last executing test programs: 12.735110209s ago: executing program 2 (id=6494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x2, 0x5}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000080)={0x0, 0x2, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 8.94101378s ago: executing program 3 (id=6517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x4c, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x38, 0x4, 0x0, 0x1, [@nested={0x32, 0x68, 0x0, 0x1, [@generic="55ed2c84fe33af6a667218e36e9cfb765f085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e0"]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000100000000000cbe1616d0746ff9d17000000800c0000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c0005002201000000faffffffffffffff00cc730000000000000000234a049ffa4c6e20780400e8baf9e900000000e90000000890c5ad7cf40660beaa02447fe6f9"], 0x64}}, 0x400400c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x10, 0x700, 0x0, 0xf, {{0x14, 0x4, 0x3, 0x14, 0x50, 0x65, 0x0, 0x9, 0x2d, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0xa8, [@local]}, @generic={0x82, 0x4, "dbf3"}, @rr={0x7, 0x23, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @multicast1]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x49, 0x0, 0x1, [0xc]}]}}}}}) r5 = getuid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0xc, 0x4, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x8000, 0x6, 0x872}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f00000007c0)=@expire={0x31c, 0x18, 0x20, 0x70bd2b, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@loopback, 0x4e22, 0x9da2, 0x4e24, 0x8, 0x0, 0x20, 0x80, 0x2b, r4, r5}, {@in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x2, 0x9, 0x80000001, 0xffffffffffffffff, 0x7, 0x101, 0x400}, {0x800, 0x80000001, 0x1, 0x800}, {0xffffffe6, 0x3, 0x9}, 0x70bd26, 0x3507, 0x2, 0x0, 0x5}, 0x1}, [@srcaddr={0x14, 0xd, @in=@local}, @tfcpad={0x8, 0x16, 0xfffffffc}, @extra_flags={0x8, 0x18, 0x5}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xa}}, @etimer_thresh={0x8, 0xc, 0x5}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd28, 0x9}}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x4e22, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x0, 0x2, 0x0, r7}, {@in6=@private2, 0x4d3, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x8001, 0x800, 0x9, 0x5, 0x0, 0x8, 0x7, 0x7}, {0x2, 0x6, 0x0, 0x7}, {0x5, 0xd818, 0x9}, 0x70bd26, 0x0, 0xa, 0x1, 0x6, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x0, 0xa}}, @policy={0xac, 0x7, {{@in=@private=0xa010101, @in=@broadcast, 0x4e23, 0x80, 0x4e22, 0x100, 0xa, 0x20, 0x0, 0x2c, r8, r9}, {0x4, 0xd, 0x401, 0x401, 0x10001, 0x9, 0xb, 0x7}, {0x38, 0x88, 0x6, 0x4}, 0x7613ae43, 0x0, 0x1, 0x1, 0x3, 0x2}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r10 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r11) write$tun(r11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x212) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r12, 0x84, 0x77, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x95, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0x8}, {0x4, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008194}, 0x8840) 8.193703135s ago: executing program 3 (id=6523): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xd0, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xb}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.016719255s ago: executing program 3 (id=6527): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{#\']\x00', 0x14480, &(0x7f0000000040)={@align=0x2, {0x5, 0x9, 0xd50}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff257}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x21}}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xddc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xc1912bd293a0f72f}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc93c}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000003e80)={0x0, 0x0}) (rerun: 64) recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/92, 0x5c}, {&(0x7f0000001700)=""/223, 0xdf}, {&(0x7f0000001800)=""/154, 0x9a}], 0x5, &(0x7f0000001940)=""/229, 0xe5}, 0x7a5}, {{&(0x7f0000001a40)=@tipc=@name, 0x80, &(0x7f0000003d40)=[{&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/113, 0x71}, {&(0x7f0000001b80)=""/240, 0xf0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/160, 0xa0}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x6, &(0x7f0000003dc0)=""/12, 0xc}, 0x40000}], 0x2, 0x20, &(0x7f0000003ec0)={r4, r5+60000000}) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003f40), r0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000004080)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004040)={&(0x7f0000003f80)={0xbc, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffbd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80800}, 0x20000081) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000041c0)={@fallback=0xffffffffffffffff, 0x8, 0x1, 0x8b6, &(0x7f00000040c0)=[0x0], 0x1, 0x0, &(0x7f0000004100)=[0x0, 0x0, 0x0], &(0x7f0000004140)=[0x0, 0x0, 0x0], &(0x7f0000004180)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000004240)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004200)={@fallback=r0, r0, 0x0, 0x2024, r0, @void, @void, @value=r10, @void, r9}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000004380)={r0, &(0x7f0000004280)='{-\x80\xe8]\x13*}&\x83#),+\x00', 0x517040, &(0x7f00000042c0)={@_ha_fsid={[0x1, 0x9]}, {0x4, 0x7, 0x7ff, 0x1}}, 0x1d7f12be, &(0x7f0000004300), &(0x7f0000004340)}) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000004440)={r6, r6, 0x8, 0x7c, &(0x7f00000043c0)="35db09af4053c4605eb3c3d277afb205f3f76946c0bf5e7db7fe8e67e0529684ed4dfea3443a8972744112f7e04635a1e44cd83270832ff9e2a9069a8640b0d43d65f16e89de90cf3e0ff4c9f8f1c3e35c317f7df1d7af4a4f15fe45cd6b6732937f987d67510283a4a0139ebd9b4652c5c1fd6c04a4f64b4fef3653", 0x9, 0x15, 0x86f, 0x1be, 0x5, 0x0, 0x400, 'syz0\x00'}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004540), r11) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f0000004600)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x20, r13, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c810}, 0x8850) (async) accept4$nfc_llcp(r0, 0x0, &(0x7f0000004640), 0x80800) (async) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x100000000) (async) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f00000046c0), r6) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x34, r14, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004800), r8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000048c0)={'syztnl1\x00', &(0x7f0000004840)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x6, 0x2, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x4, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, {[@ra={0x94, 0x4}, @end, @lsrr={0x83, 0x7, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x1, [{@empty, 0x1}, {@multicast1}]}, @timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x9c20}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x2}, {@remote, 0xfff}]}, @noop]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000004940)={'erspan0\x00', &(0x7f0000004900)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x3, 0x1e34, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @remote, {[@generic={0x94, 0x3, "a3"}, @noop, @noop]}}}}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000004a00)={'gretap0\x00', &(0x7f0000004980)={'gre0\x00', 0x0, 0x8000, 0x1, 0x7, 0xb, {{0x12, 0x4, 0x2, 0x9, 0x48, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0x1f, 0x3, 0x2, [{@local, 0xfffffe01}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x5}]}, @ssrr={0x89, 0x17, 0x89, [@multicast1, @local, @multicast2, @multicast2, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000004b00)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x78, r15, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4054}, 0x0) 7.728876352s ago: executing program 3 (id=6530): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x80000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000091104b000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) 7.680370957s ago: executing program 3 (id=6531): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@dellink={0x3c, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x4000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 7.574698415s ago: executing program 3 (id=6532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@gettfilter={0x74, 0x2e, 0x34, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x9}, {0xc, 0xb}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0xffffff7f}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}], 0x1, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b902000000000000850000148dfdab499a319b0086000000950000000080000035f9310ecec1a1bdb8210babcf0afc532574c10e661ac8f024b7aeaca6f2bfcaefea912e477dd8c9901a91efce84018c1797761eedae6036d88b2b89fc2acf314e7b4df5d52f5e0b2badf87ee593faa6a618606739ba8bfd219c"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmmsg$sock(r6, &(0x7f0000003e00)=[{{&(0x7f00000001c0)=@generic={0x751772a89104bc87, "8a4ac46a7523d11d706aea641732e48716ee0c8a6a0069ecf701f8045d7fbc341c85b89f0c88abbdd55f2d2c2299ca2a884627dccba17b19cb60dd78ab16960960de37714657a7823835cb8c9b5529f5c43a2b66272e80f668a98a1256c13cf3b09745eefe1e9c80c90093bccfc3e4c1a42294e032aae46372177259252d"}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)="1ff8da6912", 0x5}], 0x1}}], 0x1, 0x4000810) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 4.934579643s ago: executing program 1 (id=6545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e4}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x98, 0x464, 0x800, 0x70bd2c, 0x25dfdbfc, "6dd15dce914cc345ea7f21af85c225980437ad39b6b78f10768a48da130d22a57e0b9d16bd19e82a0e228ea1245010c1884ab968575e0f1c27379ae1b3aea306717554a4b107bd5e7b77a2c313fcf05b18c0aa7e28f7c6eb3c3f2fe3db86a5dc560637cdfe1a79ccba934472a442bace3f8f9530fda541b68db8654ae06d2321b2e9c10830417d", ["", "", "", "", "", "", ""]}, 0x98}}, 0x8040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.938351053s ago: executing program 4 (id=6550): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x54f001, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x400c044) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x9b, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8"}, 0x50) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e00"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x400, 0x4) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288", 0x7}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x4000080) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={&(0x7f0000000080), 0xffffffffffffff2f, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf252c00000008000300", @ANYRES32=0x0, @ANYBLOB="41808386a7c1c3afcab2bc5eee613055a7975333d97eec141b86e27ff7958a7410deb41341129fad8d4a6e118a064a1c6c97243d4fd847963e220ce62c5ad757806da414e7b1fb19bce91d95e9ed9b53117193a917bd1aaf027f7076fb174b504f9b5ad1fc048769dc9e8bd9d60edd707dbf592b4ec71a8c5cbe96fb82fa161e2b80c684bdb366e26485054fb590e3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x881) 3.791580541s ago: executing program 1 (id=6551): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x400001, 0x0, 0x0, 0xaa0}, [@TCA_NETEM_RATE={0x14, 0xd, {0x10000000, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x3, 0x9, 0x7, 0xfffffffffffffffe, 0x52}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) (async, rerun: 32) pwrite64(r0, 0x0, 0x0, 0xda8) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0], &(0x7f0000000480)='GPL\x00'}, 0x94) 3.778052096s ago: executing program 4 (id=6552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10100, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x2, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.642111708s ago: executing program 0 (id=6553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x28, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000400)={{0xa2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 'nq\x00', 0x6, 0xd6000000, 0x38}, {@private=0xa010100, 0x4e24, 0x2000, 0x10001, 0x10000, 0x8}}, 0x44) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000080), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xbf}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000040), 0x10) sendmsg$netlink(r10, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4c0d1}, 0x40830) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYBLOB="2f38dc4efb01cf256f74fcedd2fca706e8934deb324c744d6b60b2e559ef48464d0b9cc6082a0182642ef94810a420bc435311091329c2a761e71ba2eed2d8793e8851ed4ebdd14129c5ab7e2074ee89e92964e906ca52ea7deb824de743ac1cb282d18d5b2664d11c6144b8090000000000", @ANYRES32=r11, @ANYRESOCT=r1], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 3.291364417s ago: executing program 4 (id=6554): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000301010b00"], 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) sendmmsg$inet6(r3, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000000100)='4', 0x1}], 0x1}}], 0x1, 0x5dc) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004020) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) splice(r2, 0x0, r1, 0x0, 0x10000008eba, 0x4) 3.266230241s ago: executing program 2 (id=6499): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000500)={0x2, 0x4e63, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)}], 0x2}}], 0x1, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2.797998254s ago: executing program 4 (id=6555): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001f20c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) accept4$nfc_llcp(r3, 0x0, &(0x7f0000000100), 0x80800) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2.718304298s ago: executing program 0 (id=6556): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r6, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.712081757s ago: executing program 1 (id=6557): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000480), &(0x7f00000004c0)=0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c6176655f31"], 0x34}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfbaf5000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r3}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r10, 0x1, 0x72bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x8}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x64, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0x32, 0x3, "332f01f90b5eefffeffe199aa8e2e861d873dfc78d820e84c6cd62774d1946e440a605eec2fa27e866797b84ed2f"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x20, 0x3, "a2c00fd16c06ccdd3cf60980214308cbe8b0f4c32bddb2c8064d14dd"}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4001000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.594114467s ago: executing program 4 (id=6558): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r3 = socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f0000000200), 0x20) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0xc040480) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000d480)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xfffffffd, '\x00', 0x0, r6, 0x1, 0x2}, 0x50) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x48050) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2.592621138s ago: executing program 2 (id=6559): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r0, 0x0, 0xa5651504c53ef6be, 0x40080, 0x0, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000300000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xc}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xa1) 2.355893515s ago: executing program 2 (id=6560): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c *:* w\"'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.159652943s ago: executing program 0 (id=6561): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0xa, 0x41, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0xa, 0x41, 0x7}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006b3"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="3c000380"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="3c000380"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r9 = socket$kcm(0x11, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) sendmsg$tipc(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="cf", 0x1}], 0x1}, 0x80) (async) sendmsg$tipc(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="cf", 0x1}], 0x1}, 0x80) close(r11) (async) close(r11) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xb8d7c0f3e92be269}, @TCA_TBF_RATE64={0xc, 0x4, 0x431329138e1d06c9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0x9733, 0xfffb, 0x6}, {0xff, 0x2, 0x3, 0xf252, 0x7, 0xd7a0}, 0x7, 0x6, 0x22e5}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r13, {0xd, 0x10}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r13, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x2, 0x6, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x64, 0x0, 0xd8, 0x29, 0x0, @remote, @broadcast, {[@end, @ssrr={0x89, 0x1f, 0xb6, [@rand_addr=0x64010102, @loopback, @broadcast, @broadcast, @remote, @local, @private=0xa010101]}, @end, @generic={0x86, 0x7, "fb9bb31995"}]}}}}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r16 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r16, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r17}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r15, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r16, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r17}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x3, 0x2, 0x20, @local, @private0, 0x0, 0x40, 0x4, 0xfffffffe}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x3, 0x2, 0x20, @local, @private0, 0x0, 0x40, 0x4, 0xfffffffe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xbb, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x7f, 0x7fffffff, 0x0, @remote, @loopback, 0x40, 0x700, 0x1ff, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x7f, 0x7fffffff, 0x0, @remote, @loopback, 0x40, 0x700, 0x1ff, 0x1}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="54010000", @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf25130000001800018014000200677265746170300000000000000000004c000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f76746930000000000000000008000300040000001400018008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="040001803c00018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r18, @ANYBLOB="140002006e6574000000f63c4f2b00"/27, @ANYRES32=r19, @ANYBLOB="2000018008000300010000001400020064756d6d7930000000000000000000002000018008000300000000001400020076657468305f746f5f626174616476001c0001800800030002000000080003000200000008000300030000002c0001800800030001000000080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="0800030002000000"], 0x154}, 0x1, 0x0, 0x0, 0x10000000}, 0x8040) 2.106360544s ago: executing program 2 (id=6562): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 1.805982511s ago: executing program 2 (id=6563): unshare(0x68040200) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280"], 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xf, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa3, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0x7, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0xffffffff, 0x5, 0xb97, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x0, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0xe0, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x8, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x200, 0x7, 0x1, 0xfffffffc, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x3, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0x4, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0x11, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x800, 0x20000005, 0x5, 0x7, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x4, 0x2, 0xfffbffff, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x87, 0x400, 0xffffffff, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x45c}}, 0x40800) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x1, 'syz_tun\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3103040000000000000009000000040003"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r1, 0x200}, {r2, 0x400}, {r6, 0x80}, {r1, 0x2}, {0xffffffffffffffff, 0x424}, {r3, 0x492}, {r8, 0x2010}, {r8, 0xb010}, {r1}], 0x9, &(0x7f0000000600), &(0x7f0000000640)={[0xb1]}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x2010, r10, 0x372d8000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4001) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) socket$inet6_udp(0xa, 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000080), &(0x7f00000001c0)=r12}, 0x20) 1.447918029s ago: executing program 1 (id=6564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000100)=0x8) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600140001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f0000000300), &(0x7f00000005c0)=r5}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/88, 0x58}], 0x1}, 0x120) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f00000007c0)}, 0x20) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f7b40a00000000000085000000990000"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB, @ANYRES8=0x0, @ANYBLOB="fecc"], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="04cdc4c282e7bed50000000000000000000003e41a6ba91b156831622e45a71db6abdd9e4454beca8cae3e677d7bdb6fdcfb880472e236bbf158740eccba74b8ce", @ANYRES32=r2, @ANYBLOB="000000000000020020001280080001007369740014000280080014000f00000008000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 1.391034502s ago: executing program 0 (id=6565): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', r1, 0x1, 0x700, 0x9, 0x658, {{0x1f, 0x4, 0x0, 0x12, 0x7c, 0x68, 0x0, 0x81, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x1b, 0x8b, [@multicast1, @empty, @rand_addr=0x64010100, @remote, @local, @multicast2]}, @end, @lsrr={0x83, 0xf, 0xb1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @end, @end, @cipso={0x86, 0x39, 0x0, [{0x1, 0x4, "1a99"}, {0x2, 0x8, "bcb4fdd2eb8a"}, {0x0, 0x9, "acc88ab4cdbf1d"}, {0x0, 0x3, 'P'}, {0x7, 0xc, "e61c55bb7f6a06cb8adb"}, {0x7, 0x2}, {0x5, 0xd, "f9882b3c7862f5b60eb010"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x109, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0x3}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', r2, 0x2f, 0x5, 0x0, 0x7, 0xc, @private0, @remote, 0x1, 0x8, 0x8, 0x80000000}}) 1.14992416s ago: executing program 1 (id=6566): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x2, 0x0, 0x2000, {0xa, 0x4e22, 0x0, @private2}}}, 0x32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000240)=0x100000001, 0xffffff7b) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0xfffffe34) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f901ad20df70625b", "87a54b1ec22bb26a75070276825a51cce11212f0ed9aa59329f068d26333f9b5", "6655b245", "f80000bb3b5600"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000300)=0xa08e, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)="78974b7cf764d1dbebd9af2b734f1e5712671b57f9d249f5f9d8f48c540888bd56233ea0a9107edf098f8bbe3d667a28c74804711107cfa721eb05dca5b4bd5259cbe7212099cdb7688041f8e94062771590f54d56868177c083cb5ece03ac4fd79b33190f323ce4ec562fed94a8ac0e88f1a5fc21c511d5da964f13d323a982ae78fa370d762b2c545194b9a4b0d75b8d77bd869cae8afb56b7db134827f0fb1c0b6001c326c5e5bc2c2b0e5ae181ac74d75c6106055d598df632c0bee46b57c3ea3940bc703d46ceecc663d96beff4120284272463b03b708debf5eccae91427618c4c15f5d53074980ebf9e98f2b7886e2db3683068cc9f03a0433c1bae86ebcd70b65490b7513eb86fd34a3fe22cf04898d4195a247bc44bde49f700ecb07ee52c682ddefdec208fce46b2e2018322157c7e3b0911e6973f96628825d70e378f79431fefe35664feb3e31457d693a090450ada9b717ac1d273963853014886d9bf745ddadda544fe976925d6ee4e04326e9ba0ab3be4047a73e3b88319c573047ba90717a192098c080bdf3716446dabdb693df76fbd23745e485f979b5204dea3408e0b44f536457f044bf8966df36519e28de3326b0efd83d39cffb64c98d887499e3a4393cbfe5d9b74a2ca42ce14740088dbf0285ab71c7a5c5af025f4489e93389aaec003a48879d98da1eadd193a555b53ac5c0376b1639210ddfb14843bff1bd6092f8764bbbaed31c10002916f297cd00d1a6aa41a08eec853a6cd5d5c13f7473768886dc63d5509e4dd571da69aef760c1145ba02efa7bcd9a4f0df4e28230d4f57d3040ff9fdbe7170c9f49715479ee5e3d584062e46e35f4f2beb0c3c6fab775d5470fee7e557ab13afa231b847a7cfd77e388aeb71ad94457243d317ac1e8b45749039b04a32ace10e77768cb0d7bec27d0f68aec09c896f0f54ccfc030aafd83e656c4788c10fb1e3f92cf9c61083047801a34e08f8476e08267e2814cac71fc23eea187b480e3e3d3ed4a80fb00f1d2a1b1130be1e2479bac94c8176b307447aee71c02b33b67d9db2cf3a41c2960477dfb8d1a1c989bef63d1afd7c203968882f850b4514bc52d270e5420478309725b925799e598984eb3bd12b9ab916db073108f373ddbd65a952858177a883a7f57462b2073f1e0b3ee469bc8fc5a680aa5479a088997461121e93b6588bdaef5a74474c15ac455d3d3aaaeca6ffef249b4558506d28104f98c3c0269794263ba832baf5e7d2072af9dc0a5e964494f0664d7f3ccd7330b65befc20f21bd0522850af3c1d52241e37187bb957c942d23c030f37d06962f29ff555ea797748570aab1fca49b8a0a958aa26e8ad3a4b6c7020f6ac825f7464ca177c21ed350aecc9a3522a29b950e8143b8e7dcc0b04219aa3326f068d462912496328979e5712ab9d837d058c686ba5c40f25d4685b7cc4af7e404ca38367c230f20a7e1ae8c48660c02220bfb60542a5ab9847c480cfb9582549a1c689b58995f3c5a068be2719323ab644d6403b1ad47e5bd1b2668874c7dee3c40a929fc24793ac50f3b21aaf75bb70cb1659488e54d1dae8d62bb6154162e357ed7ac47eeac6427bcb31a5ac9b64e4619c1cfddadf5d7b76dcffcafa86f700ffecbb05f48a076fad4a356d9aa693c26f8a6172196a917e51c7115d8279504f08047920bd8089c0333627803a8c75f3a6165e65a150c92ce520ed1d9e1a998e1fc479eba38bb5bb531a37b34008cfadc76b93cb990758e6e3d5e96235cd3e66cd547761cf9b94598b37f73bf2813e2e68df24371e6f192359428bdaf8f251fbf91677769b3883ab96ec98a30cdee45edfc11a63ea2a1373571a8ce4e8650247e6b1a3a9e93ff03c8358b653716a6b313b841e15521e5e1b20d0dcf5c6004e4d69803e1a1637c812680b12bdf66054f8f05c9671f393f77b6e649a4aada7c67fc206db767f9cb902227bdf9e01b7990cd8e085c9883c0d8fee1d38f218bd1a9c224d626782f32764e60f077f1230b21784e1dd7ee44b15c06bf7b23012e240ac5bf6c072a3f29606f71f660704d6fe11a9cc5a5d04583f44202238614490017cd6271b57e1ed532296279497a0c9b9e7fb4047298964219f2fac593e2817fc9c84fa77097a85384b02c42811b2d4f94bb8f162be8a4b54ec22de1a333f01c90e87dbc1b43c7459829aa199968618bcabb499cfd010b21130e5d24908c4038b66ae4435e47b565c00b8520746884a8f3c014799c7d577adbc47977a4106a3d971ce71ad306eb546f5a977f38893597d43d9c1ebe3ee155dac8ac387e75d64b0919c73b458b2e5ae7586572910ab6dc9f73f880c2e1c1b34f0c6a33b88e637013ac362960f5f7bf1adf89c44423453736f7262888d4c014f09274c877c36f114761227819fc687e776c41e1251b5de630bb2a54f5ed775dd8edd12c58b4867ba460f1490c937daaabb1f61c7e4fca9747318e324e6373f58da0f95e28f2e97caa9d4b6464ba380d3ded95509f3e4bbea6c16f67c80640bf38a021421ba8b032401403222104f041b88224a5e44bfa5056f14e6417314f5913eb387bf27a11f96dc602e75635bc66d744b1d85991193a142d2420fcefbc44d4fe6a1c43d13b6a15c9088b9695369c138e43ec37cd234d23240e2b8cb9f77e890383552fc8ae545766a4148771c71c0f489136684b631c38062b6e7ae82d668f590033c1185bdb5b0a8d321e55e0c57b8497d06acf351783cced187f81dbd97128ed5920a5272a0ecefb08c9ec51423b70449fa8dec9bea14d2a8997533bdf345db6e68bff98c4e35129e2bbeeb8087f00abca0c742e174933684de1905455a98c84863e092173596c08b5ab7e96ea44ed9170504cfe0bf5f9ba2253a86b9513fc68b951ce625683662e77910730a02fa99782b26817924cdcdaa8f26787e584baa6aab92e4c121db96304e235078283766482f6ff16b07921cb7480ec78d558d10a44bbdb10e20364d494b8a54240f40041eb377121d026a4df34733b4b845e406fe61f28eab436a1e02a6e53fe90a8341c1dbe9054790fa002a2159393da2a6c6d22c3a8831a861c4989b5304ded711479759c45c04f9b70842aaf75d0bb89f5fc3ce0d50ccc336be6c01e6ad54a3409a825e2553cfc67abecb946ab422b0ae7a9c2157e2ad2d869886f15c6ad223799d048f042dc3738dbd1ebc37da10814e933635970e442c37f5cc843d94f6e343250c9aa8441576b7f9491896b93867cb8b60834bf5e466c1772d41fbb26e30155dd8dd4aeb49311aebb24650964098e00d5f03739e4bcf23e26e73c6f1133967ad724fa83c59344abebb167562b94227cd58d74e07bc14ec4862f2eb8f9b6c3ee21aa82069ab7a473cb9c9bf9647ae116435c94e8a361e52ac70138647c030783e554311a7841a68405f85bbeac117be0b00f98d08ac13f118859d8d1f96a1fdb45c6b3dce39847aa3d4679727421ecdc31bd46d7b0d518a3fb1bbfe512e34acce13409042330f04297727916e95f4db75fd7ee91aa93630cbf732b0dc751749c1e110e799b62d803d70358422d3c7b38cd91604c1d3842c60df041a4421d8dacba9e338e87680eb097db4a1eb2c197228c716ed1ae4f2566875d7ddaadcef7c0585ee7fd7eff9397a10a275a9a5b40b83b698d6c7397e43a9076121d11e40939cbe26465502eef5a8c077790c5babf1a01152e1cf71eff4c609730fe406f82b3ec25d972eb70ba09e7d9d79a4d0cb22ba77378e55c1e1ed2eb5ca4cb9a93247898f6c5ac7af03dbfd2ba68c04900bead2d9e827d2d95fa0989e82d62403087e062a60eae8003e30b86084651a7523b291f00a1c4bee7fc1c3ef6ecbbb369222dc7692f68a8d67af7d86f560b6a7123bab3015cf4b859d2d16c05c677a691936ad51d68420aba3466aed406bee7f1bde1bee1ba9193217f228d8d33a5309f51f5ad69d7209bb9a8c6f0bc661160cb128ae89a743f5bbbd4f471b6461f68e7cb3f476fc7aace16fa1120ce08bf06b8b5a0836edd11cf56691c07b6d0d47dd2f511002cab69a3ab72b62654f3b42625ce3d9d255349a714ad4b22cfe1c7fffaed10e3ab996f73629e94ddea02c384bc2738bc21e538b957872ddd0794fe7d4f6290b97b222c786eccd9f7506509d52894fa69cf2faa686c2f64a60f2a7af3df7b95d2282248117141e6baf03f58f762ac5c6dd6868a6fcfc86a3ab4c13f076a415dd4a2063c7c635ac7b8daef5036957f658a5c51d3c98d0142f910d3d30e71f4080ee41cd5355eded8c9c8c473892271437a6dedf2044accbdbf87a6002906cc02a772bd9d2adbccbd690600a7c71c7b82b3f44187f6b35da4e2b0a279f4ab98f4bef29e986f4cfe6b67ebcd307fb69e2a173500723e3122b9", 0xc2c}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="2b13db15bcbabc084e50a35836f7ac910bcb256eb221f641e59fe087ca174006c043bc9b7307de03a9ce90371d18416c99b915d6e2", 0x35}, {0x0}, {0x0}, {&(0x7f0000000400)="d420fb0add5c7b8d6ec1d8871f45115dee8b104f41702f250f76d1320a2a695c28be4b0bfc2f7961c3cba308619ca8f6b848b4879aad0392d35625112b5da00404e33256205b78318b8d9ec237e1ce32d6152d6d3d52ccf282363eb3375881b247b0078d50465f1d7bb915cabb21650fa99cd903d1127d7bd81d1467d008a37c670d31236aabf578963cbd923409ac9138c5e9ab8ad40bdc1a1a2280e7eb5c6b32f41fb86e67b4268f6b2ad429bc68b635f1f517ec61c88297bd78dc58", 0xbd}], 0x6}, 0x4044805) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000580)=0x5c, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r3, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf250500000006051b004e24000005000700020000000800180064010102"], 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x840) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @mcast1}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) 444.418435ms ago: executing program 0 (id=6567): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x1d, &(0x7f0000000140), 0x4) 101.763301ms ago: executing program 4 (id=6568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2, r1}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={0x0, 0x10f0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x48000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x3, 0x20, 0x6, 0x8000}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x82}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000480)={r6, 0x1ff, 0x0, 0x5, 0x2, 0x7fff}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0x1, 0xd}, {0x4, 0x10}}}, 0x24}}, 0x20004055) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 3.870219ms ago: executing program 0 (id=6569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)) (async) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r5, 0x0, 0xff40) (async) pread64(r5, 0x0, 0x0, 0x8) (async) write$ppp(r5, &(0x7f0000000200)="bc72", 0x2) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=6570): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030520f9dadf2500000000fff300", @ANYRES32=0x0, @ANYBLOB="35030200000000002400128009000100626f6e640000000014000280050001000100000008000200", @ANYRES32], 0x44}}, 0x20008080) kernel console output (not intermixed with test programs): asing backup interface [ 929.943499][T27660] team0: Port device team_slave_0 removed [ 929.960600][T27660] team0: Port device team_slave_1 removed [ 929.967496][T27660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.980355][T27660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.997047][T27660] bond2: (slave bridge1): Releasing backup interface [ 930.007198][T27660] bond6: (slave bridge2): Removing an active aggregator [ 930.016100][T27660] bond6: (slave bridge2): Releasing backup interface [ 930.023779][T27660] bond6: (slave bridge2): the permanent HWaddr of slave - 32:b7:52:19:da:09 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 930.108535][T27660] bond6: (slave bridge3): Releasing backup interface [ 930.186508][T27660] bond10: (slave gretap1): Releasing active interface [ 930.819974][T27695] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 930.894267][T27690] bond12: Removing last arp target with arp_interval on [ 931.196412][T27717] netlink: 'syz.3.5235': attribute type 14 has an invalid length. [ 931.532539][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.543203][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.552480][T27732] sctp: [Deprecated]: syz.4.5236 (pid 27732) Use of int in max_burst socket option. [ 931.552480][T27732] Use struct sctp_assoc_value instead [ 932.102348][T27749] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256 [ 932.109931][T27749] __nla_validate_parse: 66 callbacks suppressed [ 932.109949][T27749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5242'. [ 932.180879][T27749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5242'. [ 933.208530][T27806] IPVS: stopping backup sync thread 24551 ... [ 935.200882][T27763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 935.665873][T27844] sit2: entered allmulticast mode [ 935.684753][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5261'. [ 935.710978][T27851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5261'. [ 935.722979][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5261'. [ 935.750253][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5261'. [ 935.852325][T27851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.011514][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 936.049613][T27855] IPv6: NLM_F_CREATE should be specified when creating new route [ 936.073042][T27855] netlink: 'syz.2.5262': attribute type 39 has an invalid length. [ 936.109410][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 936.166553][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 936.230939][T27875] netlink: 'syz.0.5269': attribute type 21 has an invalid length. [ 936.239621][T27875] IPv6: NLM_F_CREATE should be specified when creating new route [ 936.330435][T27879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5271'. [ 936.378554][T27879] netlink: 'syz.1.5271': attribute type 2 has an invalid length. [ 936.840831][T27898] FAULT_INJECTION: forcing a failure. [ 936.840831][T27898] name failslab, interval 1, probability 0, space 0, times 0 [ 936.896312][T27898] CPU: 0 UID: 0 PID: 27898 Comm: syz.4.5276 Not tainted syzkaller #0 PREEMPT(full) [ 936.896360][T27898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 936.896378][T27898] Call Trace: [ 936.896386][T27898] [ 936.896395][T27898] dump_stack_lvl+0xe8/0x150 [ 936.896425][T27898] should_fail_ex+0x40c/0x560 [ 936.896457][T27898] should_failslab+0xa8/0x100 [ 936.896480][T27898] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 936.896508][T27898] ? skb_clone+0x212/0x3a0 [ 936.896528][T27898] ? skb_clone+0x212/0x3a0 [ 936.896556][T27898] skb_clone+0x212/0x3a0 [ 936.896581][T27898] __netlink_deliver_tap+0x413/0x860 [ 936.896616][T27898] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.896640][T27898] netlink_deliver_tap+0x19c/0x1b0 [ 936.896663][T27898] netlink_sendskb+0x68/0x140 [ 936.896686][T27898] netlink_rcv_skb+0x2a4/0x4a0 [ 936.896709][T27898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 936.896737][T27898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 936.896774][T27898] ? down_read+0x2be/0x330 [ 936.896800][T27898] genl_rcv+0x28/0x40 [ 936.896824][T27898] netlink_unicast+0x7bb/0x940 [ 936.896855][T27898] netlink_sendmsg+0x813/0xb40 [ 936.896888][T27898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.896923][T27898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 936.896953][T27898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.896972][T27898] sock_sendmsg_nosec+0x13a/0x180 [ 936.896999][T27898] ____sys_sendmsg+0x54e/0x850 [ 936.897024][T27898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.897052][T27898] ? import_iovec+0x73/0xa0 [ 936.897075][T27898] ___sys_sendmsg+0x2a5/0x360 [ 936.897095][T27898] ? __lock_acquire+0x683/0x2cf0 [ 936.897118][T27898] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.897172][T27898] ? __fget_files+0x2a/0x420 [ 936.897190][T27898] ? __fget_files+0x3a2/0x420 [ 936.897215][T27898] __x64_sys_sendmsg+0x1b1/0x290 [ 936.897237][T27898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 936.897274][T27898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.897295][T27898] do_syscall_64+0x174/0x580 [ 936.897312][T27898] ? trace_irq_disable+0x3b/0x140 [ 936.897329][T27898] ? clear_bhb_loop+0x40/0x90 [ 936.897352][T27898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.897370][T27898] RIP: 0033:0x7f62d6d9de59 [ 936.897387][T27898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.897402][T27898] RSP: 002b:00007f62d7ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.897422][T27898] RAX: ffffffffffffffda RBX: 00007f62d7025fa0 RCX: 00007f62d6d9de59 [ 936.897435][T27898] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000004 [ 936.897447][T27898] RBP: 00007f62d7ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 936.897458][T27898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.897469][T27898] R13: 00007f62d7026038 R14: 00007f62d7025fa0 R15: 00007ffc3bbb8f98 [ 936.897499][T27898] [ 937.386518][T27913] sctp: [Deprecated]: syz.4.5280 (pid 27913) Use of int in maxseg socket option. [ 937.386518][T27913] Use struct sctp_assoc_value instead [ 937.565451][T27920] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 937.587051][T27920] bond9 (unregistering): Released all slaves [ 937.854602][T27948] __nla_validate_parse: 2 callbacks suppressed [ 937.854620][T27948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5290'. [ 938.652812][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5299'. [ 938.662624][T27981] netlink: 'syz.2.5299': attribute type 30 has an invalid length. [ 938.704130][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5299'. [ 938.717325][T27982] netlink: 'syz.2.5299': attribute type 30 has an invalid length. [ 940.822192][T27948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 941.163887][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5303'. [ 941.236869][T27995] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.244118][T27995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.253411][T27995] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.260733][T27995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.317238][T27995] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 941.429220][T28000] lo speed is unknown, defaulting to 1000 [ 942.110368][T28005] dvmrp0: entered allmulticast mode [ 942.272488][T28028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5309'. [ 942.307395][T28028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5309'. [ 942.339501][T28000] lo speed is unknown, defaulting to 1000 [ 942.344066][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'. [ 942.412458][T28030] 8021q: adding VLAN 0 to HW filter on device bond13 [ 942.571430][T28030] bond2: (slave dummy0): Releasing backup interface [ 942.624488][T28030] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 942.856728][ T48] nci: nci_rsp_packet: unknown rsp opcode 0x9 [ 943.577675][T28079] netlink: 'syz.2.5323': attribute type 1 has an invalid length. [ 943.617602][T28079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 943.662234][T28081] lo speed is unknown, defaulting to 1000 [ 943.922159][T28081] lo speed is unknown, defaulting to 1000 [ 945.672725][T28039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.137376][T28106] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5329'. [ 946.289979][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'. [ 946.298922][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'. [ 946.513182][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5337'. [ 946.537149][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5337'. [ 946.628519][T28137] netlink: 'syz.0.5337': attribute type 1 has an invalid length. [ 947.011858][T28160] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5348'. [ 947.221951][T28172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5350'. [ 947.237956][T28164] 8021q: adding VLAN 0 to HW filter on device bond10 [ 947.250306][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5352'. [ 947.270030][T28164] bridge0: port 4(bond10) entered blocking state [ 947.287029][T28174] xt_TCPMSS: Only works on TCP SYN packets [ 947.313861][T28164] bridge0: port 4(bond10) entered disabled state [ 947.343780][T28164] bond10: entered allmulticast mode [ 947.382077][T28164] bond10: entered promiscuous mode [ 947.409878][T28164] bridge0: port 4(bond10) entered blocking state [ 947.416428][T28164] bridge0: port 4(bond10) entered forwarding state [ 947.434070][T28177] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5350'. [ 947.443505][T28174] bridge_slave_1: left allmulticast mode [ 947.449268][T28174] bridge_slave_1: left promiscuous mode [ 947.455143][T28174] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.465810][T28174] bridge_slave_0: left allmulticast mode [ 947.471589][T28174] bridge_slave_0: left promiscuous mode [ 947.477454][T28174] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.500999][T28186] IPv6: NLM_F_CREATE should be specified when creating new route [ 947.716218][T28194] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5355'. [ 947.793077][ T78] bridge0: port 4(bond10) entered disabled state [ 948.362310][T28223] syzkaller0: entered promiscuous mode [ 948.367834][T28223] syzkaller0: entered allmulticast mode [ 948.796124][T28239] netlink: 'syz.1.5370': attribute type 4 has an invalid length. [ 949.039385][T28257] netlink: 'syz.2.5371': attribute type 10 has an invalid length. [ 949.094815][T28258] netlink: 'syz.2.5371': attribute type 1 has an invalid length. [ 949.103156][T28258] netlink: 'syz.2.5371': attribute type 2 has an invalid length. [ 952.385331][T28243] : left promiscuous mode [ 952.912679][T28272] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 953.209729][T28285] __nla_validate_parse: 4 callbacks suppressed [ 953.209748][T28285] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5383'. [ 953.222323][T28287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5382'. [ 953.291088][T28289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5385'. [ 953.307525][T28289] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5385'. [ 953.797992][T28317] netlink: 'syz.2.5388': attribute type 111 has an invalid length. [ 953.897318][T28323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 953.917956][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 953.955719][T28320] netlink: 'syz.4.5392': attribute type 15 has an invalid length. [ 954.170989][T28333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'. [ 954.180437][T28333] hsr_slave_0: left promiscuous mode [ 954.186369][T28333] hsr_slave_1: left promiscuous mode [ 954.284997][T28337] sctp: [Deprecated]: syz.3.5395 (pid 28337) Use of int in maxseg socket option. [ 954.284997][T28337] Use struct sctp_assoc_value instead [ 954.371099][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5399'. [ 954.394910][T28346] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 954.774676][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5405'. [ 954.809902][T28357] bond11: option downdelay: invalid value (18446744073709551487) [ 954.817780][T28357] bond11: option downdelay: allowed values 0 - 2147483647 [ 954.842469][T28357] bond11 (unregistering): Released all slaves [ 955.160531][T28374] syzkaller0: entered promiscuous mode [ 955.172823][T28384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5408'. [ 955.173588][T28374] syzkaller0: entered allmulticast mode [ 955.207302][T28380] netlink: 'syz.3.5407': attribute type 322 has an invalid length. [ 955.299719][T28384] geneve3: entered promiscuous mode [ 955.824870][T28411] netlink: 'syz.0.5415': attribute type 1 has an invalid length. [ 956.144077][T28409] xt_hashlimit: size too large, truncated to 1048576 [ 958.430498][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 180 seconds [ 958.836676][ T4995] udevd[4995]: worker [23283] /devices/virtual/block/nbd0 timeout; kill it [ 958.863366][ T4995] udevd[4995]: seq 32385 '/devices/virtual/block/nbd0' killed [ 959.606987][T28411] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 959.682554][T28413] lo speed is unknown, defaulting to 1000 [ 959.956567][T28430] __nla_validate_parse: 3 callbacks suppressed [ 959.956587][T28430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 960.064933][T28438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.224234][T28413] lo speed is unknown, defaulting to 1000 [ 960.443224][T28455] netlink: 'syz.2.5425': attribute type 2 has an invalid length. [ 960.451056][T28455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5425'. [ 960.462893][T28455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5425'. [ 960.828507][T28463] netlink: 'syz.0.5428': attribute type 1 has an invalid length. [ 960.851622][T28465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 960.881387][T28463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5428'. [ 960.894642][T28463] 8021q: adding VLAN 0 to HW filter on device bond11 [ 960.921867][T28472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5429'. [ 960.941957][T28463] 8021q: adding VLAN 0 to HW filter on device bond11 [ 960.976759][T28463] bond11: (slave geneve4): making interface the new active one [ 960.986549][T28463] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 960.996517][T13144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 961.012191][T13144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 961.025725][T13144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 961.050226][T13144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 961.514583][T28499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5437'. [ 961.636153][T28503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5440'. [ 961.779494][T28507] tipc: Enabled bearer , priority 30 [ 961.815485][T28514] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 962.129855][T28537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5449'. [ 962.862886][ T5724] tipc: Node number set to 444885911 [ 963.223491][T28585] syzkaller1: entered promiscuous mode [ 963.229031][T28585] syzkaller1: entered allmulticast mode [ 963.395619][T28590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5463'. [ 963.540548][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.739676][T28607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5467'. [ 963.809993][T28611] netlink: 'syz.0.5468': attribute type 30 has an invalid length. [ 963.947813][T28616] team1: entered promiscuous mode [ 963.957909][T28616] team1: entered allmulticast mode [ 963.970482][T28616] 8021q: adding VLAN 0 to HW filter on device team1 [ 964.017241][T28618] team2: entered promiscuous mode [ 964.024649][T28618] team2: entered allmulticast mode [ 964.036824][T28618] 8021q: adding VLAN 0 to HW filter on device team2 [ 964.053290][T28622] xt_NFQUEUE: number of total queues is 0 [ 964.462392][T28632] syzkaller0: entered promiscuous mode [ 964.478186][T28632] syzkaller0: entered allmulticast mode [ 964.514783][T28642] netlink: 'syz.0.5476': attribute type 153 has an invalid length. [ 968.655365][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.132023][T28673] __nla_validate_parse: 5 callbacks suppressed [ 969.132059][T28673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5483'. [ 969.389611][T28698] openvswitch: netlink: Message has 8 unknown bytes. [ 969.522200][T28706] lo speed is unknown, defaulting to 1000 [ 969.596704][T28708] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5492'. [ 969.607413][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'. [ 969.616870][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 969.631349][T28701] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 970.125971][T28724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5497'. [ 970.274614][T28734] netlink: 'syz.4.5497': attribute type 1 has an invalid length. [ 970.320248][T28731] syzkaller1: entered promiscuous mode [ 970.326869][T28731] syzkaller1: entered allmulticast mode [ 970.528864][T28736] netlink: 'syz.0.5501': attribute type 11 has an invalid length. [ 970.616349][T28706] lo speed is unknown, defaulting to 1000 [ 970.616380][T28698] lo speed is unknown, defaulting to 1000 [ 970.738875][T28745] netlink: 'syz.0.5503': attribute type 1 has an invalid length. [ 970.812619][T28745] 8021q: adding VLAN 0 to HW filter on device bond12 [ 971.024528][T28749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5503'. [ 971.034028][T28749] netlink: 'syz.0.5503': attribute type 10 has an invalid length. [ 971.041868][T28749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5503'. [ 971.070321][T28749] dummy0: entered promiscuous mode [ 971.089814][T28698] lo speed is unknown, defaulting to 1000 [ 971.183956][T28749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5503'. [ 971.264027][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5505'. [ 971.797339][T28770] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 972.098196][T28779] bond12 (unregistering): Released all slaves [ 972.614772][T28791] syzkaller0: entered promiscuous mode [ 973.795625][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.417328][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5520'. [ 976.500932][T28813] netlink: 'syz.0.5520': attribute type 28 has an invalid length. [ 976.807925][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5526'. [ 977.231409][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 977.608360][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 977.976274][T28858] bond12 (unregistering): Released all slaves [ 978.299619][T28867] syzkaller0: entered promiscuous mode [ 978.314189][T28867] syzkaller0: entered allmulticast mode [ 978.319063][T28877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 978.444331][T28877] bond12: entered promiscuous mode [ 978.452989][T28877] 8021q: adding VLAN 0 to HW filter on device bond12 [ 978.492070][T28883] geneve5: entered promiscuous mode [ 978.497584][T28883] geneve5: entered allmulticast mode [ 978.520751][T28885] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 978.530818][T28881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.691128][T26462] lo speed is unknown, defaulting to 1000 [ 978.694198][T28893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5544'. [ 978.707671][T28893] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5544'. [ 978.717943][T26462] syz2: Port: 1 Link ACTIVE [ 978.887387][T28903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5546'. [ 978.940899][T28891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.563169][T28885] bond6: (slave gretap1): making interface the new active one [ 982.573761][T28885] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 982.593980][T28896] macvlan2: entered promiscuous mode [ 982.599671][T28896] macvlan2: entered allmulticast mode [ 982.606129][T28896] bond6: entered promiscuous mode [ 982.612038][T28896] gretap1: entered promiscuous mode [ 982.622493][T28896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 982.631979][T28896] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 982.651421][T28896] bond6: left promiscuous mode [ 982.656249][T28896] gretap1: left promiscuous mode [ 982.693033][T28905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5548'. [ 982.706764][T28914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.036927][T28924] syzkaller0: entered promiscuous mode [ 983.065366][T28924] syzkaller0: entered allmulticast mode [ 983.467085][T28950] netlink: 'syz.2.5560': attribute type 3 has an invalid length. [ 983.609517][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 983.735336][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 983.833842][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b5d0000: rx timeout, send abort [ 983.957201][T28967] tipc: Resetting bearer [ 983.982104][T28967] tipc: Resetting bearer [ 984.091706][T15447] lo speed is unknown, defaulting to 1000 [ 984.313076][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 984.323986][T28981] xt_bpf: check failed: parse error [ 984.334228][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b5d1800: rx timeout, send abort [ 984.336369][T28981] xt_bpf: check failed: parse error [ 984.345718][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b5d0000: abort rx timeout. Force session deactivation [ 984.351072][T28981] xt_bpf: check failed: parse error [ 984.363582][T28981] xt_bpf: check failed: parse error [ 984.369274][T28981] xt_bpf: check failed: parse error [ 984.374947][T28981] xt_bpf: check failed: parse error [ 984.380694][T28981] xt_bpf: check failed: parse error [ 984.386448][T28981] xt_bpf: check failed: parse error [ 984.389324][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5564'. [ 984.392109][T28981] xt_bpf: check failed: parse error [ 984.406144][T28981] xt_bpf: check failed: parse error [ 984.842605][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802b5d1800: abort rx timeout. Force session deactivation [ 985.000904][T28999] bond14 (unregistering): Released all slaves [ 985.071216][T29014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5575'. [ 985.083195][T29014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5575'. [ 985.418780][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5581'. [ 985.452890][T29033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5581'. [ 985.641476][T29040] macsec1: entered allmulticast mode [ 985.663171][T29040] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 985.957273][T29059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5588'. [ 986.378968][T29080] pim6reg: entered allmulticast mode [ 986.416921][T29080] pim6reg: left allmulticast mode [ 986.652264][T29092] netlink: 'syz.2.5597': attribute type 3 has an invalid length. [ 986.961866][T29105] netlink: 'syz.4.5602': attribute type 1 has an invalid length. [ 987.051928][T29105] bond13: entered promiscuous mode [ 987.066527][T29105] bond13: entered allmulticast mode [ 987.082722][T29105] 8021q: adding VLAN 0 to HW filter on device bond13 [ 987.159919][T29110] bridge6: entered promiscuous mode [ 987.166337][T29110] bridge6: entered allmulticast mode [ 987.174720][T29110] bond13: (slave bridge6): Enslaving as a backup interface with an up link [ 987.190303][T12145] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 987.314797][ T48] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 988.000455][T29156] 8021q: VLANs not supported on syzkaller1 [ 988.019530][T29162] netlink: 'syz.0.5620': attribute type 4 has an invalid length. [ 988.055580][T26203] lo speed is unknown, defaulting to 1000 [ 988.068288][T29162] netlink: 'syz.0.5620': attribute type 4 has an invalid length. [ 988.093778][T26203] syz2: Port: 1 Link DOWN [ 988.115983][ T5724] lo speed is unknown, defaulting to 1000 [ 988.141868][ T5724] syz2: Port: 1 Link ACTIVE [ 988.489886][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 210 seconds [ 988.662035][T29189] sctp: [Deprecated]: syz.1.5627 (pid 29189) Use of int in max_burst socket option. [ 988.662035][T29189] Use struct sctp_assoc_value instead [ 988.946973][T29200] lo speed is unknown, defaulting to 1000 [ 989.337582][T29206] lo speed is unknown, defaulting to 1000 [ 989.345752][T29200] lo speed is unknown, defaulting to 1000 [ 989.465766][T29218] __nla_validate_parse: 6 callbacks suppressed [ 989.465784][T29218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5634'. [ 989.799062][T29226] syzkaller1: entered promiscuous mode [ 989.806195][T29226] syzkaller1: entered allmulticast mode [ 990.141604][T29206] lo speed is unknown, defaulting to 1000 [ 990.886616][T29252] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5643'. [ 991.604725][T29275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5646'. [ 991.655823][T29254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5644'. [ 992.271767][T29288] syzkaller1: entered promiscuous mode [ 992.288243][T29288] syzkaller1: entered allmulticast mode [ 992.433159][T29294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5651'. [ 992.635232][T29307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5651'. [ 992.762491][T29313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 992.786840][T29310] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5659'. [ 992.803411][T29313] 8021q: adding VLAN 0 to HW filter on device bond14 [ 992.995902][T29324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5663'. [ 993.005132][T29324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5663'. [ 993.014492][T29313] lo speed is unknown, defaulting to 1000 [ 993.098548][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.107685][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.117850][T29320] bond14: option fail_over_mac: invalid value (127) [ 993.135387][T29320] bond14 (unregistering): Released all slaves [ 993.283514][T29313] lo speed is unknown, defaulting to 1000 [ 993.991691][T29368] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 993.991691][T29368] Please contact the netfilter-devel mailing list or update your nftables rules. [ 994.261145][T29351] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.274395][T29351] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.958869][T29387] lo speed is unknown, defaulting to 1000 [ 995.009058][T29400] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.050858][T29400] __nla_validate_parse: 40 callbacks suppressed [ 995.050909][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5680'. [ 995.327949][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'. [ 995.399043][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5684'. [ 995.431830][T29406] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 995.496810][T29406] bond7 (unregistering): Released all slaves [ 995.550160][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5686'. [ 995.574978][T29413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 995.587934][T29413] gretap2: entered allmulticast mode [ 995.757709][T29399] lo speed is unknown, defaulting to 1000 [ 995.768193][T29387] lo speed is unknown, defaulting to 1000 [ 996.253718][T29429] syzkaller0: entered promiscuous mode [ 996.260885][T29429] syzkaller0: entered allmulticast mode [ 996.272780][T29429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'. [ 996.349453][T29391] lo speed is unknown, defaulting to 1000 [ 996.375173][T29399] lo speed is unknown, defaulting to 1000 [ 996.825543][T29448] netlink: 'syz.1.5695': attribute type 13 has an invalid length. [ 996.972005][T29391] lo speed is unknown, defaulting to 1000 [ 998.111389][T29478] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5704'. [ 998.178899][T29478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 998.559442][T29499] lo speed is unknown, defaulting to 1000 [ 998.687287][T29501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5710'. [ 998.711852][T20765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 998.727268][T20765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 998.736993][T20765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 998.750603][T20765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 998.761563][T20765] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 998.920767][T29499] lo speed is unknown, defaulting to 1000 [ 999.570222][T29523] siw: device registration error -23 [ 999.576275][T29523] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5713'. [ 999.615270][T29525] netlink: 'syz.2.5714': attribute type 1 has an invalid length. [ 999.763253][T29533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5716'. [ 999.776609][T29533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1000.175724][T29500] lo speed is unknown, defaulting to 1000 [ 1000.383440][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1000.419196][T29554] syzkaller0: entered promiscuous mode [ 1000.424689][T29554] syzkaller0: entered allmulticast mode [ 1000.817702][T29563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1000.846420][T29564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1000.893482][T26083] Bluetooth: hci4: command tx timeout [ 1000.999231][T29500] lo speed is unknown, defaulting to 1000 [ 1001.057565][T29567] bridge_slave_0: default FDB implementation only supports local addresses [ 1001.240588][T29571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1001.285644][T29571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1001.312388][T29569] bond14 (unregistering): Released all slaves [ 1001.414585][T29567] netlink: 105 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1001.846402][T29583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.853594][T29583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.861126][T29583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.868305][T29583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.916715][T12145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1002.003042][T29596] netlink: 'syz.0.5733': attribute type 1 has an invalid length. [ 1002.070645][T29596] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1002.141336][T29596] bond13: (slave gretap0): Enslaving as a backup interface with an up link [ 1002.178681][T13144] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.378371][ T12] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1002.657699][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.668335][T29500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.680408][T29500] bridge_slave_0: entered allmulticast mode [ 1002.693030][T29500] bridge_slave_0: entered promiscuous mode [ 1002.711233][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.719005][T29500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.729699][T29500] bridge_slave_1: entered allmulticast mode [ 1002.742533][T29500] bridge_slave_1: entered promiscuous mode [ 1002.810599][T29500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.823649][T29500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.868246][T29500] team0: Port device team_slave_0 added [ 1002.877263][T29500] team0: Port device team_slave_1 added [ 1002.926263][T29637] syzkaller0: entered promiscuous mode [ 1002.933062][T29637] syzkaller0: entered allmulticast mode [ 1002.944474][T29500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.953093][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.979488][T29500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.980072][T26083] Bluetooth: hci4: command tx timeout [ 1002.991355][T29637] tipc: Enabled bearer , priority 0 [ 1002.995736][T29637] tipc: Resetting bearer [ 1002.996870][T29500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.996886][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.996913][T29500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.063440][T29636] tipc: Resetting bearer [ 1003.091040][T29636] tipc: Disabling bearer [ 1003.160366][T29500] hsr_slave_0: entered promiscuous mode [ 1003.167287][T29500] hsr_slave_1: entered promiscuous mode [ 1003.472292][T29500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.532509][T29500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.630549][T29653] syzkaller1: entered promiscuous mode [ 1003.636076][T29653] syzkaller1: entered allmulticast mode [ 1003.730139][T29500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.740722][T29500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.918697][T29674] pimreg: entered allmulticast mode [ 1003.981559][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1003.991850][T29675] lo: entered promiscuous mode [ 1003.996645][T29675] lo: entered allmulticast mode [ 1004.002341][T29675] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1004.124962][T29500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.135263][T29500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.251390][T29500] netdevsim netdevsim4 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.261126][T29500] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.885144][T29500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.904823][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1004.925535][T29500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.942821][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1004.952480][T29500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1004.963917][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.974072][T29500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1005.007537][T29500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.109863][T29692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1005.129737][T26083] Bluetooth: hci4: command tx timeout [ 1005.150522][T29500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.160658][T29693] tunl0: Caught tx_queue_len zero misconfig [ 1005.211062][T29695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1005.223006][T29500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.245703][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.253009][T12146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.310305][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.317555][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.530290][T29705] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1006.040749][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1006.107496][T29737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1006.117129][T29737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.124900][T29737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.133215][T29737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.148201][T29737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.336179][T29500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.422132][T29751] xfrm0: Caught tx_queue_len zero misconfig [ 1006.657339][T29720] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1006.949705][T29500] veth0_vlan: entered promiscuous mode [ 1007.015046][T29500] veth1_vlan: entered promiscuous mode [ 1007.216262][T29500] veth0_macvtap: entered promiscuous mode [ 1007.257293][T26083] Bluetooth: hci4: command tx timeout [ 1007.268960][T29773] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5776'. [ 1007.279807][T29500] veth1_macvtap: entered promiscuous mode [ 1007.300681][T29783] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1007.308504][T29780] syzkaller0: entered promiscuous mode [ 1007.329447][T29780] syzkaller0: entered allmulticast mode [ 1007.435528][T29500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.516574][T29500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.552551][T12146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.561328][T12146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.570497][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.581045][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.766034][T29795] tipc: Enabled bearer , priority 0 [ 1007.789156][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.833425][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.938180][T12146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.946059][T12146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.958507][T29794] tipc: Disabling bearer [ 1008.023050][T26083] Bluetooth: hci0: command 0x0406 tx timeout [ 1008.736221][T29827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1009.236106][T29841] IPVS: length: 15 != 8 [ 1009.365129][T29856] syzkaller0: entered promiscuous mode [ 1009.376174][T29856] syzkaller0: entered allmulticast mode [ 1009.396535][T29861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1009.418919][T29856] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1009.459212][T29866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1009.792432][T29874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1010.110949][T29884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1010.122886][T29881] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 1010.145461][T29881] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 1010.312562][T29888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1010.324107][T29888] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1010.498751][T29900] bond_slave_1: mtu less than device minimum [ 1010.864276][T29922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1010.929161][T29924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1011.405190][T29944] bridge8: entered promiscuous mode [ 1011.419478][T29944] bridge8: entered allmulticast mode [ 1011.504247][T29944] team0: Port device bridge8 added [ 1013.716760][T29914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1013.990755][T29981] netlink: 'syz.0.5832': attribute type 1 has an invalid length. [ 1014.105386][T29984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5836'. [ 1014.174895][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1015.641710][T30003] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5840'. [ 1015.672133][T30009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5842'. [ 1015.708765][T30005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 1015.793831][T30005] bond0: Unable to set down delay as MII monitoring is disabled [ 1015.803849][T30003] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 1015.805867][T30005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5841'. [ 1015.813736][T30003] netlink: 'syz.2.5840': attribute type 2 has an invalid length. [ 1015.904893][T30013] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5844'. [ 1016.022690][T30021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1016.061022][T30016] bond14 (unregistering): Released all slaves [ 1016.085240][T30021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1016.317746][T30034] syzkaller1: entered promiscuous mode [ 1016.328458][T30034] syzkaller1: entered allmulticast mode [ 1016.476808][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5856'. [ 1017.011166][T30073] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 1017.031886][T30073] ip6tnl1: entered allmulticast mode [ 1017.134657][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5865'. [ 1017.237943][T30082] x_tables: duplicate underflow at hook 2 [ 1017.257338][T30083] x_tables: duplicate underflow at hook 2 [ 1017.524417][T30091] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1017.576427][T30107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1017.617292][T30107] bond7: (slave veth13): Enslaving as an active interface with an up link [ 1018.503022][T30148] tipc: Enabled bearer , priority 30 [ 1018.601674][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 240 seconds [ 1019.107279][T30158] openvswitch: netlink: Flow key attr not present in new flow. [ 1019.165714][T30162] __nla_validate_parse: 7 callbacks suppressed [ 1019.165733][T30162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.227491][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.255112][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.283190][T30167] bridge_slave_1: left allmulticast mode [ 1019.305942][T30167] bridge_slave_1: left promiscuous mode [ 1019.337355][T30167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.363960][T30167] bridge_slave_0: left allmulticast mode [ 1019.370695][T30167] bridge_slave_0: left promiscuous mode [ 1019.377684][T30167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.405025][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.414285][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.544110][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1019.553185][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5886'. [ 1020.148885][T30200] syzkaller1: entered promiscuous mode [ 1020.174058][T30200] syzkaller1: entered allmulticast mode [ 1020.216696][T30207] lo speed is unknown, defaulting to 1000 [ 1020.454785][T30187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1020.672925][T30207] lo speed is unknown, defaulting to 1000 [ 1020.904662][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1021.117591][T30222] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1021.528086][T30242] gre0: entered promiscuous mode [ 1021.533094][T30242] gre0: entered allmulticast mode [ 1021.845693][T30253] bond14 (unregistering): Released all slaves [ 1021.879741][T30265] __bpf_mt_check_bytecode: 23 callbacks suppressed [ 1021.879902][T30265] xt_bpf: check failed: parse error [ 1021.978430][T30263] netlink: 'syz.3.5911': attribute type 5 has an invalid length. [ 1022.216797][T30282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5915'. [ 1022.916629][T30316] bond0: (slave team0): Releasing backup interface [ 1022.999538][T30316] team0 (unregistering): left allmulticast mode [ 1023.030343][T30316] team_slave_0: left allmulticast mode [ 1023.035875][T30316] team_slave_1: left allmulticast mode [ 1023.040964][T30324] netlink: 'syz.4.5925': attribute type 29 has an invalid length. [ 1023.083802][T30316] team0 (unregistering): Port device team_slave_0 removed [ 1023.105121][T30316] team0 (unregistering): Port device team_slave_1 removed [ 1023.297498][T30332] netlink: 'syz.2.5929': attribute type 1 has an invalid length. [ 1023.337974][T30333] tipc: Resetting bearer [ 1023.508619][T30344] tipc: Started in network mode [ 1023.513539][T30344] tipc: Node identity ac14140f, cluster identity 4711 [ 1023.521063][T30344] tipc: Enabled bearer , priority 10 [ 1023.530925][T30344] tipc: Enabling of bearer rejected, already enabled [ 1023.669905][T30354] geneve2: entered promiscuous mode [ 1023.692236][T30354] geneve2: entered allmulticast mode [ 1023.786547][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.425662][T30407] xt_l2tp: v2 doesn't support IP mode [ 1024.441917][T30404] __nla_validate_parse: 10 callbacks suppressed [ 1024.441936][T30404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1024.487052][T30404] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1024.549188][T30414] syz.3.5949: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1024.577093][T26194] tipc: Node number set to 2886997007 [ 1024.588547][T30414] CPU: 1 UID: 0 PID: 30414 Comm: syz.3.5949 Not tainted syzkaller #0 PREEMPT(full) [ 1024.588575][T30414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1024.588588][T30414] Call Trace: [ 1024.588596][T30414] [ 1024.588605][T30414] dump_stack_lvl+0xe8/0x150 [ 1024.588635][T30414] warn_alloc+0x24c/0x270 [ 1024.588667][T30414] ? stack_depot_save_flags+0x33/0x800 [ 1024.588698][T30414] ? __pfx_warn_alloc+0x10/0x10 [ 1024.588729][T30414] ? kasan_save_track+0x3e/0x80 [ 1024.588746][T30414] ? __kasan_kmalloc+0x93/0xb0 [ 1024.588765][T30414] ? xsk_setsockopt+0x52a/0x960 [ 1024.588800][T30414] ? do_sock_setsockopt+0x17c/0x1b0 [ 1024.588818][T30414] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1024.588836][T30414] ? do_syscall_64+0x174/0x580 [ 1024.588853][T30414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.588882][T30414] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1024.588941][T30414] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1024.588972][T30414] ? __kasan_kmalloc+0x93/0xb0 [ 1024.588994][T30414] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1024.589022][T30414] ? __kmalloc_cache_noprof+0x150/0x660 [ 1024.589054][T30414] vmalloc_user_noprof+0xad/0xe0 [ 1024.589083][T30414] ? xskq_create+0xbf/0x170 [ 1024.589110][T30414] xskq_create+0xbf/0x170 [ 1024.589141][T30414] xsk_init_queue+0x8a/0xe0 [ 1024.589170][T30414] xsk_setsockopt+0x52a/0x960 [ 1024.589196][T30414] ? __fget_files+0x2a/0x420 [ 1024.589217][T30414] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1024.589243][T30414] ? __pfx_aa_sk_perm+0x10/0x10 [ 1024.589270][T30414] ? aa_sock_opt_perm+0xff/0x1a0 [ 1024.589297][T30414] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1024.589322][T30414] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1024.589349][T30414] do_sock_setsockopt+0x17c/0x1b0 [ 1024.589375][T30414] __x64_sys_setsockopt+0x13d/0x1b0 [ 1024.589399][T30414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.589421][T30414] do_syscall_64+0x174/0x580 [ 1024.589437][T30414] ? trace_irq_disable+0x3b/0x140 [ 1024.589457][T30414] ? clear_bhb_loop+0x40/0x90 [ 1024.589482][T30414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.589502][T30414] RIP: 0033:0x7eff80f9de59 [ 1024.589521][T30414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.589538][T30414] RSP: 002b:00007eff81dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1024.589560][T30414] RAX: ffffffffffffffda RBX: 00007eff81225fa0 RCX: 00007eff80f9de59 [ 1024.589574][T30414] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1024.589587][T30414] RBP: 00007eff81033e6f R08: 0000000000000004 R09: 0000000000000000 [ 1024.589599][T30414] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.589612][T30414] R13: 00007eff81226038 R14: 00007eff81225fa0 R15: 00007ffd6de08aa8 [ 1024.589645][T30414] [ 1024.589668][T30414] Mem-Info: [ 1024.821051][T30418] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1024.921638][T30414] active_anon:14810 inactive_anon:0 isolated_anon:0 [ 1024.921638][T30414] active_file:3 inactive_file:43641 isolated_file:0 [ 1024.921638][T30414] unevictable:1190 dirty:169 writeback:77 [ 1024.921638][T30414] slab_reclaimable:12933 slab_unreclaimable:205910 [ 1024.921638][T30414] mapped:30126 shmem:4374 pagetables:1638 [ 1024.921638][T30414] sec_pagetables:0 bounce:0 [ 1024.921638][T30414] kernel_misc_reclaimable:0 [ 1024.921638][T30414] free:1200882 free_pcp:11463 free_cma:0 [ 1024.966959][T30414] Node 0 active_anon:59740kB inactive_anon:0kB active_file:12kB inactive_file:174364kB unevictable:2724kB isolated(anon):0kB isolated(file):0kB mapped:120004kB dirty:676kB writeback:208kB shmem:15960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18732kB pagetables:6400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1025.001502][T30414] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1025.063114][T30414] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.095596][T30422] netlink: 'syz.3.5949': attribute type 10 has an invalid length. [ 1025.103960][T30414] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1025.109761][T30414] Node 0 DMA32 free:847364kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60040kB inactive_anon:0kB active_file:12kB inactive_file:174364kB unevictable:1624kB writepending:184kB zspages:0kB present:3129332kB managed:2551444kB mlocked:88kB bounce:0kB free_pcp:39660kB local_pcp:18188kB free_cma:0kB [ 1025.145894][T30422] netlink: 'syz.3.5949': attribute type 10 has an invalid length. [ 1025.181284][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1025.182886][T30414] lowmem_reserve[]: 0 0 0 0 0 [ 1025.194920][T30414] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1025.224206][T30414] lowmem_reserve[]: 0 0 0 0 0 [ 1025.229362][T30414] Node 1 Normal free:3941260kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6296kB local_pcp:6296kB free_cma:0kB [ 1025.261971][T30414] lowmem_reserve[]: 0 0 0 0 0 [ 1025.309932][T30414] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1025.324977][T30419] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1025.329593][T30414] Node 0 DMA32: 1522*4kB (UME) 914*8kB (UME) 500*16kB (UME) 197*32kB (UME) 375*64kB (UM) 147*128kB (UM) 47*256kB (U) 24*512kB (UME) 13*1024kB (UE) 10*2048kB (UME) 177*4096kB (UM) = 853624kB [ 1025.431218][T30414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1025.494585][T30414] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3941260kB [ 1025.547564][T30441] Cannot find set identified by id 0 to match [ 1025.661048][T30414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.671526][T30414] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1025.728955][T30414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.788499][T30414] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1025.797873][T30414] 44964 total pagecache pages [ 1025.802573][T30414] 0 pages in swap cache [ 1025.806732][T30414] Free swap = 124996kB [ 1025.810906][T30414] Total swap = 124996kB [ 1025.815073][T30414] 2097051 pages RAM [ 1025.818889][T30414] 0 pages HighMem/MovableOnly [ 1025.819154][T30451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5961'. [ 1025.823564][T30414] 427419 pages reserved [ 1025.823578][T30414] 0 pages cma reserved [ 1026.015411][T20765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1026.031589][T20765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1026.040182][T20765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1026.058940][T20765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1026.066758][T20765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1026.543083][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1026.585167][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1026.801931][T30455] lo speed is unknown, defaulting to 1000 [ 1026.923606][T30500] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1026.963086][T30499] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1026.970580][T30499] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1027.146870][T30507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5975'. [ 1027.162354][T30455] lo speed is unknown, defaulting to 1000 [ 1027.166698][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5975'. [ 1027.438863][T30528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1027.499069][T30527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1027.753316][T30546] netlink: 'syz.2.5983': attribute type 2 has an invalid length. [ 1028.064225][T30455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.078798][T30455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.086537][T30455] bridge_slave_0: entered allmulticast mode [ 1028.095595][T30455] bridge_slave_0: entered promiscuous mode [ 1028.108833][T30455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.116278][T30455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.124173][T30455] bridge_slave_1: entered allmulticast mode [ 1028.133027][T30455] bridge_slave_1: entered promiscuous mode [ 1028.178333][T30455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.194195][T30455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.239654][T30455] team0: Port device team_slave_0 added [ 1028.264291][T30455] team0: Port device team_slave_1 added [ 1028.328330][T20765] Bluetooth: hci5: command tx timeout [ 1028.371876][T30561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.391321][T30455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.398316][T30455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.425070][T30455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.437890][T30455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.444857][T30455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.490097][T30455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.570029][T30455] hsr_slave_0: entered promiscuous mode [ 1028.577130][T30455] hsr_slave_1: entered promiscuous mode [ 1028.595929][T30455] debugfs: 'hsr0' already exists in 'hsr' [ 1028.601704][T30455] Cannot create hsr debugfs directory [ 1028.722481][T30567] syzkaller0: entered promiscuous mode [ 1028.727993][T30567] syzkaller0: entered allmulticast mode [ 1028.798995][T30455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1028.978665][T30455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1029.200783][T30455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1029.384105][T30455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1030.089261][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1030.408288][T20765] Bluetooth: hci5: command tx timeout [ 1030.463918][T30530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1030.519004][T30455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1030.650172][T30455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1030.689400][T30582] TC_ACT_REPEAT abuse ? [ 1030.704357][T30455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1030.728944][T30455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1030.738044][T30455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1030.760714][T30455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1030.769394][T30455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1030.816572][T30455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.934507][T30587] bridge0: entered promiscuous mode [ 1030.945888][T30587] bridge0: entered allmulticast mode [ 1030.963978][T30587] team0: Port device bridge0 added [ 1031.066718][T30604] netlink: 'syz.2.6000': attribute type 1 has an invalid length. [ 1031.156190][T30455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.167704][T30612] netlink: 'syz.3.6003': attribute type 16 has an invalid length. [ 1031.175666][T30612] netlink: 'syz.3.6003': attribute type 3 has an invalid length. [ 1031.183482][T30612] __nla_validate_parse: 5 callbacks suppressed [ 1031.183498][T30612] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.6003'. [ 1031.251886][T30455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.274397][T12146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.281644][T12146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.314796][T12146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.322159][T12146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.533404][T30625] sch_tbf: burst 0 is lower than device tunl0 mtu (1280) ! [ 1032.549562][T30455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.566817][T20765] Bluetooth: hci5: command tx timeout [ 1032.617327][T30455] veth0_vlan: entered promiscuous mode [ 1032.629092][T30455] veth1_vlan: entered promiscuous mode [ 1032.656947][T30455] veth0_macvtap: entered promiscuous mode [ 1032.718146][T30455] veth1_macvtap: entered promiscuous mode [ 1032.826640][T30455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.879925][T30676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1032.924870][T30676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1032.949002][T30455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.980169][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.012697][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.044340][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.072710][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.089104][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1033.106279][T30687] netlink: 'syz.3.6022': attribute type 2 has an invalid length. [ 1033.110556][T30686] ipvlan2: entered allmulticast mode [ 1033.120943][T30686] syz_tun: entered allmulticast mode [ 1033.369203][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.400968][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.495678][ T3337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.513617][T30701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 1033.544436][ T3337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.812064][T30705] bond8: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1033.834150][T30705] bond8 (unregistering): Released all slaves [ 1033.997378][T30709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1034.552702][T26083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1034.566770][T26083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.577223][ T4945] Bluetooth: hci5: command tx timeout [ 1034.597387][T26083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.611514][T26083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1034.624446][T26083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1034.707221][T30725] sctp: [Deprecated]: syz.4.6029 (pid 30725) Use of int in max_burst socket option. [ 1034.707221][T30725] Use struct sctp_assoc_value instead [ 1035.543186][T30750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1035.588798][T30750] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1035.597048][T30721] lo speed is unknown, defaulting to 1000 [ 1035.644587][T30758] tipc: Enabling of bearer rejected, failed to enable media [ 1035.677764][T30758] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1035.862905][T30766] netlink: 'syz.2.6038': attribute type 1 has an invalid length. [ 1035.870690][T30766] netlink: 'syz.2.6038': attribute type 2 has an invalid length. [ 1035.909981][T30721] lo speed is unknown, defaulting to 1000 [ 1036.023032][T30776] macsec0: entered promiscuous mode [ 1036.029866][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1036.067236][T30776] veth1_macvtap: left promiscuous mode [ 1036.134759][T30776] macsec0 (unregistering): left promiscuous mode [ 1036.689947][T30721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.707348][T30721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.711797][T30769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.724411][T30721] bridge_slave_0: entered allmulticast mode [ 1036.734390][T20765] Bluetooth: hci0: command tx timeout [ 1036.745384][T30721] bridge_slave_0: entered promiscuous mode [ 1036.785929][T30721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.804153][T30721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.818760][T30721] bridge_slave_1: entered allmulticast mode [ 1036.826580][T30721] bridge_slave_1: entered promiscuous mode [ 1037.030452][T30721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.042752][T30721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.083420][T30816] netlink: 'syz.4.6049': attribute type 6 has an invalid length. [ 1037.086008][T30721] team0: Port device team_slave_0 added [ 1037.113228][T30721] team0: Port device team_slave_1 added [ 1037.136231][T30816] IPv6: NLM_F_CREATE should be specified when creating new route [ 1037.213851][T30721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.227319][T30721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.256862][T30721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.288290][T30721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.302106][T30721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.334426][T30721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.439024][T30820] lo speed is unknown, defaulting to 1000 [ 1037.488868][T30824] xt_HMARK: spi-set and port-set can't be combined [ 1037.519214][ T78] bond0: left allmulticast mode [ 1037.524290][ T78] : left allmulticast mode [ 1037.532841][ T78] bond_slave_1: left allmulticast mode [ 1037.544122][ T78] bridge0: port 3(bond0) entered disabled state [ 1037.559960][ T78] bridge_slave_1: left allmulticast mode [ 1037.565659][ T78] bridge_slave_1: left promiscuous mode [ 1037.571883][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.595096][T30826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6052'. [ 1037.607630][T30826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.941477][ T78] bond0 (unregistering): (slave 30): Releasing backup interface [ 1037.949717][ T78] : left promiscuous mode [ 1037.957020][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.966107][ T78] bond_slave_1: left promiscuous mode [ 1037.971873][ T78] bond0 (unregistering): Released all slaves [ 1037.983614][ T78] bond1 (unregistering): Released all slaves [ 1038.003066][ T78] bond2 (unregistering): Released all slaves [ 1038.019068][ T78] bond3 (unregistering): Released all slaves [ 1038.044435][ T78] bond4 (unregistering): Released all slaves [ 1038.060960][ T78] bond5 (unregistering): Released all slaves [ 1038.077182][ T78] bond6 (unregistering): Released all slaves [ 1038.097680][ T78] bond7 (unregistering): Released all slaves [ 1038.113869][ T78] bond8 (unregistering): Released all slaves [ 1038.129728][ T78] bond9 (unregistering): Released all slaves [ 1038.176424][ T78] bond10 (unregistering): Released all slaves [ 1038.195708][ T78] bond11 (unregistering): Released all slaves [ 1038.208953][ T78] bond12 (unregistering): Released all slaves [ 1038.223178][ T78] bond13 (unregistering): (slave dummy0): Releasing backup interface [ 1038.233265][ T78] bond13 (unregistering): Released all slaves [ 1038.259565][T30721] hsr_slave_0: entered promiscuous mode [ 1038.266028][T30721] hsr_slave_1: entered promiscuous mode [ 1038.273159][T30721] debugfs: 'hsr0' already exists in 'hsr' [ 1038.278944][T30721] Cannot create hsr debugfs directory [ 1038.284605][T30820] lo speed is unknown, defaulting to 1000 [ 1038.611818][ T78] ´: left promiscuous mode [ 1038.809059][T20765] Bluetooth: hci0: command tx timeout [ 1038.837145][ T78] : left promiscuous mode [ 1039.017855][ T78] tipc: Disabling bearer [ 1039.024157][ T78] tipc: Left network mode [ 1039.342067][T30832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1039.524786][ T78] batman_adv: batadv0: Removing interface: macvtap1 [ 1039.948646][T30808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1039.961104][T30840] bridge9: entered promiscuous mode [ 1040.007334][T30840] bridge9: entered allmulticast mode [ 1040.093480][T30840] team0: Port device bridge9 added [ 1040.162640][T30841] bridge10: entered promiscuous mode [ 1040.181871][T30841] bridge10: entered allmulticast mode [ 1040.205278][T30841] team0: Port device bridge10 added [ 1040.234441][T30721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1040.245052][T30850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1040.257372][T30850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1040.272817][T30721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1040.292311][T30721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1040.328543][T30721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.340437][T30721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1040.398431][T30721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1040.418716][T30721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1040.434666][T30721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1040.836334][T30721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.856858][T30885] x_tables: duplicate entry at hook 1 [ 1040.888202][T30721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.888606][T20765] Bluetooth: hci0: command tx timeout [ 1040.904600][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.911817][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.925021][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.932276][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.068261][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.090385][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.183633][T30893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6069'. [ 1041.213203][T30893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6069'. [ 1041.479373][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1042.336517][T30910] netlink: 'syz.4.6070': attribute type 12 has an invalid length. [ 1042.373179][T25159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.413482][T25159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.970069][T20765] Bluetooth: hci0: command tx timeout [ 1043.426109][ T78] IPVS: stop unused estimator thread 0... [ 1043.550043][T30994] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1044.100837][T31012] ip6gre1: entered promiscuous mode [ 1044.126685][T31012] ip6gre1: entered allmulticast mode [ 1044.343746][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1044.462414][T31032] xt_hashlimit: max too large, truncated to 1048576 [ 1044.469231][T31032] xt_hashlimit: overflow, try lower: 137438953472/140737488355336 [ 1044.625880][T31037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1044.639594][T31037] netlink: 766 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1044.713544][T30721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.824494][T30721] veth0_vlan: entered promiscuous mode [ 1044.824819][T31042] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 1044.895257][T30721] veth1_vlan: entered promiscuous mode [ 1045.020988][T30721] veth0_macvtap: entered promiscuous mode [ 1045.039899][T30721] veth1_macvtap: entered promiscuous mode [ 1045.105263][T30721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.144576][T30721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.167935][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.217389][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.246370][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.281233][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.339511][T31062] netlink: 'syz.4.6100': attribute type 1 has an invalid length. [ 1045.376453][T10088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.401284][T10088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.427983][T31062] bond1: (slave geneve4): making interface the new active one [ 1045.438998][T31062] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 1045.472349][ T78] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.494285][ T78] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.505881][ T78] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.515809][ T78] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1045.515816][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.551463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.782637][T31080] tipc: Enabled bearer , priority 0 [ 1045.819063][T31080] tipc: Disabling bearer [ 1046.036313][T31091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1047.357103][T31106] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1047.403692][T31106] syzkaller0: entered promiscuous mode [ 1047.428118][T31106] syzkaller0: entered allmulticast mode [ 1047.440082][T31138] tipc: Enabling of bearer rejected, failed to enable media [ 1047.737677][T31147] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6121'. [ 1047.806410][T31149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1047.842063][T31149] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1048.345129][T31168] sock: sock_set_timeout: `syz.2.6127' (pid 31168) tries to set negative timeout [ 1048.532486][T31174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6128'. [ 1048.652881][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 270 seconds [ 1049.170518][T31199] lo speed is unknown, defaulting to 1000 [ 1049.550004][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1049.591514][T31224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.913383][T31199] lo speed is unknown, defaulting to 1000 [ 1050.614545][T31284] xt_limit: Overflow, try lower: 268435456/134217728 [ 1050.790578][T31292] FAULT_INJECTION: forcing a failure. [ 1050.790578][T31292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.814304][T31292] CPU: 0 UID: 0 PID: 31292 Comm: syz.2.6160 Not tainted syzkaller #0 PREEMPT(full) [ 1050.814331][T31292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.814343][T31292] Call Trace: [ 1050.814350][T31292] [ 1050.814359][T31292] dump_stack_lvl+0xe8/0x150 [ 1050.814387][T31292] should_fail_ex+0x40c/0x560 [ 1050.814417][T31292] _copy_to_user+0x31/0xb0 [ 1050.814439][T31292] simple_read_from_buffer+0xe1/0x170 [ 1050.814464][T31292] proc_fail_nth_read+0x1bb/0x230 [ 1050.814486][T31292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.814507][T31292] ? rw_verify_area+0x24a/0x4c0 [ 1050.814524][T31292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1050.814534][T31292] vfs_read+0x213/0xa80 [ 1050.814549][T31292] ? __pfx___mutex_lock+0x10/0x10 [ 1050.814568][T31292] ? __pfx_vfs_read+0x10/0x10 [ 1050.814581][T31292] ? __fget_files+0x2a/0x420 [ 1050.814594][T31292] ? __fget_files+0x3a2/0x420 [ 1050.814605][T31292] ? __fget_files+0x2a/0x420 [ 1050.814629][T31292] ksys_read+0x150/0x270 [ 1050.814652][T31292] ? __pfx_ksys_read+0x10/0x10 [ 1050.814682][T31292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.814700][T31292] do_syscall_64+0x174/0x580 [ 1050.814710][T31292] ? trace_irq_disable+0x3b/0x140 [ 1050.814721][T31292] ? clear_bhb_loop+0x40/0x90 [ 1050.814734][T31292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.814745][T31292] RIP: 0033:0x7f99a835e68e [ 1050.814756][T31292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1050.814765][T31292] RSP: 002b:00007f99a9303fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1050.814777][T31292] RAX: ffffffffffffffda RBX: 00007f99a93046c0 RCX: 00007f99a835e68e [ 1050.814785][T31292] RDX: 000000000000000f RSI: 00007f99a93040a0 RDI: 0000000000000004 [ 1050.814791][T31292] RBP: 00007f99a9304090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.814798][T31292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.814804][T31292] R13: 00007f99a8626038 R14: 00007f99a8625fa0 R15: 00007ffcce06c148 [ 1050.814821][T31292] [ 1051.149393][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.157268][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.263251][T31305] netlink: 'syz.1.6165': attribute type 10 has an invalid length. [ 1051.277594][T31305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.287052][T31305] team0: Port device bond0 added [ 1051.342339][T31304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6163'. [ 1051.880131][T31342] ªªªªª!: renamed from virt_wifi0 [ 1052.045456][T31342] syzkaller0: entered promiscuous mode [ 1052.050996][T31342] syzkaller0: entered allmulticast mode [ 1052.253051][T26083] Bluetooth: hci0: command 0x0405 tx timeout [ 1052.845393][T31371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6183'. [ 1052.992160][T31374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6184'. [ 1054.487137][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1054.498316][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.524457][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.624654][T31382] syzkaller0: entered promiscuous mode [ 1056.666732][T31382] syzkaller0: entered allmulticast mode [ 1056.761708][T31390] lo speed is unknown, defaulting to 1000 [ 1056.871618][T31402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6189'. [ 1056.881367][T31402] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6189'. [ 1057.049416][T31414] netlink: 'syz.2.6193': attribute type 1 has an invalid length. [ 1057.049927][T31416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1057.121262][T31416] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1057.130434][T31416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1057.164579][T31414] bond14: entered promiscuous mode [ 1057.176659][T31414] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1057.244284][T31421] vlan3: entered allmulticast mode [ 1057.256829][T31421] bond14: entered allmulticast mode [ 1057.347290][T31433] netlink: 'syz.3.6196': attribute type 1 has an invalid length. [ 1057.355182][T31424] bond14: (slave bridge11): making interface the new active one [ 1057.363137][T31424] bridge11: entered promiscuous mode [ 1057.368694][T31424] bridge11: entered allmulticast mode [ 1057.375431][T31424] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 1057.414409][T31422] syzkaller0: entered promiscuous mode [ 1057.420179][T31422] syzkaller0: entered allmulticast mode [ 1057.443510][T31390] lo speed is unknown, defaulting to 1000 [ 1057.452456][T31430] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1057.466673][T31430] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1057.506333][T31433] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1057.532560][T31438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1057.595321][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1057.754194][T31443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1060.819747][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1060.985768][T31438] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1061.077778][T31451] gtp1: entered promiscuous mode [ 1061.097033][T31451] gtp1: entered allmulticast mode [ 1061.171581][T31457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6200'. [ 1061.489484][T31472] SET target dimension over the limit! [ 1061.599652][T31476] pim6reg1: entered promiscuous mode [ 1061.620657][T31476] pim6reg1: entered allmulticast mode [ 1062.723911][T31501] veth0_to_bridge: entered allmulticast mode [ 1063.545443][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1063.611816][T31543] syzkaller1: entered promiscuous mode [ 1063.630522][T31543] syzkaller1: entered allmulticast mode [ 1063.658780][T31543] Bluetooth: MGMT ver 1.23 [ 1063.910137][T31555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1063.939677][T31555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1064.114286][T31562] netlink: 'syz.0.6226': attribute type 1 has an invalid length. [ 1064.178557][T31562] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6226'. [ 1064.199679][T31562] netlink: 'syz.0.6226': attribute type 1 has an invalid length. [ 1064.223942][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.247916][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.282913][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.303536][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.348536][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.404385][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 1064.465357][T31588] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 1064.480387][T31588] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 1064.510921][T31588] veth0_virt_wifi: entered allmulticast mode [ 1064.529209][T31588] veth0_virt_wifi: entered promiscuous mode [ 1064.541765][T31588] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 1064.549399][T31588] bridge0: port 5(veth0_virt_wifi) entered forwarding state [ 1064.573811][T31586] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1064.677545][T31595] netlink: 'syz.4.6235': attribute type 1 has an invalid length. [ 1064.712538][T31595] netlink: 'syz.4.6235': attribute type 1 has an invalid length. [ 1064.958743][T31615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1065.024544][T31619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1065.185633][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1065.513727][T31636] tipc: Resetting bearer [ 1065.548305][T31636] tipc: Disabling bearer [ 1066.064770][T31663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1066.073691][T31663] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1066.204807][T31669] netlink: 'syz.2.6253': attribute type 4 has an invalid length. [ 1066.336900][T31675] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1066.512564][T31681] lo speed is unknown, defaulting to 1000 [ 1066.784885][T31689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.792917][T31689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.969068][T31689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.984423][T31689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.124671][T31681] lo speed is unknown, defaulting to 1000 [ 1067.124691][T30937] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.139418][T30937] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.182048][T30937] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.244735][T30937] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.771585][T31728] tap0: tun_chr_ioctl cmd 1074025677 [ 1067.777163][T31728] tap0: linktype set to 768 [ 1068.301444][T31744] bond1 (unregistering): Released all slaves [ 1068.455540][T31752] xt_hashlimit: size too large, truncated to 1048576 [ 1069.160250][T31769] block nbd12: server does not support multiple connections per device. [ 1069.178995][T31769] block nbd12: shutting down sockets [ 1069.202356][T31774] lo speed is unknown, defaulting to 1000 [ 1069.219767][T31775] __nla_validate_parse: 1 callbacks suppressed [ 1069.219785][T31775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1069.297472][T31779] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1069.307549][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1069.566650][T31792] netlink: 'syz.4.6288': attribute type 4 has an invalid length. [ 1069.577402][T31794] netlink: 'syz.2.6286': attribute type 21 has an invalid length. [ 1069.597023][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6289'. [ 1069.623630][T31794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6286'. [ 1069.632850][T31792] netlink: 'syz.4.6288': attribute type 4 has an invalid length. [ 1069.659614][T31794] netlink: 'syz.2.6286': attribute type 1 has an invalid length. [ 1069.682346][T31774] lo speed is unknown, defaulting to 1000 [ 1069.691758][T31792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6288'. [ 1070.015523][T31768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1070.024281][T31768] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1070.608697][T31768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1070.622385][T31768] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1070.891409][T31768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1070.939807][T31768] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1071.336450][T31768] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1071.374176][T31768] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1071.754520][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1072.324182][T31899] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6320'. [ 1072.350338][T31891] A link change request failed with some changes committed already. Interface ªªªªª! may have been left with an inconsistent configuration, please check. [ 1072.395740][T31893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1072.760437][T31916] netlink: 'syz.2.6326': attribute type 21 has an invalid length. [ 1072.826715][T31922] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1073.010362][T31930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1073.024788][T31930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.096443][T31931] ip6gre1: entered promiscuous mode [ 1073.104480][T31931] ip6gre1: entered allmulticast mode [ 1073.162928][T31938] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1073.391603][T31950] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1073.431035][T31947] netlink: 'syz.2.6332': attribute type 1 has an invalid length. [ 1073.632833][T31947] bond15: entered promiscuous mode [ 1073.652112][T31947] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1073.687808][T31951] ipvlan2: entered allmulticast mode [ 1073.693166][T31951] bond15: entered allmulticast mode [ 1073.709633][T31964] ipvlan3: entered allmulticast mode [ 1073.950931][T31978] bond16 (unregistering): Released all slaves [ 1073.981626][T31982] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1074.043837][T31983] ip6gre1: entered promiscuous mode [ 1074.054871][T31983] ip6gre1: entered allmulticast mode [ 1074.253733][T31995] openvswitch: netlink: IP tunnel TTL not specified. [ 1074.261591][T31995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.291542][T31992] __nla_validate_parse: 4 callbacks suppressed [ 1074.291559][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6344'. [ 1074.910935][T32012] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1074.946697][T32015] lo speed is unknown, defaulting to 1000 [ 1075.377912][T32015] lo speed is unknown, defaulting to 1000 [ 1075.478718][T32036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1075.518168][T32036] netlink: 'syz.0.6358': attribute type 1 has an invalid length. [ 1075.527211][T32036] netlink: 'syz.0.6358': attribute type 2 has an invalid length. [ 1076.087778][T32059] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6361'. [ 1076.121946][T32053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6361'. [ 1076.236635][T32053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.247145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.267818][T30937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.293039][T32053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.320958][T32053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.347603][T32053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.934147][T32069] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1077.219435][T32078] netlink: 'syz.0.6366': attribute type 1 has an invalid length. [ 1077.489934][T32087] bond1 (unregistering): Released all slaves [ 1077.577859][T32086] bond1: (slave gretap1): making interface the new active one [ 1077.614557][T32086] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1077.640400][T32078] macvlan2: entered promiscuous mode [ 1077.645750][T32078] macvlan2: entered allmulticast mode [ 1077.652132][T32078] bond1: entered promiscuous mode [ 1077.657217][T32078] gretap1: entered promiscuous mode [ 1077.663334][T32078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1077.671237][T32078] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1077.715271][T32078] bond1: left promiscuous mode [ 1077.720437][T32078] gretap1: left promiscuous mode [ 1077.819677][T32092] syzkaller0: entered promiscuous mode [ 1077.839398][T32092] syzkaller0: entered allmulticast mode [ 1077.861170][T32095] xt_hashlimit: size too large, truncated to 1048576 [ 1078.312910][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1078.336019][T32103] netlink: 'syz.0.6373': attribute type 1 has an invalid length. [ 1078.359908][ C0] net_ratelimit: 258 callbacks suppressed [ 1078.359929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.804205][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 300 seconds [ 1078.888304][T32103] gretap2: entered allmulticast mode [ 1078.909659][T32103] bond2: (slave gretap2): making interface the new active one [ 1078.919228][T32103] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1078.963854][T32114] lo speed is unknown, defaulting to 1000 [ 1079.003255][T32119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6378'. [ 1079.164566][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1079.301617][T32135] netlink: 'syz.0.6384': attribute type 1 has an invalid length. [ 1079.380029][T32135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1079.476083][T32139] openvswitch: netlink: Missing valid actions attribute. [ 1079.486202][T32144] netlink: 'syz.0.6384': attribute type 3 has an invalid length. [ 1079.506144][T32139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.522454][T32135] bond3: (slave geneve2): making interface the new active one [ 1079.592864][T32135] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1079.736235][T32114] lo speed is unknown, defaulting to 1000 [ 1080.014954][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1080.206847][T32159] netlink: 'syz.3.6386': attribute type 10 has an invalid length. [ 1080.259831][T32159] geneve1: entered promiscuous mode [ 1080.361381][T32159] geneve1: entered allmulticast mode [ 1080.437460][T32171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6389'. [ 1080.449963][T32159] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1080.469801][T32159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.552617][T32167] netlink: 'syz.2.6388': attribute type 4 has an invalid length. [ 1080.610363][T32179] netlink: 'syz.2.6388': attribute type 4 has an invalid length. [ 1080.782364][T32170] lo speed is unknown, defaulting to 1000 [ 1080.902177][T32167] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6388'. [ 1081.110064][T32176] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1081.402864][T32170] lo speed is unknown, defaulting to 1000 [ 1081.929653][T30933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.046654][T26083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1082.077253][T26083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1082.089394][T26083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1082.100965][T26083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1082.126266][T26083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1082.226913][T20765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1082.250248][T20765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1082.270071][T20765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1082.282281][T20765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1082.318291][T20765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1082.710380][T32212] syzkaller0: entered promiscuous mode [ 1082.739703][T32212] syzkaller0: entered allmulticast mode [ 1082.760538][T32219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6403'. [ 1083.296023][T32208] lo speed is unknown, defaulting to 1000 [ 1083.753420][T31328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.799241][T32208] lo speed is unknown, defaulting to 1000 [ 1083.827356][T32239] gretap0: entered promiscuous mode [ 1083.832988][T32239] vlan2: entered promiscuous mode [ 1084.073146][T31328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.183248][T32251] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1084.274465][T32257] pim6reg: entered allmulticast mode [ 1084.364530][T31328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.408196][T26083] Bluetooth: hci1: command tx timeout [ 1084.577647][T32266] lo speed is unknown, defaulting to 1000 [ 1084.722791][T32274] netlink: 'syz.0.6418': attribute type 1 has an invalid length. [ 1084.733804][T31328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.734465][T32274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1084.799290][T32274] netlink: 'syz.0.6418': attribute type 2 has an invalid length. [ 1084.821585][T32274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1084.964153][T32266] lo speed is unknown, defaulting to 1000 [ 1085.100964][T32281] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6421'. [ 1085.411409][T32287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6422'. [ 1085.444462][T32208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.452487][T32208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.460139][T32208] bridge_slave_0: entered allmulticast mode [ 1085.520397][T32208] bridge_slave_0: entered promiscuous mode [ 1085.532503][T32208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.540567][T32208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.554779][T32208] bridge_slave_1: entered allmulticast mode [ 1085.572590][T32208] bridge_slave_1: entered promiscuous mode [ 1086.305200][T32293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1086.582620][T26083] Bluetooth: hci1: command tx timeout [ 1086.607801][T31328] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1086.750421][T31328] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1086.763538][T31328] geneve1 (unregistering): left allmulticast mode [ 1086.825979][T31328] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1086.847883][T31328] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1086.857683][T31328] bridge3 (unregistering): left promiscuous mode [ 1086.864384][T31328] bridge3 (unregistering): left allmulticast mode [ 1086.893506][T31328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.903203][T31328] bond_slave_0: left allmulticast mode [ 1086.923464][T31328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.933170][T31328] bond_slave_1: left allmulticast mode [ 1086.941314][T31328] bond0 (unregistering): Released all slaves [ 1086.956258][T31328] bond1 (unregistering): (slave veth7): Releasing backup interface [ 1086.972384][T31328] bond1 (unregistering): Released all slaves [ 1086.996027][T31328] bond2 (unregistering): Released all slaves [ 1087.015561][T31328] bond3 (unregistering): Released all slaves [ 1087.042904][T31328] bond4 (unregistering): Released all slaves [ 1087.063851][T31328] bond5 (unregistering): Released all slaves [ 1087.091958][T31328] bond6 (unregistering): Released all slaves [ 1087.113243][T31328] bond7 (unregistering): (slave veth13): Releasing backup interface [ 1087.134254][T31328] bond7 (unregistering): Released all slaves [ 1087.155588][T31328] bond8 (unregistering): Released all slaves [ 1087.254735][T32208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.347879][T32208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.563329][T31328] tipc: Left network mode [ 1087.577628][T32312] syzkaller0: entered promiscuous mode [ 1087.599745][T32312] syzkaller0: entered allmulticast mode [ 1087.636937][T32208] team0: Port device team_slave_0 added [ 1087.667735][T32208] team0: Port device team_slave_1 added [ 1088.030644][T32319] tipc: Enabled bearer , priority 0 [ 1088.165264][T32208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.174994][T32331] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1088.211237][T32208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.237233][T32208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.249873][T32208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.256845][T32208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.317034][T32208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.483696][T32306] tipc: Resetting bearer [ 1088.583303][T32306] tipc: Disabling bearer [ 1088.649003][T26083] Bluetooth: hci1: command tx timeout [ 1088.649036][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1088.717322][T32323] syzkaller0: entered promiscuous mode [ 1088.726743][T32323] syzkaller0: entered allmulticast mode [ 1088.851292][T32353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6433'. [ 1089.091620][T32348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1089.413349][T32368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6435'. [ 1090.739635][T26083] Bluetooth: hci1: command tx timeout [ 1092.863680][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1093.193929][T32208] hsr_slave_0: entered promiscuous mode [ 1093.214869][T32208] hsr_slave_1: entered promiscuous mode [ 1093.232478][T32208] debugfs: 'hsr0' already exists in 'hsr' [ 1093.251532][T32208] Cannot create hsr debugfs directory [ 1093.319901][T32380] bond2 (unregistering): Released all slaves [ 1093.468970][T32383] syzkaller0: entered promiscuous mode [ 1093.474525][T32383] syzkaller0: entered allmulticast mode [ 1093.758203][T32403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1093.999412][T32421] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6446'. [ 1094.145390][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6447'. [ 1094.170957][T32427] sctp: [Deprecated]: syz.1.6447 (pid 32427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.170957][T32427] Use struct sctp_sack_info instead [ 1094.222280][T32430] sctp: [Deprecated]: syz.1.6447 (pid 32430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1094.222280][T32430] Use struct sctp_sack_info instead [ 1094.467769][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1095.104938][T31328] hsr_slave_0: left promiscuous mode [ 1095.117049][T31328] hsr_slave_1: left promiscuous mode [ 1095.212126][T31328] veth0_macvtap: left promiscuous mode [ 1095.843988][T32494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6457'. [ 1096.238406][T32459] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1096.440433][T32499] veth0: entered promiscuous mode [ 1096.457102][T32499] veth0: entered allmulticast mode [ 1096.662158][T32503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6460'. [ 1096.752388][T32522] netlink: 'syz.0.6462': attribute type 9 has an invalid length. [ 1097.125112][T32532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1097.176407][T23842] team_slave_0: entered promiscuous mode [ 1097.184821][T23842] team_slave_1: entered promiscuous mode [ 1097.330763][T32540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1097.406511][T32540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1097.793128][T31328] IPVS: stop unused estimator thread 0... [ 1097.835741][T32208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1097.979648][T32208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1097.987645][T32208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1098.021180][T32208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1098.077679][T32208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1098.098624][T32208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1098.143538][T32576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1098.169503][T32208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1098.219942][T32208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1098.381874][T32576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1098.460865][T32585] ipvlan2: entered allmulticast mode [ 1098.475179][T32585] bond2: entered allmulticast mode [ 1098.533277][T32592] bond2: (slave ipip0): refused to change device type [ 1098.657042][T32575] tipc: Enabling of bearer rejected, already enabled [ 1098.859506][T32208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.966027][T32208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.983017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.990195][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.006964][T30938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.014255][T30938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.212058][T32613] lo speed is unknown, defaulting to 1000 [ 1099.658960][T32634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1099.725709][T32643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 1099.734714][T32643] netlink: 'syz.4.6483': attribute type 1 has an invalid length. [ 1099.854532][T32643] erspan0: entered promiscuous mode [ 1099.911059][T32643] macvlan3: entered allmulticast mode [ 1099.916490][T32643] erspan0: entered allmulticast mode [ 1100.078919][T32652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6484'. [ 1100.202444][T32652] syzkaller0: entered promiscuous mode [ 1100.215932][T32652] syzkaller0: entered allmulticast mode [ 1100.286006][T32657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6484'. [ 1100.319179][T32662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1100.506573][T32671] xt_recent: Unsupported userspace flags (000000b1) [ 1100.543926][T32208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.567254][T32613] lo speed is unknown, defaulting to 1000 [ 1100.970379][T32208] veth0_vlan: entered promiscuous mode [ 1100.976084][T32686] lo speed is unknown, defaulting to 1000 [ 1100.994460][T32208] veth1_vlan: entered promiscuous mode [ 1101.053863][T32208] veth0_macvtap: entered promiscuous mode [ 1101.083047][T32208] veth1_macvtap: entered promiscuous mode [ 1101.105159][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6489'. [ 1101.172157][T32208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.194184][T32208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.236089][T13144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.268639][T13144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.310650][T13144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.342680][T13144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.521529][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1101.535407][T30938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.545710][T30938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.557454][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1101.569861][T32686] lo speed is unknown, defaulting to 1000 [ 1101.586515][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1101.586909][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1101.587114][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1101.639898][T13144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.648107][T13144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.794884][T32704] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 1101.814183][T32704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.821530][T32704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.985273][T32707] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 1101.992565][T32707] bridge0: port 5(veth0_virt_wifi) entered forwarding state [ 1102.000186][T32707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.007351][T32707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.014837][T32707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.021979][T32707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.044902][T32708] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 1102.052316][T32708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.059518][T32708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.180975][T32714] lo speed is unknown, defaulting to 1000 [ 1102.471101][T32723] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1102.565453][T20765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.605388][T20765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.614449][T20765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.623424][T20765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.633059][T20765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.919083][T32734] bond2: option ad_actor_sys_prio: invalid value (0) [ 1102.964758][T32734] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1102.990463][T32734] bond2 (unregistering): Released all slaves [ 1103.298532][T32714] lo speed is unknown, defaulting to 1000 [ 1103.749470][T32725] lo speed is unknown, defaulting to 1000 [ 1104.008045][T32725] lo speed is unknown, defaulting to 1000 [ 1104.620552][T32725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.627799][T32725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.635099][T32725] bridge_slave_0: entered allmulticast mode [ 1104.644428][T32725] bridge_slave_0: entered promiscuous mode [ 1104.653714][T32725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.660938][T32725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.668314][T32725] bridge_slave_1: entered allmulticast mode [ 1104.676181][T32725] bridge_slave_1: entered promiscuous mode [ 1104.729770][T20765] Bluetooth: hci2: command tx timeout [ 1104.827459][T32725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.871459][T32725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.934955][T32725] team0: Port device team_slave_0 added [ 1104.943743][T32725] team0: Port device team_slave_1 added [ 1104.983692][T32725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.990736][T32725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.108300][T32725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.167848][T32725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.174918][T32725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.202854][T32725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.312416][T32725] hsr_slave_0: entered promiscuous mode [ 1105.320053][T32725] hsr_slave_1: entered promiscuous mode [ 1105.327352][T32725] debugfs: 'hsr0' already exists in 'hsr' [ 1105.333477][T32725] Cannot create hsr debugfs directory [ 1105.385888][ T321] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1105.409333][ T315] __nla_validate_parse: 34 callbacks suppressed [ 1105.409354][ T315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6513'. [ 1105.468724][ T315] syz_tun: entered promiscuous mode [ 1105.493535][ T315] macvtap1: entered promiscuous mode [ 1105.499317][ T315] macvtap1: entered allmulticast mode [ 1105.504721][ T315] syz_tun: entered allmulticast mode [ 1105.531177][ T328] syz_tun: left allmulticast mode [ 1105.535285][ T330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1105.536440][ T328] syz_tun: left promiscuous mode [ 1105.561560][ T328] macvtap1: left promiscuous mode [ 1105.566845][ T328] macvtap1: left allmulticast mode [ 1105.696840][ T340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1105.705845][ T340] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1105.719009][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1106.020589][T32725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.070837][T32725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.157712][T20765] block nbd12: Receive control failed (result -32) [ 1106.166488][T26083] block nbd12: Receive control failed (result -32) [ 1106.425022][T32725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.435374][T32725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.469456][ T356] syzkaller0: entered promiscuous mode [ 1106.472815][ T365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6528'. [ 1106.474959][ T356] syzkaller0: entered allmulticast mode [ 1106.546520][ T356] tc action pedit 'at' offset 20 out of bounds [ 1106.670250][ T356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.741706][ T369] pimreg: entered allmulticast mode [ 1106.784973][T32725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.795717][T32725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.809209][T26083] Bluetooth: hci2: command tx timeout [ 1106.831414][ T370] lo speed is unknown, defaulting to 1000 [ 1106.947207][ T378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.954649][ T378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.966924][ T378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.974999][ T378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.000233][ T370] lo speed is unknown, defaulting to 1000 [ 1107.105693][T32725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.114340][ T386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6534'. [ 1107.116239][T32725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.126793][ T386] netlink: 'syz.4.6534': attribute type 1 has an invalid length. [ 1107.295206][ T356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.630614][ T392] erspan0: mtu less than device minimum [ 1107.743593][ T356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.837793][ T397] pimreg: entered allmulticast mode [ 1107.844913][ T397] pimreg: left allmulticast mode [ 1107.915207][T32725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1107.924650][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.007343][ T356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.035291][T32725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1108.061609][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.071238][T32725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1108.083616][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.103430][T32725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1108.115440][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.166618][T30938] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.222561][T31329] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.373974][T31329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.446263][T31328] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.513774][T32725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.574870][T32725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.625738][T30937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.633736][T30937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.699937][T31329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.707118][T31329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.720734][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1108.764968][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1108.777873][ T422] lo speed is unknown, defaulting to 1000 [ 1108.796768][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1108.833660][ T419] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 1108.863673][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1108.893499][T26083] Bluetooth: hci2: command tx timeout [ 1108.936737][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.944601][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.975990][ T419] team_slave_0: left promiscuous mode [ 1108.984205][ T419] team_slave_1: left promiscuous mode [ 1109.118621][ T419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.139296][ T419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.285672][ T422] lo speed is unknown, defaulting to 1000 [ 1109.293382][T30927] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.301935][T30927] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.317896][T30927] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.338260][T30927] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.507892][ T441] syzkaller0: entered promiscuous mode [ 1109.517747][ T1185] block nbd0: Possible stuck request ffff8880537d6740: control (read@0,4096B). Runtime 330 seconds [ 1109.533332][ T441] syzkaller0: entered allmulticast mode [ 1110.048980][ T453] netlink: zone id is out of range [ 1110.054224][ T453] netlink: zone id is out of range [ 1110.077341][ T453] netlink: zone id is out of range [ 1110.093170][ T453] netlink: get zone limit has 8 unknown bytes [ 1110.202886][ T456] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1110.216317][T32725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.291801][T32725] veth0_vlan: entered promiscuous mode [ 1110.335859][T32725] veth1_vlan: entered promiscuous mode [ 1110.410861][T32725] veth0_macvtap: entered promiscuous mode [ 1110.446824][T32725] veth1_macvtap: entered promiscuous mode [ 1110.456376][ T460] __nla_validate_parse: 1 callbacks suppressed [ 1110.456396][ T460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1110.471427][ T460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1110.480947][T32725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.500571][T32725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.541678][T30937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.581942][T30938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.604687][T30938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.613459][T30938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.804439][T31329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.820981][T31329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.875573][T31329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.885042][T31329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.968537][T26083] Bluetooth: hci2: command tx timeout [ 1111.170341][ T482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1111.267760][ T485] bridge_slave_0: left allmulticast mode [ 1111.273465][ T485] bridge_slave_0: left promiscuous mode [ 1111.298342][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.334245][ T485] bridge_slave_1: left allmulticast mode [ 1111.339941][ T485] bridge_slave_1: left promiscuous mode [ 1111.345745][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.359327][ T485] bond0: (slave bond_slave_0): Releasing backup interface [ 1111.376776][ T485] bond0: (slave bond_slave_1): Releasing backup interface [ 1111.416910][ T485] team0: Port device team_slave_0 removed [ 1111.429638][ T485] team0: Port device team_slave_1 removed [ 1111.436462][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.443921][ T485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.452890][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.460309][ T485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.475111][ T485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.514714][ T489] team0: Port device xfrm0 added [ 1111.596843][ T495] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.821890][ T504] netlink: 279 bytes leftover after parsing attributes in process `syz.2.6559'. [ 1111.831077][ T504] veth0_to_bond: default FDB implementation only supports local addresses [ 1112.267267][ T501] team0: Port device bond0 removed [ 1112.295336][ T501] bridge_slave_0: left allmulticast mode [ 1112.334316][ T501] bridge_slave_0: left promiscuous mode [ 1112.357645][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.517276][ T501] bridge_slave_1: left allmulticast mode [ 1112.557337][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.702751][ T501] bond0: (slave bond_slave_0): Releasing backup interface [ 1112.760762][ T501] bond0: (slave bond_slave_1): Releasing backup interface [ 1112.804043][ T501] team0: Port device team_slave_0 removed [ 1112.830992][ T501] team0: Port device team_slave_1 removed [ 1112.837506][ T501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.852002][ T501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.860892][ T501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1112.879940][ T522] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6561'. [ 1112.899413][ T518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6561'. [ 1112.928626][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6563'. [ 1113.042807][ T527] lo speed is unknown, defaulting to 1000 [ 1113.103051][ T532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6564'. [ 1113.222386][ T536] netlink: 'syz.0.6565': attribute type 1 has an invalid length. [ 1113.484045][ T536] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1113.576977][ T527] lo speed is unknown, defaulting to 1000 [ 1114.727343][ T552] bond3 (unregistering): Released all slaves [ 1115.116393][ T548] veth0_macvtap: entered allmulticast mode [ 1115.174965][ T548] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1115.208961][ T30] INFO: task udevd:23283 blocked in I/O wait for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1115.229612][ T30] Not tainted syzkaller #0 [ 1115.236824][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1115.256209][ T30] task:udevd state:D stack:26664 pid:23283 tgid:23283 ppid:4995 task_flags:0x400140 flags:0x00080802 [ 1115.286213][ T30] Call Trace: [ 1115.293439][ T30] [ 1115.299998][ T30] __schedule+0x17d9/0x56c0 [ 1115.320105][ T30] ? __lock_acquire+0x683/0x2cf0 [ 1115.331850][ T30] ? __pfx___schedule+0x10/0x10 [ 1115.383906][ T30] ? schedule+0x90/0x2b0 [ 1115.397800][ T30] schedule+0x164/0x2b0 [ 1115.412213][ T30] io_schedule+0x7f/0xd0 [ 1115.444002][ T30] folio_wait_bit_common+0x836/0xbc0 [ 1115.463580][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 1115.489644][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1115.514607][ T30] ? filemap_read_folio+0x234/0x3a0 [ 1115.519885][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1115.525456][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 1115.531357][ T30] do_read_cache_folio+0x1ac/0x590 [ 1115.536510][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1115.541989][ T30] read_part_sector+0xb6/0x2b0 [ 1115.546769][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1115.552158][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1115.557726][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1115.563713][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 1115.568927][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 1115.574148][ T30] bdev_disk_changed+0x851/0x17a0 [ 1115.579215][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1115.584713][ T30] blkdev_get_whole+0x372/0x510 [ 1115.589579][ T30] bdev_open+0x324/0xd70 [ 1115.593844][ T30] blkdev_open+0x461/0x600 [ 1115.598284][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1115.603235][ T30] do_dentry_open+0x816/0x1380 [ 1115.627851][ T30] vfs_open+0x3b/0x340 [ 1115.632001][ T30] ? path_openat+0x2e2d/0x3830 [ 1115.636790][ T30] path_openat+0x2e44/0x3830 [ 1115.641406][ T30] ? kasan_save_track+0x3e/0x80 [ 1115.646354][ T30] ? do_sys_openat2+0xcc/0x200 [ 1115.651130][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.657260][ T30] do_file_open+0x23e/0x4a0 [ 1115.661801][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1115.666861][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1115.671726][ T30] ? alloc_fd+0x651/0x6c0 [ 1115.676085][ T30] do_sys_openat2+0x115/0x200 [ 1115.680774][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1115.685975][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1115.691378][ T30] __x64_sys_openat+0x138/0x170 [ 1115.696248][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.702324][ T30] do_syscall_64+0x174/0x580 [ 1115.706933][ T30] ? clear_bhb_loop+0x40/0x90 [ 1115.711640][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.717553][ T30] RIP: 0033:0x7f3a65ea7407 [ 1115.743111][ T30] RSP: 002b:00007ffe6fa99f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1115.751585][ T30] RAX: ffffffffffffffda RBX: 00007f3a66553880 RCX: 00007f3a65ea7407 [ 1115.759566][ T30] RDX: 00000000000a0800 RSI: 000055a081b6a120 RDI: ffffffffffffff9c [ 1115.767554][ T30] RBP: 000055a081b22910 R08: 0000000000000000 R09: 0000000000000000 [ 1115.779295][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a081b91510 [ 1115.787321][ T30] R13: 000055a081b30190 R14: 0000000000000000 R15: 000055a081b91510 [ 1115.796997][ T30] [ 1115.810075][ T30] [ 1115.810075][ T30] Showing all locks held in the system: [ 1115.817835][ T30] 3 locks held by kworker/0:1/11: [ 1115.822870][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1115.901616][ T30] #1: ffffc90000107c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1115.914585][ T30] #2: ffff88807a1bb250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1115.924636][ T30] 1 lock held by khungtaskd/30: [ 1115.930024][ T30] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1115.939943][ T30] 2 locks held by getty/5383: [ 1115.958627][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.967722][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.998268][ T30] #0: ffff888035d780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1116.008097][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1116.018618][ T30] 1 lock held by udevd/23283: [ 1116.023322][ T30] #0: ffff88804bff7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1116.032597][ T30] 3 locks held by kworker/0:5/26194: [ 1116.037894][ T30] #0: ffff88813fe4f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.049332][ T30] #1: ffffc9000cad7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1116.088640][ T30] #2: ffff8880418f2250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1116.098737][ T30] 1 lock held by syz-executor/29490: [ 1116.104038][ T30] 1 lock held by syz-executor/30716: [ 1116.109334][ T30] 3 locks held by kworker/u8:7/30927: [ 1116.114707][ T30] 1 lock held by syz-executor/32208: [ 1116.119986][ T30] #0: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1116.130910][ T30] 2 locks held by syz.2.6563/527: [ 1116.135936][ T30] #0: ffffffff8fddc028 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1116.145412][ T30] #1: ffffffff8fdeabc0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1116.155019][ T30] 1 lock held by syz.0.6569/551: [ 1116.159957][ T30] #0: ffffffff8fdeabc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1116.168961][ T30] 2 locks held by dhcpcd/561: [ 1116.188412][ T30] #0: ffff88807ac08260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1116.205236][ T30] #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1116.225553][ T30] [ 1116.227924][ T30] ============================================= [ 1116.227924][ T30] [ 1116.236466][ T30] NMI backtrace for cpu 0 [ 1116.236486][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1116.236508][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.236519][ T30] Call Trace: [ 1116.236527][ T30] [ 1116.236535][ T30] dump_stack_lvl+0xe8/0x150 [ 1116.236564][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1116.236590][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1116.236615][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1116.236643][ T30] sys_info+0x135/0x170 [ 1116.236664][ T30] watchdog+0xfd7/0x1030 [ 1116.236700][ T30] ? watchdog+0x1c7/0x1030 [ 1116.236733][ T30] kthread+0x388/0x470 [ 1116.236755][ T30] ? __pfx_watchdog+0x10/0x10 [ 1116.236781][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.236802][ T30] ret_from_fork+0x514/0xb70 [ 1116.236826][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.236848][ T30] ? __switch_to+0xc89/0x1420 [ 1116.236878][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.236900][ T30] ret_from_fork_asm+0x1a/0x30 [ 1116.236939][ T30] [ 1116.236947][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1116.360693][ C1] NMI backtrace for cpu 1 [ 1116.360711][ C1] CPU: 1 UID: 0 PID: 30716 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1116.360731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.360742][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0x60/0x120 [ 1116.360773][ C1] Code: 0a 89 c3 83 f8 08 0f 83 c7 00 00 00 49 be 00 00 00 00 00 fc ff df 48 8d 1c dd d0 27 2a 8e 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 96 70 88 00 48 8b 03 48 8d 98 80 61 41 93 48 8d [ 1116.360788][ C1] RSP: 0018:ffffc9000d18f7b8 EFLAGS: 00000246 [ 1116.360805][ C1] RAX: 1ffffffff1c544fb RBX: ffffffff8e2a27d8 RCX: 0000000080000001 [ 1116.360818][ C1] RDX: 0000000000000000 RSI: ffffffff8c2a9f60 RDI: ffffffff8c2a9f20 [ 1116.360831][ C1] RBP: dffffc0000000000 R08: ffffffff823fab5a R09: 0000000000000000 [ 1116.360843][ C1] R10: 0000000000000000 R11: ffffffff8e959c20 R12: 000000000006568b [ 1116.360855][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000001000 [ 1116.360869][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 1116.360883][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.360895][ C1] CR2: 00005567c7de5ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1116.360911][ C1] Call Trace: [ 1116.360918][ C1] [ 1116.360926][ C1] rcu_read_lock_held+0x1e/0x50 [ 1116.360949][ C1] page_ext_lookup+0xe7/0x180 [ 1116.360975][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 1116.361002][ C1] __page_table_check_zero+0x135/0x3e0 [ 1116.361029][ C1] ? __reset_page_owner+0x148/0x1f0 [ 1116.361047][ C1] free_pages_prepare+0x96f/0xa60 [ 1116.361074][ C1] __free_contig_range_common+0x174/0x340 [ 1116.361099][ C1] free_pages_bulk+0x48/0x120 [ 1116.361118][ C1] vfree+0x224/0x4a0 [ 1116.361141][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1116.361170][ C1] kcov_close+0x28/0x50 [ 1116.361194][ C1] __fput+0x418/0xa50 [ 1116.361213][ C1] task_work_run+0x1d9/0x270 [ 1116.361235][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1116.361255][ C1] ? do_exit+0x735/0x2360 [ 1116.361272][ C1] ? kmem_cache_free+0x182/0x650 [ 1116.361288][ C1] ? put_net+0xfe/0x260 [ 1116.361314][ C1] do_exit+0x73a/0x2360 [ 1116.361334][ C1] ? cgroup1_freezing+0x20/0x350 [ 1116.361356][ C1] ? __pfx_do_exit+0x10/0x10 [ 1116.361376][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1116.361405][ C1] do_group_exit+0x22d/0x2f0 [ 1116.361423][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.361447][ C1] get_signal+0x121b/0x12c0 [ 1116.361483][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1116.361511][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1116.361531][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.361553][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1116.361590][ C1] exit_to_user_mode_loop+0x104/0x730 [ 1116.361606][ C1] ? rcu_is_watching+0x15/0xb0 [ 1116.361626][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.361644][ C1] do_syscall_64+0x353/0x580 [ 1116.361659][ C1] ? trace_irq_disable+0x3b/0x140 [ 1116.361675][ C1] ? clear_bhb_loop+0x40/0x90 [ 1116.361694][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.361711][ C1] RIP: 0033:0x7fd6aa158fd7 [ 1116.361725][ C1] Code: Unable to access opcode bytes at 0x7fd6aa158fad. [ 1116.361734][ C1] RSP: 002b:00007ffce1d1b3e0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1116.361751][ C1] RAX: fffffffffffffe00 RBX: 000055555658c500 RCX: 00007fd6aa158fd7 [ 1116.361763][ C1] RDX: 0000000040000000 RSI: 00007ffce1d1b43c RDI: ffffffffffffffff [ 1116.361776][ C1] RBP: 00007ffce1d1b43c R08: 0000000000000000 R09: 0000000000000000 [ 1116.361787][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1116.361797][ C1] R13: 0000000000000003 R14: 00007ffce1d1b698 R15: 0000000000000000 [ 1116.361817][ C1] [ 1116.800389][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1116.807298][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1116.816437][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.826503][ T30] Call Trace: [ 1116.829788][ T30] [ 1116.832728][ T30] vpanic+0x56c/0xa60 [ 1116.836904][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.841858][ T30] ? __pfx_vpanic+0x10/0x10 [ 1116.846386][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1116.852572][ T30] panic+0xc5/0xd0 [ 1116.856303][ T30] ? __pfx_panic+0x10/0x10 [ 1116.860733][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1116.866218][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1116.871617][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1116.877801][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1116.883985][ T30] watchdog+0x1030/0x1030 [ 1116.888346][ T30] ? watchdog+0x1c7/0x1030 [ 1116.892778][ T30] kthread+0x388/0x470 [ 1116.897014][ T30] ? __pfx_watchdog+0x10/0x10 [ 1116.901683][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.906263][ T30] ret_from_fork+0x514/0xb70 [ 1116.910851][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.915962][ T30] ? __switch_to+0xc89/0x1420 [ 1116.920662][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.925261][ T30] ret_from_fork_asm+0x1a/0x30 [ 1116.930046][ T30] [ 1116.933446][ T30] Kernel Offset: disabled [ 1116.937759][ T30] Rebooting in 86400 seconds..