last executing test programs: 2.707130857s ago: executing program 0 (id=6960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x9, 0x4a, {{0xe, 0x4, 0x2, 0x18, 0x38, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x23, 0x9, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @empty, @empty, @empty, @loopback, @local]}]}}}}}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@getpolicy={0x50, 0x15, 0x400, 0x70bd27, 0x25dfdbfe, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4e24, 0x623f, 0x4e1f, 0x0, 0xa, 0x180, 0x80, 0x33, r2, r4}, 0x6e6bb5}}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) close(0xffffffffffffffff) (async, rerun: 64) r6 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x0, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x0, 0x3, 0x1}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.498656652s ago: executing program 0 (id=6963): syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8600000000c23c600000c386d578dd0000000002fe8000"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020009907800000512000000020000007f000000070000fa730000"], 0x0) socketpair(0x25, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0xdb96, @mcast1, 0x8001}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x4, @remote, 0x4}, @in={0x2, 0x4e23, @remote}], 0x94) 2.224493821s ago: executing program 0 (id=6969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000300)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC=r0, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007600010000000000000000000300000000e9"], 0x18}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r8, 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0xc481}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010002305fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="4ba99038afb2b73f5e0012800900010076000a00a1cdf20521b3ec9f219bc5ef9f74e6d25299c321cfd539fc3acbdfab0439beb0ad4a9a68235a6f1a43b9a8419f4d0aa835435ccee68d8d4526e9441c9c299769ebe968c6023ed5e52b94fa188bce899508bb3958be", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a4c000000090a010400000000000000000a00000400010073797a31d72500000900020073797a310000000008000a40fffffffc0800054000000024b80003400000004408000f40008e05e1000002140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r13, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x8c, r13, 0x204, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x14080}, 0x4000) 2.161869529s ago: executing program 3 (id=6970): socket$kcm(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r8, 0x8f5, 0x100000000000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x25}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x57b0) (async) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.054771002s ago: executing program 2 (id=6971): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80000, 0x3) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x68, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r5, 0x18}, 0x38) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r7, 0x6a98047402e98331, 0x70bd26, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x80000, 0x3) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) (async) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_udp_int(r6, 0x11, 0x68, 0x0, &(0x7f0000000080)) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r5, 0x18}, 0x38) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r7, 0x6a98047402e98331, 0x70bd26, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) 2.033335329s ago: executing program 3 (id=6972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000) 2.002594904s ago: executing program 1 (id=6973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05002abd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="332f7794b24e4f92772e83453a20e7c29dea9a2c94bb596e25d997d71ace2304ea0b89"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.843515979s ago: executing program 1 (id=6975): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9448620}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000010104010000000002000000020000010800154000000003200039696018ce0b557600000c000290050001003a00000006000340000100003400018014000180080001000e01010108000200ac1e010106000340000400000c000280050001008400000006000340008e6700"], 0x70}, 0x1, 0x0, 0x0, 0x4801}, 0x4000005) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9448620}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000010104010000000002000000020000010800154000000003200039696018ce0b557600000c000290050001003a00000006000340000100003400018014000180080001000e01010108000200ac1e010106000340000400000c000280050001008400000006000340008e6700"], 0x70}, 0x1, 0x0, 0x0, 0x4801}, 0x4000005) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0x2, 0x7) (async) r6 = socket(0x11, 0x2, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x81, 0x4) write(r6, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4}}, 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4}}, 0xb8}}, 0x4004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="107239f6dbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000810}, 0x20058801) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="107239f6dbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000810}, 0x20058801) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x228, 0xffffffff, 0x170, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x800001, 0x3]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @loopback, @broadcast, @icmp_id=0x65, @port=0x4e22}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00', {0xff}, {}, 0xc}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000010000000000000000000000000000000201000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff07000000000000000000000000000000e94b2f59613c05079a70f1d2fbda6b5006e8156a7cd7913fc0926456873c80b41a464ed8905078989c110ee0f9f47b632990182fcd17decf986e78bcad37c3"], 0xb8}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163356dd0ae30000000e10000000018003480140035006d00"/52], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163356dd0ae30000000e10000000018003480140035006d00"/52], 0x4c}}, 0x0) 1.837972406s ago: executing program 2 (id=6976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600050088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (fail_nth: 10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) 1.803934008s ago: executing program 3 (id=6977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1f, 0xc}, {0x6}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000d0a01030000000000020000050000000900020073797a320000000008000440000000000900010073797a3000000000a363fe7aed90bb43e42230ba5ec83b41c653a122e3c17eb7880882a565"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r9 = socket(0x29, 0x1, 0x81) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000002c0007012bfd7000ffdbdf25007c0000080001800400dd800800038004000180de0383238844371c651dcb2215d5d3920417aae0c17d651b0a1445d0ec41bb63fb3994791473a692b7b9179c4ca50b6023a589140ba213b8963535e9919a030fe311d0467785b024e3e4f5438a4f9c7b73b3de78e1a3260363551269b8bd05d6a86410f304fb256063e056782fd902dabf09441b98fe11e2d3184d54e3873be29c94c0edc36c685fb56f54a636cdcdb46583f8ffffffe456c22123f69990881b9ff8545daa456c84ef71d40e12fa27c96e3832c778439f4e15961f3dfea6eaca9b97e8f53f2803ca90a1931bfab53ae5682423a94810b37c7713411e329d894c261debb0a5d7d04c27ba0c7b82f7c098a2c6ad81596d41025e4430f17532d503"], 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r13, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40008800) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.343685044s ago: executing program 2 (id=6978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3a795a5ac607884a7a33e8bb846b21b9254fca33828a929d690c5d9ba9e9a5910642d13b7131e3c0d69a49728ecf6d92cf2b0dc81868f79d7d", @ANYRES16=r1, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) shutdown(r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ad18d4a3a6bf19be635978e863e20aa9722e5e9399", 0x15}, 0x1, 0x0, 0x0, 0x40000}, 0x20044840) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000040)={r9, 0x8001}, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001000ff05000000000000000009003c8004c937b184"], 0x1c}], 0x1}, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r11, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) recvmmsg(r11, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r11, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000002}, 0x10) ppoll(&(0x7f0000000180)=[{r11}], 0x1, 0x0, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000003c0)=0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x4, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r9, 0x6, 0xbd, 0x101, 0x6, 0x1, 0x9, 0xe4, {r12, @in6={{0xa, 0x4e20, 0x4c2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x73}}, 0x0, 0x78, 0x7, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) 1.151847645s ago: executing program 0 (id=6980): socket(0x1d, 0x2, 0x6) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 1.095383984s ago: executing program 4 (id=6981): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) socket$tipc(0x1e, 0x5, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 996.551706ms ago: executing program 0 (id=6982): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='veth1_to_bridge\x00') setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x2dc, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x23c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x3, 0xe227, 0x8, 0x1f, 0x1, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7ff}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x7, 0x400, 0x1b, 0x1c, 0x12, 0x2}}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x6f, 0x1, 0x40000033, 0x0, 0x9, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xfd, 0x4, 0x5, 0x0, 0x6, 0x101, 0x5}}, {0xe, 0x2, [0x2, 0x0, 0x81, 0x8, 0x7]}}]}]}, 0x2dc}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800b43b", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf2501000000400008803c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221400040002004623ac1414bb00000000000000001400020077673100"/98], 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1}, 0x50) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000200), 0x80000) 982.142074ms ago: executing program 2 (id=6983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) write(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x24, &(0x7f0000000340)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e003d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf590000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb845129361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cbe8d23810052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b0679544"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 870.200623ms ago: executing program 3 (id=6984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801412070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x207) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 818.365695ms ago: executing program 4 (id=6985): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x0, 0x8, 0xc17, 0x7d5, 0x1, 0x8, 0x10000000, [0x1, 0x3]}}) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000400), 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pI4 \x00'}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r13) ioctl$SIOCSIFHWADDR(r13, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x6, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0x7, 0x1b, 0x46, 0x10}, @alu={0x7, 0x0, 0xd, 0x1, 0x4, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4797}, @exit, @call={0x85, 0x0, 0x0, 0xbf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x14, &(0x7f0000000200)=""/20, 0x41100, 0x48, '\x00', r1, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r5, r6, 0xffffffffffffffff, r7, r8, 0x1, r11, r12, r13], &(0x7f0000000740)=[{0x4, 0x4, 0xb, 0x3}, {0x0, 0x4, 0x3, 0x5}, {0x2, 0x5, 0x4, 0x6}], 0x10, 0x3d1}, 0x94) 693.946528ms ago: executing program 0 (id=6986): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000070000000c001600010000000000000014002800"/46], 0x34}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000340)=0x3e, 0x4) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 647.541444ms ago: executing program 2 (id=6987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x20000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000) 646.810627ms ago: executing program 1 (id=6988): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300021c000000832bc6ac00000000120008003804000045ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a87060468370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60cc5d749598ac313fecd1e4ec6e8dd1995db3286855f34db3900030006000000000002000000ac1414be63489d00000000000200010000000000000006fc0000000003000500000000000200"/224], 0xe0}, 0x1, 0x7}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2c, &(0x7f0000000040)) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x5, 0x14, 0xffffff19, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x40048a1) (async) unshare(0x20000400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x90000002}) (async) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x13}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040004}, 0x24004000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bf0e5ba422346a05606c4c098143945dfcba0d9c451879ed818c43157c7c06f4cd419b511ff89cb905fede52c4970b95abb153d996f52692a836d6"], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 484.77601ms ago: executing program 2 (id=6989): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000080) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="e2fa17e3edddc8537453d705df837fe4e71623a0c47c8985b318f847444dcc2096d0b8a02954f49a30b595776487c6be606e480968252c985972629deb0a90a8173eaf337a2cc6cafea6d3992265774a125acc744baba6dee91454398fb5d04be0b03bd2ccb5b41bb7621e5553913ddad54c572ed62accf2a60a17da9a28db3651267425bd387545f1091db83877c8a035fc1e85f791da923082a11cf6073d900908e1e110fb293e4dd23a2172f13e1c3c81a2b1263e76c2b66090149300000000000000", 0xc4, 0x200080c0, &(0x7f0000000040)={0xa, 0x2, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000057"], 0xfce) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 397.954263ms ago: executing program 1 (id=6990): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000060000f307000400e000000108000500ac1e00010f0007"], 0x34}, 0x2, 0x34005}, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @rand_addr=0x64010101}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x128, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x9}, @nested={0xe1, 0x3f, 0x0, 0x1, [@nested={0x4, 0x127}, @generic="ffb84017de4be626085c717cd68df496d047cb5cbc438412a6bfb086c914273579dbb6ec5f516a86b4f4828ee6f66a7ae8fd2bf14ff9fb1b8681e8079580a55b0dbadcb1b50668132e84f1985324b05d06406eccd3c9bf09ae30443225d1808c25f22a46cfff0eb72e205dfb0f84a35c3ab4ae4d6042f21dbca8470f78ac356544e589f91a40b04df302b3fde069aa5423ccf24633529b00ec17c5f906bf06bd819e759d9e7a6def3c5669ea272b16a424fc824287321d6ee2c01e8724c73042ab24bb3ac11dae9c8fbaf9a5e0b5281138faf7593a7cce4f41"]}]}]}]}, @typed={0x4, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req={0x6, 0x8, 0x6, 0x7da7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r8 = accept4$packet(r1, 0x0, &(0x7f00000000c0), 0x80000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r9}, 0x20) recvmmsg(r9, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000001c80)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/65, 0x41}], 0x2, &(0x7f0000000580)=""/226, 0xe2}, 0x3}], 0x2, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000080), 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000240)={0x5, &(0x7f0000000100)=[{0x2, 0xa7, 0x4, 0x9}, {0x9, 0x8, 0x38, 0x7}, {0x400, 0x23, 0x1}, {0xffff, 0x2, 0xe0, 0x5}, {0x10, 0x8, 0x1, 0x16}]}, 0x10) 397.412557ms ago: executing program 4 (id=6991): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) 273.77949ms ago: executing program 3 (id=6992): socket(0x1d, 0x2, 0x6) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 266.506791ms ago: executing program 4 (id=6993): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x2, 0x6, {{0x25, 0x4, 0x0, 0x7, 0x94, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0xe2, 0x1, 0x9, [{@loopback, 0xd290}, {@remote, 0x2}, {@multicast1, 0xd}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@remote, 0x5}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x5}, {@remote}]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x12, "496667550781d4be1a3c707a2da68f2c"}, {0x0, 0xf, "71269394f955cbbcfb258e2d0e"}]}]}}}}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = accept(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x21) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x334, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x1df, 0x13f, 0x0, 0x1, [@nested={0xdb, 0x10a, 0x0, 0x1, [@nested={0x4, 0xea}, @typed={0x4, 0x129}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xbc}, @typed={0x9, 0x89, 0x0, 0x0, @str='+\xe1{^\x00'}, @generic="43c326bbfdd25eb42c09ba16d4669f7a5a2be180ac1b99ad263b562e6e69b31b9f5f4d3813cbedc7169c52914d302a430bce8b88a654ee22e67c22b2150d4a78c3bbcf2bae768cf8734d1348eef2553684c5a334695030a35ff895c35a4626e71e1a1c666b3e89cbc92020112d9dfe1c7df8e9285732e2eddfe12cdc02decb4c473d4607bc4ad334b7c438a52fab02504c744df19c2356a080c17d"]}, @generic="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"]}, @nested={0x13f, 0x71, 0x0, 0x1, [@generic="4eab4932ef20eb66606264f7f6c8285b93a0eed11de8d471401547952bc842d92e66550b4f4f257268d4ccf57da7a343a494527c98cad2998cb40a0730073d8d8cb40d17bd50a46de77cb66567480b9c17cd30dc216e3ceca915c00868ccb0d2a5541f71a92042c9", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@remote}, @nested={0x77, 0x38, 0x0, 0x1, [@nested={0x4, 0x2a}, @nested={0x4, 0xd8}, @generic="d778176cfc11f320bd6da0be38f53106d68f304eeb3a9929f34ecc622787a0c5063eeea1556850d080d71c496e6d2ad8a4b4061412e4b0aaf174e5d7fd17bbc0d7445cbf977f30c7634c4f4a4d5b5f64102b9106af8bb1433336f2e8e1713b96ae1bfe42c2cc5a9739bfaa"]}, @generic="e76ac31975a5a2085993b8aea6c5f15ad49dded6ced8089abfaf2d5b7e3283b04e5e8f64bad8d3741b9a80c7dcb0f3a094ca57e5ff30faf432807af17f61c0184bbc9e200bbde0"]}]}, 0x334}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipmr_delroute={0x64, 0x19, 0x4, 0x70bd2a, 0x25dfdbff, {0x80, 0x14, 0x80, 0x2, 0xfc, 0x3, 0x0, 0x2, 0x3700}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x10, 0x1, [{0x3, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x5}]}}, @RTA_SRC={0x8, 0x2, @remote}, @RTA_UID={0x8, 0x19, r5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x64}}, 0x48000) 198.239773ms ago: executing program 1 (id=6994): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x0, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="d4", 0xfdef}], 0x1) 175.302225ms ago: executing program 4 (id=6995): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}, @generic={0x7, 0x1, 0x0, 0xd, 0x9}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x800, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0x4863dbfa}, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) syz_emit_ethernet(0x268, &(0x7f0000000400)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "f13f80", 0x232, 0x11, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x8, 0x2, 0x1, 0x7f, 0x0, [@empty]}, @srh={0x21, 0xc, 0x4, 0x6, 0x8, 0x50, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local]}, @fragment={0x6, 0x0, 0x7, 0x0, 0x0, 0x4, 0x68}, @routing={0x3a, 0x14, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @ipv4={'\x00', '\xff\xff', @local}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0x3, 0x28, 0x7, [@private2, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x2, 0x4, '\x00', [@ra={0x5, 0x2, 0x10}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}]}], {0x4e20, 0x4e21, 0x8a, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x100, @void}, "12781b4fc5c876d520a5802126255fc887bf3a2e1106a75e2cc5dbfef3d54349af180e9a5c053064446296dd540c04eeefc177c144a33af1a4a72201d01f744e977d612b0ed37093926352b32f11ad2b3e78f51face2cb9ac5b55e39746f6a43fab1e06d687c911f6de15d99b015c2ee02748646435692acb4f305d945d5"}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x394, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @local, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "98ddbbd0775656eccb36c4177f3772bbb0a15b6b6cb27fb0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8b77}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "c8f9f8fe92bdb2886bca6c69c404880bf81a52c70290f28684d32ef40a2be8c9a4b25b583cebc387c902eac6ae148f555a8e2a717a28b1556fbded45584c8ea94a0374e81a6e4cd05d3a9550012b9ad93413947527a963a5b3e4db9ae2aed42f8ff564ca6a445ec046ee2141d8b1f26dc24ed0c6dc301c210bced9819731e9c67bfb7941253cb5001f773cd6650580ab19008c122ce67453ebbaf264bb46cd49ec2a316bad5973cb1b1f89ffc0e1486247afd63315043d4184de8f4672d2a55a956845ac035287ac7ad69e5dac928e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x33, 0x3, "289b31a90dcfbadfaff3776a07c11b05721ddbccf8ca3361764cb0d98fcb5833fafb0ef071c886e0960f5ee7d1e639"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8da44353380e7009dfa5b3a6d744b177f5cd422be9e4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x41}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcad}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc9, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 174.376935ms ago: executing program 3 (id=6996): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0xc3, 0x5, 0x178000, 0x5, 0xffffff81}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff7}]}}}]}, 0x58}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 26.799469ms ago: executing program 1 (id=6997): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async) listen(r1, 0x101) 0s ago: executing program 4 (id=6998): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)=@vsock, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="127150036beda635dcc348b65608a1ffd1d2c32eb709f22ed661d4a2640e525a8f298ffe0e8818ad82bd5d684591949b2c3a78a9e3a173d81fc8db789ed0ad1da284ef1bb2cdde2ed51b7e97048e123c9c8775facae6e0c6489310eb6e26532beecf0bcbcab262ed4416e936d1b3266c3ed1dbe7590f5770176ca74826e70976914142a102e29c3f7c450994ee", 0x8d}, {&(0x7f0000000180)="b849d6fceefb085b117a34efd83fac874d7c261e4667ea00847ddb5d1cfdfe80fc4d1e1dde8f92292b7173174476343e276e1b6f9196a9dfb8c7064da92a8180cba1", 0x42}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="b4bfbe9a8a789a3543c516a5dbcc40d70752854f37475d25c3532eff88c04ff3ee0f4dfc8e18da0be71186a823c1852783d0f421304055efa09b8f5cfe056b3553e3b679b94cdd47a5ff3bc0e68384f5780cc3c938b11beb12f0a6bd2cb4aff4c1ba7286200a2c8fe4723f3a27920626151d29a9eacf70e4c92ea771e33f51c9b682cb9ded61f76c46a9c9cb75902a6a2e52d78113c1d7b5ea62ff09aa556b7cac8e51718ff4bcb13eca032daa4869194fbe561bcbf6", 0xb6}], 0x4, &(0x7f00000015c0)=[{0x18, 0x119, 0x544e, "24f4692ab7"}, {0xf0, 0x115, 0x6, "b7b9270f6afca272dafe919c4450b83c09641153e82c60b8f85e923e68eea7fcf232e2dadd013b1074fd8e5a8f062928694ef87a4208d2b2aac3fe10848ae118b43f6f714a4b92ae1798a8ea09426460a0136ed0660b1bc7cd6489b74c3c561dabe869f9c43272f4b71512b2386ed36fe1b034644226e688b9d7f9eb326d6fdb7aab1b3243ae71c04a04c8d623a6d85ed89d9aac3f98052fa1667db8cc410bfcba20815066e1a3015d974192b5c5c79eb80389fe8c43bc5cf1fd6768fa8816b9f6061e9900dbb256044c6b472733b0dffb1c7478f52766ec0cb58a927cb37f93"}, {0x10, 0x107, 0x4}, {0x98, 0x1f2, 0x3, "d0679dbe11dfa74ff4db610decaeb5b3d643398c89c83c2195cfd76c403b75bad26e0d659b451f5b375a8e4b6ecb52aeab42a9aa51248c6550a9fbbb835528793c9120396c72fabbe2a8be200841b7c767b620b11cc5371e61a3b6632fac653a14dbfdf20b6da84620df40cb85e2b2136b851406f4841336719c10b84fa167d376502c95decad750"}, {0xf8, 0xeb0e4486e32a13db, 0x1ff, "0911bd7032d81e7bb19852564d255bee35849cf0c8abc85854228f75cbb45a5ae507a13108f989a32829e16835b4e5061d8e589f195a8a49279245e01de2b4d5f4009c055959e75e374c7c582e115fe4cbca0e0d1b3622db15e0cd6ffc189dbdac228938e994173ff3e103113f8fb0d87d441c58c6b85430f8640a781d25bec8942b5788711a6a6b8b771a018d34ea041141742b3b2b402442e8ecc9c72c6162c917d9102389e1a2f764be8aa8c9773978081c9bfc83dd8ed7ebfc6b35e2fbc7255e60dc2572075a26edb898c1cff296d86a44d4a11b04169162c049a98bcc1706571cc09172"}], 0x2a8}}], 0x1, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0xc044) kernel console output (not intermixed with test programs): 68] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 598.730410][T27368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 598.754230][T27368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 598.777815][T27368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 598.796318][T27368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 598.987106][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 599.007908][T27662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5896'. [ 599.127765][T27368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.154186][T27668] openvswitch: netlink: IP tunnel dst address not specified [ 599.201799][T27368] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.235706][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.242895][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.288215][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.295402][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.376460][T27677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5901'. [ 599.394857][T27677] bridge: RTM_NEWNEIGH with invalid ether address [ 599.479646][T27680] vlan2: entered allmulticast mode [ 599.484892][T27680] bond0: entered allmulticast mode [ 599.490853][T27680] bond_slave_0: entered allmulticast mode [ 599.598995][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 599.662685][T27691] Cannot find map_set index 135 as target [ 599.732335][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 599.780755][T27698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5906'. [ 599.938794][ T4943] Bluetooth: hci1: command tx timeout [ 599.957969][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 600.018558][T27702] syzkaller0: entered promiscuous mode [ 600.024113][T27702] syzkaller0: entered allmulticast mode [ 600.550808][T27742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5911'. [ 602.021743][ T4943] Bluetooth: hci1: command tx timeout [ 602.149533][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 602.341289][T27756] netlink: 'syz.3.5917': attribute type 3 has an invalid length. [ 602.360559][T27756] netlink: 'syz.3.5917': attribute type 3 has an invalid length. [ 602.415975][T27758] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5918'. [ 602.460208][T27756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5917'. [ 602.535991][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5920'. [ 602.712592][T27368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.734284][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 602.767134][T26526] net_ratelimit: 6 callbacks suppressed [ 602.767149][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 602.943228][T27368] veth0_vlan: entered promiscuous mode [ 602.973667][T27368] veth1_vlan: entered promiscuous mode [ 603.007152][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.069086][T27368] veth0_macvtap: entered promiscuous mode [ 603.107406][T27368] veth1_macvtap: entered promiscuous mode [ 603.127473][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.157631][T27788] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5928'. [ 603.180983][T27368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.204676][T27368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.246968][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.270937][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.290210][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.304640][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5930'. [ 603.325668][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.371635][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.510710][ T8691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.533468][ T8691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.545585][T27803] x_tables: duplicate underflow at hook 2 [ 603.569838][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.665530][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.675154][T27805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.690621][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.710686][T27807] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 603.748040][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.872563][T27814] netlink: 'syz.4.5939': attribute type 1 has an invalid length. [ 603.894773][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 603.925148][T27826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5939'. [ 604.158484][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 604.177108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.308197][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 604.365344][T27846] sctp: [Deprecated]: syz.4.5945 (pid 27846) Use of int in maxseg socket option. [ 604.365344][T27846] Use struct sctp_assoc_value instead [ 604.635977][T27866] syzkaller0: entered promiscuous mode [ 604.671920][T27866] syzkaller0: entered allmulticast mode [ 604.691402][T27866] netlink: 'syz.3.5949': attribute type 39 has an invalid length. [ 605.174356][T27893] __nla_validate_parse: 2 callbacks suppressed [ 605.174374][T27893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5958'. [ 605.426440][T27906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5961'. [ 605.659072][T27911] syzkaller0: entered promiscuous mode [ 605.675184][T27911] syzkaller0: entered allmulticast mode [ 605.742969][T27922] netlink: 'syz.1.5966': attribute type 83 has an invalid length. [ 605.938600][T27932] x_tables: duplicate entry at hook 1 [ 605.987599][T27932] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 606.052040][T27941] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5974'. [ 606.135830][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5978'. [ 606.270213][T27944] 8021q: adding VLAN 0 to HW filter on device bond11 [ 606.682740][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5987'. [ 606.721092][T27979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.723732][T27982] netlink: 'syz.4.5989': attribute type 3 has an invalid length. [ 606.800760][T27982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5989'. [ 606.998889][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5994'. [ 607.009654][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5994'. [ 607.026042][T27998] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5995'. [ 607.136828][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5996'. [ 607.261433][T28012] netlink: 'syz.2.5999': attribute type 5 has an invalid length. [ 607.397258][T28024] xt_TPROXY: Can be used only with -p tcp or -p udp [ 607.877655][ T1155] net_ratelimit: 29 callbacks suppressed [ 607.877692][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 607.997078][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.128064][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.259336][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.377458][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.488150][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 608.499947][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.512418][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.523258][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.598073][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 610.579403][T28031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.769962][T28098] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 610.778393][T28099] __nla_validate_parse: 2 callbacks suppressed [ 610.778423][T28099] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.6021'. [ 610.813922][T28105] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6024'. [ 610.972003][T28112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6026'. [ 611.002575][T28112] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6026'. [ 611.044821][T28114] xt_hashlimit: invalid rate [ 611.214347][T28125] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 611.285699][T28123] »»»»»» speed is unknown, defaulting to 1000 [ 611.315028][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6032'. [ 611.715454][T28151] netlink: 'syz.1.6039': attribute type 1 has an invalid length. [ 611.771648][T28151] bond12: entered promiscuous mode [ 611.777478][T28151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 611.944354][T28151] bond12: (slave bridge7): making interface the new active one [ 611.955304][T28151] bridge7: entered promiscuous mode [ 611.962940][T28151] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 612.004160][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6045'. [ 612.015561][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6045'. [ 612.026600][T28172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6045'. [ 612.049986][T28167] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6043'. [ 612.101711][T28175] netlink: 'syz.2.6046': attribute type 1 has an invalid length. [ 612.119602][T28175] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6046'. [ 612.746177][T28202] »»»»»» speed is unknown, defaulting to 1000 [ 612.991536][T28215] syzkaller0: entered promiscuous mode [ 613.010188][T28215] syzkaller0: entered allmulticast mode [ 613.057943][ T1155] net_ratelimit: 39 callbacks suppressed [ 613.057961][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 613.473090][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 613.526361][T28235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.648374][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 613.807695][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 613.878256][T28262] netlink: 'syz.3.6070': attribute type 3 has an invalid length. [ 613.937331][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 614.012780][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.030086][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.038444][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.046878][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.055054][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.067639][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 614.197577][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 614.215508][T28275] »»»»»» speed is unknown, defaulting to 1000 [ 614.294289][T17163] syz_tun (unregistering): left allmulticast mode [ 614.317570][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 614.437092][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 614.523606][T28267] »»»»»» speed is unknown, defaulting to 1000 [ 614.920804][T28267] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.928261][T28267] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.935766][T28267] bridge_slave_0: entered allmulticast mode [ 614.943730][T28267] bridge_slave_0: entered promiscuous mode [ 614.952693][T28267] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.960202][T28267] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.967839][T28267] bridge_slave_1: entered allmulticast mode [ 614.975601][T28267] bridge_slave_1: entered promiscuous mode [ 615.021258][T28267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.033701][T28267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.057402][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.081736][T28267] team0: Port device team_slave_0 added [ 615.090525][T28267] team0: Port device team_slave_1 added [ 615.132132][T28267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.144131][T28267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.170483][T28267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.183369][T28267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.190464][T28267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.216629][T28267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.263983][T28267] hsr_slave_0: entered promiscuous mode [ 615.270711][T28267] hsr_slave_1: entered promiscuous mode [ 615.276801][T28267] debugfs: 'hsr0' already exists in 'hsr' [ 615.282632][T28267] Cannot create hsr debugfs directory [ 615.395940][T28267] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.406046][T28267] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 615.416614][T28267] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 615.427392][T28267] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 615.505558][T28267] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.515578][T28267] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 615.525431][T28267] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 615.536327][T28267] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 615.603975][T28267] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.614354][T28267] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 615.624373][T28267] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 615.634700][T28267] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 615.707435][T28267] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.717664][T28267] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 615.729712][T28267] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 615.741407][T28267] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 616.097840][ T5628] Bluetooth: hci5: command tx timeout [ 616.633657][T28250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.644244][T28299] __nla_validate_parse: 9 callbacks suppressed [ 616.644258][T28299] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6076'. [ 616.686641][T28267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.736612][T28267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.778545][T28267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 616.838529][T28267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.862178][T28267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 616.872790][T28267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.875223][T28316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6082'. [ 616.891811][T28267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.910627][T28267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.995592][T28320] bond1 (unregistering): Released all slaves [ 617.420814][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6088'. [ 617.436448][T28353] vlan0: entered promiscuous mode [ 617.477328][T28267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.552390][T28267] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.604667][T24801] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.611885][T24801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.638612][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.645768][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.714876][T28366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.783100][T28267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.087318][ T48] net_ratelimit: 21 callbacks suppressed [ 618.087337][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.177594][ T5628] Bluetooth: hci5: command tx timeout [ 618.228086][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.255050][T28394] lo: left promiscuous mode [ 618.265555][T28394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.284361][T28394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6101'. [ 618.376099][T28400] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 618.420412][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.447445][T28408] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 618.532565][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6103'. [ 618.547193][T28408] netlink: 'syz.2.6103': attribute type 1 has an invalid length. [ 618.558142][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.561604][T28408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6103'. [ 618.687298][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.708296][T28419] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6108'. [ 618.724356][T28423] netlink: 'syz.0.6107': attribute type 1 has an invalid length. [ 618.739008][T28419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6108'. [ 618.752668][T28417] 8021q: VLANs not supported on wg0 [ 618.840919][T28423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.859141][T28419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6108'. [ 618.870567][T28267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.893295][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6109'. [ 618.911678][T24799] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 618.923147][T28423] ip_vti0: entered promiscuous mode [ 619.062253][T28433] syzkaller1: entered allmulticast mode [ 619.081936][T28267] veth0_vlan: entered promiscuous mode [ 619.097378][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 619.129170][T28267] veth1_vlan: entered promiscuous mode [ 619.231520][T28446] xt_socket: unknown flags 0xe4 [ 619.251123][T28267] veth0_macvtap: entered promiscuous mode [ 619.276022][T28267] veth1_macvtap: entered promiscuous mode [ 619.289624][T28444] xt_socket: unknown flags 0xe4 [ 619.368644][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 619.396156][T28267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.430845][T28267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.467784][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.483582][T28457] block nbd4: Unsupported socket: should be TCP or UNIX. [ 619.492293][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.520709][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.562885][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.658131][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 619.871215][T24799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.887414][T24799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.998249][T24799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.024434][T24799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.260273][ T5628] Bluetooth: hci5: command tx timeout [ 620.396426][T28490] netlink: 'syz.3.6131': attribute type 62 has an invalid length. [ 620.556793][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.574014][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.582257][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.593146][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.602069][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.642004][T28490] 8021q: adding VLAN 0 to HW filter on device bond12 [ 620.784315][T28486] »»»»»» speed is unknown, defaulting to 1000 [ 620.956411][T28504] netlink: 'syz.3.6133': attribute type 4 has an invalid length. [ 621.676145][T28493] »»»»»» speed is unknown, defaulting to 1000 [ 621.724420][T28522] __nla_validate_parse: 5 callbacks suppressed [ 621.724437][T28522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6137'. [ 621.772932][T28528] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6138'. [ 621.872659][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6140'. [ 621.993601][T28540] batadv0: entered promiscuous mode [ 622.052928][T28545] netlink: 'syz.0.6144': attribute type 1 has an invalid length. [ 622.086498][T28545] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 622.146531][T28555] netlink: 'syz.3.6145': attribute type 1 has an invalid length. [ 622.205615][T28556] Bluetooth: MGMT ver 1.23 [ 622.339333][ T5628] Bluetooth: hci5: command tx timeout [ 622.606700][T28588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6155'. [ 622.657314][ T5628] Bluetooth: hci0: command tx timeout [ 622.762978][T28588] vlan5: entered allmulticast mode [ 622.785303][T28588] erspan0: entered allmulticast mode [ 622.813285][T28493] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.847792][T28493] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.875131][T28493] bridge_slave_0: entered allmulticast mode [ 622.908126][T28493] bridge_slave_0: entered promiscuous mode [ 622.929609][T28493] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.954031][T28493] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.961646][T28493] bridge_slave_1: entered allmulticast mode [ 622.974432][T28493] bridge_slave_1: entered promiscuous mode [ 622.987519][T28580] nbd4: detected capacity change from 0 to 63 [ 623.072548][T28493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.099477][T28493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.226439][T28493] team0: Port device team_slave_0 added [ 623.247920][ T1155] net_ratelimit: 17 callbacks suppressed [ 623.247966][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 623.314021][T28493] team0: Port device team_slave_1 added [ 623.371955][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6160'. [ 623.578558][ T5628] block nbd4: Receive control failed (result -104) [ 623.579929][T28493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.593082][ T4943] block nbd4: Receive control failed (result -32) [ 623.692483][T28493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.758880][T28493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.816517][T28493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.855373][T28493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.914374][T28493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.023502][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.045392][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'. [ 624.135006][T28493] hsr_slave_0: entered promiscuous mode [ 624.159785][T28493] hsr_slave_1: entered promiscuous mode [ 624.176580][T28493] debugfs: 'hsr0' already exists in 'hsr' [ 624.187188][T28493] Cannot create hsr debugfs directory [ 624.193833][T28660] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 624.297379][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 624.386607][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6167'. [ 624.413009][T28659] syzkaller0: entered promiscuous mode [ 624.431838][T28659] syzkaller0: entered allmulticast mode [ 624.465555][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6169'. [ 624.689608][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 624.737660][ T5628] Bluetooth: hci0: command tx timeout [ 624.788234][T28493] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.800955][T28493] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 624.811670][T28493] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.866139][T28669] »»»»»» speed is unknown, defaulting to 1000 [ 624.869276][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 624.989067][T28493] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.010621][T28493] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 625.022137][T28493] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.082628][T28680] --map-set only usable from mangle table [ 625.105180][T28683] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6176'. [ 625.128949][T28493] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.160611][T28493] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 625.186807][T28493] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.267843][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 625.564863][T28493] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.602135][T28493] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 625.639789][T28493] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.700457][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 625.817044][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 625.976414][T28730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'. [ 626.187633][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.315289][T28493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 626.332367][T28493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 626.347093][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.369373][T28493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 626.414388][T28493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 626.446852][T28493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 626.501318][T28493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 626.525621][T28493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 626.560054][T28493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.659888][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 626.817767][ T5628] Bluetooth: hci0: command tx timeout [ 626.913358][T28493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.944385][T28493] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.973242][T28786] netlink: 'syz.0.6204': attribute type 3 has an invalid length. [ 626.983299][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.990465][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.018296][T28786] netlink: 'syz.0.6204': attribute type 3 has an invalid length. [ 627.018552][T28788] netlink: 'syz.0.6204': attribute type 3 has an invalid length. [ 627.043539][T28788] netlink: 'syz.0.6204': attribute type 3 has an invalid length. [ 627.075083][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.082287][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.098074][T28790] __nla_validate_parse: 3 callbacks suppressed [ 627.098092][T28790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6205'. [ 627.144605][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6205'. [ 627.236996][T28493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.261763][T28798] netlink: 'syz.0.6207': attribute type 24 has an invalid length. [ 627.304463][T28797] SET target dimension over the limit! [ 627.573091][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6211'. [ 627.630215][T28821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6213'. [ 628.122670][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'. [ 628.200911][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6220'. [ 628.213365][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'. [ 628.324124][T28493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.367237][ T48] net_ratelimit: 13 callbacks suppressed [ 628.367255][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 628.507945][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 628.563472][T28869] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6225'. [ 628.624795][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6225'. [ 628.627393][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 628.674184][T28869] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6225'. [ 628.779095][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 628.897177][ T5628] Bluetooth: hci0: command tx timeout [ 628.930206][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 629.046111][T28493] veth0_vlan: entered promiscuous mode [ 629.070623][T28493] veth1_vlan: entered promiscuous mode [ 629.097092][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 629.149765][T28493] veth0_macvtap: entered promiscuous mode [ 629.181730][T28493] veth1_macvtap: entered promiscuous mode [ 629.235766][T28905] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 629.241494][T28493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.278851][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 629.294476][T28493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.367517][T26526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.391214][T26526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.436382][T26526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.455201][T26526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.612450][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 629.777900][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 629.913385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.923791][T28941] netlink: 'syz.2.6243': attribute type 1 has an invalid length. [ 629.933317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.988207][T28941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.047955][T28943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.055121][T28943] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 630.068122][T28943] bond7: (slave vcan0): Error -95 calling set_mac_address [ 630.131511][ T8691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.158788][ T8691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.251485][T28954] nbd: must specify a device to reconfigure [ 630.443865][T28966] tipc: Enabling of bearer rejected, failed to enable media [ 630.610553][T28970] netlink: 'syz.4.6251': attribute type 83 has an invalid length. [ 630.644825][T28972] 8021q: adding VLAN 0 to HW filter on device bond8 [ 630.761368][T28979] »»»»»» speed is unknown, defaulting to 1000 [ 630.804836][ T30] audit: type=1107 audit(1778493461.103:12): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7¯+P${6¹ÛÑÝ‹~™-Õ?dÄ}ªvW•yÏÒô³ÀE/ö€Ô¹Á+ö' [ 631.023680][T28992] netlink: 'syz.2.6258': attribute type 1 has an invalid length. [ 631.032951][T28992] netlink: 'syz.2.6258': attribute type 2 has an invalid length. [ 631.150943][T29001] netlink: 'syz.2.6258': attribute type 1 has an invalid length. [ 631.383431][ T60] nci: nci_rx_work: unknown MT 0x1 [ 632.214014][T29059] __nla_validate_parse: 11 callbacks suppressed [ 632.214033][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6275'. [ 632.221190][T29069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6277'. [ 632.358980][T29069] sit1: entered promiscuous mode [ 632.365320][T29069] sit1: entered allmulticast mode [ 632.687964][T29099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6284'. [ 632.745505][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6284'. [ 632.791830][T29099] netlink: 'syz.4.6284': attribute type 14 has an invalid length. [ 632.800525][T29106] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6287'. [ 632.836327][T29099] netlink: 'syz.4.6284': attribute type 13 has an invalid length. [ 632.855059][T29109] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6287'. [ 632.978392][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 633.605862][T29120] ±ÿ: renamed from team_slave_1 (while UP) [ 633.624125][T29141] netem: change failed [ 633.667127][T24798] net_ratelimit: 21 callbacks suppressed [ 633.667150][T24798] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 633.788532][T24798] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 633.934793][T29175] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 633.944425][T29175] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 633.954637][T29175] team0: Failed to send options change via netlink (err -105) [ 633.963247][T29175] team0: Port device batadv1 added [ 633.977300][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 634.084027][T29185] netlink: 'syz.3.6305': attribute type 1 has an invalid length. [ 634.218975][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 634.353388][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 634.431377][T29202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6311'. [ 634.457889][T29202] openvswitch: netlink: Flow actions attr not present in new flow. [ 634.482427][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6310'. [ 634.507318][T24798] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 634.715483][T29214] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6313'. [ 634.743920][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 634.772479][T29214] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6313'. [ 634.869666][T29221] veth1_to_bridge: entered allmulticast mode [ 634.939563][T24798] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 635.101656][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 635.132720][T29235] team0: entered promiscuous mode [ 635.157053][T29235] team_slave_0: entered promiscuous mode [ 635.169241][T29235] team_slave_1: entered promiscuous mode [ 635.192817][T29235] batadv1: entered promiscuous mode [ 635.426628][T29254] netlink: 'syz.2.6327': attribute type 25 has an invalid length. [ 635.575994][T29262] xt_TPROXY: Can be used only with -p tcp or -p udp [ 635.829355][T29266] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 636.033955][T29266] bond14: entered promiscuous mode [ 636.070043][T29266] 8021q: adding VLAN 0 to HW filter on device bond14 [ 636.318269][T29298] Bluetooth: MGMT ver 1.23 [ 636.452344][T29310] netlink: 'syz.0.6344': attribute type 1 has an invalid length. [ 636.599835][T29320] netlink: 'syz.2.6346': attribute type 2 has an invalid length. [ 636.629080][T29320] netlink: 'syz.2.6346': attribute type 2 has an invalid length. [ 636.696268][T29332] netlink: 'syz.3.6351': attribute type 1 has an invalid length. [ 637.289187][T29365] __nla_validate_parse: 23 callbacks suppressed [ 637.289206][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6360'. [ 637.843804][T29406] netlink: 'syz.0.6371': attribute type 1 has an invalid length. [ 637.880749][T29411] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6372'. [ 638.030729][T29406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.070492][T29417] bond2: (slave geneve2): making interface the new active one [ 638.081480][T29417] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 638.218096][T29430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6377'. [ 638.243337][T29430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6377'. [ 638.717817][ T12] net_ratelimit: 50 callbacks suppressed [ 638.717838][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 638.774572][T29465] syzkaller1: entered promiscuous mode [ 638.806404][T29465] syzkaller1: entered allmulticast mode [ 638.877318][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 639.007029][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 639.126053][T29498] netlink: 'syz.3.6395': attribute type 16 has an invalid length. [ 639.134100][T24798] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 639.151936][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6395'. [ 639.190395][T29495] syzkaller1: entered promiscuous mode [ 639.210715][T29495] syzkaller1: entered allmulticast mode [ 639.286836][T29507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6399'. [ 639.340544][T29512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6399'. [ 639.437283][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 639.511074][T29515] block nbd5: Unsupported socket: should be TCP or UNIX. [ 639.553366][T29525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6404'. [ 639.653395][T29507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.665735][T29507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.676526][T29507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44644 - 0 [ 639.709101][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 639.725003][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 639.743649][T29528] syzkaller0: entered promiscuous mode [ 639.745701][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 639.753005][T29528] syzkaller0: entered allmulticast mode [ 639.931899][T29507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.944876][T29507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.958424][T29507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44644 - 0 [ 640.047320][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 640.103229][T29550] sctp: [Deprecated]: syz.3.6411 (pid 29550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.103229][T29550] Use struct sctp_sack_info instead [ 640.146868][T29507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.158829][T29507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.169944][T29507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44644 - 0 [ 640.373911][T29507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.390577][T29507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.401879][T29507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44644 - 0 [ 640.497494][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 640.907313][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.939554][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 44644 - 0 [ 640.958820][ T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 641.071976][ T8691] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.106350][ T8691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 44644 - 0 [ 641.135425][ T8691] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 641.169895][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 641.351990][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.384656][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 44644 - 0 [ 641.426389][ T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 641.459680][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 641.536569][ T1092] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.571573][ T1092] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 44644 - 0 [ 641.591803][T29618] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 641.598424][ T1092] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 641.685041][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 641.699888][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 641.708557][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 641.719046][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 641.729049][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.096355][T29632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.168991][T29642] netlink: 'syz.2.6438': attribute type 1 has an invalid length. [ 642.228914][T29651] netlink: 'syz.4.6440': attribute type 2 has an invalid length. [ 642.281690][T29652] netlink: 'syz.4.6440': attribute type 2 has an invalid length. [ 642.555681][T29663] sctp: [Deprecated]: syz.1.6445 (pid 29663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.555681][T29663] Use struct sctp_sack_info instead [ 642.579413][T29664] sctp: [Deprecated]: syz.1.6445 (pid 29664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.579413][T29664] Use struct sctp_sack_info instead [ 642.597473][T29663] sctp: [Deprecated]: syz.1.6445 (pid 29663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.597473][T29663] Use struct sctp_sack_info instead [ 642.674943][T29666] vlan2: entered promiscuous mode [ 642.680655][T29666] bridge0: entered promiscuous mode [ 642.688499][T29619] »»»»»» speed is unknown, defaulting to 1000 [ 642.694818][T29671] netlink: 'syz.2.6446': attribute type 22 has an invalid length. [ 642.724521][T29671] __nla_validate_parse: 9 callbacks suppressed [ 642.724535][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6446'. [ 643.240724][T29701] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6455'. [ 643.290365][T29697] syzkaller0: entered promiscuous mode [ 643.313193][T29697] syzkaller0: entered allmulticast mode [ 643.342837][T29697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6453'. [ 643.480107][T29619] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.489359][T29619] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.496886][T29619] bridge_slave_0: entered allmulticast mode [ 643.506858][T29619] bridge_slave_0: entered promiscuous mode [ 643.515446][T29711] syzkaller0: entered promiscuous mode [ 643.527108][T29711] syzkaller0: entered allmulticast mode [ 643.540369][T29619] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.549351][T29619] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.556595][T29619] bridge_slave_1: entered allmulticast mode [ 643.565332][T29619] bridge_slave_1: entered promiscuous mode [ 643.640634][T29718] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 643.712649][T29720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6460'. [ 643.743351][T29718] bond1: entered promiscuous mode [ 643.774431][T29718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.781116][ T4943] Bluetooth: hci2: command tx timeout [ 643.814926][T29619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.879366][T29619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.921328][T29720] bond1: entered allmulticast mode [ 643.964741][T29718] bond1: (slave bridge2): making interface the new active one [ 643.974620][T29718] bridge2: entered promiscuous mode [ 643.981990][T29718] bridge2: entered allmulticast mode [ 643.990050][T29718] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 644.045862][T29736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6467'. [ 644.091627][T29619] team0: Port device team_slave_0 added [ 644.115855][T29619] team0: Port device team_slave_1 added [ 644.161029][T29619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.174338][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.229333][T29619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.246197][T29619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.260459][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.306593][T29619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.567103][ T8687] net_ratelimit: 14 callbacks suppressed [ 644.567122][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 644.627943][T29619] hsr_slave_0: entered promiscuous mode [ 644.636206][T29619] hsr_slave_1: entered promiscuous mode [ 644.651004][T29619] debugfs: 'hsr0' already exists in 'hsr' [ 644.659710][T29765] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6476'. [ 644.670116][T29619] Cannot create hsr debugfs directory [ 644.676096][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 644.689660][T29749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6472'. [ 644.773418][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 644.800022][T29761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6472'. [ 645.046705][T29791] sctp: [Deprecated]: syz.2.6483 (pid 29791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.046705][T29791] Use struct sctp_sack_info instead [ 645.274018][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 645.407082][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 645.705699][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.735263][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 645.779551][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 645.805185][T29619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.857635][ T4943] Bluetooth: hci2: command tx timeout [ 645.908103][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 646.088716][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.133691][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 646.166867][T29844] netlink: 'syz.4.6495': attribute type 1 has an invalid length. [ 646.183803][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 646.212243][T29619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.308745][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 646.488163][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.522155][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 646.535873][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 646.564509][T29619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.641223][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 646.882248][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.905731][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 646.931210][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 646.955424][T29619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.079423][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 647.211896][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 647.274722][T29899] netlink: 'syz.4.6509': attribute type 4 has an invalid length. [ 647.321022][T29899] netlink: 'syz.4.6509': attribute type 4 has an invalid length. [ 647.488769][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 647.573150][T29619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.603559][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.612055][T29619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.626046][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.634744][T29619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.648384][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.657733][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 647.666412][T29619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 647.679644][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.799112][T29619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.832570][T29619] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.850297][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.857495][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.875961][T24801] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.883167][T24801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.939609][ T4943] Bluetooth: hci2: command tx timeout [ 648.223135][T29940] __nla_validate_parse: 15 callbacks suppressed [ 648.223155][T29940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6514'. [ 648.541402][T29945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6516'. [ 648.774413][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6521'. [ 648.824257][T29969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6522'. [ 649.085967][T29982] tipc: Started in network mode [ 649.109250][T29982] tipc: Node identity 9e50815a5423, cluster identity 4711 [ 649.138032][T29982] tipc: Enabled bearer , priority 0 [ 649.158904][T29978] syzkaller0: entered promiscuous mode [ 649.174187][T29978] syzkaller0: entered allmulticast mode [ 649.222167][T29982] tipc: Disabling bearer [ 649.238214][T29978] tipc: Started in network mode [ 649.255717][T29978] tipc: Node identity 9a6b3e5e4144, cluster identity 4711 [ 649.264449][T29978] tipc: Enabled bearer , priority 0 [ 649.281811][T29619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.304886][T29977] tipc: Resetting bearer [ 649.342638][T29977] tipc: Disabling bearer [ 649.445410][T29619] veth0_vlan: entered promiscuous mode [ 649.466033][T29619] veth1_vlan: entered promiscuous mode [ 649.576740][T29619] veth0_macvtap: entered promiscuous mode [ 649.621524][ T48] net_ratelimit: 13 callbacks suppressed [ 649.621541][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 649.661090][T29619] veth1_macvtap: entered promiscuous mode [ 649.738685][T29619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.779935][T29619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.848099][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 649.872862][T24801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.896271][T24801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.020720][ T4943] Bluetooth: hci2: command tx timeout [ 650.224269][T24801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.235576][T24801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.387697][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 650.484231][ T8687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.519641][ T8687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.605800][T30033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6539'. [ 650.633242][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.645644][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.667196][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 650.777038][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 650.939211][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 651.001751][T30043] netlink: 'syz.4.6540': attribute type 1 has an invalid length. [ 651.220304][T30050] bond1: (slave bridge2): making interface the new active one [ 651.249866][T30050] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 651.287447][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 651.419089][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 651.557973][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 651.687296][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 652.182464][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6558'. [ 652.214272][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6558'. [ 652.253099][T30104] SET target dimension over the limit! [ 652.271102][T30105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6558'. [ 652.323954][T30104] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6557'. [ 653.194083][T30141] netlink: 'syz.3.6571': attribute type 1 has an invalid length. [ 653.245772][T30143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6572'. [ 653.267202][T30143] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6572'. [ 653.276647][T30145] batman_adv: batadv0: Adding interface: ip6erspan0 [ 653.297263][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 653.307309][T30145] batman_adv: batadv0: The MTU of interface ip6erspan0 is too small (1422) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.400766][T30145] batman_adv: batadv0: Not using interface ip6erspan0 (retrying later): interface not active [ 653.413603][T30151] netlink: 'syz.4.6574': attribute type 1 has an invalid length. [ 653.432875][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6574'. [ 653.465123][ T4961] block nbd4: Connection timed out, retrying (0/2 alive) [ 653.472548][ T4961] block nbd4: Connection timed out, retrying (0/2 alive) [ 653.480497][ T4961] block nbd4: Connection timed out, retrying (0/2 alive) [ 653.487904][ T4961] block nbd4: Connection timed out, retrying (0/2 alive) [ 653.495149][ T4961] block nbd4: Dead connection, failed to find a fallback [ 653.503701][ T4961] block nbd4: shutting down sockets [ 653.515438][ T4961] blk_print_req_error: 138 callbacks suppressed [ 653.515454][ T4961] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.532732][ T4961] buffer_io_error: 138 callbacks suppressed [ 653.532746][ T4961] Buffer I/O error on dev nbd4, logical block 3, async page read [ 653.548385][ T4961] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.557979][ T4961] Buffer I/O error on dev nbd4, logical block 2, async page read [ 653.565783][ T4961] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.576067][ T4961] Buffer I/O error on dev nbd4, logical block 1, async page read [ 653.584160][ T4961] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.593446][ T4961] Buffer I/O error on dev nbd4, logical block 0, async page read [ 653.604290][T10838] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.630406][T10838] Buffer I/O error on dev nbd4, logical block 0, async page read [ 653.638540][T10838] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.647772][T10838] Buffer I/O error on dev nbd4, logical block 1, async page read [ 653.655660][T10838] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.665990][T10838] Buffer I/O error on dev nbd4, logical block 2, async page read [ 653.674071][T10838] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.683342][T10838] Buffer I/O error on dev nbd4, logical block 3, async page read [ 653.694097][T10838] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.708274][T10838] Buffer I/O error on dev nbd4, logical block 0, async page read [ 653.720158][T10838] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 653.734191][T10838] Buffer I/O error on dev nbd4, logical block 1, async page read [ 653.746578][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.763115][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.772190][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.786315][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.796120][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.818360][T10838] ldm_validate_partition_table(): Disk read failed. [ 653.913791][T10838] Dev nbd4: unable to read RDB block 0 [ 653.962682][T10838] nbd4: unable to read partition table [ 653.994077][T30165] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6577'. [ 654.007908][T30161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6575'. [ 654.021509][T10838] ldm_validate_partition_table(): Disk read failed. [ 654.044171][T10838] Dev nbd4: unable to read RDB block 0 [ 654.053933][T30159] tipc: New replicast peer: 255.255.255.255 [ 654.060789][T10838] nbd4: unable to read partition table [ 654.086513][T30161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6575'. [ 654.108962][T30159] tipc: Enabled bearer , priority 10 [ 654.152220][T30161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6575'. [ 654.430304][T30180] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6578'. [ 654.482685][T30180] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6578'. [ 654.636716][ T8691] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.660577][ T10] net_ratelimit: 26 callbacks suppressed [ 654.660593][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.687221][ T8691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44644 - 0 [ 654.767879][ T8691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 654.836175][T30178] »»»»»» speed is unknown, defaulting to 1000 [ 654.868962][T30193] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 654.884630][T30193] 0ªX¹¦Dö»: entered allmulticast mode [ 654.956791][ T8691] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.984950][ T8691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44644 - 0 [ 654.995055][ T8691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.075996][T30209] IPVS: set_ctl: invalid protocol: 34172 172.20.20.187:20003 [ 655.114712][T30154] »»»»»» speed is unknown, defaulting to 1000 [ 655.126803][ T8691] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.147692][ T8691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44644 - 0 [ 655.160875][ T8691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.163652][T30211] xt_hashlimit: size too large, truncated to 1048576 [ 655.234080][T30210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.254593][T30213] bond2: entered promiscuous mode [ 655.284523][ T809] tipc: Node number set to 3396567386 [ 655.448820][ T8691] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.468285][ T8691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44644 - 0 [ 655.490385][ T8691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 655.541186][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.585295][T30227] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 655.594171][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.610846][T30227] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 655.741294][ T1092] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.808764][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.827262][T24801] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.857937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.867320][ T4943] Bluetooth: hci3: command tx timeout [ 655.974945][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.056807][T24801] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.071463][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.123934][ T8691] bridge_slave_1: left promiscuous mode [ 656.130286][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.143343][ T8691] bridge_slave_0: left allmulticast mode [ 656.149431][ T8691] bridge_slave_0: left promiscuous mode [ 656.155277][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.175739][ T8691] veth0_to_bond: left promiscuous mode [ 656.195380][ T8691] bridge2: port 2(veth0_to_bond) entered disabled state [ 656.214769][ T8691] veth5: left allmulticast mode [ 656.223072][ T8691] veth5: left promiscuous mode [ 656.229655][ T8691] bridge2: port 1(veth5) entered disabled state [ 656.579631][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.867855][ T8691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.876772][ T8691] bond_slave_0: left promiscuous mode [ 656.882729][ T8691] bond_slave_0: left allmulticast mode [ 656.891538][ T8691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.910566][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.920708][ T8691] bond_slave_1: left promiscuous mode [ 656.927905][ T8691] bond_slave_1: left allmulticast mode [ 656.935254][ T8691] bond0 (unregistering): Released all slaves [ 656.946070][ T8691] bond1 (unregistering): Released all slaves [ 656.961226][ T8691] bond2 (unregistering): Released all slaves [ 656.977911][ T8691] bond3 (unregistering): Released all slaves [ 656.996341][ T8691] bond4 (unregistering): Released all slaves [ 657.018458][ T8691] bond5 (unregistering): Released all slaves [ 657.041024][ T8691] bond6 (unregistering): Released all slaves [ 657.061818][ T8691] bond7 (unregistering): Released all slaves [ 657.081635][ T8691] bond8 (unregistering): Released all slaves [ 657.367073][T30285] xt_HMARK: spi-set and port-set can't be combined [ 657.519270][T30154] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.541091][T30154] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.569999][T30154] bridge_slave_0: entered allmulticast mode [ 657.606282][T30154] bridge_slave_0: entered promiscuous mode [ 657.617365][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.652616][T30154] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.675304][T30154] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.704529][T30154] bridge_slave_1: entered allmulticast mode [ 657.738867][T30154] bridge_slave_1: entered promiscuous mode [ 657.772961][T30304] netlink: 'syz.4.6604': attribute type 7 has an invalid length. [ 657.941187][ T4943] Bluetooth: hci3: command tx timeout [ 657.954899][T30154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.981140][T30154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.472421][T30154] team0: Port device team_slave_0 added [ 658.496218][T30154] team0: Port device team_slave_1 added [ 658.594113][T30338] __nla_validate_parse: 5 callbacks suppressed [ 658.594131][T30338] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6614'. [ 658.666303][T30354] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 658.728392][T30154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.754932][T30154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.823644][T30154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.864756][T30154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.890833][T30154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.959924][T30154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.973481][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 659.001522][ T8691] hsr_slave_0: left promiscuous mode [ 659.009608][ T8691] hsr_slave_1: left promiscuous mode [ 659.015418][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.023806][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.031949][ T8691] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 659.040067][ T8691] batman_adv: batadv0: Removing interface: ipvlan2 [ 659.057996][ T8691] veth1_macvtap: left promiscuous mode [ 659.063527][ T8691] veth0_macvtap: left promiscuous mode [ 659.421447][T30367] tunl0: entered promiscuous mode [ 659.436711][T30367] netlink: 'syz.3.6622': attribute type 3 has an invalid length. [ 659.451538][T30367] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6622'. [ 659.495362][T30154] hsr_slave_0: entered promiscuous mode [ 659.502461][T30154] hsr_slave_1: entered promiscuous mode [ 659.514592][T30154] debugfs: 'hsr0' already exists in 'hsr' [ 659.535691][T30154] Cannot create hsr debugfs directory [ 659.656678][ T10] IPVS: starting estimator thread 0... [ 659.700301][T27267] net_ratelimit: 4 callbacks suppressed [ 659.700316][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.787923][T30382] IPVS: using max 30 ests per chain, 72000 per kthread [ 659.923442][ T8691] IPVS: stop unused estimator thread 0... [ 659.941310][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.020732][ T4943] Bluetooth: hci3: command tx timeout [ 660.161595][T30394] syzkaller0: entered promiscuous mode [ 660.178783][T30394] syzkaller0: entered allmulticast mode [ 660.503264][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.631040][T30428] x_tables: duplicate entry at hook 1 [ 660.697638][T30430] netlink: 'syz.4.6632': attribute type 3 has an invalid length. [ 660.742648][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.141296][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.779608][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.104255][ T4943] Bluetooth: hci3: command tx timeout [ 662.531295][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 662.638485][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.733411][T30154] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.774689][T30438] siw: device registration error -23 [ 662.805278][T30441] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.819663][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.903818][T30438] »»»»»»: renamed from lo (while UP) [ 662.913903][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6637'. [ 662.965697][T30452] ipvlan2: entered allmulticast mode [ 662.995320][T30452] batadv_slave_1: entered allmulticast mode [ 663.027777][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 663.059414][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.072775][T30154] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.236878][T30461] netlink: 'syz.0.6641': attribute type 1 has an invalid length. [ 663.279051][T30461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6641'. [ 663.363798][T30154] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.426384][T30472] ip6erspan1: entered allmulticast mode [ 663.439931][T30469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6643'. [ 663.522385][T30154] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.776743][T30489] pim6reg1: entered promiscuous mode [ 663.797077][T30489] pim6reg1: entered allmulticast mode [ 663.923810][T30495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6648'. [ 664.014536][T30500] netlink: 'syz.4.6650': attribute type 11 has an invalid length. [ 664.050672][T30154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.088642][T30154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.134247][T30154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.178310][T30154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.200536][T30505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6652'. [ 664.208442][T30154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.239495][T30154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.259003][T30154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.292061][T30154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.583402][T30527] veth3: entered promiscuous mode [ 664.596259][T30527] veth3: entered allmulticast mode [ 664.770481][T30154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.780982][T30537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6658'. [ 664.819302][ T1092] net_ratelimit: 14 callbacks suppressed [ 664.819318][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 664.844340][T30537] nbd: illegal input index -8454144 [ 664.897695][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.914557][T30154] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.935517][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.942761][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.967521][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.974747][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.996212][T30537] macvlan2: entered promiscuous mode [ 665.011980][T30537] macvlan2: entered allmulticast mode [ 665.038386][T30537] team0: Device macvlan2 is already an upper device of the team interface [ 665.120056][ T48] gretap0: left allmulticast mode [ 665.128817][ T48] gretap0: left promiscuous mode [ 665.139425][T30555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6661'. [ 665.155467][ T48] bridge0: port 3(gretap0) entered disabled state [ 665.173842][T30556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6661'. [ 665.196504][ T48] bridge_slave_1: left allmulticast mode [ 665.229816][ T48] bridge_slave_1: left promiscuous mode [ 665.244401][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.333348][ T48] bridge_slave_0: left allmulticast mode [ 665.357426][ T48] bridge_slave_0: left promiscuous mode [ 665.371990][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.407832][ T48] veth0_to_bond: left allmulticast mode [ 665.419848][ T48] veth0_to_bond: left promiscuous mode [ 665.443106][ T48] bridge3: port 1(veth0_to_bond) entered disabled state [ 665.527549][ T48] dvmrp8: left allmulticast mode [ 665.937979][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.961468][ T48] bond9 (unregistering): (slave ip6gre1): Releasing backup interface [ 665.970125][ T48] ip6gre1 (unregistering): left promiscuous mode [ 666.095927][ T48] bond12 (unregistering): (slave gretap2): Releasing active interface [ 666.117714][ T48] tipc: Disabling bearer [ 666.146098][ T48] bond4 (unregistering): (slave geneve3): Releasing active interface [ 666.162865][ T48] bond3 (unregistering): (slave geneve2): Releasing active interface [ 666.471892][ T48] bond12 (unregistering): (slave bridge7): Releasing active interface [ 666.525430][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.537420][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.550854][ T48] bond0 (unregistering): Released all slaves [ 666.563935][ T48] bond1 (unregistering): (slave bond2): Releasing backup interface [ 666.572974][ T48] bond1 (unregistering): Released all slaves [ 666.589258][ T48] bond2 (unregistering): Released all slaves [ 666.610875][ T48] bond3 (unregistering): Released all slaves [ 666.631102][ T48] bond4 (unregistering): Released all slaves [ 666.646178][ T48] bond5 (unregistering): Released all slaves [ 666.671698][ T48] bond6 (unregistering): Released all slaves [ 666.690936][ T48] bond7 (unregistering): Released all slaves [ 666.705758][ T48] bond8 (unregistering): Released all slaves [ 666.721314][ T48] bond9 (unregistering): Released all slaves [ 666.739098][ T48] bond10 (unregistering): Released all slaves [ 666.763313][ T48] bond11 (unregistering): Released all slaves [ 666.782693][ T48] bond12 (unregistering): Released all slaves [ 666.809345][T30575] netem: change failed [ 666.911620][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.982845][T30275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.061303][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.102765][T30596] netlink: 'syz.3.6669': attribute type 21 has an invalid length. [ 667.148453][ T48] tipc: Disabling bearer [ 667.186870][ T48] tipc: Left network mode [ 667.199565][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.235740][T30602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6671'. [ 667.251892][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.323590][T30602] xfrm1: entered promiscuous mode [ 667.341292][T30602] xfrm1: entered allmulticast mode [ 667.415719][T30606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6671'. [ 667.582304][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.712055][T24799] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.943094][T30634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6675'. [ 667.961263][T30639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6677'. [ 668.502334][T30661] netlink: 'syz.0.6682': attribute type 10 has an invalid length. [ 668.588219][T30661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.620939][T30661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.665417][T30661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.688704][T30661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.886019][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.906372][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.014486][ T48] veth0_macvtap: left promiscuous mode [ 669.045814][ T48] veth1_vlan: left promiscuous mode [ 669.072882][ T48] veth0_vlan: left promiscuous mode [ 669.158278][T30694] netlink: 'syz.4.6689': attribute type 64 has an invalid length. [ 669.203904][T30694] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6689'. [ 669.544533][T30715] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6693'. [ 669.848241][T30723] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6695'. [ 670.050381][T30690] syzkaller0: entered promiscuous mode [ 670.056485][T30690] syzkaller0: entered allmulticast mode [ 670.072100][T26526] net_ratelimit: 8 callbacks suppressed [ 670.072116][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.112655][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.123052][T30732] sit0: entered promiscuous mode [ 670.167166][T30732] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 670.199335][T30732] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6696'. [ 670.247563][T30154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.347637][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.467082][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.612501][T30755] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6701'. [ 670.628347][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.675859][T30154] veth0_vlan: entered promiscuous mode [ 670.740810][T30154] veth1_vlan: entered promiscuous mode [ 670.818985][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 670.881690][ T48] IPVS: stop unused estimator thread 0... [ 670.923268][T30154] veth0_macvtap: entered promiscuous mode [ 670.979563][T30154] veth1_macvtap: entered promiscuous mode [ 671.137755][T30275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.150297][T30763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6703'. [ 671.175980][T30154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.204686][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6703'. [ 671.218675][T30154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.272301][T24799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.299894][T24799] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.334604][T26526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.378955][T30275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.389729][T26526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.418750][T26526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.487187][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 671.622907][T26526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.669273][T26526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.740447][ T8691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.762716][ T8691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.992165][T30782] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6569'. [ 672.081604][T30791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6710'. [ 672.165855][T30782] bond1 (unregistering): Released all slaves [ 672.284277][T30803] netlink: 'syz.3.6713': attribute type 8 has an invalid length. [ 673.114595][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6723'. [ 673.235619][T30835] syzkaller0: entered promiscuous mode [ 673.241632][T30835] syzkaller0: entered allmulticast mode [ 675.299470][ T5735] net_ratelimit: 21 callbacks suppressed [ 675.299490][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.777821][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 675.814701][T30890] __nla_validate_parse: 1 callbacks suppressed [ 675.814727][T30890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6735'. [ 675.836513][T30890] openvswitch: netlink: Flow actions attr not present in new flow. [ 675.861992][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.905389][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 675.987278][T30894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6737'. [ 675.997294][T30899] team0: left promiscuous mode [ 676.002442][T30899] team_slave_0: left promiscuous mode [ 676.015574][T30899] team_slave_1: left promiscuous mode [ 676.032302][T30899] batadv1: left promiscuous mode [ 676.043193][T30899] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.063988][T30899] team0: Cannot enslave team device to itself [ 676.087041][T24799] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.217975][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.342183][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.350111][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.454071][T30924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 676.466086][T30921] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 676.478311][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 676.489623][T30925] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6746'. [ 676.515519][T30925] dummy0: entered promiscuous mode [ 676.521084][T30921] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 676.879688][T24801] tipc: Subscription rejected, illegal request [ 676.890000][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6753'. [ 676.915230][T30938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6753'. [ 677.404314][T30970] tipc: Started in network mode [ 677.420532][T30970] tipc: Node identity ac14140f, cluster identity 4711 [ 677.441457][T30970] tipc: New replicast peer: 255.255.255.255 [ 677.467866][T30970] tipc: Enabled bearer , priority 10 [ 677.496099][T30975] netlink: 'syz.0.6765': attribute type 11 has an invalid length. [ 677.543046][T30978] syz_tun: entered allmulticast mode [ 677.740630][T30986] netlink: 'syz.0.6769': attribute type 1 has an invalid length. [ 677.859071][T30993] netlink: 'syz.4.6771': attribute type 83 has an invalid length. [ 677.978704][T30999] sctp: [Deprecated]: syz.3.6773 (pid 30999) Use of int in max_burst socket option deprecated. [ 677.978704][T30999] Use struct sctp_assoc_value instead [ 678.003453][T31000] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 678.043945][T31000] xt_hashlimit: size too large, truncated to 1048576 [ 678.423277][T31020] netlink: 'syz.2.6783': attribute type 4 has an invalid length. [ 678.442118][T31020] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6783'. [ 678.589020][ T5749] tipc: Node number set to 2886997007 [ 678.667343][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6788'. [ 678.749819][T31047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6787'. [ 679.060182][ T4943] Bluetooth: hci3: command tx timeout [ 679.236105][T31083] netlink: 154392 bytes leftover after parsing attributes in process `syz.1.6796'. [ 679.403615][T31091] can: request_module (can-proto-0) failed. [ 680.341107][ T1092] net_ratelimit: 39 callbacks suppressed [ 680.341129][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.363085][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.468013][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.501731][T27267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.577768][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.688965][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.797033][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.907540][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 680.978343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.017852][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 681.625838][T31039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.822649][T31112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6803'. [ 681.870584][T31112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6803'. [ 681.900359][T31112] netlink: 'syz.0.6803': attribute type 7 has an invalid length. [ 681.931859][T31112] netlink: 'syz.0.6803': attribute type 8 has an invalid length. [ 681.965487][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6803'. [ 682.062838][T31122] dvmrp0: entered allmulticast mode [ 682.082404][T31122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6808'. [ 682.101668][T31129] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:57342 [ 682.281389][T31137] syzkaller0: entered promiscuous mode [ 682.302272][T31137] syzkaller0: entered allmulticast mode [ 682.383062][T31139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6813'. [ 682.392352][T31139] netlink: 'syz.1.6813': attribute type 3 has an invalid length. [ 682.403597][T31139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6813'. [ 682.413364][T31139] netlink: 'syz.1.6813': attribute type 3 has an invalid length. [ 682.484764][T31142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6814'. [ 682.634453][T31150] pim6reg1: entered promiscuous mode [ 682.644878][T31156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6817'. [ 682.662135][T31150] pim6reg1: entered allmulticast mode [ 682.714333][T31161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6820'. [ 682.980762][T31166] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6821'. [ 683.103450][T31179] ip6t_srh: unknown srh match flags 5F28 [ 683.193466][T31179] netlink: 'syz.0.6824': attribute type 3 has an invalid length. [ 683.314884][T31193] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 683.331613][T31193] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 683.343643][T31193] debugfs: 'hsr1' already exists in 'hsr' [ 683.352030][T31193] Cannot create hsr debugfs directory [ 683.359025][T31193] hsr1: Slave B (netdevsim2) is not up; please bring it up to get a fully working HSR network [ 683.372831][T31193] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 683.643685][T31200] ip6gre1: entered allmulticast mode [ 683.718419][T31200] team0: Device ip6gre1 is of different type [ 685.367626][ T8691] net_ratelimit: 37 callbacks suppressed [ 685.367657][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.458126][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.466301][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.487014][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.606995][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.717097][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.827843][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 685.937095][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.047012][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.157013][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.267066][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.377070][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 686.583610][T31216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.013894][T31284] __nla_validate_parse: 4 callbacks suppressed [ 687.013913][T31284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6850'. [ 687.185297][T31284] bond3: option xmit_hash_policy: invalid value (64) [ 687.195134][T31284] bond3 (unregistering): Released all slaves [ 687.289944][T31295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 687.321639][T31295] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 687.354514][T31295] team0: Failed to send options change via netlink (err -105) [ 687.368594][T31295] team0: Port device batadv1 added [ 687.423679][T31304] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 687.636286][T31315] FAULT_INJECTION: forcing a failure. [ 687.636286][T31315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.717728][T31315] CPU: 0 UID: 0 PID: 31315 Comm: syz.4.6858 Not tainted syzkaller #0 PREEMPT(full) [ 687.717774][T31315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.717794][T31315] Call Trace: [ 687.717803][T31315] [ 687.717813][T31315] dump_stack_lvl+0xe8/0x150 [ 687.717846][T31315] should_fail_ex+0x412/0x560 [ 687.717881][T31315] _copy_to_user+0x31/0xb0 [ 687.717917][T31315] simple_read_from_buffer+0xe1/0x170 [ 687.717950][T31315] proc_fail_nth_read+0x1bb/0x230 [ 687.717983][T31315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.718016][T31315] ? rw_verify_area+0x2a6/0x4d0 [ 687.718046][T31315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.718077][T31315] vfs_read+0x20c/0xa70 [ 687.718114][T31315] ? __pfx___mutex_lock+0x10/0x10 [ 687.718148][T31315] ? __pfx_vfs_read+0x10/0x10 [ 687.718182][T31315] ? __fget_files+0x2a/0x420 [ 687.718214][T31315] ? __fget_files+0x3a0/0x420 [ 687.718241][T31315] ? __fget_files+0x2a/0x420 [ 687.718278][T31315] ksys_read+0x150/0x270 [ 687.718313][T31315] ? __pfx_ksys_read+0x10/0x10 [ 687.718354][T31315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.718379][T31315] do_syscall_64+0x15f/0xf80 [ 687.718410][T31315] ? trace_irq_disable+0x3b/0x140 [ 687.718449][T31315] ? clear_bhb_loop+0x40/0x90 [ 687.718477][T31315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.718499][T31315] RIP: 0033:0x7f762555d60e [ 687.718521][T31315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.718548][T31315] RSP: 002b:00007f76263d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.718573][T31315] RAX: ffffffffffffffda RBX: 00007f76263d26c0 RCX: 00007f762555d60e [ 687.718589][T31315] RDX: 000000000000000f RSI: 00007f76263d20a0 RDI: 0000000000000003 [ 687.718603][T31315] RBP: 00007f76263d2090 R08: 0000000000000000 R09: 0000000000000000 [ 687.718617][T31315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.718630][T31315] R13: 00007f7625816128 R14: 00007f7625816090 R15: 00007ffe01693278 [ 687.718667][T31315] [ 687.996420][T31321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.796311][T31344] FAULT_INJECTION: forcing a failure. [ 688.796311][T31344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.832018][T31344] CPU: 1 UID: 0 PID: 31344 Comm: syz.3.6868 Not tainted syzkaller #0 PREEMPT(full) [ 688.832043][T31344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.832055][T31344] Call Trace: [ 688.832063][T31344] [ 688.832071][T31344] dump_stack_lvl+0xe8/0x150 [ 688.832098][T31344] should_fail_ex+0x412/0x560 [ 688.832128][T31344] _copy_from_user+0x2d/0xb0 [ 688.832158][T31344] ___sys_sendmsg+0x1c6/0x360 [ 688.832185][T31344] ? __lock_acquire+0x6b5/0x2cf0 [ 688.832210][T31344] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.832269][T31344] ? __fget_files+0x2a/0x420 [ 688.832291][T31344] ? __fget_files+0x3a0/0x420 [ 688.832325][T31344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 688.832355][T31344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.832390][T31344] ? __pfx_ksys_write+0x10/0x10 [ 688.832432][T31344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.832454][T31344] do_syscall_64+0x15f/0xf80 [ 688.832481][T31344] ? trace_irq_disable+0x3b/0x140 [ 688.832510][T31344] ? clear_bhb_loop+0x40/0x90 [ 688.832534][T31344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.832553][T31344] RIP: 0033:0x7ff78b59cdd9 [ 688.832571][T31344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.832588][T31344] RSP: 002b:00007ff78c535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.832607][T31344] RAX: ffffffffffffffda RBX: 00007ff78b815fa0 RCX: 00007ff78b59cdd9 [ 688.832622][T31344] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 688.832635][T31344] RBP: 00007ff78c535090 R08: 0000000000000000 R09: 0000000000000000 [ 688.832647][T31344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.832658][T31344] R13: 00007ff78b816038 R14: 00007ff78b815fa0 R15: 00007fffc9dcb6d8 [ 688.832688][T31344] [ 689.154031][T31350] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6872'. [ 689.247380][T31353] syzkaller1: entered promiscuous mode [ 689.263801][T31353] syzkaller1: entered allmulticast mode [ 689.355865][T31361] erspan0: entered promiscuous mode [ 689.366252][T31361] vlan2: entered promiscuous mode [ 689.397672][T31360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.491924][T31371] netlink: 'syz.4.6876': attribute type 1 has an invalid length. [ 689.501645][T31371] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6876'. [ 689.511350][T31371] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6876'. [ 689.523521][T31371] netlink: 'syz.4.6876': attribute type 1 has an invalid length. [ 689.531508][T31371] netlink: 634 bytes leftover after parsing attributes in process `syz.4.6876'. [ 689.581123][T31378] netlink: 'syz.1.6878': attribute type 2 has an invalid length. [ 689.594968][T31378] netlink: 'syz.1.6878': attribute type 1 has an invalid length. [ 689.633536][T31380] sctp: [Deprecated]: syz.4.6879 (pid 31380) Use of int in maxseg socket option. [ 689.633536][T31380] Use struct sctp_assoc_value instead [ 689.713743][T31383] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6880'. [ 689.729249][T31383] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6880'. [ 690.072394][T31403] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 690.082469][T31402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6884'. [ 690.384661][T31421] net_ratelimit: 27 callbacks suppressed [ 690.384679][T31421] IPv6: addrconf: prefix option has invalid lifetime [ 690.442216][T31421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6890'. [ 690.480563][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 690.561959][T31426] netlink: 'syz.3.6892': attribute type 1 has an invalid length. [ 690.575474][T31426] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6892'. [ 690.591407][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.606609][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 690.692413][T31426] syzkaller0: entered promiscuous mode [ 690.698392][T31426] syzkaller0: entered allmulticast mode [ 690.711775][T31428] tipc: Enabled bearer , priority 0 [ 690.841220][T31428] syzkaller0: entered promiscuous mode [ 690.856925][T31428] syzkaller0: entered allmulticast mode [ 690.877575][T31428] tipc: Resetting bearer [ 690.939752][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 691.004139][T31430] tipc: Resetting bearer [ 693.131776][T31430] tipc: Disabling bearer [ 693.157542][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 693.287674][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 693.369590][T31465] openvswitch: netlink: Key 5 has unexpected len 20 expected 2 [ 693.427255][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 693.465795][T31470] __nla_validate_parse: 3 callbacks suppressed [ 693.465812][T31470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6904'. [ 693.486594][T31470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6904'. [ 693.526548][T31470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6904'. [ 693.573124][T31470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6904'. [ 693.620471][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 693.758260][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 693.892513][T31495] FAULT_INJECTION: forcing a failure. [ 693.892513][T31495] name failslab, interval 1, probability 0, space 0, times 0 [ 693.936583][T31495] CPU: 0 UID: 0 PID: 31495 Comm: syz.1.6910 Not tainted syzkaller #0 PREEMPT(full) [ 693.936609][T31495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.936621][T31495] Call Trace: [ 693.936629][T31495] [ 693.936638][T31495] dump_stack_lvl+0xe8/0x150 [ 693.936666][T31495] should_fail_ex+0x412/0x560 [ 693.936697][T31495] should_failslab+0xa8/0x100 [ 693.936726][T31495] ? skb_clone+0x212/0x3a0 [ 693.936754][T31495] kmem_cache_alloc_noprof+0x87/0x650 [ 693.936780][T31495] ? __netlink_lookup+0xc6/0x8b0 [ 693.936820][T31495] skb_clone+0x212/0x3a0 [ 693.936851][T31495] __netlink_deliver_tap+0x404/0x850 [ 693.936891][T31495] ? netlink_deliver_tap+0x2e/0x1b0 [ 693.936919][T31495] netlink_deliver_tap+0x19c/0x1b0 [ 693.936946][T31495] netlink_unicast+0x730/0x8e0 [ 693.936979][T31495] netlink_sendmsg+0x813/0xb40 [ 693.937014][T31495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.937043][T31495] ? aa_sock_msg_perm+0xf1/0x1b0 [ 693.937073][T31495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.937102][T31495] ____sys_sendmsg+0x972/0x9f0 [ 693.937128][T31495] ? __might_fault+0xaf/0x130 [ 693.937158][T31495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.937194][T31495] ? import_iovec+0x73/0xa0 [ 693.937225][T31495] ___sys_sendmsg+0x2a5/0x360 [ 693.937250][T31495] ? __lock_acquire+0x6b5/0x2cf0 [ 693.937275][T31495] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.937336][T31495] ? __fget_files+0x2a/0x420 [ 693.937359][T31495] ? __fget_files+0x3a0/0x420 [ 693.937392][T31495] __x64_sys_sendmsg+0x1bd/0x2a0 [ 693.937422][T31495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.937458][T31495] ? __pfx_ksys_write+0x10/0x10 [ 693.937493][T31495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.937514][T31495] do_syscall_64+0x15f/0xf80 [ 693.937545][T31495] ? trace_irq_disable+0x3b/0x140 [ 693.937590][T31495] ? clear_bhb_loop+0x40/0x90 [ 693.937633][T31495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.937655][T31495] RIP: 0033:0x7fdc48f9cdd9 [ 693.937675][T31495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.937694][T31495] RSP: 002b:00007fdc49e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.937718][T31495] RAX: ffffffffffffffda RBX: 00007fdc49215fa0 RCX: 00007fdc48f9cdd9 [ 693.937734][T31495] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 693.937749][T31495] RBP: 00007fdc49e22090 R08: 0000000000000000 R09: 0000000000000000 [ 693.937763][T31495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.937777][T31495] R13: 00007fdc49216038 R14: 00007fdc49215fa0 R15: 00007ffd354738b8 [ 693.937818][T31495] [ 694.574154][T31504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6913'. [ 694.604785][T31504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6913'. [ 694.628184][T31504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6913'. [ 694.853302][T31519] sctp: [Deprecated]: syz.2.6918 (pid 31519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.853302][T31519] Use struct sctp_sack_info instead [ 694.856381][T31516] syz.3.6917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 694.902704][T31512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6916'. [ 694.933835][T31516] ,cpuset=/,mems_allowed=0-1 [ 694.950578][T31516] CPU: 0 UID: 0 PID: 31516 Comm: syz.3.6917 Not tainted syzkaller #0 PREEMPT(full) [ 694.950602][T31516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.950614][T31516] Call Trace: [ 694.950622][T31516] [ 694.950630][T31516] dump_stack_lvl+0xe8/0x150 [ 694.950657][T31516] warn_alloc+0x249/0x340 [ 694.950686][T31516] ? stack_trace_save+0xa9/0x100 [ 694.950718][T31516] ? __pfx_warn_alloc+0x10/0x10 [ 694.950752][T31516] ? kasan_save_track+0x4f/0x80 [ 694.950776][T31516] ? kasan_save_track+0x3e/0x80 [ 694.950800][T31516] ? __kasan_kmalloc+0x93/0xb0 [ 694.950825][T31516] ? __kmalloc_cache_noprof+0x31c/0x660 [ 694.950850][T31516] ? xskq_create+0x56/0x170 [ 694.950873][T31516] ? xsk_setsockopt+0x54c/0x990 [ 694.950893][T31516] ? do_sock_setsockopt+0x17c/0x1b0 [ 694.950918][T31516] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 694.950949][T31516] ? do_syscall_64+0x15f/0xf80 [ 694.950979][T31516] __vmalloc_node_range_noprof+0x132/0x1750 [ 694.951056][T31516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 694.951092][T31516] ? __kasan_kmalloc+0x93/0xb0 [ 694.951126][T31516] vmalloc_user_noprof+0xad/0xe0 [ 694.951154][T31516] ? xskq_create+0xbf/0x170 [ 694.951180][T31516] xskq_create+0xbf/0x170 [ 694.951208][T31516] xsk_init_queue+0x8a/0xe0 [ 694.951234][T31516] xsk_setsockopt+0x54c/0x990 [ 694.951261][T31516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 694.951285][T31516] ? __pfx_aa_sk_perm+0x10/0x10 [ 694.951314][T31516] ? aa_sock_opt_perm+0xff/0x1a0 [ 694.951344][T31516] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 694.951371][T31516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 694.951407][T31516] do_sock_setsockopt+0x17c/0x1b0 [ 694.951453][T31516] __x64_sys_setsockopt+0x13d/0x1b0 [ 694.951486][T31516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.951509][T31516] do_syscall_64+0x15f/0xf80 [ 694.951546][T31516] ? trace_irq_disable+0x3b/0x140 [ 694.951575][T31516] ? clear_bhb_loop+0x40/0x90 [ 694.951599][T31516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.951618][T31516] RIP: 0033:0x7ff78b59cdd9 [ 694.951636][T31516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.951652][T31516] RSP: 002b:00007ff78c514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 694.951671][T31516] RAX: ffffffffffffffda RBX: 00007ff78b816090 RCX: 00007ff78b59cdd9 [ 694.951685][T31516] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 694.951697][T31516] RBP: 00007ff78b632d69 R08: 0000000000000004 R09: 0000000000000000 [ 694.951709][T31516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.951721][T31516] R13: 00007ff78b816128 R14: 00007ff78b816090 R15: 00007fffc9dcb6d8 [ 694.951752][T31516] [ 695.227600][T31516] Mem-Info: [ 695.232358][T31516] active_anon:7475 inactive_anon:25 isolated_anon:0 [ 695.232358][T31516] active_file:3016 inactive_file:40576 isolated_file:0 [ 695.232358][T31516] unevictable:768 dirty:188 writeback:0 [ 695.232358][T31516] slab_reclaimable:12742 slab_unreclaimable:137613 [ 695.232358][T31516] mapped:29649 shmem:2843 pagetables:3491 [ 695.232358][T31516] sec_pagetables:0 bounce:0 [ 695.232358][T31516] kernel_misc_reclaimable:0 [ 695.232358][T31516] free:1169628 free_pcp:25996 free_cma:0 [ 695.240400][T31523] syzkaller0: entered promiscuous mode [ 695.277915][T31516] Node 0 active_anon:29900kB inactive_anon:100kB active_file:12064kB inactive_file:162100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20292kB dirty:752kB writeback:0kB shmem:9836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17044kB pagetables:13816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 695.277984][T31516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 695.278043][T31516] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:28kB free_cma:0kB [ 695.278111][T31516] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 695.278162][T31516] Node 0 DMA32 free:1288772kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29900kB inactive_anon:100kB active_file:12064kB inactive_file:162100kB unevictable:1536kB writepending:752kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:43904kB local_pcp:27900kB free_cma:0kB [ 695.278229][T31516] lowmem_reserve[]: 0 0 0 0 0 [ 695.278276][T31516] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:20kB free_cma:0kB [ 695.278339][T31516] lowmem_reserve[]: 0 0 0 0 0 [ 695.278387][T31516] Node 1 Normal free:3378520kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59996kB local_pcp:28928kB free_cma:0kB [ 695.278452][T31516] lowmem_reserve[]: 0 0 0 0 0 [ 695.278497][T31516] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB [ 695.347644][T31512] netlink: 'syz.4.6916': attribute type 30 has an invalid length. [ 695.357467][T31516] (U) 3*2048kB (UM) 0*4096kB = 11212kB [ 695.532871][T31516] Node 0 DMA32: 1*4kB (U) 5974*8kB (UME) 4079*16kB (UME) 199*32kB (UE) 34*64kB (UM) 734*128kB (UME) 986*256kB (UME) 571*512kB (UM) 308*1024kB (UM) 104*2048kB (UM) 0*4096kB = 1288708kB [ 695.555882][T31516] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 695.572887][T31516] Node 1 Normal: 5*4kB (U) 12*8kB (UM) 12*16kB (UM) 11*32kB (UM) 13*64kB (UM) 13*128kB (UM) 10*256kB (UM) 10*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 819*4096kB (UM) = 3378772kB [ 695.595440][T31523] syzkaller0: entered allmulticast mode [ 695.631724][T24801] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.648024][T31516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.667073][T31516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 695.693764][T31516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.765784][T31516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 695.817699][T31516] 44897 total pagecache pages [ 695.827969][T31516] 0 pages in swap cache [ 695.848396][T24801] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.861445][T31516] Free swap = 124996kB [ 695.879902][T24801] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.899783][T31516] Total swap = 124996kB [ 695.933227][T31516] 2097051 pages RAM [ 695.962873][T31516] 0 pages HighMem/MovableOnly [ 695.979010][T31516] 427114 pages reserved [ 695.983351][T31516] 0 pages cma reserved [ 696.006496][T24801] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.077254][ T1155] net_ratelimit: 11 callbacks suppressed [ 696.077270][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.311224][T31548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6927'. [ 696.407817][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.453426][T31548] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 696.524087][T31557] FAULT_INJECTION: forcing a failure. [ 696.524087][T31557] name failslab, interval 1, probability 0, space 0, times 0 [ 696.557094][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 696.576430][T31557] CPU: 1 UID: 0 PID: 31557 Comm: syz.4.6931 Not tainted syzkaller #0 PREEMPT(full) [ 696.576455][T31557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.576468][T31557] Call Trace: [ 696.576476][T31557] [ 696.576484][T31557] dump_stack_lvl+0xe8/0x150 [ 696.576517][T31557] should_fail_ex+0x412/0x560 [ 696.576547][T31557] should_failslab+0xa8/0x100 [ 696.576577][T31557] ? ovs_flow_alloc+0x24/0x1f0 [ 696.576596][T31557] kmem_cache_alloc_noprof+0x87/0x650 [ 696.576630][T31557] ovs_flow_alloc+0x24/0x1f0 [ 696.576651][T31557] ovs_flow_cmd_new+0x2b9/0xe80 [ 696.576674][T31557] ? kasan_save_track+0x3e/0x80 [ 696.576708][T31557] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 696.576786][T31557] ? __nla_parse+0x40/0x60 [ 696.576817][T31557] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 696.576838][T31557] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 696.576870][T31557] genl_family_rcv_msg_doit+0x22a/0x330 [ 696.576897][T31557] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 696.576930][T31557] ? bpf_lsm_capable+0x9/0x20 [ 696.576949][T31557] ? security_capable+0x7e/0x2c0 [ 696.576979][T31557] genl_rcv_msg+0x61c/0x7a0 [ 696.577006][T31557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.577025][T31557] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 696.577050][T31557] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.577086][T31557] netlink_rcv_skb+0x232/0x4b0 [ 696.577112][T31557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.577134][T31557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.577174][T31557] ? down_read+0x270/0x2e0 [ 696.577190][T31557] ? genl_rcv+0xd/0x40 [ 696.577211][T31557] genl_rcv+0x28/0x40 [ 696.577227][T31557] netlink_unicast+0x75c/0x8e0 [ 696.577260][T31557] netlink_sendmsg+0x813/0xb40 [ 696.577295][T31557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.577324][T31557] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.577350][T31557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.577379][T31557] ____sys_sendmsg+0x972/0x9f0 [ 696.577405][T31557] ? __might_fault+0xaf/0x130 [ 696.577436][T31557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.577471][T31557] ? import_iovec+0x73/0xa0 [ 696.577507][T31557] ___sys_sendmsg+0x2a5/0x360 [ 696.577532][T31557] ? __lock_acquire+0x6b5/0x2cf0 [ 696.577558][T31557] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.577637][T31557] ? __fget_files+0x2a/0x420 [ 696.577664][T31557] ? __fget_files+0x3a0/0x420 [ 696.577702][T31557] __x64_sys_sendmsg+0x1bd/0x2a0 [ 696.577737][T31557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.577780][T31557] ? __pfx_ksys_write+0x10/0x10 [ 696.577823][T31557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.577847][T31557] do_syscall_64+0x15f/0xf80 [ 696.577878][T31557] ? trace_irq_disable+0x3b/0x140 [ 696.577911][T31557] ? clear_bhb_loop+0x40/0x90 [ 696.577938][T31557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.577961][T31557] RIP: 0033:0x7f762559cdd9 [ 696.577982][T31557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.578002][T31557] RSP: 002b:00007f76263f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.578024][T31557] RAX: ffffffffffffffda RBX: 00007f7625815fa0 RCX: 00007f762559cdd9 [ 696.578041][T31557] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 696.578055][T31557] RBP: 00007f76263f3090 R08: 0000000000000000 R09: 0000000000000000 [ 696.578069][T31557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.578082][T31557] R13: 00007f7625816038 R14: 00007f7625815fa0 R15: 00007ffe01693278 [ 696.578119][T31557] [ 697.025714][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 697.168325][T31550] syzkaller0: entered promiscuous mode [ 697.206223][T31550] syzkaller0: entered allmulticast mode [ 697.278328][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 697.316680][T31575] openvswitch: netlink: Message has 16 unknown bytes. [ 697.427670][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 697.631673][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 697.758817][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 697.877554][ T8687] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 698.046547][T31609] xt_l2tp: v2 doesn't support IP mode [ 698.134537][T31615] FAULT_INJECTION: forcing a failure. [ 698.134537][T31615] name failslab, interval 1, probability 0, space 0, times 0 [ 698.176470][T31615] CPU: 1 UID: 0 PID: 31615 Comm: syz.4.6947 Not tainted syzkaller #0 PREEMPT(full) [ 698.176495][T31615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.176507][T31615] Call Trace: [ 698.176515][T31615] [ 698.176523][T31615] dump_stack_lvl+0xe8/0x150 [ 698.176549][T31615] should_fail_ex+0x412/0x560 [ 698.176586][T31615] should_failslab+0xa8/0x100 [ 698.176617][T31615] __kmalloc_cache_noprof+0x88/0x660 [ 698.176645][T31615] ? ovs_flow_cmd_new+0x356/0xe80 [ 698.176675][T31615] ovs_flow_cmd_new+0x356/0xe80 [ 698.176697][T31615] ? kasan_save_track+0x3e/0x80 [ 698.176731][T31615] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 698.176808][T31615] ? __nla_parse+0x40/0x60 [ 698.176840][T31615] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 698.176860][T31615] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 698.176893][T31615] genl_family_rcv_msg_doit+0x22a/0x330 [ 698.176920][T31615] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.176953][T31615] ? bpf_lsm_capable+0x9/0x20 [ 698.176972][T31615] ? security_capable+0x7e/0x2c0 [ 698.177002][T31615] genl_rcv_msg+0x61c/0x7a0 [ 698.177028][T31615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.177047][T31615] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 698.177071][T31615] ? __pfx_ref_tracker_free+0x10/0x10 [ 698.177108][T31615] netlink_rcv_skb+0x232/0x4b0 [ 698.177136][T31615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.177156][T31615] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.177197][T31615] ? down_read+0x270/0x2e0 [ 698.177213][T31615] ? genl_rcv+0xd/0x40 [ 698.177233][T31615] genl_rcv+0x28/0x40 [ 698.177250][T31615] netlink_unicast+0x75c/0x8e0 [ 698.177284][T31615] netlink_sendmsg+0x813/0xb40 [ 698.177319][T31615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.177348][T31615] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.177375][T31615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.177404][T31615] ____sys_sendmsg+0x972/0x9f0 [ 698.177431][T31615] ? __might_fault+0xaf/0x130 [ 698.177461][T31615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.177496][T31615] ? import_iovec+0x73/0xa0 [ 698.177528][T31615] ___sys_sendmsg+0x2a5/0x360 [ 698.177564][T31615] ? __lock_acquire+0x6b5/0x2cf0 [ 698.177606][T31615] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.177694][T31615] ? __fget_files+0x2a/0x420 [ 698.177721][T31615] ? __fget_files+0x3a0/0x420 [ 698.177760][T31615] __x64_sys_sendmsg+0x1bd/0x2a0 [ 698.177796][T31615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.177840][T31615] ? __pfx_ksys_write+0x10/0x10 [ 698.177911][T31615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.177937][T31615] do_syscall_64+0x15f/0xf80 [ 698.177968][T31615] ? trace_irq_disable+0x3b/0x140 [ 698.178002][T31615] ? clear_bhb_loop+0x40/0x90 [ 698.178031][T31615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.178054][T31615] RIP: 0033:0x7f762559cdd9 [ 698.178073][T31615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.178093][T31615] RSP: 002b:00007f76263f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.178116][T31615] RAX: ffffffffffffffda RBX: 00007f7625815fa0 RCX: 00007f762559cdd9 [ 698.178133][T31615] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 698.178148][T31615] RBP: 00007f76263f3090 R08: 0000000000000000 R09: 0000000000000000 [ 698.178163][T31615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.178176][T31615] R13: 00007f7625816038 R14: 00007f7625815fa0 R15: 00007ffe01693278 [ 698.178213][T31615] [ 698.647992][T31617] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 698.698553][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6951'. [ 698.788224][T31630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6951'. [ 698.810524][T31612] nbd5: detected capacity change from 0 to 63 [ 698.879590][ T4943] block nbd5: Receive control failed (result -104) [ 699.038953][T31643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6956'. [ 699.101671][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6957'. [ 699.728516][T31687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6967'. [ 700.100433][T31711] veth0: entered promiscuous mode [ 700.112583][T31712] FAULT_INJECTION: forcing a failure. [ 700.112583][T31712] name failslab, interval 1, probability 0, space 0, times 0 [ 700.149678][T31712] CPU: 1 UID: 0 PID: 31712 Comm: syz.2.6976 Not tainted syzkaller #0 PREEMPT(full) [ 700.149703][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.149716][T31712] Call Trace: [ 700.149724][T31712] [ 700.149733][T31712] dump_stack_lvl+0xe8/0x150 [ 700.149762][T31712] should_fail_ex+0x412/0x560 [ 700.149804][T31712] should_failslab+0xa8/0x100 [ 700.149837][T31712] ? skb_clone+0x212/0x3a0 [ 700.149865][T31712] kmem_cache_alloc_noprof+0x87/0x650 [ 700.149898][T31712] skb_clone+0x212/0x3a0 [ 700.149928][T31712] __netlink_deliver_tap+0x404/0x850 [ 700.149967][T31712] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.149995][T31712] netlink_deliver_tap+0x19c/0x1b0 [ 700.150021][T31712] netlink_sendskb+0x68/0x140 [ 700.150048][T31712] netlink_rcv_skb+0x2b6/0x4b0 [ 700.150074][T31712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.150096][T31712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.150139][T31712] ? down_read+0x270/0x2e0 [ 700.150156][T31712] ? genl_rcv+0xd/0x40 [ 700.150176][T31712] genl_rcv+0x28/0x40 [ 700.150194][T31712] netlink_unicast+0x75c/0x8e0 [ 700.150229][T31712] netlink_sendmsg+0x813/0xb40 [ 700.150265][T31712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.150295][T31712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 700.150329][T31712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.150360][T31712] ____sys_sendmsg+0x972/0x9f0 [ 700.150387][T31712] ? __might_fault+0xaf/0x130 [ 700.150419][T31712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.150456][T31712] ? import_iovec+0x73/0xa0 [ 700.150487][T31712] ___sys_sendmsg+0x2a5/0x360 [ 700.150513][T31712] ? __lock_acquire+0x6b5/0x2cf0 [ 700.150539][T31712] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.150600][T31712] ? __fget_files+0x2a/0x420 [ 700.150624][T31712] ? __fget_files+0x3a0/0x420 [ 700.150658][T31712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 700.150689][T31712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.150726][T31712] ? __pfx_ksys_write+0x10/0x10 [ 700.150754][T31712] ? __pfx_do_sync_core+0x10/0x10 [ 700.150788][T31712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.150809][T31712] do_syscall_64+0x15f/0xf80 [ 700.150838][T31712] ? clear_bhb_loop+0x40/0x90 [ 700.150862][T31712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.150882][T31712] RIP: 0033:0x7f4dbed9cdd9 [ 700.150899][T31712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.150915][T31712] RSP: 002b:00007f4dbfbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.150935][T31712] RAX: ffffffffffffffda RBX: 00007f4dbf015fa0 RCX: 00007f4dbed9cdd9 [ 700.150949][T31712] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 700.150961][T31712] RBP: 00007f4dbfbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 700.150973][T31712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.150984][T31712] R13: 00007f4dbf016038 R14: 00007f4dbf015fa0 R15: 00007ffed2189b88 [ 700.151016][T31712] [ 700.455468][T31717] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 700.516300][T31717] xt_hashlimit: size too large, truncated to 1048576 [ 700.550004][T31718] xt_hashlimit: size too large, truncated to 1048576 [ 700.584536][T31719] veth0: left promiscuous mode [ 700.670000][T31725] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.698418][T31730] netlink: 'syz.3.6977': attribute type 3 has an invalid length. [ 700.744013][T31730] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6977'. [ 700.837641][T31732] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6981'. [ 701.004767][T31738] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6982'. [ 701.084352][T31742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6984'. [ 701.095347][ T48] net_ratelimit: 23 callbacks suppressed [ 701.095363][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.273352][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.407573][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.537384][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.658290][T24801] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.764047][T31774] netem: change failed [ 701.775432][T31774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6996'. [ 701.784894][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 701.812154][T31774] erspan0: entered promiscuous mode [ 701.819794][T31774] gretap0: entered promiscuous mode [ 701.826611][T31774] debugfs: 'hsr1' already exists in 'hsr' [ 701.832877][T31774] Cannot create hsr debugfs directory [ 701.878110][ T5735] [ 701.880481][ T5735] ====================================================== [ 701.887525][ T5735] WARNING: possible circular locking dependency detected [ 701.894579][ T5735] syzkaller #0 Not tainted [ 701.899014][ T5735] ------------------------------------------------------ [ 701.906048][ T5735] kworker/1:5/5735 is trying to acquire lock: [ 701.912126][ T5735] ffff8880a7ad5958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 701.922005][ T5735] [ 701.922005][ T5735] but task is already holding lock: [ 701.929382][ T5735] ffff888093d1cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 701.938456][ T5735] [ 701.938456][ T5735] which lock already depends on the new lock. [ 701.938456][ T5735] [ 701.948880][ T5735] [ 701.948880][ T5735] the existing dependency chain (in reverse order) is: [ 701.958166][ T5735] [ 701.958166][ T5735] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 701.965944][ T5735] _raw_spin_lock_bh+0x36/0x50 [ 701.971253][ T5735] hsr_dev_xmit+0x237/0x360 [ 701.976297][ T5735] dev_hard_start_xmit+0x2cd/0x830 [ 701.981952][ T5735] __dev_queue_xmit+0x14d9/0x3950 [ 701.987535][ T5735] NF_HOOK+0x33a/0x3c0 [ 701.992172][ T5735] arp_xmit+0x16c/0x270 [ 701.996879][ T5735] arp_solicit+0xbe0/0xe40 [ 702.001833][ T5735] __neigh_event_send+0xf05/0x14d0 [ 702.007487][ T5735] neigh_resolve_output+0x198/0x750 [ 702.013213][ T5735] ip_finish_output2+0xca9/0x1070 [ 702.018774][ T5735] ip_output+0x29f/0x450 [ 702.023581][ T5735] iptunnel_xmit+0x621/0xd10 [ 702.028697][ T5735] ip_tunnel_xmit+0x193a/0x1f20 [ 702.034088][ T5735] __gre_xmit+0x19e/0x240 [ 702.038948][ T5735] erspan_xmit+0xa41/0x14d0 [ 702.043982][ T5735] dev_hard_start_xmit+0x2cd/0x830 [ 702.049623][ T5735] sch_direct_xmit+0x251/0x4c0 [ 702.054920][ T5735] __dev_queue_xmit+0x180f/0x3950 [ 702.060489][ T5735] alb_send_lp_vid+0x348/0x550 [ 702.065781][ T5735] alb_send_learning_packets+0x12c/0x300 [ 702.071966][ T5735] alb_fasten_mac_swap+0x639/0xf60 [ 702.077629][ T5735] bond_alb_handle_active_change+0xc6d/0xf30 [ 702.084147][ T5735] bond_change_active_slave+0x106e/0x35f0 [ 702.090394][ T5735] bond_select_active_slave+0x909/0xd40 [ 702.096464][ T5735] bond_enslave+0x2299/0x3c10 [ 702.101665][ T5735] do_set_master+0x533/0x6d0 [ 702.106794][ T5735] rtnl_newlink_create+0x6af/0xb70 [ 702.112447][ T5735] rtnl_newlink+0x166a/0x1bb0 [ 702.117689][ T5735] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 702.123163][ T5735] netlink_rcv_skb+0x232/0x4b0 [ 702.128462][ T5735] netlink_unicast+0x75c/0x8e0 [ 702.133766][ T5735] netlink_sendmsg+0x813/0xb40 [ 702.139061][ T5735] ____sys_sendmsg+0x972/0x9f0 [ 702.144359][ T5735] ___sys_sendmsg+0x2a5/0x360 [ 702.149565][ T5735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 702.155035][ T5735] do_syscall_64+0x15f/0xf80 [ 702.160155][ T5735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.166581][ T5735] [ 702.166581][ T5735] -> #0 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 702.174856][ T5735] __lock_acquire+0x15a5/0x2cf0 [ 702.180234][ T5735] lock_acquire+0x106/0x350 [ 702.185266][ T5735] _raw_spin_lock+0x2e/0x40 [ 702.190308][ T5735] sch_direct_xmit+0x15f/0x4c0 [ 702.195598][ T5735] __dev_queue_xmit+0x180f/0x3950 [ 702.201167][ T5735] hsr_forward_skb+0x167e/0x2a80 [ 702.206632][ T5735] hsr_dev_xmit+0x242/0x360 [ 702.211658][ T5735] dev_hard_start_xmit+0x2cd/0x830 [ 702.217306][ T5735] __dev_queue_xmit+0x14d9/0x3950 [ 702.222858][ T5735] ip6_output+0x340/0x550 [ 702.227720][ T5735] NF_HOOK+0x177/0x4f0 [ 702.232333][ T5735] mld_sendpack+0x8b4/0xe40 [ 702.237385][ T5735] mld_ifc_work+0x835/0xe70 [ 702.242430][ T5735] process_scheduled_works+0xb5d/0x1860 [ 702.248507][ T5735] worker_thread+0xa53/0xfc0 [ 702.253628][ T5735] kthread+0x388/0x470 [ 702.258229][ T5735] ret_from_fork+0x514/0xb70 [ 702.263357][ T5735] ret_from_fork_asm+0x1a/0x30 [ 702.268656][ T5735] [ 702.268656][ T5735] other info that might help us debug this: [ 702.268656][ T5735] [ 702.278919][ T5735] Possible unsafe locking scenario: [ 702.278919][ T5735] [ 702.286367][ T5735] CPU0 CPU1 [ 702.291729][ T5735] ---- ---- [ 702.297097][ T5735] lock(&hsr->seqnr_lock); [ 702.301608][ T5735] lock(&qdisc_xmit_lock_key#4); [ 702.309164][ T5735] lock(&hsr->seqnr_lock); [ 702.316199][ T5735] lock(&qdisc_xmit_lock_key#4); [ 702.321241][ T5735] [ 702.321241][ T5735] *** DEADLOCK *** [ 702.321241][ T5735] [ 702.329384][ T5735] 11 locks held by kworker/1:5/5735: [ 702.334665][ T5735] #0: ffff888031eb4d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 702.345375][ T5735] #1: ffffc90004e17c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 702.358516][ T5735] #2: ffff8880b0e64530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 702.367772][ T5735] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 702.377047][ T5735] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 702.386105][ T5735] #5: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 702.396032][ T5735] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 702.405174][ T5735] #7: ffff888093d1cff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 702.414659][ T5735] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 702.424153][ T5735] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 702.434080][ T5735] #10: ffff88806a1e3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 702.446815][ T5735] [ 702.446815][ T5735] stack backtrace: [ 702.452712][ T5735] CPU: 1 UID: 0 PID: 5735 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 702.452733][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.452745][ T5735] Workqueue: mld mld_ifc_work [ 702.452767][ T5735] Call Trace: [ 702.452774][ T5735] [ 702.452781][ T5735] dump_stack_lvl+0xe8/0x150 [ 702.452807][ T5735] print_circular_bug+0x2e1/0x300 [ 702.452832][ T5735] check_noncircular+0x12e/0x150 [ 702.452868][ T5735] __lock_acquire+0x15a5/0x2cf0 [ 702.452895][ T5735] ? sch_direct_xmit+0x15f/0x4c0 [ 702.452913][ T5735] lock_acquire+0x106/0x350 [ 702.452929][ T5735] ? sch_direct_xmit+0x15f/0x4c0 [ 702.452948][ T5735] ? hsr_create_tagged_frame+0x24e/0xe10 [ 702.452968][ T5735] ? hsr_forward_skb+0x112b/0x2a80 [ 702.452990][ T5735] _raw_spin_lock+0x2e/0x40 [ 702.453009][ T5735] ? sch_direct_xmit+0x15f/0x4c0 [ 702.453027][ T5735] sch_direct_xmit+0x15f/0x4c0 [ 702.453049][ T5735] ? __pfx_sch_direct_xmit+0x10/0x10 [ 702.453071][ T5735] __dev_queue_xmit+0x180f/0x3950 [ 702.453100][ T5735] ? __dev_queue_xmit+0x2b6/0x3950 [ 702.453124][ T5735] ? trace_kmem_cache_alloc+0x29/0xe0 [ 702.453147][ T5735] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 702.453171][ T5735] ? __pfx___dev_queue_xmit+0x10/0x10 [ 702.453196][ T5735] ? __pskb_copy_fclone+0xb1a/0x1120 [ 702.453221][ T5735] ? __asan_memcpy+0x40/0x70 [ 702.453241][ T5735] ? __pskb_copy_fclone+0xb1a/0x1120 [ 702.453270][ T5735] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 702.453289][ T5735] ? hsr_addr_subst_dest+0x30d/0xa90 [ 702.453309][ T5735] hsr_forward_skb+0x167e/0x2a80 [ 702.453329][ T5735] ? ret_from_fork_asm+0x1a/0x30 [ 702.453352][ T5735] ? hsr_forward_skb+0xbb/0x2a80 [ 702.453372][ T5735] ? __pfx_hsr_forward_skb+0x10/0x10 [ 702.453391][ T5735] ? do_raw_spin_lock+0x12b/0x2f0 [ 702.453415][ T5735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 702.453438][ T5735] ? __pfx_netif_skb_features+0x10/0x10 [ 702.453462][ T5735] ? hsr_dev_xmit+0x237/0x360 [ 702.453479][ T5735] hsr_dev_xmit+0x242/0x360 [ 702.453494][ T5735] ? hsr_dev_xmit+0x2d/0x360 [ 702.453511][ T5735] dev_hard_start_xmit+0x2cd/0x830 [ 702.453541][ T5735] __dev_queue_xmit+0x14d9/0x3950 [ 702.453568][ T5735] ? __dev_queue_xmit+0x2b6/0x3950 [ 702.453598][ T5735] ? __pfx___dev_queue_xmit+0x10/0x10 [ 702.453622][ T5735] ? neigh_connected_output+0x1ea/0x460 [ 702.453642][ T5735] ? eth_header+0x11b/0x200 [ 702.453666][ T5735] ? __asan_memcpy+0x40/0x70 [ 702.453694][ T5735] ? ip6_output+0x126/0x550 [ 702.453714][ T5735] ip6_output+0x340/0x550 [ 702.453734][ T5735] ? __pfx_ip6_output+0x10/0x10 [ 702.453754][ T5735] NF_HOOK+0x177/0x4f0 [ 702.453774][ T5735] ? __pfx_NF_HOOK+0x10/0x10 [ 702.453795][ T5735] ? __pfx_dst_output+0x10/0x10 [ 702.453819][ T5735] ? lockdep_hardirqs_on+0x7a/0x110 [ 702.453841][ T5735] ? __local_bh_enable_ip+0xd0/0x130 [ 702.453858][ T5735] ? icmp6_dst_alloc+0x3a6/0x440 [ 702.453880][ T5735] mld_sendpack+0x8b4/0xe40 [ 702.453906][ T5735] ? mld_sendpack+0x213/0xe40 [ 702.453925][ T5735] ? __pfx_mld_sendpack+0x10/0x10 [ 702.453953][ T5735] mld_ifc_work+0x835/0xe70 [ 702.453974][ T5735] ? process_scheduled_works+0xa70/0x1860 [ 702.453991][ T5735] process_scheduled_works+0xb5d/0x1860 [ 702.454019][ T5735] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.454038][ T5735] ? assign_work+0x3d5/0x5e0 [ 702.454056][ T5735] worker_thread+0xa53/0xfc0 [ 702.454083][ T5735] kthread+0x388/0x470 [ 702.454104][ T5735] ? __pfx_worker_thread+0x10/0x10 [ 702.454119][ T5735] ? __pfx_kthread+0x10/0x10 [ 702.454140][ T5735] ret_from_fork+0x514/0xb70 [ 702.454158][ T5735] ? __pfx_ret_from_fork+0x10/0x10 [ 702.454174][ T5735] ? __switch_to+0xc79/0x1410 [ 702.454198][ T5735] ? __pfx_kthread+0x10/0x10 [ 702.454219][ T5735] ret_from_fork_asm+0x1a/0x30 [ 702.454244][ T5735] [ 702.822153][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 702.947616][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 703.057142][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 703.167525][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.137578][ T48] net_ratelimit: 26 callbacks suppressed [ 706.137598][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.257562][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.367136][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.476994][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.587003][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.697037][ T8691] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.807878][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 706.917457][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.027106][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 707.137564][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.238065][ T48] net_ratelimit: 36 callbacks suppressed [ 711.238090][ T48] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.357479][ T1092] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.467121][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.587036][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.697832][T26526] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 711.807044][ T1155] bond3: (slave ip6gretap1): failed to get link speed/duplex