164][T27778] [ 744.330164][T27778] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 744.338272][T27778] __lock_acquire+0x15a5/0x2cf0 [ 744.343655][T27778] lock_acquire+0xf0/0x2e0 [ 744.348599][T27778] _raw_spin_lock_bh+0x36/0x50 [ 744.353971][T27778] nr_rt_ioctl+0x40c/0xf90 [ 744.359167][T27778] sock_do_ioctl+0x101/0x320 [ 744.364370][T27778] sock_ioctl+0x5c6/0x7f0 [ 744.369333][T27778] __se_sys_ioctl+0xfc/0x170 [ 744.374535][T27778] do_syscall_64+0x14d/0xf80 [ 744.379649][T27778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.386157][T27778] [ 744.386157][T27778] other info that might help us debug this: [ 744.386157][T27778] [ 744.396837][T27778] Chain exists of: [ 744.396837][T27778] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 744.396837][T27778] [ 744.411008][T27778] Possible unsafe locking scenario: [ 744.411008][T27778] [ 744.418454][T27778] CPU0 CPU1 [ 744.423906][T27778] ---- ---- [ 744.429313][T27778] lock(&nr_node->node_lock); [ 744.434083][T27778] lock(nr_node_list_lock); [ 744.441395][T27778] lock(&nr_node->node_lock); [ 744.448793][T27778] lock(nr_neigh_list_lock); [ 744.453490][T27778] [ 744.453490][T27778] *** DEADLOCK *** [ 744.453490][T27778] [ 744.461634][T27778] 2 locks held by syz.3.5938/27778: [ 744.466830][T27778] #0: ffffffff8fd4a8b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 744.476336][T27778] #1: ffff88804f40b770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 744.486089][T27778] [ 744.486089][T27778] stack backtrace: [ 744.492164][T27778] CPU: 1 UID: 0 PID: 27778 Comm: syz.3.5938 Not tainted syzkaller #0 PREEMPT(full) [ 744.492183][T27778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.492194][T27778] Call Trace: [ 744.492201][T27778] [ 744.492208][T27778] dump_stack_lvl+0xe8/0x150 [ 744.492231][T27778] print_circular_bug+0x2e1/0x300 [ 744.492257][T27778] check_noncircular+0x12e/0x150 [ 744.492282][T27778] __lock_acquire+0x15a5/0x2cf0 [ 744.492303][T27778] ? kasan_save_track+0x4f/0x80 [ 744.492333][T27778] lock_acquire+0xf0/0x2e0 [ 744.492351][T27778] ? nr_rt_ioctl+0x40c/0xf90 [ 744.492371][T27778] ? nr_rt_ioctl+0x40c/0xf90 [ 744.492387][T27778] _raw_spin_lock_bh+0x36/0x50 [ 744.492401][T27778] ? nr_rt_ioctl+0x40c/0xf90 [ 744.492418][T27778] nr_rt_ioctl+0x40c/0xf90 [ 744.492438][T27778] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 744.492460][T27778] ? apparmor_capable+0x126/0x170 [ 744.492479][T27778] ? capable+0x88/0xe0 [ 744.492499][T27778] ? nr_ioctl+0x1b1/0x3b0 [ 744.492514][T27778] sock_do_ioctl+0x101/0x320 [ 744.492537][T27778] ? __pfx_sock_do_ioctl+0x10/0x10 [ 744.492557][T27778] ? hook_file_ioctl+0xdc/0x590 [ 744.492583][T27778] sock_ioctl+0x5c6/0x7f0 [ 744.492603][T27778] ? __pfx_sock_ioctl+0x10/0x10 [ 744.492623][T27778] ? __fget_files+0x2a/0x420 [ 744.492645][T27778] ? __fget_files+0x3a0/0x420 [ 744.492666][T27778] ? __fget_files+0x2a/0x420 [ 744.492689][T27778] ? bpf_lsm_file_ioctl+0x9/0x20 [ 744.492709][T27778] ? __pfx_sock_ioctl+0x10/0x10 [ 744.492728][T27778] __se_sys_ioctl+0xfc/0x170 [ 744.492747][T27778] do_syscall_64+0x14d/0xf80 [ 744.492764][T27778] ? trace_irq_disable+0x3b/0x150 [ 744.492787][T27778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.492802][T27778] ? clear_bhb_loop+0x40/0x90 [ 744.492820][T27778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.492835][T27778] RIP: 0033:0x7f5041f9c799 [ 744.492850][T27778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.492864][T27778] RSP: 002b:00007f5042ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.492881][T27778] RAX: ffffffffffffffda RBX: 00007f5042215fa0 RCX: 00007f5041f9c799 [ 744.492893][T27778] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 744.492903][T27778] RBP: 00007f5042032c99 R08: 0000000000000000 R09: 0000000000000000 [ 744.492913][T27778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.492923][T27778] R13: 00007f5042216038 R14: 00007f5042215fa0 R15: 00007fffac36dba8 [ 744.492941][T27778] [ 744.803007][T27784] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5849'. [ 744.815079][T27784] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.822390][T27784] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.837005][T27787] netlink: 'syz.0.5939': attribute type 13 has an invalid length. [ 744.848893][T27786] netlink: 'syz.0.5939': attribute type 13 has an invalid length. [ 744.850118][T27787] netlink: 'syz.0.5939': attribute type 58 has an invalid length. [ 744.859297][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5849'. [ 744.866199][T27787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5939'. [ 744.887655][T27786] netlink: 'syz.0.5939': attribute type 58 has an invalid length. [ 744.895812][T27786] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5939'. [ 744.905496][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5849'. [ 744.905994][T27784] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5849'. [ 747.444433][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.453830][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.460133][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.467668][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 753.032014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 753.040118][ C1] lec:lec_tx_timeout: lec0