last executing test programs: 4.600748718s ago: executing program 2 (id=8935): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f00000001c0)={'wg2\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="cd3b4df61b6552c7aad12fa5351bf0475ed4d1d5f3e7799914716745d4717de203eff62d142940217fcfb1081d54c8825f4e56f650051cca71a48bc79bf1742cd8747b7804beee01262673469194d544bac9ffe42cada60b32fdf900c26d3279e09c10bbee2aceb6", 0x68}, {&(0x7f0000000340)="601ce5f1a7f895d8b0f8add5848ad4a68bb3cc6de0c34ada14b34ff2b354720b18e43bfb338f40e1f444574ad50d2f5713b180493675e398c427e37a6f668989cc2851fb3ccfd61bf2fb8a5648e48079a59f7c174cec", 0x56}, {&(0x7f00000003c0)="342529b3e78ba3b86348d2095fef2a1d296fedf6d4626528d0663a2ccdeaa1fa70e90264e3ad673474544f02a2863de57d68aebbb1cb5c84d7215ad6daf0929411e1377335d7", 0x46}, {&(0x7f00000005c0)="9b1f487d1c59367b106fd35e194ef0a345e755f7cadbf6eee4b6ec3b0ac5847caf9be756c925847557ecc387e72dc3ea89f11e833f5a7a00a206c9dea3025e1712a8d25e6f15ac70c531635737a9c43c8e9bd05a33c359ad6ea872a106a95ccab11604be8ccdbc4738b50553beb1fc5ac3ec0ef2f551ba2ad42fa014dbc75b5915dd0ee721f28a8d83ac089ac7ad16deb146bc210564c172d5b65e07cead04e41889933eaa41903397db221abd3319a8aa59ba68b12f91bcc98c6c0c30db8baa3702421c366dbcada33aec51c30b2ce45d79b8b6ab0314061e79b44b77f1248d636cc7c951aa0403fde735752dc72e255623b5a6ee16bfd5cdd2a0f77c55a9", 0xff}, {&(0x7f0000000480)="4951f14a00bce3b7ee8a27f8eb8f6070d017debfe948", 0x16}], 0x5, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @local}}}], 0x20}, 0x44001) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r12, {0x9, 0x2}, {0x8, 0xfff1}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4041880) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001dc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r17, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x3}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010001fff2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=0x0, @ANYBLOB='\n\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.29730181s ago: executing program 2 (id=8939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x24}}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x4a, 0x0, &(0x7f0000cab000)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7e}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x24b215c2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbe9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x44) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000040)={r1, 0x7ff}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000100001042dbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000040001280080001007369740034000280060012004e2007000600111b4e240000050004006e00000006000d00020000000300e000000200"/72], 0x60}}, 0x0) 4.063659947s ago: executing program 2 (id=8942): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.559192792s ago: executing program 2 (id=8950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getpid() (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x200, 0x71bd2d, 0x8, {0x0, 0x0, 0x0, 0x0, 0x2b4, 0x1400}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1535}, @IFLA_PORT_SELF={0x1c, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, 'syzkaller0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}]}, 0x44}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="619097d16294aaaaaaaaaa3f86dd6100040000003aff00000000000000000000ffffac1414bbff020000000000000000000000000001020090780000050066"], 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r4, 0x29, 0x1d, 0x0, &(0x7f0000000580)) bind$ax25(r3, &(0x7f0000000140)={{0x3, @null, 0x6}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x1411, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x800) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000a30d4232000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffe0}, {0xc, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000f5878c7662c5d83929a59ffc871b0aa20ae20000000000000000000020000000000000337a0c6e575e20ccc0d16237211d1e8e1010", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100001002bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b000000000024001a8020000a8034000700ff0100000000000000000000000000010500080002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ab020000000000000200002118110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000079500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socket$unix(0x1, 0x1, 0x0) 2.470433648s ago: executing program 3 (id=8951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@getlink={0x120, 0x12, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10800, 0x8202}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_AF_SPEC={0x98, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x20}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x34}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0xffffffdb}, {0x8, 0x1, 0x0, 0x0, 0x86ca}, {0x8, 0x12, 0x0, 0x0, 0x9}]}}]}, @IFLA_PHYS_PORT_ID={0x15, 0x22, "fc27227925aca591e67f3991bd9908b88f"}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "3c9cc0c0323e4e2eac189fb0211ce9796a1e0ea5e3"}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xff}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x120}, 0x1, 0x0, 0x0, 0x804}, 0x40002) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r0, 0x4, 0x6, 0x8}) r2 = socket(0x22, 0x2, 0x2) getpeername$llc(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002580)={&(0x7f0000001f40)=@phonet={0x23, 0x4, 0x5, 0x7}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001fc0)="c7ca37ee6e90c5b5a19011003b9e7b78d5e0da22f4168cc4360727d2943fa6e14174c7f4bb2166c82554b2aca07b4e8e2ad662a28a89563eac3217eb505518f9a45537e50d5770e0d1d22cf4bcb28c11ef9e8066f00780b6dab2b1aa2366372415701475689988d20e8193aad7f79c1d172998425bd848bf6a34", 0xffffffffffffff4e}, {&(0x7f0000002040)}, {&(0x7f0000002080)="dd692c4abc55d40782eb3fff2d0cb644d64580253f72a2d1a6dde80e86b33f599ad5aece75688940d5ac6e553624aea407d4f55a2008ec540e7e8335e375c9746d9f1f6e4a563cebc7c810a94ea2f257cc5d196dc0e73df44ac1c1e0b579dd1c0f2126d4dd74cf07516912f912025c1b8e444fe551c140abff07e12690a479af20b8817b1fc7213806db97525db682c757e0cf8a1a3c5dee2352806e", 0x9c}, {&(0x7f0000002140)="2f68874de7aee0b33afdc7b37113f4cd337cc7219d143c92969e5ef635c7c85802708a63cc332967e436b3102e0a51928ffdd2bce1c98b8bd7debaf6b0c95410332e70497ba2647414f8bf8471b3f6bbad59e7e01ae7d1689a9517598eb63439eba958732a111eab36e3eb6df8493790974fd594ee2cc3dd07bd1d4748c429a4884e0ee33e089fb51fc429f22307a73cfc57f355ee074d5696b246113f46", 0x9e}, {&(0x7f0000002200)="d8ae751345639b0963744fe1dd941bada2481f665e11238b32accc90a5b107c5702bf2c00af6a087c7fcb1d5f541ccc57e5badd91edb8e8f6bc501b9d16091eb2ce12d3ca7a71fcd4e7f47b9413e0de643c60a35fa97d91b546db72437b916a5435512f4840a168d3e35c3e11bcbdc1fc65a8dafb5c749b1cab2ef635bd77e44b297d2c17a55308aee49ae199b8cd963967dd8c471d8c6a29f526b61358acb595a34c02b728f402c67f0bb314f44cce61309933a922f29aa1c209118b159d8fd2220", 0xc2}, {&(0x7f0000002300)="4e998eee48c3f90a05c363c10cfafeb4675d5868fbd7bd4d623134ed87baa2459da4aed9ea1104fa503b9426cf75d446895590d275d3168a3ecc516d", 0x3c}, {&(0x7f0000002340)="888f1f651746f1e836e23e6fec71f0d0ec8e23053e579cefd56530f816cf93dbbb3219a57772abf99d5cf6de0bf1503233acc84665af0a3888359b679b2d2a2341a81b643bd91b37de7f0599bf223b4e4593fb2d4bd2b42a2e0ab37b866234558b3682a1e3641606c62910e2025cc2d3dcc1fe604f0015785bf9e7eb41ec2e6b2384ce9b1bddab0265b7f20c88027d2483ba012f92d06f3fbd143bfa1c17f9f78b9311cd7e37a4c818b85223392abfdb68cf7d637fe85f348eed74346d", 0xbd}, {&(0x7f0000002400)="1b45692671cf91a50d7f8d55c543bef0d7cee438ece57d8ac2630733ee25d92e271c4c930b7829e10fdff22e07aa68842ed1758369d09ada580b846a046c4a1838", 0x41}], 0x8, &(0x7f0000002500)=[{0x60, 0x0, 0x7, "87508ef02ab57c70d4a81d6fcee7c7609c02ee98c406f1ab50e52666fd80cdabbec09f9839d7c2bfba6f2342e544ecee2f58d1e8cc8c6f58d312e0c531f25af01c3170973eceab4c1961583542"}], 0x60}, 0x20040004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x268, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x22c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}], {0x14}}, 0x290}}, 0x814) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) getsockname$packet(r5, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d40)=0x14) sendmsg$inet6(r5, &(0x7f0000001f00)={&(0x7f00000005c0)={0xa, 0x4e23, 0x9, @loopback, 0xe000000}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="f165543ef41975ef7af22e138f6afc042fa7bfdfbde71704f6aa5fc1b40576c5bcbe968a14e32b89556f0ca8d0969709eda4bdc93e4312da9cfbfccf90640ec3986bccf294dfcdd861c114ed9bf880ba4e043362e6d385581fa9ce3894bc1c7bcafd96109f7dea19e941a5f1d6f9bad6be27269c45a9701d5c24b494da083db5dcb22554598a65c76687442394a4df058da3e64ef7caa446a8e60cd724a231b02ad47be492ed25d1f4f3ffe8f06b10426926078584ff6b4ad3ab", 0xba}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000700)="473bb698bbec23682606bd768a2a2493643e1cb94e1b1df70f3c293874304e9f6ee859a995a5c710a6ad7c89fd3bb0adb6faa633201a20a6c30b6427a4be714fd95d82e20254", 0x46}, {&(0x7f0000000780)="7c5fe17c9705a08129e7f18085f40621728728d51881e3aae82de02aedd43a14ff5c2c24b072f161788a5333bf07e6e1376c281317181aa6e17739bda14d1a4f50c974e4edc27f9d0fecfe92224b1bf35f5742eea3c87f4330e887d76240f7867bd944f46a1750f661094584ece2958dd94a9f765860a9c71557cc762e51499d569735bf270e2b3e038bb3161ce8", 0x8e}, {&(0x7f0000001c00)="207521397226aa34e416659bbabb5d7cd818e4c0ce97e0eb3785fe6e3c0ee340b49cf71a288cbae1707167c5aacc049bed92145d969f2acd47ed4c83e9b53f43bcec09e19f7dd6567845e407371b2afeb0f1e1b5a39daec603318ac8f7a2bd72b4cef34271150dfa6c3a9e6f8dc24304719071ce441731c990a08fe2d71202ede96c8244ea51725704ced0ca4620636a0b0f897b3f8113ea10adec6ed1657c9369a0dc36a5657b47dd1804532ccdcc286eb1f05d7821ffb4efb16c0d8beb9dae3890ab4941608e8d9a85acd61f817030d538a1821a28ddb3e2608d6a909ede8ef706de161e013d77032e67aae47d3467fee82384d4975da61d", 0xf9}], 0x6, &(0x7f0000001d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr={{0x68, 0x29, 0x39, {0x1, 0xa, 0x1, 0xff, 0x0, [@remote, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x28}, @private2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x2b, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0xe, [0x1, 0x5, 0x9, 0x8, 0x0]}}, @enc_lim={0x4, 0x1, 0x56}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x178}, 0x0) write$tun(r5, &(0x7f00000001c0)={@val={0x0, 0x8848}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="a14afaa96fd5", @rand_addr=0x64010100, @random="bf6b77bb464a", @broadcast}}, 0x20) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0xa, "fe"}], 0x18}, 0xfc40) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) 2.369994327s ago: executing program 2 (id=8953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000030a01020000000000000000010000000900010073797a3000000000140004800800024067d5a7f10c202f33749dbe610a000700726f75746500f06808000b400000000214000000110001000000000000000000020000b8569a1e8b0eaca38f4f80f50336b7b40a"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={r2, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x8}, 0x8) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xec, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf0c3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xead}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xec}}, 0x804) 2.167944855s ago: executing program 2 (id=8955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x4}]}, &(0x7f0000000080)=0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) 2.143815147s ago: executing program 1 (id=8956): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xe, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000006000000080003c6", @ANYRES32=r4, @ANYBLOB="0800050009000000"], 0x24}}, 0xc880) 2.071593276s ago: executing program 3 (id=8957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.06917589s ago: executing program 0 (id=8887): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440), 0x10) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x8) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0xbd15, @mcast2, 0xff}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) (async) sendmsg$inet6(r2, &(0x7f0000000840)={&(0x7f0000000400)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x24080840) (async) sendfile(r1, r0, &(0x7f0000000200)=0x42b5, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000280)={0x2}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x5d, 0x9, 0x1, @rand_addr=' \x01\x00', @mcast1, 0x8000, 0x10, 0x10, 0x3}}) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001400020025bd7000fddbdf250a3fa6fe", @ANYRES32=0x0, @ANYBLOB="14000200fc01000000000000000000000000000014000200fc00000000000000000000000000000d080009000100000014000200fe8000faff00000000000000000000bb080009000300000008000a000100000008000800b40100000800080000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x44011}, 0x4040) (async) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000180)={0x7f}, 0x4) (async) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f00000000c0), 0x800) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000040), 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYBLOB="80e777b8ec9ef67e14aab7abfa23716e316f39f5b93817887dab640525c0893f8d85e3449c9519eb3d87c5adc58a48aa2cbbbcdaff1219153d2c2acbc7ca389b9ce137e160d6ee5ed5c9643e151f83e40d89a62a3b98abcb2b94aa2e8bc1029026ad5714153e3043877c5b76bd077d3e7b3a43fb528ebd8bf32c49a9cb15c924343b0561f6473b87e5f94df09bf209dfee54daafbbed3755968b1807790600fe31f3b2c3de2f4083af128e2c375aa5960053ea2c44cf3710829d3c783a92ea20da0190113f5a134343cb4f4b10419a5185", @ANYRES64=r5, @ANYRES64], 0x0, 0x52, 0x0, 0x0, 0xdd1b}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000004040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r8], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000740)="2e9b3d0007e03cd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a1905234", 0x25}, {&(0x7f0000000500)="051b000000007849df5bcdc0be830aa32018a179233dca131225d2967e6dc379fd42c3eb7c4422f88bf4e3610c04811e53fc085694e0227da35123b54fecc086b56387b8e7f87c7a9f1aff16f80412ae1e24", 0x52}, {&(0x7f0000000640)="affc3e48a574ccec8faae8b4845974035a4fe1344f8a6d02e97ed4033730cf637d8f8556213cbfa6d4a84513dce67b61e55caa3d5064a3409af903b2a208edb0c70d1d4198ce1d65e4a359dc153090f7d7a7fb9036a4186cf4b3a744cacec642087ec247a087af7983fd2148a8cf2e876f61ebf3c3504ab9d909d6d8b395e605d1fe87e691de44451e9bae5b9fd86cb8c94af201b038bbfe698e8d9cd0dc9cb96fdb4b6a70da27d4a41e1537bae95af52ab4c6782a3b8f9d081235e7f3a949e974", 0xc1}], 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.001356936s ago: executing program 1 (id=8959): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x0, 0x10000, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5129f134a876dd6de15abef583eb09b2a956898deaae94db2398a22d6b1870ad0cb1d1929041b93a1649bf17952857a0e90ae6896039ba05be5aac30cc040f54042cf1c5d75f8ef0ee913e11e6d419980edffbb2e784348e64c555c55985ae8d111c9cd8955460af9ff3492a0b4c4582ef2b7a11cb8a931b3bb77ad9e0", 0x7d}], 0x1, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0xb5d}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x80, 0x117, 0x2, 0x66, "92af19ce8eecd60f9aa74eb3b40eefea3059f2b58b6d277630d6ef2ba548e76ebc9a35e43b876ecc7d9da82b73a007f62e00c075f0287815b70e43350d6b9f76b1091b371f008df877f71c32def58d5608ba8e7f1d7cae9851e69e111e2795789881082a8aff"}, @iv={0x88, 0x117, 0x2, 0x71, "193921ad058a2c523c896e38c6eaf9ec30593f8d4d05b76aea508ca9bed25b91fc26dcbe3bed8bfd8b6f2d327b715249c6a11dc4bf2e032db02779066902c3cecf1d54d2f4c8f97331f1d94b9506b642b41c073f54876f1bb5f4693d91e82160d981769d2a8e7f0f8eccb784efd83dd001"}], 0x150, 0x4000880}, 0x8040) bind$nfc_llcp(r0, 0x0, 0x0) (async) bind$nfc_llcp(r0, 0x0, 0x0) 1.902573342s ago: executing program 0 (id=8961): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb080002"], 0x78}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000000)=0x80) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xb6, "9ce3f4d6bcfdbcb3dd320a5ed02aca8927ffc10c79284044c8bf59e02cac5e074128e55a11a4f2dcffbf7adaecc5f5915c01a60a4413e3ea150a9e1903fc357bf569630c0a23729b244bea92c2c0e99b33f3380326fe4651aa6ae03bfc6df4f5324e3408de25aaf80bcaf7a81cc4837416be378795e0b8dd8d2e7305d572dc7db5b5f860317f6d4e0ddb4fc8d6956f39896d1e7bff8f5a3260bf7a8c999b08951f5241f6c85cc9345fa3259bebf34c9b6f52f671a279"}, &(0x7f0000000100)=0xbe) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0xffc0, 0x100, 0x208, 0xffffffff, 0xa, 0x7, 0x5, 0x6, r3}, 0x20) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.89167384s ago: executing program 3 (id=8962): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000200), &(0x7f0000000280)=0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r6, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc9119f992e83de525e4a40e81692d09dc6b6b0ef17b4ae267ad399762f2b65a5d55f136fa57f0", 0x3a, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xda, 0x6, @remote}, 0x14) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0xd3e39000) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000080)="100000aa237b") 1.78858299s ago: executing program 1 (id=8963): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x5000080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x400c080) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000fc0)={0xf, 0xc, 0x2, 0x4000}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=@newtaction={0x850, 0x30, 0xffff, 0x3, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0xfe0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x200, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x100000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x20e793d2, 0x9, 0x7, 0x4, 0x9, 0x7fffffff, 0x7, 0xbd, 0xfffffffd, 0x101, 0x7f, 0x6, 0x6, 0x800, 0x3, 0x3, 0x1, 0x80, 0x870, 0x300000, 0x6, 0xa95, 0x8, 0xaa7, 0x9eac, 0x6, 0x0, 0x2, 0x5, 0x7, 0x0, 0x8, 0x6, 0x6, 0x4, 0x5, 0x5, 0x73, 0x6, 0x9, 0xfffff801, 0x4, 0x5, 0x9, 0x5, 0x1, 0xd324, 0x4, 0x5, 0x4, 0xfffff7fd, 0x101, 0x7, 0x7, 0x7, 0x10001, 0xd6f, 0x8000, 0xffffffff, 0x10001, 0x3, 0x2, 0xff, 0x7fffffff, 0xcac, 0x6, 0xb67a, 0x2, 0x3f603c64, 0xe, 0x5, 0x80000001, 0xff, 0x6, 0x7fff, 0x4, 0x2, 0x6, 0x10000, 0xffffffff, 0x101, 0x9, 0x7, 0x5, 0x8, 0x419c, 0x8000, 0x2, 0x4, 0x0, 0x1, 0x3, 0x1, 0xfffffffd, 0x8, 0x4af, 0x7f, 0x4, 0x6, 0x8, 0x1, 0x0, 0x4, 0xc, 0x3, 0x2, 0x9, 0x400, 0xe, 0x80, 0x0, 0x3, 0x8, 0x9, 0x7f, 0x1, 0x9, 0x4, 0x4, 0x6f79, 0x9, 0x80000000, 0xe42, 0x1, 0x8, 0x1c0, 0x7, 0x6, 0x4, 0x1, 0x40, 0x8, 0xf0000000, 0xffffffb8, 0x80, 0x776fe17c, 0x80000000, 0x4, 0x3, 0x9, 0x0, 0x9, 0x0, 0x18000000, 0xb83, 0xfffffffd, 0x0, 0xfffffffd, 0x65, 0x1, 0x9f, 0x0, 0x5, 0x1, 0xad, 0x80000001, 0x6, 0x8, 0x7b00, 0x7, 0xd, 0x4d, 0x0, 0xffffffff, 0x7, 0x8, 0x10001, 0x3ff, 0x2, 0x10001, 0x1000, 0xb6, 0x3, 0x8000, 0x2, 0x9, 0x1, 0xffffffff, 0x2, 0x4, 0x0, 0xb8c7, 0xe4, 0x546, 0x9, 0x2, 0x1, 0x9, 0x400, 0x0, 0x5, 0x5, 0xc7d, 0x5b, 0x3, 0x8, 0x0, 0x568, 0x5, 0x1, 0x1, 0x3, 0x81, 0x5f, 0xf, 0x200, 0x8, 0x4, 0x2, 0x1, 0x7fc, 0xc8, 0x5, 0xfffffff8, 0x9, 0xffffffff, 0x0, 0x80, 0xfff, 0x0, 0xf4, 0xfffffffb, 0x4f8b, 0x7, 0x8, 0x401, 0x1, 0x0, 0x3, 0x40, 0x7, 0x3, 0x1, 0x3, 0x5, 0x6, 0xc929, 0x0, 0x1, 0x0, 0x5, 0x0, 0x2, 0xa, 0xd78, 0x6, 0x9, 0x0, 0x1ff, 0x6, 0xc, 0x5, 0x3, 0x8000, 0x2bff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xb, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000040000008510002006000000"], &(0x7f0000000780)='GPL\x00', 0x1, 0x3d, &(0x7f00000007c0)=""/61, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r8, r9], 0x0, 0x10, 0x5}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000006000000c10c0000a801000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 1.602230447s ago: executing program 0 (id=8965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6f, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) 1.284215922s ago: executing program 3 (id=8968): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) 1.216501962s ago: executing program 0 (id=8969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x168, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x104, 0x2, [@TCA_BASIC_ACT={0x100, 0x3, [@m_sample={0x90, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x51, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f3729bf251659b35ee457bb1f0377974ae753b08d9ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x6c, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x1d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.043355715s ago: executing program 3 (id=8970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0xfc, 0x11, 0xc8, 0x5, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001840)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x25, 0x3}, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket$unix(0x1, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r9, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r9, 0x3) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) r10 = socket(0xa, 0x5, 0x0) recvfrom(r10, &(0x7f0000000380)=""/81, 0x51, 0x2001, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r10, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 940.914925ms ago: executing program 0 (id=8971): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800070002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x79, 0x1, 0x1f, @dev={0xfe, 0x80, '\x00', 0xb}, @remote, 0x1, 0x80, 0x6}}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newtclass={0x80, 0x28, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1f, 0x2}, {0x9, 0x8}}, [@tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x40, 0xf}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x100}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}]}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_sfq={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r10, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r12, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) recvfrom$l2tp6(r12, &(0x7f0000000100)=""/82, 0x52, 0x40000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) 835.500034ms ago: executing program 4 (id=8972): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400081, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x2000}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000128bd70df250f00000208002b000100080003000000000000", @ANYRES32=r5, @ANYBLOB="0800310001000000050029000000000006002800010000000800390003000000"], 0x44}, 0x1, 0x0, 0x0, 0x9}, 0xc094) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000440)={{r3, &(0x7f0000000240)='\x00', 0x52040, &(0x7f0000000280)={@align=0x100000001, {0x4, 0x2, 0x8, 0x1}}, 0x1, &(0x7f00000002c0), &(0x7f0000000300)}, {[0xfff, 0x9, 0x0, 0x4]}, 0x14, 0xf0, &(0x7f0000000340)=""/240}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000ec0)) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000e00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000500)=@newqdisc={0x8b0, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x3}, {0xffff, 0x3}, {0xfff3, 0x6}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0xfffa, 0x8, 0x1, 0xa2, 0x8b2, 0x3}}, {0xa, 0x2, [0x3, 0xebf, 0xb3a]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x68}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x83c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x85b0a13e45fedef}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffffd, 0x3, 0x10000, 0x5d5f, 0xc, 0xad8, 0xb91f, 0x40, 0xffffffff, 0x2, 0xa, 0x6, 0x6, 0x9, 0x100000, 0x101, 0x0, 0x4, 0x5, 0x40, 0x9, 0x2, 0xb, 0x3ff, 0x0, 0x9, 0xabda, 0xffffffff, 0x5, 0x7ff, 0x7, 0x7b4a, 0x9, 0x0, 0x400, 0x5, 0x4, 0xcc, 0x5, 0xa, 0x4e4, 0x7, 0x3, 0x401, 0x9, 0xfff, 0x3, 0x8, 0x1, 0x25, 0x7, 0x80000000, 0x8, 0x0, 0xba4a, 0x3, 0x10000, 0x7, 0x8c64, 0x4, 0x4, 0x0, 0x7, 0x2, 0x1, 0x80000000, 0x5, 0x2, 0x8, 0x4b3, 0x8, 0x0, 0x3, 0x1, 0xc, 0x2, 0x1ff, 0x6, 0x4e, 0x3, 0x2, 0x1, 0x2, 0x3, 0x4, 0xd9, 0xff, 0x101, 0x9, 0xe79, 0xf, 0x4, 0x4, 0xe5, 0x2, 0x2, 0x4, 0x9, 0x4, 0x4, 0x7, 0x7f, 0xc8, 0x80, 0x50, 0x5, 0x7, 0x3, 0x4, 0xffff8001, 0x5, 0x7, 0x7fffffff, 0x4, 0x1, 0x52, 0x0, 0x1, 0x3ff, 0x3, 0x785, 0x70, 0x9, 0x3, 0x4, 0x101, 0x9, 0x7, 0x1ff, 0x6, 0x6, 0x7, 0x4, 0x7, 0x7, 0xffffffc0, 0x0, 0x28e, 0x8, 0x3, 0x0, 0x3, 0x5, 0x0, 0x0, 0x7ff, 0x7ff, 0x1, 0x4, 0x6, 0xa2, 0x1ff, 0x3, 0xd, 0x9, 0x54, 0xbe0, 0xf9b8, 0x3, 0xfffffff7, 0x2, 0xd5, 0xfffffffa, 0x10, 0x9, 0xfffffffb, 0x5, 0x1, 0x7f, 0x81, 0xffff7214, 0x8, 0x101, 0x7, 0x2, 0x7, 0x6, 0x4, 0x0, 0x5, 0x4, 0xff, 0x1, 0xa78, 0x8, 0x9, 0x64, 0x7, 0x8, 0x7, 0x3, 0x9, 0xa, 0xd4c, 0xfffffff8, 0x6, 0xb, 0x2, 0x9, 0x0, 0xe42, 0x99, 0x2, 0x3, 0x5, 0x6, 0x5, 0x1, 0x772, 0xd637, 0x9d2, 0x1, 0x401, 0x66c1f231, 0x5af, 0xf, 0xf, 0x200, 0xff, 0x8, 0x6, 0x32, 0x4, 0x4, 0x7f, 0x9, 0x6, 0x7fff, 0x0, 0x80, 0xfffffff9, 0x9, 0x2, 0x2, 0x3, 0x0, 0x7, 0x2, 0x2, 0x2, 0x9, 0x101, 0x7, 0x10001, 0x3, 0x2, 0x3, 0xf, 0x99ad, 0xf, 0x1, 0xf69, 0x5, 0x4, 0x7fff]}, @TCA_TBF_RATE64={0xc, 0x4, 0x3a39b13369e4f7db}, @TCA_TBF_PTAB={0x404, 0x3, [0xa0, 0x10, 0x0, 0x7, 0x4, 0x2, 0xffff8000, 0x3, 0x5, 0x1, 0x45, 0x5, 0x800, 0x5, 0x80000001, 0x5, 0x80000001, 0x5, 0x9, 0x7f, 0xfffffffc, 0x6, 0x2, 0x4, 0x8, 0x3, 0x4, 0x4, 0x8, 0xfffffffb, 0x10001, 0x6, 0x8, 0x8, 0x1, 0xb503, 0x8, 0x3, 0x800, 0x10000, 0x8, 0x2, 0x4, 0x10000, 0x4, 0x8e, 0x7, 0x1, 0x0, 0x12d4, 0x2, 0xa74, 0x4a, 0x9, 0x2, 0x9, 0x9, 0x36c0, 0x9, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x8001, 0x3, 0xff, 0x5, 0x9, 0x0, 0x7fff, 0x8e7, 0x2, 0x7, 0x3, 0x7, 0xf, 0x4, 0x3, 0x80000000, 0x0, 0xffff, 0x1, 0x1000000, 0x7, 0x7, 0x8, 0x49f, 0x7, 0x6, 0x8, 0xfa, 0x4, 0x10000, 0x6, 0x8, 0x2245ff85, 0x4, 0x8000, 0xb, 0x471, 0x9, 0xff, 0x400, 0x5, 0x2, 0x4, 0xffffff51, 0x3, 0x401, 0x5, 0x2, 0x800, 0x2, 0x2, 0x5, 0x8, 0x800, 0x8000, 0x7, 0x1, 0x8, 0x9, 0x5, 0x2, 0x9, 0x3, 0xffff, 0x80, 0x6e8, 0x9, 0x9, 0xf8b, 0x7fff, 0x1ff, 0xfffffffd, 0x6, 0x1, 0x5, 0x2, 0x0, 0x5, 0x3, 0x9, 0x80000001, 0x35f, 0xc41e0, 0xc0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3, 0x7fffffff, 0x2, 0x5, 0x800, 0x45dd, 0x7ff, 0x7, 0x2, 0x4, 0x0, 0x51c, 0x450, 0xfffffffb, 0x4, 0x7, 0xa, 0x0, 0x5, 0xf718, 0x9, 0x2, 0x7fff, 0x0, 0x1, 0x5, 0xb, 0x1ff, 0x4, 0xe71b5efe, 0x5, 0x0, 0x1cbf, 0x5, 0x7f, 0x705580a0, 0x6, 0x4, 0xb2, 0x80000000, 0x2dad, 0x8, 0x7ff, 0x3, 0x0, 0xf, 0x10001, 0x6, 0x9, 0x4, 0x8, 0x5, 0x7, 0x0, 0x5, 0x5, 0xf, 0x6, 0xfff, 0x9, 0xc, 0xc00, 0x4, 0x3, 0x6, 0x579, 0xfffffffe, 0xd1400000, 0x5, 0x3ff, 0x2, 0x8, 0x2, 0x4, 0xfffffff7, 0x9, 0xc3, 0xa34d, 0xfffff7de, 0x9, 0x3, 0x0, 0x6, 0x1ff, 0x6, 0x4, 0x3, 0x3, 0x7, 0x7, 0x0, 0x2, 0x6, 0x1, 0x5, 0x5, 0x8, 0xfff, 0x7e5f, 0x5, 0x8]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x876e0bb4bcf94161}, @TCA_TBF_RATE64={0xc, 0x4, 0x35103268756a6b39}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000e40)={0x0, @hci={0x1f, 0x0, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, @vsock={0x28, 0x0, 0x0, @local}, 0xe, 0x0, 0x0, 0x0, 0xdaf, 0x0, 0x2, 0xffff, 0xa}) 771.305146ms ago: executing program 1 (id=8973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="442000001a0000fdffffff0a000000cfd3000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000900000000000000000000000000000014000100ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00'}) (async, rerun: 64) unshare(0x20000400) (rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000005c0)) (async) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vlan1\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xa}, {0xfff2, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffe93}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x440a4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xe, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) (async) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000400000008000000141000004cb4fd4ab503679a75eed545cebd60aa0d31769d82607bba51bec7cd2a2e322fa03b82bcfe2cce157dc37c6b0b4f46880357ab566236156d18b41a9e26496a2dd37b63b6f4b645052a63c1d3014d19e5c6a6bd974d63b6ca0064d745108bc924", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) ioctl$sock_rose_SIOCRSCLRRT(r11, 0x89e4) 631.102783ms ago: executing program 4 (id=8974): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x44, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16a, 0x50601}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1001}, @IFLA_NET_NS_FD={0x8}, @IFLA_BROADCAST={0x25}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x48000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x29) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 561.710172ms ago: executing program 1 (id=8975): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80007, 0x8000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r3, r4, 0x0, 0x800) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500657ab016a34d050b0b38651a010001", @ANYBLOB="56c455457bda0d9f4e015d310d56b0603108f197d6ad48eb1511befecd350136cbe344f012f3c2c47cf2da964ea473e0587006b0977d38c3bf9eb2173d4d930576d468592e70a161995f790eb1ab859e278338acd2abf65d1c06d160405e5f01eef4a455c7ee5f832810f0db1c354160fececde50cf887bbfa9201d4f22e340ddc31c90d8f1812bcf2262b0669", @ANYRESOCT], 0x24}}, 0x48c0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xffff, 0x4}, {}, {0xffe0, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000104050000000000ffff07000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca5cb72}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xefffffff}}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 520.278118ms ago: executing program 0 (id=8976): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000000001016401010000000000000000000000000000040000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000200000000006000000000000000900000000000000000000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000000800000000000002000000000000000002000000000000010101000000000044010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000fe34000000000000000000000000000040200000ac1414bb000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000004d56c00000000000000ffffffff00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000100000000330000000200000000000000000000000000ffffac1414bb000000000100000000000000000000000000000020010000000000000000000000000000000004d2320000000000000000000000000000000000000000000001000000000000fe000c00"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4080) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newqdisc={0x3b0, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x40, 0x5, 0x9, 0x2, 0xa, 0x2a9, 0x4}}, {0xc, 0x2, [0x9, 0x5e10, 0x4, 0x509b]}}, {{0x1c, 0x1, {0x48, 0x1, 0x8, 0x5, 0x2, 0xe2, 0x5, 0x8}}, {0x14, 0x2, [0x3, 0x401, 0x9, 0x0, 0x8, 0x5, 0x8000, 0x8]}}, {{0x1c, 0x1, {0x7, 0x4, 0x6, 0x1f1, 0x0, 0x7e2, 0x2, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0x3, 0x9, 0x3ff, 0x1, 0x38e6, 0x70e, 0x3}}, {0xa, 0x2, [0x33f, 0x7, 0x901]}}, {{0x1c, 0x1, {0xfd, 0x9, 0xfb88, 0x6, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x517, 0x3, 0x8, 0x5]}}, {{0x1c, 0x1, {0x19, 0x5f, 0x4800, 0x0, 0x2, 0x5, 0x80000001, 0x2}}, {0x8, 0x2, [0xff, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_choke={{0xa}, {0x25c, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffb}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x401, 0x8, 0xff, 0xd, 0x1f, 0x1e}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xdb}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x25c5, 0x16, 0x5, 0xc, 0x3, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x20b9bc36}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x800}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{r3, 0x1}, {r3, 0x46c2}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24bb6700", @ANYRES16=r6, @ANYBLOB="070000000000fddbdf2505000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002000900000004000100"], 0x44}}, 0x0) 481.409125ms ago: executing program 4 (id=8977): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000980)=""/189, 0xbd}], 0x3}}], 0x2, 0x41, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@broadcast, @multicast1, 0x0}, &(0x7f0000000080)=0x6d) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 269.910809ms ago: executing program 4 (id=8978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) unshare(0x2c020400) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) sendto$rxrpc(r1, &(0x7f0000000800)="72c8019fb5aa720293b7f91f729e005e51aee11cf24b7ad7ee2cdfbac3290acc380e4670f9270627f6cfba2b302857b040b7482d906112ba3e72a2083ed49ea1273554e479cce3440829acb8c87084b031a3fee9fe588b591d67f63417c76472b6284ea52854a0c0d1840beab4fe22e97b899bb711864f0b994332522958d78259d89993f5a10b0d1f853e7d4bec30d8dc", 0x91, 0x8800, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x800) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) (async, rerun: 32) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0xffff0000, 0x10, 0x0, &(0x7f00000000c0)="2b206d074843b39773764e72e6167ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, @tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, @qipcrtr={0x2a, 0xdbf2b5eb731fbe59, 0x7ffe}, @can, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='ip_vti0\x00', 0x8, 0x0, 0xb710}) (async, rerun: 32) write$cgroup_type(r1, &(0x7f0000000000), 0x9) (rerun: 32) 136.743202ms ago: executing program 4 (id=8979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair(0x22, 0x2, 0x1, &(0x7f00000004c0)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x30}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 119.748013ms ago: executing program 1 (id=8980): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000060a010400000000000000000a00fffe2800048024000180090001007866726d000000001400028008000240000000020500030002000000140000001400010000000000000000000100000a0275ebc98a7bb51bb81c1cd52cdf0efb69ce82"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000001200000000010000000100000506000000000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xfff3}, {0xfff2, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x240}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf255700000008000300", @ANYRES32=r11, @ANYBLOB="060095000900000006009500af8c00000600950031820000060095000f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fcaabe21140000004788031c09", 0x12, 0x4000004, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="34ce1f3b42bb"}, 0x14) 30.393898ms ago: executing program 3 (id=8981): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=""/126, 0x107, 0x7e, 0x3, 0xc}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xd, 0x8014, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000400008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x40}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000680)="27050200340f14000600002fb96dbcaca8faf706060000170000005f45f4384a410858d291bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18f79374a68cf63db33fe3b11c3d382c521f3bece29f7624f689b79e22b84f4b91c6f6d4f46827433fde2699131743a5954e3ace1d69fdf", 0x8a}, {&(0x7f0000002340)="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", 0xec0}], 0x2}, 0x9cdc2384056f0939) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r7, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="8726de64fd4c2732adcdfac9358ed38360e7a25884addeb439cae373c6d55fa1bb83edfd217295f2d9a57ee65f1b4c107b9d0e01d90e721821f38096aa9f1e63628bd22a9cf2d7fca6fd4598d3215b62c039efeb39bb", 0x56}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="bfab39d02f83fa4543e76d00a1bd3bd8e1b7d9d6c6c575f42e0de03021e671d17554b8a9a3d0abf73ecd3333e9c1daafb750afbb69fac5eadcea875c79329faf89bf4ed0c3ac24458b509e48d1b6d46132d7626001e4b0be9b4d2b13850720eff7f67bdc469253e7a971a9ed9551d55f8685dc3d9b4040b38233de82a9a02fb3c500eb136f96558a34371f36f3320aa2740e13ae39d8a99702745f12fe29053680a08f1b18b13ee2ff617eb161ce7a7abd297915576e59", 0xb7}, {&(0x7f0000000000)="83", 0x1}, {&(0x7f0000000340)="7e85ce2a533a728e6eccf85751bd2d0bf97882c5844e3f3a65659050b6280cd4e1a7a2bd6292a5a154b47d37f149e2c4e26f1fdcd1a48452c3885cadbc5140a26c6b7bac52db1013f47fb5881321182078ba658da60306be567da62a8ac6844f9cf012ac9a4d9c9c2416afb2fbdd52947b63ab1bd29e09", 0x77}, {&(0x7f00000003c0)="72dcdb350cf834f3d0aad046660819294d68bcb2f86b0a9c568604e7a4e4088605c5408a818d385b5c2c7fb100d5782bf8ddd090a62f1bcc04ba20a606fe8bce8800321b2f7d6079bdf45b3342fa629fec3df1af25fbef172170ec0dbae052df3afcd2c2f53347af291e4e9e668a50cd2007cc7b8bb69d9861e6ec30865799ed1b473c5fa8a62315b4bfb02265da11dc05168c2093d0c6643c4db2ab464ae37441544cc2688466018610029cf6255220f30fcc2a727209d21eeb96f1", 0xbc}, {&(0x7f0000000480)="59de3305326b51cb13ab87e4", 0xc}, {&(0x7f00000004c0)="c43549d4e690961e9f0eda5ca01a623bfceca185ba690aa72d50a6131b", 0x1d}, {&(0x7f0000000500)="36eccb6da860529a4e0c0bd08e82e45cccadcae0814e0ec801ebfccdbc565ba2125737e21fd39140abf1322271bf818f367a5e098390038023c9478f57346a9e2a4b6e73c5e248bd661a123602467776caa638d90df27618019021bd63c377b1f5ca9cbc341bdd0a2c17ca", 0x6b}, {&(0x7f0000000580)="2e07e53f8a74996ae2c5aa78d77040b0badf25de2fd944a378c9957a878b7e50831649ec1a4c1a51", 0x28}], 0xa}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x6}], 0x10}}], 0x2, 0x20000) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170900000000fedbdf250100000008001800ac1414aa060002000100000008000a0001000000050007000000000008000900fffffffe08001900ffffffff"], 0x44}}, 0x4804) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) sendmmsg$inet(r10, &(0x7f0000000400)=[{{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000000000000000000100000010"], 0x20}}], 0x1, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000038c0)=@newtaction={0xe0, 0x30, 0x9, 0x0, 0x25dfdbfc, {}, [{0xcc, 0x1, [@m_mpls={0xc8, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0xfffffffffffffdd4, 0x7, 0x8}, @TCA_MPLS_TC={0x5}]}, {0x67, 0x4, "a78d18c00e8d4c7da55e0922038c99f4dacc22cfdbf10e912e8b0e40854dfec415d290664f4f49c5b1087b7ab33f86b369844afc2a4d9a0bc692b435e52b224b9f38c0cfdcc1b4efa1453d0a622fb3c1a657a65bc84cf9af872f3d70d72444a54b9998"}, {0xc}, {0xc}}}]}]}, 0xe0}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x32, {0xff}}}], 0x18}, 0x40) 0s ago: executing program 4 (id=8982): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000100)={0xa, 0x4e23, 0x800, @private1, 0x7fffffff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="a543b6eb0d1114ac74576f65475435d02f73ffbdb84749daa67ded4ffe92800223720284c79d4d0abb22fa7c73e81a958c36186575df5378baf14e1395b56bd372c377b90137829d223a4ca19f58a4b1cab3a8834065d9711dd5217cb78fbb6e713e7c2c91fde49fd1b7e717d2117edb5906585d", 0x74}], 0x1, &(0x7f0000000240)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x0, 0x81, 0x0, [@mcast1, @empty, @loopback, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}], 0x80}, 0x4050004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@bridge_delneigh={0x5c, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfe, {0x1c, 0x0, 0x0, r1, 0x1, 0x12, 0x8}, [@NDA_PROBES={0x8, 0x4, 0x5}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH, @NFEA_ACTIVITY_NOTIFY={0x1, 0x1, 0x9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000400)={0x0, 0x0, [0x4, 0x101, 0x8, 0x9], &(0x7f00000003c0)}) kernel console output (not intermixed with test programs): ffffffffffda RBX: 00007f6353615fa0 RCX: 00007f635339c799 [ 1072.153470][ T2953] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1072.153495][ T2953] RBP: 00007f6354319090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.153510][ T2953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.153523][ T2953] R13: 00007f6353616038 R14: 00007f6353615fa0 R15: 00007ffca8b1fb38 [ 1072.153559][ T2953] [ 1072.719599][ T2965] netlink: 'syz.3.7508': attribute type 2 has an invalid length. [ 1072.833758][ T2970] netlink: 'syz.3.7510': attribute type 1 has an invalid length. [ 1072.954443][ T2972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7511'. [ 1072.957128][ T2973] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7511'. [ 1073.090091][ T2980] netlink: 'syz.4.7513': attribute type 1 has an invalid length. [ 1073.099985][ T2980] netlink: 'syz.4.7513': attribute type 2 has an invalid length. [ 1073.164999][ T2982] netlink: 'syz.3.7514': attribute type 33 has an invalid length. [ 1073.513727][ T3001] IPVS: Scheduler module ip_vs_@ not found [ 1073.556072][ T3009] bond0: (slave syz_tun): Releasing backup interface [ 1073.576578][ T3009] team0: Port device syz_tun added [ 1073.664750][ T3018] netlink: 'syz.4.7526': attribute type 5 has an invalid length. [ 1074.191107][ T3052] vlan5: entered promiscuous mode [ 1074.196394][ T3052] geneve1: entered promiscuous mode [ 1074.206796][ T3052] vlan5: entered allmulticast mode [ 1074.211990][ T3052] geneve1: entered allmulticast mode [ 1074.339148][ T3052] pimreg: left allmulticast mode [ 1074.949566][ T3088] clip:clip_setentry: non-CLIP VCC [ 1074.975128][ T3088] __nla_validate_parse: 17 callbacks suppressed [ 1074.975150][ T3088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1074.995479][ T3092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7548'. [ 1075.273033][ T3098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7552'. [ 1075.332521][ T3111] macsec0: entered allmulticast mode [ 1075.338606][ T3111] veth1: entered allmulticast mode [ 1075.385606][ T3109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7554'. [ 1075.798429][ T3128] validate_nla: 2 callbacks suppressed [ 1075.798453][ T3128] netlink: 'syz.1.7557': attribute type 3 has an invalid length. [ 1075.827052][ T3128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1075.858274][ T3125] can: request_module (can-proto-3) failed. [ 1077.126957][ T3184] block nbd1: server does not support multiple connections per device. [ 1077.148573][ T3184] block nbd1: shutting down sockets [ 1077.154174][ T3200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1077.211381][ T3205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1077.443986][ T3208] netlink: 'syz.2.7573': attribute type 1 has an invalid length. [ 1077.473917][ T3208] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7573'. [ 1077.543994][ T3208] netlink: 'syz.2.7573': attribute type 1 has an invalid length. [ 1077.554005][ T3208] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7573'. [ 1078.463162][ T3259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1078.602046][ T641] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.619611][ T641] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.651031][ T3260] pimreg: entered allmulticast mode [ 1078.670235][ T641] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1078.694888][ T641] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1079.062676][ T3301] 8021q: VLANs not supported on gre0 [ 1079.099197][ T3301] tipc: Enabling of bearer rejected, failed to enable media [ 1079.186193][ T3307] veth1: left allmulticast mode [ 1079.386278][ T3319] syzkaller1: entered promiscuous mode [ 1079.392866][ T3319] syzkaller1: entered allmulticast mode [ 1079.718729][ T3336] netlink: 'syz.2.7604': attribute type 3 has an invalid length. [ 1080.042501][ T3360] syzkaller0: entered promiscuous mode [ 1080.052528][ T3360] __nla_validate_parse: 3 callbacks suppressed [ 1080.052552][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7609'. [ 1080.264543][ T3365] netlink: 'syz.1.7611': attribute type 1 has an invalid length. [ 1080.298070][ T3365] netlink: 728 bytes leftover after parsing attributes in process `syz.1.7611'. [ 1080.389108][ T3370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7612'. [ 1080.616969][ T3377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7613'. [ 1080.801453][ T3380] netlink: 200036 bytes leftover after parsing attributes in process `syz.1.7616'. [ 1081.294308][ T3393] x_tables: duplicate underflow at hook 2 [ 1081.408094][ T3404] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7620'. [ 1081.428930][ T3405] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7621'. [ 1081.610370][ T3412] netlink: 'syz.1.7622': attribute type 1 has an invalid length. [ 1081.660734][ T3413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1081.842068][ T3412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1081.875602][ T3418] vlan2: entered promiscuous mode [ 1081.914308][ T3418] geneve1: entered promiscuous mode [ 1081.936962][ T3418] vlan2: entered allmulticast mode [ 1081.942177][ T3418] geneve1: entered allmulticast mode [ 1082.099098][ T3435] netlink: 'syz.3.7629': attribute type 1 has an invalid length. [ 1082.099923][ T3436] netlink: 'syz.3.7629': attribute type 1 has an invalid length. [ 1082.136278][ T3420] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1082.146506][ T3436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.167763][ T3435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.395631][ T3447] netlink: 'syz.1.7631': attribute type 1 has an invalid length. [ 1082.416291][ T3447] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7631'. [ 1082.553183][ T3455] netlink: 'syz.2.7633': attribute type 1 has an invalid length. [ 1082.595611][ T3455] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7633'. [ 1083.200051][ T3487] netlink: 'syz.4.7642': attribute type 11 has an invalid length. [ 1083.302537][T21526] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.318125][T21526] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.386121][T21526] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.400802][T21526] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.438670][T21526] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.459622][T21526] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.524017][T21526] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.547473][T21526] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.610784][ T3502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.704384][ T3510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7646'. [ 1084.586257][ T3543] batadv1: entered promiscuous mode [ 1084.596807][ T3543] batadv1: entered allmulticast mode [ 1084.953414][ T3569] netlink: 'syz.4.7662': attribute type 10 has an invalid length. [ 1084.978832][ T3568] netlink: 'syz.4.7662': attribute type 10 has an invalid length. [ 1085.029675][ T3568] team0: Port device dummy0 added [ 1085.199181][ T3584] syzkaller1: entered promiscuous mode [ 1085.228398][ T3584] syzkaller1: entered allmulticast mode [ 1085.634525][ T3602] netlink: 'syz.3.7671': attribute type 13 has an invalid length. [ 1085.667124][ T3602] netlink: 'syz.3.7671': attribute type 17 has an invalid length. [ 1085.757706][ T3602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.770790][ T3602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.793265][ T3602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1085.948319][ T3606] __nla_validate_parse: 1 callbacks suppressed [ 1085.948341][ T3606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7672'. [ 1086.612143][ T3628] syzkaller0: entered promiscuous mode [ 1086.868330][ T3642] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1086.877666][ T3642] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.195519][ T3652] pim6reg1: entered promiscuous mode [ 1087.201458][ T3652] pim6reg1: entered allmulticast mode [ 1087.265529][ T3661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1087.398209][ T3666] netlink: 'syz.3.7689': attribute type 11 has an invalid length. [ 1087.406305][ T3666] netlink: 'syz.3.7689': attribute type 23 has an invalid length. [ 1087.414793][ T3666] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1087.570039][ T3670] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7691'. [ 1087.689992][ T3677] bridge0: entered promiscuous mode [ 1087.709686][ T3677] vlan3: entered promiscuous mode [ 1088.343648][ T3706] team_slave_1: Caught tx_queue_len zero misconfig [ 1088.749289][ T3722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7700'. [ 1089.309114][ T3735] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1089.771465][ T3754] xt_l2tp: invalid flags combination: 0 [ 1090.426373][ T3780] syzkaller0: entered promiscuous mode [ 1090.503259][ T3782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7711'. [ 1090.651168][ T3785] netlink: 'syz.2.7713': attribute type 1 has an invalid length. [ 1090.651660][ T3788] netlink: 'syz.2.7713': attribute type 1 has an invalid length. [ 1090.682877][ T3785] vlan3: entered allmulticast mode [ 1090.688694][ T3785] team_slave_1: entered allmulticast mode [ 1091.320339][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7723'. [ 1091.375592][ T3831] FAULT_INJECTION: forcing a failure. [ 1091.375592][ T3831] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1091.393917][ T3831] CPU: 0 UID: 0 PID: 3831 Comm: syz.3.7724 Not tainted syzkaller #0 PREEMPT(full) [ 1091.393948][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1091.393963][ T3831] Call Trace: [ 1091.393972][ T3831] [ 1091.393982][ T3831] dump_stack_lvl+0xe8/0x150 [ 1091.394019][ T3831] should_fail_ex+0x412/0x560 [ 1091.394054][ T3831] prepare_alloc_pages+0x22a/0x650 [ 1091.394093][ T3831] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1091.394126][ T3831] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1091.394159][ T3831] ? __pfx_policy_nodemask+0x10/0x10 [ 1091.394188][ T3831] ? trace_kmalloc+0x2a/0x110 [ 1091.394219][ T3831] alloc_pages_mpol+0x232/0x4a0 [ 1091.394253][ T3831] alloc_pages_noprof+0xa8/0x190 [ 1091.394284][ T3831] af_alg_sendmsg+0x13e9/0x24e0 [ 1091.394422][ T3831] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1091.394453][ T3831] ? __pfx_aa_sk_perm+0x10/0x10 [ 1091.394479][ T3831] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1091.394578][ T3831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1091.394610][ T3831] ? aead_sendmsg+0x26/0xf0 [ 1091.394629][ T3831] ? __pfx_aead_sendmsg+0x10/0x10 [ 1091.394653][ T3831] __sys_sendto+0x672/0x710 [ 1091.394691][ T3831] ? __pfx___sys_sendto+0x10/0x10 [ 1091.394752][ T3831] ? exc_page_fault+0x6a/0xc0 [ 1091.394789][ T3831] ? do_user_addr_fault+0xc6f/0x1340 [ 1091.394824][ T3831] __x64_sys_sendto+0xde/0x100 [ 1091.394862][ T3831] do_syscall_64+0x14d/0xf80 [ 1091.394892][ T3831] ? trace_irq_disable+0x3b/0x150 [ 1091.394925][ T3831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.394948][ T3831] ? clear_bhb_loop+0x40/0x90 [ 1091.394976][ T3831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.394999][ T3831] RIP: 0033:0x7f0e13d5cfce [ 1091.395020][ T3831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1091.395040][ T3831] RSP: 002b:00007f0e14c49e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1091.395065][ T3831] RAX: ffffffffffffffda RBX: 00007f0e14c4b6c0 RCX: 00007f0e13d5cfce [ 1091.395082][ T3831] RDX: 0000000000000020 RSI: 00007f0e14c4a000 RDI: 0000000000000004 [ 1091.395097][ T3831] RBP: 0000000000000000 R08: 00007f0e14c49f04 R09: 000000000000000c [ 1091.395111][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1091.395125][ T3831] R13: 00007f0e14c49f58 R14: 00007f0e14c4a000 R15: 0000000000000000 [ 1091.395160][ T3831] [ 1091.882457][ T3840] netlink: 'syz.3.7726': attribute type 21 has an invalid length. [ 1091.916810][ T3840] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1091.965793][ T3840] netlink: 'syz.3.7726': attribute type 4 has an invalid length. [ 1091.998469][ T3846] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7719'. [ 1092.028592][ T3840] netlink: 'syz.3.7726': attribute type 5 has an invalid length. [ 1092.040868][ T3848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1092.075015][ T3840] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1092.106582][ T3843] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1092.137684][ T3843] bridge_slave_1: default FDB implementation only supports local addresses [ 1092.251637][ T645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.268287][ T645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.407818][ T3855] team0 (unregistering): Port device team_slave_0 removed [ 1092.463722][ T3855] team0 (unregistering): Port device team_slave_1 removed [ 1092.600173][ T3871] FAULT_INJECTION: forcing a failure. [ 1092.600173][ T3871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.644452][ T3871] CPU: 1 UID: 0 PID: 3871 Comm: syz.0.7736 Not tainted syzkaller #0 PREEMPT(full) [ 1092.644485][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.644499][ T3871] Call Trace: [ 1092.644509][ T3871] [ 1092.644519][ T3871] dump_stack_lvl+0xe8/0x150 [ 1092.644556][ T3871] should_fail_ex+0x412/0x560 [ 1092.644592][ T3871] _copy_from_iter+0x1d3/0x1670 [ 1092.644624][ T3871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1092.644659][ T3871] ? __pfx_policy_nodemask+0x10/0x10 [ 1092.644687][ T3871] ? trace_kmalloc+0x2a/0x110 [ 1092.644710][ T3871] ? __pfx__copy_from_iter+0x10/0x10 [ 1092.644748][ T3871] ? set_page_refcounted+0xa0/0x1e0 [ 1092.644782][ T3871] af_alg_sendmsg+0x1501/0x24e0 [ 1092.644836][ T3871] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1092.644864][ T3871] ? __pfx_aa_sk_perm+0x10/0x10 [ 1092.644888][ T3871] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1092.644925][ T3871] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1092.644953][ T3871] ? aead_sendmsg+0x26/0xf0 [ 1092.644978][ T3871] ? __pfx_aead_sendmsg+0x10/0x10 [ 1092.644999][ T3871] __sys_sendto+0x672/0x710 [ 1092.645036][ T3871] ? __pfx___sys_sendto+0x10/0x10 [ 1092.645095][ T3871] ? exc_page_fault+0x6a/0xc0 [ 1092.645132][ T3871] ? do_user_addr_fault+0xc6f/0x1340 [ 1092.645167][ T3871] __x64_sys_sendto+0xde/0x100 [ 1092.645204][ T3871] do_syscall_64+0x14d/0xf80 [ 1092.645235][ T3871] ? trace_irq_disable+0x3b/0x150 [ 1092.645267][ T3871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.645290][ T3871] ? clear_bhb_loop+0x40/0x90 [ 1092.645325][ T3871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.645348][ T3871] RIP: 0033:0x7f635335cfce [ 1092.645370][ T3871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1092.645390][ T3871] RSP: 002b:00007f6354317e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1092.645413][ T3871] RAX: ffffffffffffffda RBX: 00007f63543196c0 RCX: 00007f635335cfce [ 1092.645430][ T3871] RDX: 0000000000000020 RSI: 00007f6354318000 RDI: 0000000000000004 [ 1092.645444][ T3871] RBP: 0000000000000000 R08: 00007f6354317f04 R09: 000000000000000c [ 1092.645458][ T3871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1092.645472][ T3871] R13: 00007f6354317f58 R14: 00007f6354318000 R15: 0000000000000000 [ 1092.645506][ T3871] [ 1092.928221][ T3877] syzkaller0: entered promiscuous mode [ 1092.933796][ T3877] syzkaller0: entered allmulticast mode [ 1092.943458][ T3877] tc action pedit offset -40968 out of bounds [ 1093.087116][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1093.096571][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1093.167781][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7744'. [ 1093.177255][ T3897] openvswitch: netlink: Flow actions attr not present in new flow. [ 1093.265502][ T3897] netlink: 'syz.4.7744': attribute type 1 has an invalid length. [ 1093.274617][ T3897] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7744'. [ 1093.823543][ T3939] batadv_slave_0: entered promiscuous mode [ 1094.017634][ T3942] batadv_slave_0: left promiscuous mode [ 1094.103203][ T3947] IPv6: Can't replace route, no match found [ 1094.110957][ T3947] IPv6: Can't replace route, no match found [ 1094.743353][ T3985] IPVS: ip_vs_add_dest(): server weight less than zero [ 1094.789310][ T3985] sctp: [Deprecated]: syz.1.7759 (pid 3985) Use of int in maxseg socket option. [ 1094.789310][ T3985] Use struct sctp_assoc_value instead [ 1095.050310][ T3994] FAULT_INJECTION: forcing a failure. [ 1095.050310][ T3994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.086103][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.0.7765 Not tainted syzkaller #0 PREEMPT(full) [ 1095.086135][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.086149][ T3994] Call Trace: [ 1095.086158][ T3994] [ 1095.086168][ T3994] dump_stack_lvl+0xe8/0x150 [ 1095.086204][ T3994] should_fail_ex+0x412/0x560 [ 1095.086239][ T3994] _copy_from_iter+0x1d3/0x1670 [ 1095.086275][ T3994] ? rcu_is_watching+0x15/0xb0 [ 1095.086312][ T3994] ? __pfx__copy_from_iter+0x10/0x10 [ 1095.086351][ T3994] ? netlink_sendmsg+0x650/0xb40 [ 1095.086381][ T3994] ? skb_put+0x11b/0x210 [ 1095.086417][ T3994] netlink_sendmsg+0x6c0/0xb40 [ 1095.086457][ T3994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.086492][ T3994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1095.086522][ T3994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1095.086550][ T3994] ____sys_sendmsg+0x972/0x9f0 [ 1095.086582][ T3994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.086616][ T3994] ? import_iovec+0x73/0xa0 [ 1095.086664][ T3994] ___sys_sendmsg+0x2a5/0x360 [ 1095.086693][ T3994] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.086752][ T3994] ? __fget_files+0x2a/0x420 [ 1095.086783][ T3994] ? __fget_files+0x3a0/0x420 [ 1095.086825][ T3994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1095.086850][ T3994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.086883][ T3994] ? __pfx_ksys_write+0x10/0x10 [ 1095.086919][ T3994] do_syscall_64+0x14d/0xf80 [ 1095.086950][ T3994] ? trace_irq_disable+0x3b/0x150 [ 1095.086981][ T3994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.087004][ T3994] ? clear_bhb_loop+0x40/0x90 [ 1095.087031][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.087053][ T3994] RIP: 0033:0x7f635339c799 [ 1095.087075][ T3994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.087094][ T3994] RSP: 002b:00007f6354319028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.087118][ T3994] RAX: ffffffffffffffda RBX: 00007f6353615fa0 RCX: 00007f635339c799 [ 1095.087133][ T3994] RDX: 0000000014048010 RSI: 0000200000001580 RDI: 0000000000000003 [ 1095.087146][ T3994] RBP: 00007f6354319090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.087159][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.087172][ T3994] R13: 00007f6353616038 R14: 00007f6353615fa0 R15: 00007ffca8b1fb38 [ 1095.087206][ T3994] [ 1095.499719][ T3998] vlan6: entered allmulticast mode [ 1095.504916][ T3998] team0: entered allmulticast mode [ 1095.523894][ T3998] team_slave_0: entered allmulticast mode [ 1095.567450][ T3998] team_slave_1: entered allmulticast mode [ 1095.573260][ T3998] bond4: entered allmulticast mode [ 1095.598830][ T3998] dummy0: entered allmulticast mode [ 1095.853966][ T4014] veth1: entered promiscuous mode [ 1095.877206][ T4014] macsec1: entered allmulticast mode [ 1095.882642][ T4014] veth1: entered allmulticast mode [ 1095.955109][ T4026] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1096.079432][ T4033] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 1096.092105][ T4014] bridge0: port 3(hsr0) entered disabled state [ 1096.098612][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.106438][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.121473][ T4034] netlink: 'syz.3.7775': attribute type 1 has an invalid length. [ 1096.324170][ T4014] veth1: left allmulticast mode [ 1096.421963][ T4035] bond8 (unregistering): Released all slaves [ 1096.531806][ T4046] FAULT_INJECTION: forcing a failure. [ 1096.531806][ T4046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.545366][ T642] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.557097][ T4046] CPU: 1 UID: 0 PID: 4046 Comm: syz.4.7778 Not tainted syzkaller #0 PREEMPT(full) [ 1096.557128][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1096.557143][ T4046] Call Trace: [ 1096.557153][ T4046] [ 1096.557162][ T4046] dump_stack_lvl+0xe8/0x150 [ 1096.557199][ T4046] should_fail_ex+0x412/0x560 [ 1096.557234][ T4046] _copy_from_iter+0x1d3/0x1670 [ 1096.557270][ T4046] ? rcu_is_watching+0x15/0xb0 [ 1096.557307][ T4046] ? __pfx__copy_from_iter+0x10/0x10 [ 1096.557346][ T4046] ? netlink_sendmsg+0x650/0xb40 [ 1096.557375][ T4046] ? skb_put+0x11b/0x210 [ 1096.557411][ T4046] netlink_sendmsg+0x6c0/0xb40 [ 1096.557451][ T4046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1096.557485][ T4046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1096.557516][ T4046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1096.557544][ T4046] ____sys_sendmsg+0x972/0x9f0 [ 1096.557576][ T4046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1096.557608][ T4046] ? import_iovec+0x73/0xa0 [ 1096.557645][ T4046] ___sys_sendmsg+0x2a5/0x360 [ 1096.557673][ T4046] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.557741][ T4046] ? __fget_files+0x2a/0x420 [ 1096.557791][ T4046] ? __fget_files+0x3a0/0x420 [ 1096.557835][ T4046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1096.557862][ T4046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1096.557895][ T4046] ? __pfx_ksys_write+0x10/0x10 [ 1096.557932][ T4046] do_syscall_64+0x14d/0xf80 [ 1096.557963][ T4046] ? trace_irq_disable+0x3b/0x150 [ 1096.557995][ T4046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.558018][ T4046] ? clear_bhb_loop+0x40/0x90 [ 1096.558050][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.558072][ T4046] RIP: 0033:0x7f904019c799 [ 1096.558092][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.558112][ T4046] RSP: 002b:00007f9040f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.558135][ T4046] RAX: ffffffffffffffda RBX: 00007f9040415fa0 RCX: 00007f904019c799 [ 1096.558171][ T4046] RDX: 0000000014048010 RSI: 0000200000001580 RDI: 0000000000000003 [ 1096.558186][ T4046] RBP: 00007f9040f97090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.558201][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.558214][ T4046] R13: 00007f9040416038 R14: 00007f9040415fa0 R15: 00007ffebe806638 [ 1096.558250][ T4046] [ 1096.798934][ T642] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.808407][ T642] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.882837][ T4041] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 1096.891491][ T642] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.117852][ T4058] : entered promiscuous mode [ 1097.277803][ T4065] tc_dump_action: action bad kind [ 1097.335847][ T4070] __nla_validate_parse: 8 callbacks suppressed [ 1097.335870][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7788'. [ 1097.437403][ T4072] FAULT_INJECTION: forcing a failure. [ 1097.437403][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.493254][ T4072] CPU: 0 UID: 0 PID: 4072 Comm: syz.2.7789 Not tainted syzkaller #0 PREEMPT(full) [ 1097.493284][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1097.493300][ T4072] Call Trace: [ 1097.493308][ T4072] [ 1097.493318][ T4072] dump_stack_lvl+0xe8/0x150 [ 1097.493354][ T4072] should_fail_ex+0x412/0x560 [ 1097.493389][ T4072] _copy_to_user+0x31/0xb0 [ 1097.493422][ T4072] simple_read_from_buffer+0xe1/0x170 [ 1097.493458][ T4072] proc_fail_nth_read+0x1bb/0x230 [ 1097.493492][ T4072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.493527][ T4072] ? rw_verify_area+0x2a6/0x4d0 [ 1097.493549][ T4072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1097.493583][ T4072] vfs_read+0x20c/0xa70 [ 1097.493604][ T4072] ? fdget_pos+0x246/0x320 [ 1097.493641][ T4072] ? __pfx___mutex_lock+0x10/0x10 [ 1097.493675][ T4072] ? __pfx_vfs_read+0x10/0x10 [ 1097.493699][ T4072] ? __fget_files+0x2a/0x420 [ 1097.493736][ T4072] ? __fget_files+0x3a0/0x420 [ 1097.493765][ T4072] ? __fget_files+0x2a/0x420 [ 1097.493805][ T4072] ksys_read+0x150/0x270 [ 1097.493831][ T4072] ? __pfx_ksys_read+0x10/0x10 [ 1097.493866][ T4072] do_syscall_64+0x14d/0xf80 [ 1097.493897][ T4072] ? trace_irq_disable+0x3b/0x150 [ 1097.493928][ T4072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.493951][ T4072] ? clear_bhb_loop+0x40/0x90 [ 1097.493978][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.494009][ T4072] RIP: 0033:0x7fa71995cfce [ 1097.494031][ T4072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1097.494057][ T4072] RSP: 002b:00007fa71a834fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.494079][ T4072] RAX: ffffffffffffffda RBX: 00007fa71a8356c0 RCX: 00007fa71995cfce [ 1097.494094][ T4072] RDX: 000000000000000f RSI: 00007fa71a8350a0 RDI: 0000000000000004 [ 1097.494107][ T4072] RBP: 00007fa71a835090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.494119][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.494131][ T4072] R13: 00007fa719c16038 R14: 00007fa719c15fa0 R15: 00007ffc0022e998 [ 1097.494163][ T4072] [ 1098.089159][ T4098] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1098.102524][ T4098] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1098.640144][ T4129] FAULT_INJECTION: forcing a failure. [ 1098.640144][ T4129] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.660646][ T4129] CPU: 1 UID: 0 PID: 4129 Comm: syz.0.7805 Not tainted syzkaller #0 PREEMPT(full) [ 1098.660678][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1098.660693][ T4129] Call Trace: [ 1098.660701][ T4129] [ 1098.660711][ T4129] dump_stack_lvl+0xe8/0x150 [ 1098.660748][ T4129] should_fail_ex+0x412/0x560 [ 1098.660783][ T4129] should_failslab+0xa8/0x100 [ 1098.660811][ T4129] ? vm_area_dup+0x2b/0x680 [ 1098.660836][ T4129] kmem_cache_alloc_noprof+0x87/0x650 [ 1098.660862][ T4129] ? __pfx_mmap_region+0x10/0x10 [ 1098.660896][ T4129] vm_area_dup+0x2b/0x680 [ 1098.660926][ T4129] __split_vma+0x1dc/0xa40 [ 1098.660971][ T4129] ? __pfx___split_vma+0x10/0x10 [ 1098.661015][ T4129] ? mas_find+0xb0e/0xd30 [ 1098.661128][ T4129] vms_gather_munmap_vmas+0x4fa/0x1370 [ 1098.661179][ T4129] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1098.661212][ T4129] ? vm_unmapped_area+0xde/0x260 [ 1098.661248][ T4129] ? arch_get_unmapped_area_topdown+0x9ed/0xb60 [ 1098.661291][ T4129] do_vmi_align_munmap+0x2b4/0x4b0 [ 1098.661342][ T4129] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1098.661418][ T4129] do_vmi_munmap+0x252/0x2d0 [ 1098.661455][ T4129] __vm_munmap+0x22c/0x3d0 [ 1098.661489][ T4129] ? __pfx___vm_munmap+0x10/0x10 [ 1098.661518][ T4129] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 1098.661573][ T4129] __x64_sys_munmap+0x60/0x70 [ 1098.661595][ T4129] do_syscall_64+0x14d/0xf80 [ 1098.661625][ T4129] ? trace_irq_disable+0x3b/0x150 [ 1098.661657][ T4129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.661679][ T4129] ? clear_bhb_loop+0x40/0x90 [ 1098.661707][ T4129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.661730][ T4129] RIP: 0033:0x7f635339c5c7 [ 1098.661751][ T4129] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.661771][ T4129] RSP: 002b:00007f6354317d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1098.661794][ T4129] RAX: ffffffffffffffda RBX: 00007f634c000000 RCX: 00007f635339c5c7 [ 1098.661811][ T4129] RDX: 0000000000000000 RSI: 0000000002c00000 RDI: 00007f6349400000 [ 1098.661826][ T4129] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1098.661840][ T4129] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1098.661855][ T4129] R13: 0000000000001000 R14: 00007f6350000000 R15: 0000000002c00000 [ 1098.661891][ T4129] [ 1099.124491][ T4141] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1099.133845][ T4141] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1099.353841][ T4152] syzkaller0: entered promiscuous mode [ 1099.360359][ T4152] syzkaller0: entered allmulticast mode [ 1099.396073][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7817'. [ 1099.476896][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7813'. [ 1099.513376][ T4147] bond1: (slave veth9): Enslaving as an active interface with a down link [ 1099.611391][ T4147] bond1: (slave veth11): Enslaving as an active interface with a down link [ 1099.672345][ T4166] sctp: [Deprecated]: syz.3.7821 (pid 4166) Use of int in maxseg socket option. [ 1099.672345][ T4166] Use struct sctp_assoc_value instead [ 1099.728194][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7822'. [ 1099.806137][ T4171] syzkaller0: entered promiscuous mode [ 1099.813137][ T4171] syzkaller0: entered allmulticast mode [ 1099.826408][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7824'. [ 1099.918829][ T4180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7826'. [ 1100.084245][ T4189] netlink: 'syz.3.7829': attribute type 10 has an invalid length. [ 1100.093280][ T4189] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7829'. [ 1100.104033][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.116598][ T4189] hsr0: entered promiscuous mode [ 1100.133904][ T4189] bridge0: port 3(hsr0) entered blocking state [ 1100.143111][ T4189] bridge0: port 3(hsr0) entered disabled state [ 1100.152583][ T4189] hsr0: entered allmulticast mode [ 1100.158734][ T4189] hsr_slave_1: entered allmulticast mode [ 1100.240607][ T4194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7830'. [ 1100.400316][ T4208] netlink: 'syz.3.7833': attribute type 4 has an invalid length. [ 1100.561516][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7837'. [ 1100.577424][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7839'. [ 1100.605786][ T4213] netlink: 'syz.3.7837': attribute type 1 has an invalid length. [ 1100.630174][ T4212] netlink: 'syz.2.7836': attribute type 1 has an invalid length. [ 1100.739059][ T4216] dvmrp0: entered allmulticast mode [ 1100.943156][ T4240] delete_channel: no stack [ 1101.245220][ T4252] syzkaller0: entered promiscuous mode [ 1101.264578][ T4252] syzkaller0: entered allmulticast mode [ 1101.980032][ T4262] syzkaller1: entered promiscuous mode [ 1101.985685][ T4262] syzkaller1: entered allmulticast mode [ 1102.526442][ T4286] __nla_validate_parse: 3 callbacks suppressed [ 1102.526466][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7857'. [ 1102.607115][ T4286] hsr_slave_0: left promiscuous mode [ 1102.613818][ T4286] hsr_slave_1: left promiscuous mode [ 1102.631656][ T4286] bridge0: port 3(hsr0) entered disabled state [ 1102.861814][ T4294] netlink: 'syz.0.7859': attribute type 3 has an invalid length. [ 1102.879786][ T4294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.913569][ T4280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7850'. [ 1102.991355][ T4280] bond8: entered promiscuous mode [ 1102.998542][ T4280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1103.116947][ T4304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1103.222619][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1103.328859][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1103.379885][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7862'. [ 1103.397480][ T4306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1104.148817][T13123] lec:lec_start_xmit: lec0:No lecd attached [ 1104.195343][ T4328] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1104.372449][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1104.381766][ T4336] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1104.392696][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1104.414840][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7869'. [ 1106.183864][ T4402] openvswitch: netlink: Flow actions attr not present in new flow. [ 1106.192861][ T4406] bridge5: entered promiscuous mode [ 1106.211206][ T4405] bridge6: entered promiscuous mode [ 1106.799864][ T4424] Cannot find del_set index 2 as target [ 1106.932014][ T4422] wg1: entered promiscuous mode [ 1106.947345][ T4422] wg1: entered allmulticast mode [ 1107.661880][ T4469] __nla_validate_parse: 9 callbacks suppressed [ 1107.661903][ T4469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7906'. [ 1107.934890][ T4477] netlink: 'syz.0.7909': attribute type 4 has an invalid length. [ 1108.139133][ T4485] netlink: 'syz.2.7912': attribute type 3 has an invalid length. [ 1108.147545][ T4485] netlink: 'syz.2.7912': attribute type 3 has an invalid length. [ 1108.155733][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1108.519323][ T4497] bond9: Unable to set down delay as MII monitoring is disabled [ 1108.531367][ T4497] bond9 (unregistering): Released all slaves [ 1108.630264][ T4499] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7916'. [ 1108.650599][ T4499] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1108.685429][ T4494] bond8: Removing last arp target with arp_interval on [ 1108.718019][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7916'. [ 1108.793770][ T4497] geneve3: entered promiscuous mode [ 1108.809947][ T644] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.831686][ T644] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.867318][ T644] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.886499][ T644] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.901486][ T4514] netlink: 'syz.3.7917': attribute type 1 has an invalid length. [ 1109.117581][ T4514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7917'. [ 1109.201844][ T4515] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1109.222043][ T4515] bond8: (slave bond9): making interface the new active one [ 1109.230734][ T4515] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1109.271349][ T4522] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 1109.289036][ T4514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1109.300978][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1109.310600][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1109.813999][ T4557] sctp: [Deprecated]: syz.4.7930 (pid 4557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1109.813999][ T4557] Use struct sctp_sack_info instead [ 1109.819716][ T4545] syzkaller0: entered promiscuous mode [ 1109.848877][ T4545] syzkaller0: entered allmulticast mode [ 1109.936842][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 1109.944998][ C1] lec:lec_tx_timeout: lec0 [ 1110.072257][ T4564] syzkaller0: entered promiscuous mode [ 1110.078992][ T4564] syzkaller0: entered allmulticast mode [ 1110.100052][ T4564] macsec2: entered promiscuous mode [ 1110.111792][ T4560] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7931'. [ 1110.358147][ T30] audit: type=1107 audit(1773497296.616:17): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[*í¼³r-2 C5ý{U<Ï‹Ü"±²kº(°£eº5& %3ùFŸ„3±' [ 1110.382657][ T4577] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7935'. [ 1110.691612][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7939'. [ 1110.930786][ T4609] openvswitch: netlink: Actions may not be safe on all matching packets [ 1111.328844][ T4635] netlink: 'syz.1.7949': attribute type 1 has an invalid length. [ 1111.426580][ T4635] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1111.712867][ T4652] pimreg: entered allmulticast mode [ 1111.930748][ T4664] wlan0: mtu greater than device maximum [ 1112.254939][ T4677] hsr_slave_0 (unregistering): left promiscuous mode [ 1113.505256][ T4739] __nla_validate_parse: 7 callbacks suppressed [ 1113.505278][ T4739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1113.523678][ T4738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7976'. [ 1113.545075][ T4738] xt_hashlimit: size too large, truncated to 1048576 [ 1113.647224][ T4746] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7978'. [ 1113.768877][ T4732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1113.797034][ T4747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1113.842264][ T4755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1113.852391][ T4752] .`: (slave dummy0): Releasing backup interface [ 1113.875802][ T4755] netlink: 'syz.1.7980': attribute type 1 has an invalid length. [ 1113.918646][ T4752] .`: (slave bond_slave_0): Releasing backup interface [ 1113.933258][ T4752] .`: (slave bond_slave_1): Releasing backup interface [ 1113.962644][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.994269][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.044240][ T4752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1114.122902][ T4755] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1114.459392][ T4781] ip6erspan0: entered promiscuous mode [ 1114.613846][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.624014][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.634582][ T4785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.654127][ T4786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.680255][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.690818][ T4786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1114.716520][ T4790] netlink: 'syz.0.7990': attribute type 1 has an invalid length. [ 1114.809811][ T4790] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1114.882937][ T4797] bond12: (slave veth7): Enslaving as an active interface with a down link [ 1115.229682][ T4816] 8021q: VLANs not supported on lo [ 1115.775775][ T4851] FAULT_INJECTION: forcing a failure. [ 1115.775775][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.824935][ T4849] netlink: 'syz.0.8005': attribute type 29 has an invalid length. [ 1115.845991][ T4851] CPU: 1 UID: 0 PID: 4851 Comm: syz.1.8006 Not tainted syzkaller #0 PREEMPT(full) [ 1115.846024][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1115.846040][ T4851] Call Trace: [ 1115.846050][ T4851] [ 1115.846060][ T4851] dump_stack_lvl+0xe8/0x150 [ 1115.846100][ T4851] should_fail_ex+0x412/0x560 [ 1115.846138][ T4851] should_failslab+0xa8/0x100 [ 1115.846168][ T4851] ? __anon_vma_prepare+0x117/0x4a0 [ 1115.846193][ T4851] kmem_cache_alloc_noprof+0x87/0x650 [ 1115.846217][ T4851] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1115.846246][ T4851] __anon_vma_prepare+0x117/0x4a0 [ 1115.846277][ T4851] do_pte_missing+0x2dd1/0x3490 [ 1115.846303][ T4851] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.846351][ T4851] handle_mm_fault+0x1bec/0x3310 [ 1115.846401][ T4851] ? handle_mm_fault+0xee/0x3310 [ 1115.846444][ T4851] ? __pfx_handle_mm_fault+0x10/0x10 [ 1115.846474][ T4851] ? lock_vma_under_rcu+0x45a/0x500 [ 1115.846526][ T4851] do_user_addr_fault+0xa73/0x1340 [ 1115.846565][ T4851] ? rcu_is_watching+0x15/0xb0 [ 1115.846596][ T4851] ? trace_page_fault_user+0x84/0x210 [ 1115.846630][ T4851] exc_page_fault+0x6a/0xc0 [ 1115.846666][ T4851] asm_exc_page_fault+0x26/0x30 [ 1115.846687][ T4851] RIP: 0033:0x7f4e9b15e6c2 [ 1115.846710][ T4851] Code: 8d 15 e5 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1115.846729][ T4851] RSP: 002b:00007f4e9c000d20 EFLAGS: 00010286 [ 1115.846749][ T4851] RAX: ffffffffffffffff RBX: 00007f4e94000000 RCX: 00007f4e9b19c597 [ 1115.846766][ T4851] RDX: 00007f4e9b24ef83 RSI: 0000000000021000 RDI: 00007f4e94000000 [ 1115.846781][ T4851] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1115.846796][ T4851] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1115.846810][ T4851] R13: 0000000000001000 R14: 00007f4e98000000 R15: 0000000002e00000 [ 1115.846845][ T4851] [ 1116.038107][ T4853] netlink: 'syz.0.8005': attribute type 29 has an invalid length. [ 1116.048058][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1116.056596][ T4851] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1116.363244][ T4861] netlink: 'syz.1.8010': attribute type 7 has an invalid length. [ 1116.392059][ T4861] netlink: 'syz.1.8010': attribute type 8 has an invalid length. [ 1116.404715][ T4863] openvswitch: netlink: Message has 8 unknown bytes. [ 1116.430857][ T4863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.453191][ T4861] syz_tun: entered promiscuous mode [ 1116.473628][ T4861] syz_tun: left promiscuous mode [ 1116.743068][ T4880] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 1116.763594][ T4880] bond0: (slave sit0): Error -95 calling set_mac_address [ 1116.800346][ T4884] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 1116.832758][ T4884] bond0: (slave sit0): Error -95 calling set_mac_address [ 1116.912478][ T4895] netlink: 'syz.3.8018': attribute type 23 has an invalid length. [ 1116.971113][ T4897] FAULT_INJECTION: forcing a failure. [ 1116.971113][ T4897] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.001990][ T4897] CPU: 0 UID: 0 PID: 4897 Comm: syz.4.8020 Not tainted syzkaller #0 PREEMPT(full) [ 1117.002021][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1117.002035][ T4897] Call Trace: [ 1117.002045][ T4897] [ 1117.002054][ T4897] dump_stack_lvl+0xe8/0x150 [ 1117.002090][ T4897] should_fail_ex+0x412/0x560 [ 1117.002126][ T4897] should_failslab+0xa8/0x100 [ 1117.002153][ T4897] ? __anon_vma_prepare+0xcb/0x4a0 [ 1117.002177][ T4897] kmem_cache_alloc_noprof+0x87/0x650 [ 1117.002209][ T4897] __anon_vma_prepare+0xcb/0x4a0 [ 1117.002248][ T4897] do_pte_missing+0x2dd1/0x3490 [ 1117.002274][ T4897] ? __lock_acquire+0x6b5/0x2cf0 [ 1117.002321][ T4897] handle_mm_fault+0x1bec/0x3310 [ 1117.002370][ T4897] ? handle_mm_fault+0xee/0x3310 [ 1117.002410][ T4897] ? __pfx_handle_mm_fault+0x10/0x10 [ 1117.002439][ T4897] ? lock_vma_under_rcu+0x45a/0x500 [ 1117.002485][ T4897] do_user_addr_fault+0xa73/0x1340 [ 1117.002518][ T4897] ? rcu_is_watching+0x15/0xb0 [ 1117.002548][ T4897] ? trace_page_fault_user+0x84/0x210 [ 1117.002579][ T4897] exc_page_fault+0x6a/0xc0 [ 1117.002612][ T4897] asm_exc_page_fault+0x26/0x30 [ 1117.002633][ T4897] RIP: 0033:0x7f904015e6c2 [ 1117.002655][ T4897] Code: 8d 15 e5 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1117.002675][ T4897] RSP: 002b:00007f9040f95d20 EFLAGS: 00010286 [ 1117.002695][ T4897] RAX: ffffffffffffffff RBX: 00007f9038000000 RCX: 00007f904019c597 [ 1117.002712][ T4897] RDX: 00007f904024ef83 RSI: 0000000000021000 RDI: 00007f9038000000 [ 1117.002727][ T4897] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1117.002741][ T4897] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1117.002755][ T4897] R13: 0000000000001000 R14: 00007f903c000000 R15: 0000000001e00000 [ 1117.002790][ T4897] [ 1117.002828][ T4897] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1117.585771][ T4915] bond10 (unregistering): Released all slaves [ 1117.751978][ T4934] bridge6: entered promiscuous mode [ 1117.781051][ T4934] bridge6: entered allmulticast mode [ 1117.805323][ T4937] ip6gre2: entered promiscuous mode [ 1117.839382][ T4937] ip6gre2: entered allmulticast mode [ 1117.875346][ T645] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1117.886028][ T645] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1117.897552][T20024] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1118.042004][ T4949] netlink: 'syz.3.8033': attribute type 3 has an invalid length. [ 1118.083793][ T4956] netlink: 'syz.0.8035': attribute type 9 has an invalid length. [ 1118.127145][ T4957] netlink: 'syz.0.8035': attribute type 9 has an invalid length. [ 1118.310538][ T4972] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1118.571852][ T4982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.580727][ T797] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1118.592957][ T4982] __nla_validate_parse: 22 callbacks suppressed [ 1118.592978][ T4982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8042'. [ 1118.660923][ T797] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1118.715510][ T4986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1118.722883][ T4986] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.730322][ T4986] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.737638][ T4986] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.998392][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1119.352258][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8052'. [ 1119.385562][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8052'. [ 1119.580116][ T5021] validate_nla: 1 callbacks suppressed [ 1119.580138][ T5021] netlink: 'syz.3.8057': attribute type 2 has an invalid length. [ 1119.657879][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8057'. [ 1119.808562][ T5039] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000 [ 1119.869155][ T5043] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8064'. [ 1120.666556][ T5066] netlink: 'syz.2.8069': attribute type 2 has an invalid length. [ 1120.669578][ T5068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1120.694846][ T5072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1120.738303][ T5066] A link change request failed with some changes committed already. Interface 26±ÿA©Ù¨€ may have been left with an inconsistent configuration, please check. [ 1121.067268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1121.075371][ C1] lec:lec_tx_timeout: lec0 [ 1121.214325][ T5094] batadv_slave_0: entered promiscuous mode [ 1121.236388][ T5094] batadv_slave_0: entered allmulticast mode [ 1121.604004][ T5109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1121.629834][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8073'. [ 1121.895095][ T5117] wg1: entered promiscuous mode [ 1121.902422][ T5117] wg1: entered allmulticast mode [ 1121.964086][ T5123] netlink: 'syz.1.8081': attribute type 13 has an invalid length. [ 1121.996748][ T5123] netlink: 'syz.1.8081': attribute type 11 has an invalid length. [ 1122.045703][ T5125] netlink: 'syz.0.8082': attribute type 8 has an invalid length. [ 1122.056926][ T5126] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20003 [ 1122.177074][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1122.439102][ T5137] gretap2: entered promiscuous mode [ 1122.758850][ T5151] IPVS: Scheduler module ip_vs_ not found [ 1122.932461][ T5168] netlink: 'syz.1.8091': attribute type 11 has an invalid length. [ 1123.166053][ T5186] netlink: 'syz.4.8097': attribute type 2 has an invalid length. [ 1123.194754][ T5197] mac80211_hwsim hwsim89 syzkaller0: entered promiscuous mode [ 1123.207837][ T5197] mac80211_hwsim hwsim89 syzkaller0: entered allmulticast mode [ 1123.498786][T17179] Bluetooth: hci1: link tx timeout [ 1123.505692][T17179] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1123.800034][ T5231] __nla_validate_parse: 11 callbacks suppressed [ 1123.800056][ T5231] netlink: 548 bytes leftover after parsing attributes in process `syz.4.8104'. [ 1123.834271][ T5232] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1123.907507][T32315] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.915934][T32315] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.935374][T32315] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.962662][T32315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.078275][ T5236] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.088706][ T5236] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.162593][ T5221] netlink: 'syz.2.8106': attribute type 10 has an invalid length. [ 1124.172396][ T5236] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.188019][ T5236] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.254498][ T5236] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.274879][ T5236] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.474412][ T5236] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.487436][ T5236] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.695533][T32315] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.717481][T32315] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.835204][T32315] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.844140][T32315] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.862468][T32315] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.882348][T32315] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.905021][T32315] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1124.919021][T32315] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.228345][ T5277] netlink: 'syz.1.8120': attribute type 2 has an invalid length. [ 1125.281750][ T5285] netlink: 'syz.1.8120': attribute type 2 has an invalid length. [ 1125.330377][ T5283] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 1125.348872][ T5283] netlink: zone id is out of range [ 1125.354055][ T5283] netlink: zone id is out of range [ 1125.378874][ T5283] netlink: zone id is out of range [ 1125.384212][ T5283] netlink: zone id is out of range [ 1125.406261][ T5283] netlink: zone id is out of range [ 1125.434163][ T5283] netlink: zone id is out of range [ 1125.513150][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1125.522258][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1125.537018][T17179] Bluetooth: hci1: command 0x0406 tx timeout [ 1125.672085][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1125.674892][ T5306] IPVS: set_ctl: invalid protocol: 31 172.20.20.170:20004 [ 1126.048785][ T5321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8131'. [ 1126.097807][ T5323] dummy0: entered promiscuous mode [ 1126.103339][ T5323] dummy0: entered allmulticast mode [ 1126.112266][ T5323] netlink: 'syz.0.8132': attribute type 13 has an invalid length. [ 1126.120745][ T5323] netlink: 'syz.0.8132': attribute type 17 has an invalid length. [ 1126.325085][ T5323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.349730][ T5323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.371745][ T5323] dummy0: left promiscuous mode [ 1126.377812][ T5323] dummy0: left allmulticast mode [ 1126.389441][ T5323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1126.476366][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8136'. [ 1126.635180][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8138'. [ 1126.646155][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8138'. [ 1126.662039][ T5349] netlink: 'syz.2.8138': attribute type 13 has an invalid length. [ 1126.681147][ T5349] netlink: 'syz.2.8138': attribute type 11 has an invalid length. [ 1126.715504][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8139'. [ 1126.771290][ T5355] bridge3: port 1(geneve2) entered blocking state [ 1126.778183][ T5355] bridge3: port 1(geneve2) entered disabled state [ 1126.784930][ T5355] geneve2: entered allmulticast mode [ 1126.793918][ T5355] geneve2: entered promiscuous mode [ 1126.995808][ T5372] netlink: 'syz.0.8146': attribute type 1 has an invalid length. [ 1127.020262][ T5372] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1128.456575][ T5434] geneve3: entered promiscuous mode [ 1128.479501][T32321] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.518120][T32321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.550210][T32321] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.580076][T32321] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.617451][ T5436] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1128.634327][ T5436] bridge_slave_0: left allmulticast mode [ 1128.642518][ T5436] bridge_slave_0: left promiscuous mode [ 1128.659913][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.670587][ T5436] bridge_slave_1: left allmulticast mode [ 1128.676301][ T5436] bridge_slave_1: left promiscuous mode [ 1128.682972][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.703792][ T5436] bond0: (slave bond_slave_0): Releasing backup interface [ 1128.724255][ T5436] bond0: (slave bond_slave_1): Releasing backup interface [ 1128.743042][ T5436] team0: Port device team_slave_0 removed [ 1128.765637][ T5436] team0: Port device team_slave_1 removed [ 1128.775796][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.808070][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.835629][ T5436] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1128.895887][ T5451] __nla_validate_parse: 7 callbacks suppressed [ 1128.895911][ T5451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1129.178957][ T5464] openvswitch: netlink: ERSPAN option length err (len 5660, max 255). [ 1129.409870][ T5475] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1129.416560][ T5474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8175'. [ 1129.913123][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8181'. [ 1129.933926][ T5500] netlink: 'syz.1.8181': attribute type 13 has an invalid length. [ 1129.944260][ T5500] netlink: 'syz.1.8181': attribute type 17 has an invalid length. [ 1129.959787][ T5500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1129.959868][ T5502] netlink: 'syz.0.8182': attribute type 1 has an invalid length. [ 1130.017477][ T5502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1130.049152][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1130.068680][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8182'. [ 1130.216525][ T5508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8185'. [ 1130.420150][ T5515] syzkaller1: entered promiscuous mode [ 1130.425664][ T5515] syzkaller1: entered allmulticast mode [ 1130.498615][ T5515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1130.656828][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1132.108928][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8206'. [ 1132.208699][ T5615] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1132.385186][ T5625] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8211'. [ 1132.732624][ T5645] netlink: 'syz.2.8214': attribute type 1 has an invalid length. [ 1132.909858][ T5653] syzkaller0: entered promiscuous mode [ 1132.925849][ T5653] syzkaller0: entered allmulticast mode [ 1132.937321][ T5650] netlink: 'syz.3.8216': attribute type 4 has an invalid length. [ 1133.446384][ T5682] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.595824][ T5682] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.692398][ T5682] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.792510][ T5682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.999148][T32321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.069969][T32315] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.132913][T21526] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.149556][ T5710] __nla_validate_parse: 7 callbacks suppressed [ 1134.149577][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1134.191050][ T645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.207957][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1134.271523][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1134.300091][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1134.466978][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1134.490650][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8235'. [ 1134.502576][ T5727] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8236'. [ 1134.662767][ T5734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8239'. [ 1134.680117][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8240'. [ 1134.751978][ T5739] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1135.129862][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8247'. [ 1136.058247][ T5824] netlink: 'syz.2.8259': attribute type 10 has an invalid length. [ 1136.203364][ T5826] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1136.469096][ T5840] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1136.609363][ T5840] netlink: 'syz.3.8266': attribute type 83 has an invalid length. [ 1136.683819][ T5856] geneve5: entered promiscuous mode [ 1136.690218][ T5856] geneve5: entered allmulticast mode [ 1136.699753][ T5851] netlink: 'syz.1.8267': attribute type 11 has an invalid length. [ 1136.710077][ T5851] netlink: 'syz.1.8267': attribute type 23 has an invalid length. [ 1136.813218][ T5857] netlink: 'syz.0.8269': attribute type 2 has an invalid length. [ 1136.845410][T21526] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.854831][T21526] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.878140][T21526] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.908737][T21526] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.975899][ T5857] !: entered promiscuous mode [ 1137.071777][ T5875] bond0: entered promiscuous mode [ 1137.086953][ T5875] bond_slave_0: entered promiscuous mode [ 1137.103459][ T5875] bond_slave_1: entered promiscuous mode [ 1137.149764][ T5875] bond0: left promiscuous mode [ 1137.155092][ T5875] bond_slave_0: left promiscuous mode [ 1137.166229][ T5875] bond_slave_1: left promiscuous mode [ 1137.353379][ T5888] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:7168 [ 1137.833917][ T5922] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1137.955540][ T5931] sctp: [Deprecated]: syz.1.8287 (pid 5931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1137.955540][ T5931] Use struct sctp_sack_info instead [ 1138.029780][ T5938] sctp: [Deprecated]: syz.1.8287 (pid 5938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.029780][ T5938] Use struct sctp_sack_info instead [ 1138.162036][ T5947] netlink: 'syz.2.8290': attribute type 12 has an invalid length. [ 1138.454483][ T5957] tipc: Started in network mode [ 1138.461049][ T5957] tipc: Node identity 040000003c, cluster identity 4711 [ 1138.477505][ T5957] tipc: Enabling of bearer rejected, failed to enable media [ 1138.529894][ T5965] sctp: [Deprecated]: syz.2.8293 (pid 5965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.529894][ T5965] Use struct sctp_sack_info instead [ 1138.705306][ T5971] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1138.776492][ T5978] macvlan1: entered allmulticast mode [ 1138.792001][ T5978] veth0_to_bond: entered allmulticast mode [ 1138.803605][ T5978] bond10: (slave macvlan1): Enslaving as an active interface with an up link [ 1138.898776][ T5976] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) ! [ 1139.171362][ T6005] netlink: 'syz.3.8300': attribute type 15 has an invalid length. [ 1139.226957][ T6005] __nla_validate_parse: 16 callbacks suppressed [ 1139.226992][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1139.301768][ T6005] netlink: 'syz.3.8300': attribute type 15 has an invalid length. [ 1139.310936][T32315] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1139.340779][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1139.356782][T32315] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1139.394439][T32315] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1139.428789][ T6015] netlink: 'syz.4.8301': attribute type 1 has an invalid length. [ 1139.437549][T32315] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1139.542063][ T6015] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1139.679733][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8305'. [ 1139.795864][ T6030] : entered promiscuous mode [ 1139.895753][ T6039] xt_hashlimit: size too large, truncated to 1048576 [ 1140.250467][ T6059] team0: No ports can be present during mode change [ 1140.305520][ T6059] team0: No ports can be present during mode change [ 1140.322809][ T6061] netlink: 'syz.3.8313': attribute type 1 has an invalid length. [ 1140.330801][ T6061] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8313'. [ 1140.773156][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1141.087777][ T6079] IPv6: Can't replace route, no match found [ 1141.109020][ T6079] IPv6: Can't replace route, no match found [ 1141.129999][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1141.151361][ T6094] xt_hashlimit: size too large, truncated to 1048576 [ 1141.372804][ T6101] netlink: 'syz.4.8324': attribute type 20 has an invalid length. [ 1141.381347][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1141.410123][ T6101] netlink: 'syz.4.8324': attribute type 20 has an invalid length. [ 1141.418543][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1141.437321][T32315] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.485638][T32315] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.494855][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1141.541938][T32315] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.632745][ T6106] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1141.640918][T32315] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.694587][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8326'. [ 1147.296963][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1167.385442][T13123] lec:lec_start_xmit: lec0:No lecd attached [ 1172.896904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1172.905056][ C1] lec:lec_tx_timeout: lec0 [ 1177.384053][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1181.216962][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1182.896769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1182.904827][ C1] lec:lec_tx_timeout: lec0 [ 1218.344129][ T644] bridge_slave_1: left allmulticast mode [ 1218.350088][ T644] bridge_slave_1: left promiscuous mode [ 1218.355858][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.364878][ T644] bridge_slave_0: left allmulticast mode [ 1218.371858][ T644] bridge_slave_0: left promiscuous mode [ 1218.378155][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.576099][ T644] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1218.682500][ T644] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1218.736390][ T644] bond5 (unregistering): (slave bridge3): Releasing active interface [ 1218.826312][ T644] bond4 (unregistering): (slave bond0): Releasing active interface [ 1218.836363][ T644] bond0 (unregistering): Released all slaves [ 1218.851494][ T644] bond1 (unregistering): Released all slaves [ 1218.867577][ T644] bond2 (unregistering): Released all slaves [ 1218.884795][ T644] bond3 (unregistering): (slave veth11): Releasing active interface [ 1218.894627][ T644] bond3 (unregistering): Released all slaves [ 1218.913340][ T644] bond4 (unregistering): Released all slaves [ 1218.932119][ T644] bond5 (unregistering): Released all slaves [ 1218.948885][ T644] bond6 (unregistering): Released all slaves [ 1219.105895][ T644] tipc: Disabling bearer [ 1219.111783][ T644] tipc: Left network mode [ 1219.683369][ T644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.692174][ T644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.725219][ T644] pim6reg (unregistering): left allmulticast mode [ 1219.893577][ T644] team0 (unregistering): Port device team_slave_1 removed [ 1219.915981][ T644] team0 (unregistering): Port device team_slave_0 removed [ 1220.294992][ T644] IPVS: stop unused estimator thread 0... [ 1231.264970][T13123] lec:lec_start_xmit: lec0:No lecd attached [ 1236.896857][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 1236.905414][ C1] lec:lec_tx_timeout: lec0 [ 1238.823748][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1243.937316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.945457][ C1] lec:lec_tx_timeout: lec0 [ 1249.184909][ T6140] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8331'. [ 1249.209369][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8331'. [ 1249.262330][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8330'. [ 1250.086491][ T6190] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1250.249274][ T6163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8329'. [ 1250.943980][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8347'. [ 1250.996434][ T6242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8354'. [ 1251.265088][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8359'. [ 1251.514130][ T6253] xt_CT: No such helper "syz1" [ 1251.552197][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8362'. [ 1251.571258][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8362'. [ 1251.868587][ T30] audit: type=1804 audit(1773497438.126:18): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8366" name="/newroot/430/cgroup.controllers" dev="tmpfs" ino=2210 res=1 errno=0 [ 1251.915760][ T30] audit: type=1800 audit(1773497438.126:19): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8366" name="cgroup.controllers" dev="tmpfs" ino=2210 res=0 errno=0 [ 1252.249011][ T6300] IPVS: Scheduler module ip_vs_sip not found [ 1252.704258][ T6337] xt_TCPMSS: Only works on TCP SYN packets [ 1252.915176][ T6347] netlink: 'syz.0.8383': attribute type 1 has an invalid length. [ 1252.965380][ T6347] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1253.485876][ T6388] netlink: 'syz.2.8395': attribute type 13 has an invalid length. [ 1253.502425][ T6380] netlink: 'syz.4.8393': attribute type 28 has an invalid length. [ 1253.533034][ T6388] netlink: 'syz.2.8395': attribute type 17 has an invalid length. [ 1253.544160][ T6380] netlink: 'syz.4.8393': attribute type 3 has an invalid length. [ 1253.631847][ T6388] 8021q: adding VLAN 0 to HW filter on device .` [ 1253.670018][ T6388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1253.753566][ T6397] bond12: ARP target 9.0.0.0 is already present [ 1253.760337][ T6397] bond12: option arp_ip_target: invalid value (9) [ 1253.775976][ T6400] netlink: 'syz.3.8399': attribute type 4 has an invalid length. [ 1253.786417][ T6397] bond12 (unregistering): Released all slaves [ 1254.176914][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1254.606121][ T6432] netlink: 'syz.1.8407': attribute type 1 has an invalid length. [ 1254.631269][ T6432] __nla_validate_parse: 10 callbacks suppressed [ 1254.631294][ T6432] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1254.687263][ T6432] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1254.696200][ T6432] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8407'. [ 1255.031109][ T6450] xt_hashlimit: max too large, truncated to 1048576 [ 1255.041147][ T6440] syzkaller1: entered promiscuous mode [ 1255.062837][ T6440] syzkaller1: entered allmulticast mode [ 1255.321371][ T6466] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8414'. [ 1255.460970][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8417'. [ 1255.696059][ T6481] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 1255.759953][ T6481] bond7 (unregistering): Released all slaves [ 1255.918290][ T6502] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.956805][ T6502] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1256.016859][ T6502] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.071369][ T6511] netlink: 'syz.1.8429': attribute type 1 has an invalid length. [ 1256.104677][ T6502] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.114785][ T6502] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1256.129289][ T6502] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.199091][ T6519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8429'. [ 1256.210453][ T6511] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1256.229610][ T6514] vlan4: entered promiscuous mode [ 1256.234870][ T6514] bond12: entered promiscuous mode [ 1256.244637][ T6514] vlan4: entered allmulticast mode [ 1256.250102][ T6514] bond12: entered allmulticast mode [ 1256.305919][ T6502] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.356947][ T6502] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1256.377473][ T6502] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.523191][ T6527] netlink: 'syz.1.8434': attribute type 1 has an invalid length. [ 1256.544034][ T6527] netlink: 'syz.1.8434': attribute type 1 has an invalid length. [ 1256.568158][ T6502] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1256.589043][ T6502] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1256.599833][ T6535] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1256.611300][ T6502] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.667185][ T6535] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1256.689401][ T6535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1256.755380][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.779674][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.795309][ T6537] bridge_slave_0: entered allmulticast mode [ 1256.823470][ T6537] bridge_slave_0: entered promiscuous mode [ 1257.178134][ T642] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.187907][ T642] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1257.196147][ T642] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.221941][ T642] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.230635][ T642] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1257.239424][ T642] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.268611][ T642] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.277338][ T642] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1257.285566][ T642] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.319008][ T642] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.328852][ T642] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1257.338608][ T642] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.353976][ T6543] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1257.776960][ T6562] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.8445'. [ 1257.959495][ T6576] validate_nla: 1 callbacks suppressed [ 1257.959517][ T6576] netlink: 'syz.4.8448': attribute type 1 has an invalid length. [ 1258.037659][ T6576] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1258.093420][ T6578] bond7: entered allmulticast mode [ 1258.153188][ T6576] bond7: (slave ip6gretap2): making interface the new active one [ 1258.161592][ T6576] ip6gretap2: entered allmulticast mode [ 1258.169297][ T6576] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1258.407368][ T6582] netlink: 'syz.4.8449': attribute type 2 has an invalid length. [ 1258.524145][ T6582] l24): entered promiscuous mode [ 1258.698845][ T6591] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1259.183415][ T6608] netlink: 'syz.1.8456': attribute type 2 has an invalid length. [ 1259.959101][ T6620] __nla_validate_parse: 5 callbacks suppressed [ 1259.959127][ T6620] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8460'. [ 1260.533909][ T6627] lo speed is unknown, defaulting to 1000 [ 1260.565294][ T6627] lo speed is unknown, defaulting to 1000 [ 1260.604342][ T6627] lo speed is unknown, defaulting to 1000 [ 1260.648990][ T6627] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1260.706330][ T6640] syzkaller0: entered promiscuous mode [ 1260.735750][ T6640] syzkaller0: entered allmulticast mode [ 1260.766676][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.773452][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.808704][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.873980][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.898972][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.924085][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.938760][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.946469][ T6627] lo speed is unknown, defaulting to 1000 [ 1262.975157][ T6669] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8469'. [ 1263.006942][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8469'. [ 1263.020855][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1263.129720][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8472'. [ 1263.236923][ T6679] bond0: (slave syz_tun): Releasing backup interface [ 1263.265079][ T6683] netlink: 'syz.0.8474': attribute type 2 has an invalid length. [ 1263.342609][ T6688] bond14: entered promiscuous mode [ 1263.374548][ T6688] bond14: entered allmulticast mode [ 1263.408056][ T6688] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1263.428208][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1263.641699][ T6708] lo speed is unknown, defaulting to 1000 [ 1263.713611][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1263.728973][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1263.808795][ T6721] geneve4: entered promiscuous mode [ 1263.819760][ T6721] geneve4: entered allmulticast mode [ 1263.895289][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8488'. [ 1263.915942][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8488'. [ 1263.975512][ T6731] netlink: 'syz.2.8490': attribute type 1 has an invalid length. [ 1264.018246][ T6731] netlink: 'syz.2.8490': attribute type 1 has an invalid length. [ 1264.057180][ T6729] batadv1: entered promiscuous mode [ 1264.116044][ T6729] batadv1: entered allmulticast mode [ 1264.139516][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1264.423315][ T6760] netlink: 'syz.2.8495': attribute type 4 has an invalid length. [ 1264.482630][ T6760] netlink: 'syz.2.8495': attribute type 4 has an invalid length. [ 1264.997521][ T6783] nbd1: detected capacity change from 0 to 63 [ 1265.009647][T25656] block nbd1: Receive control failed (result -104) [ 1265.234733][ T6799] tipc: Enabled bearer , priority 0 [ 1265.250510][ T6799] tipc: Resetting bearer [ 1265.412283][ T6805] netlink: 'syz.2.8505': attribute type 1 has an invalid length. [ 1265.455960][ T6805] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1265.501952][ T6805] bond10: (slave veth7): Enslaving as an active interface with a down link [ 1265.659742][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1265.701495][ T6805] bond10: (slave batadv1): making interface the new active one [ 1265.732283][ T6805] batadv1: entered promiscuous mode [ 1265.747502][ T6805] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 1265.884986][ T6820] lo speed is unknown, defaulting to 1000 [ 1266.261478][ T6847] __nla_validate_parse: 3 callbacks suppressed [ 1266.261500][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1266.305116][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8512'. [ 1266.629113][ T6864] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8518'. [ 1266.647015][ T6867] xt_CT: No such helper "snmp_trap" [ 1266.780909][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8520'. [ 1267.153332][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8524'. [ 1267.204627][ T6891] veth13: entered promiscuous mode [ 1267.273447][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8526'. [ 1267.284935][ T6901] netlink: 'syz.2.8528': attribute type 1 has an invalid length. [ 1267.333870][ T6901] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1267.364369][ T6901] bond11: (slave ip6erspan0): making interface the new active one [ 1267.374963][ T6901] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1267.523350][ T6908] lo speed is unknown, defaulting to 1000 [ 1267.568363][ T6918] tipc: Resetting bearer [ 1267.811317][ T6936] netlink: 'syz.2.8536': attribute type 19 has an invalid length. [ 1268.053333][ T6948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1268.116800][ T6948] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1268.155239][ T6953] lo speed is unknown, defaulting to 1000 [ 1268.377381][ T6970] xt_connbytes: Forcing CT accounting to be enabled [ 1268.384195][ T6971] xt_connbytes: Forcing CT accounting to be enabled [ 1268.533467][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8548'. [ 1268.547708][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8548'. [ 1268.566203][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8548'. [ 1268.647304][ T6985] netlink: 'syz.4.8549': attribute type 6 has an invalid length. [ 1268.875530][ T7003] C: renamed from team_slave_0 [ 1268.899278][ T7003] netlink: 'syz.4.8554': attribute type 8 has an invalid length. [ 1268.922860][ T7003] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1269.388473][ T7027] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1269.499953][ T7004] lec:lec_atm_close: lec0: Shut down! [ 1269.644398][ T7046] netlink: 'syz.1.8565': attribute type 2 has an invalid length. [ 1269.669231][ T7046] netlink: 'syz.1.8565': attribute type 1 has an invalid length. [ 1269.729138][ T7054] "syz.2.8567" (7054) uses obsolete ecb(arc4) skcipher [ 1274.896613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 1274.904692][ C1] lec:lec_tx_timeout: lec0 [ 1276.747234][ T641] batadv1: left promiscuous mode [ 1295.139333][ T5158] block nbd1: Possible stuck request ffff888026afa800: control (read@0,1024B). Runtime 30 seconds [ 1295.150847][ T5158] block nbd1: Possible stuck request ffff888026afaa00: control (read@1024,1024B). Runtime 30 seconds [ 1295.161891][ T5158] block nbd1: Possible stuck request ffff888026afac00: control (read@2048,1024B). Runtime 30 seconds [ 1295.173085][ T5158] block nbd1: Possible stuck request ffff888026afae00: control (read@3072,1024B). Runtime 30 seconds [ 1295.947333][T13123] lec:lec_start_xmit: lec0:No lecd attached [ 1300.956625][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1300.964656][ C1] lec:lec_tx_timeout: lec0 [ 1300.969499][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1305.976713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1305.984781][ C1] lec:lec_tx_timeout: lec0 [ 1312.576942][T17179] Bluetooth: hci1: command 0x0406 tx timeout [ 1325.217779][ T5158] block nbd1: Possible stuck request ffff888026afa800: control (read@0,1024B). Runtime 60 seconds [ 1325.228678][ T5158] block nbd1: Possible stuck request ffff888026afaa00: control (read@1024,1024B). Runtime 60 seconds [ 1325.240342][ T5158] block nbd1: Possible stuck request ffff888026afac00: control (read@2048,1024B). Runtime 60 seconds [ 1325.251447][ T5158] block nbd1: Possible stuck request ffff888026afae00: control (read@3072,1024B). Runtime 60 seconds [ 1327.600731][ T5193] udevd[5193]: worker [6142] /devices/virtual/block/nbd1 is taking a long time [ 1355.297761][ T5158] block nbd1: Possible stuck request ffff888026afa800: control (read@0,1024B). Runtime 90 seconds [ 1355.308668][ T5158] block nbd1: Possible stuck request ffff888026afaa00: control (read@1024,1024B). Runtime 90 seconds [ 1355.320526][ T5158] block nbd1: Possible stuck request ffff888026afac00: control (read@2048,1024B). Runtime 90 seconds [ 1355.331799][ T5158] block nbd1: Possible stuck request ffff888026afae00: control (read@3072,1024B). Runtime 90 seconds [ 1360.632955][T13123] lec:lec_start_xmit: lec0:No lecd attached [ 1363.235405][ T7101] __nla_validate_parse: 9 callbacks suppressed [ 1363.235428][ T7101] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1363.252093][ T7101] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8577'. [ 1364.165308][ T7153] IPVS: length: 4096 != 24 [ 1364.292468][ T7121] netlink: 'syz.1.8579': attribute type 4 has an invalid length. [ 1364.342893][ T7155] netlink: 'syz.1.8579': attribute type 4 has an invalid length. [ 1364.667452][ T7165] netlink: 'syz.2.8590': attribute type 7 has an invalid length. [ 1364.718657][ T7165] netlink: 'syz.2.8590': attribute type 7 has an invalid length. [ 1364.748757][ T642] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.777980][T32315] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.807547][T32315] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1364.915966][T32315] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.100580][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1365.113597][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8594'. [ 1365.936559][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 1365.944681][ C1] lec:lec_tx_timeout: lec0 [ 1365.950032][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1366.121459][ T7218] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1366.188803][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8603'. [ 1366.399261][ T7236] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 1366.753490][ T7242] lo speed is unknown, defaulting to 1000 [ 1366.872558][ T7254] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1367.579445][ T7291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1367.692912][ T7298] x_tables: duplicate underflow at hook 1 [ 1367.810580][ T7301] lo speed is unknown, defaulting to 1000 [ 1367.931303][ T7308] xt_TCPMSS: Only works on TCP SYN packets [ 1368.512128][ T7341] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1368.732495][ T7351] : renamed from veth0_to_bond [ 1368.899269][ T7359] lo speed is unknown, defaulting to 1000 [ 1368.905402][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1368.927099][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1368.943362][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1368.965050][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1369.014175][ T7361] netlink: 'syz.1.8635': attribute type 6 has an invalid length. [ 1369.019472][ T7366] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1369.046269][ T7364] IPVS: Scheduler module ip_vs_ not found [ 1369.646930][ T7382] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1369.770328][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8644'. [ 1369.970485][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8647'. [ 1370.041158][ T7408] netlink: 'syz.2.8648': attribute type 1 has an invalid length. [ 1370.063147][ T7408] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.8648'. [ 1370.295855][ T7422] netlink: 'syz.4.8654': attribute type 1 has an invalid length. [ 1370.314982][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1370.759415][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8661'. [ 1370.798633][ T7450] C (unregistering): left allmulticast mode [ 1370.809306][ T7450] team0: Port device C removed [ 1370.956618][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1370.964802][ C1] lec:lec_tx_timeout: lec0 [ 1371.220080][ T7460] netlink: 'syz.3.8665': attribute type 1 has an invalid length. [ 1371.276154][ T7460] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1371.289855][ T7460] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1371.432937][ T7460] bond11: (slave bridge5): Enslaving as an active interface with a down link [ 1371.465361][ T7460] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1371.481414][ T7460] macvlan2: entered promiscuous mode [ 1371.487123][ T7460] macvlan2: entered allmulticast mode [ 1371.494025][ T7460] bond0: entered promiscuous mode [ 1371.506274][ T7460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1371.526279][ T7460] bond0: left promiscuous mode [ 1372.446800][ T7517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.530061][ T7526] openvswitch: netlink: Message has 8 unknown bytes. [ 1372.542178][ T7526] netlink: 'syz.4.8683': attribute type 10 has an invalid length. [ 1372.594132][ T7528] netlink: 'syz.4.8683': attribute type 10 has an invalid length. [ 1372.708107][ T7528] dummy0: left allmulticast mode [ 1372.714875][ T7528] team0: Port device dummy0 removed [ 1372.725981][ T7528] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1372.842704][ T7534] netlink: 'syz.3.8690': attribute type 13 has an invalid length. [ 1372.851547][ T7536] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1373.182270][ T7546] netlink: 'syz.3.8694': attribute type 9 has an invalid length. [ 1373.205138][ T7546] netlink: 'syz.3.8694': attribute type 14 has an invalid length. [ 1373.254015][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.826812][ T7589] vlan0: entered promiscuous mode [ 1373.832123][ T7589] bridge0: entered promiscuous mode [ 1374.043257][ T7595] x_tables: unsorted underflow at hook 3 [ 1374.163717][ T7605] __nla_validate_parse: 19 callbacks suppressed [ 1374.163742][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1374.211327][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1374.248292][ T7605] batadv1: entered promiscuous mode [ 1374.253780][ T7605] batadv1: entered allmulticast mode [ 1374.279836][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1374.412123][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8714'. [ 1374.489556][ T7627] netlink: 'syz.2.8716': attribute type 10 has an invalid length. [ 1374.498177][ T7627] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8716'. [ 1374.514638][ T7627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1374.526047][ T7627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1374.538336][ T7627] hsr0: entered promiscuous mode [ 1374.762144][ T7641] bond0: entered promiscuous mode [ 1374.774634][ T7641] bond_slave_0: entered promiscuous mode [ 1374.781682][ T7641] bond_slave_1: entered promiscuous mode [ 1374.789913][ T7641] dummy0: entered promiscuous mode [ 1374.798073][ T7641] batadv0: entered promiscuous mode [ 1374.805534][ T7641] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1374.821070][ T7641] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1374.836343][ T7641] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1374.867675][ T7645] syzkaller1: entered promiscuous mode [ 1374.873463][ T7645] syzkaller1: entered allmulticast mode [ 1375.162528][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1375.289919][ T7652] netlink: 'syz.2.8726': attribute type 3 has an invalid length. [ 1375.312713][ T7656] atomic_op ffff88802cca4998 conn xmit_atomic 0000000000000000 [ 1375.398599][ T7658] netlink: 'syz.0.8728': attribute type 2 has an invalid length. [ 1375.417484][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8728'. [ 1375.432427][ T7653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.579286][ T7666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8729'. [ 1375.594481][ T7666] ip6gre2: entered promiscuous mode [ 1375.600216][ T7666] ip6gre2: entered allmulticast mode [ 1375.647867][ T7670] lo speed is unknown, defaulting to 1000 [ 1375.814612][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1375.842346][ T7687] netlink: 'syz.2.8733': attribute type 1 has an invalid length. [ 1375.901843][ T7686] lo speed is unknown, defaulting to 1000 [ 1376.074934][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8737'. [ 1376.506031][ T7676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1376.512190][ T7676] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1376.524395][ T7676] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1376.535264][ T7676] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1376.552004][ T7676] tipc: Resetting bearer [ 1376.579335][ T7676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1376.585852][ T7676] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1376.608857][ T7676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1376.614943][ T7676] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1377.025054][ T7723] gre1: entered allmulticast mode [ 1377.464911][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8746'. [ 1377.875311][ T7765] netlink: 'syz.1.8753': attribute type 4 has an invalid length. [ 1378.208941][ T7776] syzkaller1: entered promiscuous mode [ 1378.215064][ T7776] syzkaller1: entered allmulticast mode [ 1378.528217][ T7799] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1379.002022][T17179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1379.012162][T17179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1379.024048][T17179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1379.033245][T17179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1379.069450][T17179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.119321][T25656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1379.129947][T25656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1379.145271][T25656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1379.153604][T25656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1379.161843][T25656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.298676][ T7826] __nla_validate_parse: 6 callbacks suppressed [ 1379.298699][ T7826] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8766'. [ 1379.382316][ T7826] netlink: 'syz.2.8766': attribute type 1 has an invalid length. [ 1379.390200][ T7832] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1379.423174][ T7826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8766'. [ 1379.438698][T21527] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.452617][T21527] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1379.464501][T21527] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.594211][ T7817] lo speed is unknown, defaulting to 1000 [ 1379.729280][T21527] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.760487][T21527] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1379.790608][T21527] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.881719][ T7858] dummy0: entered promiscuous mode [ 1379.888829][ T7858] vlan3: entered promiscuous mode [ 1380.025160][T21527] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.070958][T21527] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1380.122036][T21527] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.284445][ T7849] bridge2: entered promiscuous mode [ 1380.309386][ T7849] bridge2: entered allmulticast mode [ 1380.333457][ T7854] lo speed is unknown, defaulting to 1000 [ 1380.389181][T21527] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.409778][T21527] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1380.449038][T21527] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.026427][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8779'. [ 1381.145336][ T7907] hsr0: entered promiscuous mode [ 1381.151447][ T7907] macvlan2: entered allmulticast mode [ 1381.157480][ T7907] hsr0: entered allmulticast mode [ 1381.173745][ T7907] bond0: entered allmulticast mode [ 1381.195421][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8775'. [ 1381.225849][T25656] Bluetooth: hci3: command tx timeout [ 1381.247511][ T7907] bond_slave_0: entered allmulticast mode [ 1381.271350][ T7907] bond_slave_1: entered allmulticast mode [ 1381.286883][ T7907] dummy0: entered allmulticast mode [ 1381.292291][ T7907] batadv0: entered allmulticast mode [ 1381.298564][ T7907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1381.339334][ T7906] lo speed is unknown, defaulting to 1000 [ 1381.403597][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 1381.424167][T21527] hsr0: left allmulticast mode [ 1381.430039][T21527] hsr_slave_1: left allmulticast mode [ 1381.435983][T21527] bridge0: port 3(hsr0) entered disabled state [ 1381.762740][ T7929] netlink: 'syz.1.8782': attribute type 4 has an invalid length. [ 1382.011991][T21527] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1382.053068][T21527] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 1382.362229][T21527] bond11 (unregistering): (slave bridge5): Releasing active interface [ 1382.421346][T21527] bond0 (unregistering): Released all slaves [ 1382.432819][T21527] bond1 (unregistering): Released all slaves [ 1382.448251][T21527] bond2 (unregistering): Released all slaves [ 1382.470744][T21527] bond3 (unregistering): (slave veth5): Releasing active interface [ 1382.479764][T21527] bond3 (unregistering): Released all slaves [ 1382.494760][T21527] bond4 (unregistering): Released all slaves [ 1382.515732][T21527] bond5 (unregistering): Released all slaves [ 1382.531288][T21527] bond6 (unregistering): Released all slaves [ 1382.547281][T21527] bond7 (unregistering): Released all slaves [ 1382.565526][T21527] bond8 (unregistering): (slave bond9): Releasing backup interface [ 1382.587869][T21527] bond8 (unregistering): Released all slaves [ 1382.603194][T21527] bond9 (unregistering): Released all slaves [ 1382.619699][T21527] bond10 (unregistering): (slave macvlan1): Releasing backup interface [ 1382.629870][T21527] veth0_to_bond: left allmulticast mode [ 1382.637365][T21527] bond10 (unregistering): Released all slaves [ 1382.657322][T21527] bond11 (unregistering): Released all slaves [ 1382.932920][ T7949] bridge9: entered promiscuous mode [ 1382.991912][T21527] : left promiscuous mode [ 1383.081736][T21527] tipc: Left network mode [ 1383.115803][ T7951] ip_vti0: entered allmulticast mode [ 1383.128138][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8788'. [ 1383.306820][T25656] Bluetooth: hci3: command tx timeout [ 1383.421017][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.429433][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.437075][ T7817] bridge_slave_0: entered allmulticast mode [ 1383.445297][ T7817] bridge_slave_0: entered promiscuous mode [ 1383.476891][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.488677][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.498133][ T7817] bridge_slave_1: entered allmulticast mode [ 1383.505967][ T7817] bridge_slave_1: entered promiscuous mode [ 1383.546408][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.562243][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.624114][ T7817] team0: Port device team_slave_0 added [ 1383.633719][ T7817] team0: Port device team_slave_1 added [ 1383.682197][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.705345][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.733527][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.767513][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.774503][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1383.825545][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.003150][ T7817] hsr_slave_0: entered promiscuous mode [ 1384.020843][ T7817] hsr_slave_1: entered promiscuous mode [ 1384.039754][ T7817] debugfs: 'hsr0' already exists in 'hsr' [ 1384.045579][ T7817] Cannot create hsr debugfs directory [ 1384.286246][ T7976] syzkaller1: entered promiscuous mode [ 1384.292051][ T7976] syzkaller1: entered allmulticast mode [ 1384.586838][ T7935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1384.697634][ T7988] mac80211_hwsim hwsim91 syzkaller0: entered promiscuous mode [ 1384.705392][ T7988] mac80211_hwsim hwsim91 syzkaller0: entered allmulticast mode [ 1384.876420][T21527] hsr_slave_1: left promiscuous mode [ 1385.047051][ T7996] sctp: [Deprecated]: syz.0.8798 (pid 7996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1385.047051][ T7996] Use struct sctp_sack_info instead [ 1385.376728][T25656] Bluetooth: hci3: command tx timeout [ 1385.382360][ T5158] block nbd1: Possible stuck request ffff888026afa800: control (read@0,1024B). Runtime 120 seconds [ 1385.393739][ T5158] block nbd1: Possible stuck request ffff888026afaa00: control (read@1024,1024B). Runtime 120 seconds [ 1385.405329][ T5158] block nbd1: Possible stuck request ffff888026afac00: control (read@2048,1024B). Runtime 120 seconds [ 1385.416923][ T5158] block nbd1: Possible stuck request ffff888026afae00: control (read@3072,1024B). Runtime 120 seconds [ 1385.730211][ T8016] syzkaller1: entered promiscuous mode [ 1385.746117][ T8016] syzkaller1: entered allmulticast mode [ 1386.184893][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1386.393463][ T8031] can: request_module (can-proto-0) failed. [ 1386.473724][ T8037] netlink: 'syz.4.8807': attribute type 1 has an invalid length. [ 1386.618686][ T7817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1386.652415][ T7817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1386.716327][T21527] IPVS: stop unused estimator thread 0... [ 1386.733968][ T7817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1386.752388][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1386.807986][ T7817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1387.033056][ T7952] delete_channel: no stack [ 1387.440257][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.457722][T25656] Bluetooth: hci3: command tx timeout [ 1387.503982][ T8087] lo speed is unknown, defaulting to 1000 [ 1387.552589][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.684775][T21527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.692217][T21527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.740955][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.748257][ T7581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.911275][ T8102] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1387.935882][ T8102] vxcan2: entered allmulticast mode [ 1388.115004][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.470033][ T7817] veth0_vlan: entered promiscuous mode [ 1388.594344][ T7817] veth1_vlan: entered promiscuous mode [ 1388.693348][ T7817] veth0_macvtap: entered promiscuous mode [ 1388.733538][ T8135] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.756916][ T8135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.768766][ T8135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1388.798988][ T7817] veth1_macvtap: entered promiscuous mode [ 1388.830641][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.846174][ T8135] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.858324][ T8135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.886688][ T8135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1388.897476][ T8141] netlink: 'syz.1.8824': attribute type 31 has an invalid length. [ 1388.909289][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 1388.931599][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.951192][ T641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.971922][ T8135] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.984718][ T8135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.995547][ T8135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1389.018679][ T641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.032506][ T641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.060131][ T641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.110970][ T8135] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.122628][ T8135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.167035][ T8135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1389.242811][ T7575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.253258][ T7575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.290032][ T7575] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.304690][ T7575] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1389.314004][ T7575] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1389.343570][T10938] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.352600][T10938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1389.361258][T10938] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1389.376991][T10938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.384866][T10938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.394371][T21531] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.403982][T21531] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1389.412599][T21531] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1389.437963][T21527] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1389.446561][T21527] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1389.454914][T21527] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1391.102185][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8825'. [ 1391.137345][ T8158] vlan5: entered allmulticast mode [ 1391.148459][ T8158] dummy0: entered allmulticast mode [ 1391.157569][ T8158] bridge0: port 3(vlan5) entered blocking state [ 1391.164217][ T8158] bridge0: port 3(vlan5) entered disabled state [ 1391.199782][ T8158] vlan5: entered promiscuous mode [ 1391.211286][ T8158] dummy0: entered promiscuous mode [ 1391.228042][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8828'. [ 1391.239401][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8828'. [ 1391.324641][ T8156] lo speed is unknown, defaulting to 1000 [ 1391.929885][ T8181] netlink: 'syz.3.8831': attribute type 4 has an invalid length. [ 1391.949040][ T8181] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1391.978865][ T8181] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1392.078181][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1392.114264][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1392.139808][ T8189] ip6gretap0: entered promiscuous mode [ 1392.191383][ T8189] ip6gretap0: left promiscuous mode [ 1392.293449][ T8193] macvtap1: entered promiscuous mode [ 1392.299985][ T8193] macvtap1: entered allmulticast mode [ 1392.328678][ T8204] tipc: Enabling of bearer rejected, failed to enable media [ 1392.440346][ T8204] syzkaller0: mtu less than device minimum [ 1392.468144][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8842'. [ 1393.151193][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8848'. [ 1393.221192][T20021] IPVS: starting estimator thread 0... [ 1393.255069][ T8249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8848'. [ 1393.339357][ T8248] IPVS: using max 24 ests per chain, 57600 per kthread [ 1393.598745][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8850'. [ 1393.810271][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1393.825798][ T8276] netlink: 'syz.1.8854': attribute type 1 has an invalid length. [ 1395.071299][ T8322] sctp: [Deprecated]: syz.3.8863 (pid 8322) Use of int in maxseg socket option. [ 1395.071299][ T8322] Use struct sctp_assoc_value instead [ 1395.123140][ T8322] netlink: 'syz.3.8863': attribute type 10 has an invalid length. [ 1395.713133][ T8357] gtp1: entered promiscuous mode [ 1395.783846][ T8357] gtp1: entered allmulticast mode [ 1396.365318][ T8388] netlink: 'syz.1.8883': attribute type 4 has an invalid length. [ 1396.524572][ T8398] syzkaller1: entered promiscuous mode [ 1396.539388][ T8398] syzkaller1: entered allmulticast mode [ 1397.139980][ T8424] __nla_validate_parse: 10 callbacks suppressed [ 1397.140005][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8891'. [ 1397.234338][ T8423] lo speed is unknown, defaulting to 1000 [ 1397.248416][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.256289][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.317162][ T8413] bridge0: entered allmulticast mode [ 1397.456874][T17179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.486867][T17179] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.498496][T17179] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.517982][T17179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.526099][T17179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1397.587752][T29455] bond5: (slave vlan2): Releasing active interface [ 1397.613121][ T8416] bridge_slave_1: left allmulticast mode [ 1397.627409][ T8416] bridge_slave_1: left promiscuous mode [ 1397.633354][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.644020][ T8435] netlink: 'syz.1.8893': attribute type 1 has an invalid length. [ 1397.657529][ T8416] bridge_slave_0: left allmulticast mode [ 1397.664346][ T8416] bridge_slave_0: left promiscuous mode [ 1397.670464][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.882311][ T8432] lo speed is unknown, defaulting to 1000 [ 1398.029678][ T8443] tipc: Started in network mode [ 1398.040220][ T8443] tipc: Node identity a6eef8310f74, cluster identity 4711 [ 1398.052130][ T8443] tipc: Enabled bearer , priority 0 [ 1398.061427][ T8443] syzkaller0: entered promiscuous mode [ 1398.073442][ T8443] syzkaller0: entered allmulticast mode [ 1398.087057][ T8452] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1398.142166][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1398.190120][ T8443] tipc: Resetting bearer [ 1398.269893][ T8458] sctp: [Deprecated]: syz.1.8899 (pid 8458) Use of int in maxseg socket option. [ 1398.269893][ T8458] Use struct sctp_assoc_value instead [ 1398.300707][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 1398.317030][ T8441] tipc: Resetting bearer [ 1398.349316][ T8441] tipc: Disabling bearer [ 1398.457621][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1398.523778][ T8466] vlan2: entered promiscuous mode [ 1398.529358][ T8466] bridge0: entered promiscuous mode [ 1398.573467][ T8477] netlink: 'syz.4.8901': attribute type 11 has an invalid length. [ 1398.581775][ T8477] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.8901'. [ 1398.619558][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.627602][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.635086][ T8432] bridge_slave_0: entered allmulticast mode [ 1398.644032][ T8432] bridge_slave_0: entered promiscuous mode [ 1398.654481][ T8469] syzkaller0: entered promiscuous mode [ 1398.665637][ T8469] syzkaller0: entered allmulticast mode [ 1398.694796][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.718526][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.733416][ T30] audit: type=1107 audit(1773497584.986:20): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1398.734759][ T8432] bridge_slave_1: entered allmulticast mode [ 1398.754036][ T8432] bridge_slave_1: entered promiscuous mode [ 1398.853262][ T8483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1398.956381][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8904'. [ 1398.994242][ T8487] netlink: 'syz.2.8905': attribute type 1 has an invalid length. [ 1399.013717][ T8487] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1399.125480][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.152477][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.209218][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8906'. [ 1399.251274][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8907'. [ 1399.380681][ T8432] team0: Port device team_slave_0 added [ 1399.417645][ T8502] ecn_tg_check: 55 callbacks suppressed [ 1399.417667][ T8502] ipt_ECN: cannot use operation on non-tcp rule [ 1399.444081][ T8500] bond8 (unregistering): Released all slaves [ 1399.511663][ T8432] team0: Port device team_slave_1 added [ 1399.587217][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.594499][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.629376][T25656] Bluetooth: hci0: command tx timeout [ 1399.658359][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.704430][ T8506] lo speed is unknown, defaulting to 1000 [ 1399.718570][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.726846][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.755845][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.775430][ T8510] lo speed is unknown, defaulting to 1000 [ 1399.974641][ T8432] hsr_slave_0: entered promiscuous mode [ 1399.997951][ T8432] hsr_slave_1: entered promiscuous mode [ 1400.014834][ T8432] debugfs: 'hsr0' already exists in 'hsr' [ 1400.023988][ T8432] Cannot create hsr debugfs directory [ 1400.312878][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1400.385963][ T8524] lo speed is unknown, defaulting to 1000 [ 1400.509550][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8916'. [ 1400.973994][ T8432] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.225660][ T8432] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.383079][ T8432] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.532140][ T8432] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.726737][T25656] Bluetooth: hci0: command tx timeout [ 1401.906218][ T8432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1401.931289][ T8432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1401.945821][ T8432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1401.997785][ T8432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1402.160295][ T8599] netlink: 'syz.4.8931': attribute type 10 has an invalid length. [ 1402.228613][ T8599] __nla_validate_parse: 4 callbacks suppressed [ 1402.228637][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8931'. [ 1402.528650][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.656774][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1402.682211][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.719867][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8932'. [ 1402.729709][T21531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.736929][T21531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.771508][T21531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.778810][T21531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.816164][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8935'. [ 1402.981151][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8938'. [ 1403.009382][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8938'. [ 1403.115967][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8939'. [ 1403.346778][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.364607][ T8643] netlink: 'syz.1.8943': attribute type 6 has an invalid length. [ 1403.469172][ T8432] veth0_vlan: entered promiscuous mode [ 1403.483322][ T8432] veth1_vlan: entered promiscuous mode [ 1403.727304][ T8432] veth0_macvtap: entered promiscuous mode [ 1403.771548][ T8432] veth1_macvtap: entered promiscuous mode [ 1403.778525][T25656] Bluetooth: hci0: command tx timeout [ 1403.811363][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.824737][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.886431][T10938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.896438][T10938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.934313][T10938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.967918][T10938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.445390][ T8679] syzkaller0: entered promiscuous mode [ 1404.478721][ T8679] syzkaller0: entered allmulticast mode [ 1404.614543][ T7583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.643853][ T7583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.885864][ T642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.902695][ T642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.010248][ T8701] netlink: 'syz.3.8951': attribute type 8 has an invalid length. [ 1405.027484][ T8700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1405.432942][ T8728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1405.454647][ T8729] syzkaller0: entered promiscuous mode [ 1405.467287][ T8729] syzkaller0: entered allmulticast mode [ 1405.694009][T17179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1405.705090][T17179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1405.713773][T17179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1405.721939][T17179] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1405.729974][T17179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1405.857373][T17179] Bluetooth: hci0: command tx timeout [ 1405.982258][ T8737] lo speed is unknown, defaulting to 1000 [ 1406.074166][ T8751] netlink: 'syz.3.8968': attribute type 2 has an invalid length. [ 1406.108249][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1406.397074][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8971'. [ 1406.463405][ T8762] hsr_slave_1 (unregistering): left promiscuous mode [ 1406.542974][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 1406.678787][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1406.790221][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.804102][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.826936][ T8737] bridge_slave_0: entered allmulticast mode [ 1406.837985][ T8737] bridge_slave_0: entered promiscuous mode [ 1406.859694][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.876704][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.885358][ T8737] bridge_slave_1: entered allmulticast mode [ 1406.909489][ T8737] bridge_slave_1: entered promiscuous mode [ 1406.981978][ T7583] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1407.028623][ T7583] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1407.064223][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.083953][ T7583] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1407.093335][ T7583] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1407.107295][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.203309][ T8737] team0: Port device team_slave_0 added [ 1407.212608][ T8737] team0: Port device team_slave_1 added [ 1407.293122][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.300563][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.328110][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.343956][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.351597][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.378685][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.388458][ T8811] [ 1407.391672][ T8811] ====================================================== [ 1407.398736][ T8811] WARNING: possible circular locking dependency detected [ 1407.405797][ T8811] syzkaller #0 Not tainted [ 1407.410242][ T8811] ------------------------------------------------------ [ 1407.417381][ T8811] syz.1.8980/8811 is trying to acquire lock: [ 1407.423392][ T8811] ffffffff8fd42198 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1407.432708][ T8811] [ 1407.432708][ T8811] but task is already holding lock: [ 1407.440101][ T8811] ffff88802b4aea70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1407.441454][ T8807] __nla_validate_parse: 4 callbacks suppressed [ 1407.441497][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8981'. [ 1407.449383][ T8811] [ 1407.449383][ T8811] which lock already depends on the new lock. [ 1407.449383][ T8811] [ 1407.449395][ T8811] [ 1407.449395][ T8811] the existing dependency chain (in reverse order) is: [ 1407.449404][ T8811] [ 1407.449404][ T8811] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1407.449440][ T8811] _raw_spin_lock_bh+0x36/0x50 [ 1407.449539][ T8811] nr_rt_device_down+0x153/0x860 [ 1407.449568][ T8811] nr_device_event+0x137/0x150 [ 1407.449593][ T8811] notifier_call_chain+0x1be/0x400 [ 1407.449639][ T8811] __dev_notify_flags+0x16d/0x310 [ 1407.449714][ T8811] netif_change_flags+0xe8/0x1a0 [ 1407.449747][ T8811] dev_change_flags+0x130/0x260 [ 1407.449801][ T8811] dev_ioctl+0x7b4/0x1150 [ 1407.449850][ T8811] sock_do_ioctl+0x23e/0x320 [ 1407.449877][ T8811] sock_ioctl+0x5c6/0x7f0 [ 1407.449900][ T8811] __se_sys_ioctl+0xfc/0x170 [ 1407.449937][ T8811] do_syscall_64+0x14d/0xf80 [ 1407.449968][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.449991][ T8811] [ 1407.449991][ T8811] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1407.450023][ T8811] _raw_spin_lock_bh+0x36/0x50 [ 1407.450048][ T8811] nr_rt_device_down+0xbe/0x860 [ 1407.450073][ T8811] nr_device_event+0x137/0x150 [ 1407.450095][ T8811] notifier_call_chain+0x1be/0x400 [ 1407.450126][ T8811] netif_close_many+0x2ae/0x420 [ 1407.598203][ T8811] netif_close+0x160/0x220 [ 1407.603919][ T8811] dev_close+0x10a/0x220 [ 1407.609000][ T8811] bpq_device_event+0x377/0x6a0 [ 1407.614551][ T8811] notifier_call_chain+0x1be/0x400 [ 1407.620305][ T8811] netif_close_many+0x2ae/0x420 [ 1407.625857][ T8811] netif_close+0x160/0x220 [ 1407.630860][ T8811] dev_close+0x10a/0x220 [ 1407.635659][ T8811] bond_setup_by_slave+0x5f/0x3e0 [ 1407.641334][ T8811] bond_enslave+0x847/0x3c10 [ 1407.646516][ T8811] bond_do_ioctl+0x6ec/0x8d0 [ 1407.651716][ T8811] bond_siocdevprivate+0x19c/0x1f0 [ 1407.657373][ T8811] dev_ifsioc+0xba6/0x1280 [ 1407.662343][ T8811] dev_ioctl+0x84c/0x1150 [ 1407.667307][ T8811] sock_ioctl+0x75f/0x7f0 [ 1407.672242][ T8811] __se_sys_ioctl+0xfc/0x170 [ 1407.677570][ T8811] do_syscall_64+0x14d/0xf80 [ 1407.682827][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.689470][ T8811] [ 1407.689470][ T8811] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1407.697687][ T8811] __lock_acquire+0x15a5/0x2cf0 [ 1407.703388][ T8811] lock_acquire+0xf0/0x2e0 [ 1407.708470][ T8811] _raw_spin_lock_bh+0x36/0x50 [ 1407.713802][ T8811] nr_rt_ioctl+0x40c/0xf90 [ 1407.718875][ T8811] sock_do_ioctl+0x101/0x320 [ 1407.724021][ T8811] sock_ioctl+0x5c6/0x7f0 [ 1407.728894][ T8811] __se_sys_ioctl+0xfc/0x170 [ 1407.734031][ T8811] do_syscall_64+0x14d/0xf80 [ 1407.739275][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.745989][ T8811] [ 1407.745989][ T8811] other info that might help us debug this: [ 1407.745989][ T8811] [ 1407.756519][ T8811] Chain exists of: [ 1407.756519][ T8811] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1407.756519][ T8811] [ 1407.770659][ T8811] Possible unsafe locking scenario: [ 1407.770659][ T8811] [ 1407.778243][ T8811] CPU0 CPU1 [ 1407.783634][ T8811] ---- ---- [ 1407.789023][ T8811] lock(&nr_node->node_lock); [ 1407.793819][ T8811] lock(nr_node_list_lock); [ 1407.801134][ T8811] lock(&nr_node->node_lock); [ 1407.808484][ T8811] lock(nr_neigh_list_lock); [ 1407.813188][ T8811] [ 1407.813188][ T8811] *** DEADLOCK *** [ 1407.813188][ T8811] [ 1407.821364][ T8811] 2 locks held by syz.1.8980/8811: [ 1407.826489][ T8811] #0: ffffffff8fd421f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1407.836473][ T8811] #1: ffff88802b4aea70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1407.846448][ T8811] [ 1407.846448][ T8811] stack backtrace: [ 1407.852352][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.1.8980 Not tainted syzkaller #0 PREEMPT(full) [ 1407.852376][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1407.852389][ T8811] Call Trace: [ 1407.852397][ T8811] [ 1407.852406][ T8811] dump_stack_lvl+0xe8/0x150 [ 1407.852436][ T8811] print_circular_bug+0x2e1/0x300 [ 1407.852467][ T8811] check_noncircular+0x12e/0x150 [ 1407.852497][ T8811] __lock_acquire+0x15a5/0x2cf0 [ 1407.852522][ T8811] ? kasan_save_track+0x4f/0x80 [ 1407.852550][ T8811] lock_acquire+0xf0/0x2e0 [ 1407.852571][ T8811] ? nr_rt_ioctl+0x40c/0xf90 [ 1407.852599][ T8811] ? nr_rt_ioctl+0x40c/0xf90 [ 1407.852621][ T8811] _raw_spin_lock_bh+0x36/0x50 [ 1407.852645][ T8811] ? nr_rt_ioctl+0x40c/0xf90 [ 1407.852667][ T8811] nr_rt_ioctl+0x40c/0xf90 [ 1407.852695][ T8811] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1407.852724][ T8811] ? apparmor_capable+0x126/0x170 [ 1407.852832][ T8811] ? capable+0x88/0xe0 [ 1407.852870][ T8811] ? nr_ioctl+0x1b1/0x3b0 [ 1407.852891][ T8811] sock_do_ioctl+0x101/0x320 [ 1407.852915][ T8811] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1407.852935][ T8811] ? do_futex+0x333/0x420 [ 1407.852974][ T8811] sock_ioctl+0x5c6/0x7f0 [ 1407.852994][ T8811] ? __pfx_sock_ioctl+0x10/0x10 [ 1407.853015][ T8811] ? __fget_files+0x2a/0x420 [ 1407.853042][ T8811] ? __fget_files+0x3a0/0x420 [ 1407.853067][ T8811] ? __fget_files+0x2a/0x420 [ 1407.853094][ T8811] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1407.853118][ T8811] ? __pfx_sock_ioctl+0x10/0x10 [ 1407.853137][ T8811] __se_sys_ioctl+0xfc/0x170 [ 1407.853158][ T8811] do_syscall_64+0x14d/0xf80 [ 1407.853184][ T8811] ? trace_irq_disable+0x3b/0x150 [ 1407.853211][ T8811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.853229][ T8811] ? clear_bhb_loop+0x40/0x90 [ 1407.853250][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.853269][ T8811] RIP: 0033:0x7f4e9b19c799 [ 1407.853287][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.853304][ T8811] RSP: 002b:00007f4e9bfe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.853331][ T8811] RAX: ffffffffffffffda RBX: 00007f4e9b416090 RCX: 00007f4e9b19c799 [ 1407.853345][ T8811] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000009 [ 1407.853356][ T8811] RBP: 00007f4e9b232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1407.853368][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.853380][ T8811] R13: 00007f4e9b416128 R14: 00007f4e9b416090 R15: 00007ffd3cd420c8 [ 1407.853402][ T8811] [ 1407.876145][ T8737] hsr_slave_0: entered promiscuous mode [ 1407.911866][T17179] Bluetooth: hci4: command tx timeout [ 1407.917294][ T8737] hsr_slave_1: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1408.154280][ T8737] debugfs: 'hsr0' already exists in 'hsr' [ 1408.160480][ T8737] Cannot create hsr debugfs directory [ 1408.171226][ T8805] syzkaller0: entered promiscuous mode [ 1408.177057][ T8805] syzkaller0: entered allmulticast mode [ 1408.841606][ T8802] team0: Port device syz_tun removed [ 1408.859099][T21527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.869626][T21527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.913921][T21527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.924348][T21527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.971653][T21527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1408.982251][T21527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.023925][T21527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.034684][T21527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.150417][T21527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.182394][T21527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.240637][T21527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.272234][T21527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.389630][T21527] bridge_slave_1: left allmulticast mode [ 1409.395330][T21527] bridge_slave_1: left promiscuous mode [ 1409.401441][T21527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.412910][T21527] bridge_slave_0: left allmulticast mode [ 1409.419163][T21527] bridge_slave_0: left promiscuous mode [ 1409.424929][T21527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.554651][T21527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.566362][T21527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.576647][T21527] bond0 (unregistering): Released all slaves [ 1409.622089][T21527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.632805][T21527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.643582][T21527] bond0 (unregistering): Released all slaves [ 1409.711418][T21527] tipc: Left network mode [ 1410.006193][T21527] hsr_slave_0: left promiscuous mode [ 1410.013968][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.022124][T21527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.030679][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.040276][T21527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.052125][T21527] hsr_slave_0: left promiscuous mode [ 1410.058318][T21527] hsr_slave_1: left promiscuous mode [ 1410.064220][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.072214][T21527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.080236][T21527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.088244][T21527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.106150][T21527] veth1_macvtap: left promiscuous mode [ 1410.114619][T21527] veth0_macvtap: left promiscuous mode [ 1410.120317][T21527] veth1_vlan: left promiscuous mode [ 1410.125670][T21527] veth0_vlan: left promiscuous mode [ 1410.134055][T21527] veth1_macvtap: left promiscuous mode [ 1410.139722][T21527] veth0_macvtap: left promiscuous mode [ 1410.145284][T21527] veth1_vlan: left promiscuous mode [ 1410.150889][T21527] veth0_vlan: left promiscuous mode [ 1410.410249][T21527] team0 (unregistering): Port device team_slave_1 removed [ 1410.423258][T21527] team0 (unregistering): Port device team_slave_0 removed [ 1410.566206][T21527] team0 (unregistering): Port device team_slave_1 removed [ 1410.578449][T21527] team0 (unregistering): Port device team_slave_0 removed [ 1411.060750][T21527] IPVS: stop unused estimator thread 0... [ 1411.101778][T21527] bridge_slave_1: left allmulticast mode [ 1411.107993][T21527] bridge_slave_1: left promiscuous mode [ 1411.113761][T21527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.123152][T21527] bridge_slave_0: left allmulticast mode [ 1411.129109][T21527] bridge_slave_0: left promiscuous mode [ 1411.134880][T21527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.217021][T21527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.232637][T21527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.242787][T21527] bond0 (unregistering): Released all slaves [ 1411.315525][T21527] hsr_slave_0: left promiscuous mode [ 1411.322148][T21527] hsr_slave_1: left promiscuous mode [ 1411.328246][T21527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.336357][T21527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.381004][T21527] team0 (unregistering): Port device team_slave_1 removed [ 1411.395484][T21527] team0 (unregistering): Port device team_slave_0 removed [ 1415.458812][ T5158] block nbd1: Possible stuck request ffff888026afa800: control (read@0,1024B). Runtime 150 seconds [ 1415.469740][ T5158] block nbd1: Possible stuck request ffff888026afaa00: control (read@1024,1024B). Runtime 150 seconds [ 1415.480913][ T5158] block nbd1: Possible stuck request ffff888026afac00: control (read@2048,1024B). Runtime 150 seconds [ 1415.492084][ T5158] block nbd1: Possible stuck request ffff888026afae00: control (read@3072,1024B). Runtime 150 seconds